This year was a bit of a reset for the entertainment industry, with more people returning to theaters and more must-watch TV shows hitting streaming networks. That's a fairly major change from 2021, when many movies hit services like HBO Max on the same day as theaters. But if you've gotten used to catching up on everything on your couch, don't worry — there's still plenty to watch over the holidays. (And be sure to check out our recommendations from last year, which are still good, I swear!)

HBO Max

Station Eleven

Perhaps the best piece of media I've seen this year, Station Eleven is an adaptation of Emily St. John's novel about a society-collapsing swine flu epidemic. Wait, don't run away! While the series may evoke the worst of our COVID experience at first, it also transforms into a hopeful tale about the power of stories (and pop culture!) and human connection. It delivers something we could all use right now: Hope.

Tuca and Bertie Season 3

After being unceremoniously canceled by Netflix in 2020, the cartoon duo of Tuca and Bertie found a new home on Cartoon Network last year. The third and (unfortunately) final season of the series aired this year, and it remains a delight. Created by Lisa Hanawalt and executive produced by Raphael Bob-Waksberg (BoJack Horseman), it follows a pair of friends as they deal with life, love and simply existing in their '30s.

Also on HBO Max:

The White Lotus (Season 2): Mike White's series on the exploits of privileged resort guests, this time in Sicily instead of Hawaii, remains a delight.

Harley Quinn (Season 3): This show remains one of the best DC series currently airing. Tune in for a comedic and more adult spin on your Batman faves.

Disney+

Andor

Yes, it's another Star Wars show, but Andor ended up being one of the biggest surprises of the year. Created by Tony Gilroy (who helped transform Rogue One into a stellar film), it centers on Cassian Andor (Diego Luna), a small-time thief with a healthy distrust for the Empire. The show follows his journey towards becoming a member of the rebels, and in doing so it also serves as a blueprint for taking down authoritarian systems.

Fire of Love

Katia and Maurice Krafft were a rare couple, two expert volcanologists who were also madly in love. They dedicated their lives to documenting active volcanoes, often by directly confronting lava flows, rock explosions and acid lakes. Fire of Love unearths their original footage to show just how far they went in the name of science. But it also paints a portrait of a truly rare couple, one whose contributions we still owe much to.

Also on Disney+:

Tales of the Jedi: A short animated series that gives us a bit more backstory on Ahsoka Tano and... Count Dooku? If you've been interested in the Star Wars cartoons, but don't want to slog through tons of old episodes, this is a good start.

Bluey: This remains the best kids show on TV. Bluey's latest season is as funny and poignant as ever. It's the rare show that can teach both kids and their parents.

Netflix

Cyberpunk: Edgeunners

Cyberpunk 2077 had a notoriously rocky game launch, but the setting of Night CIty was always compelling. Edgerunners is an anime spin on that universe, centering on a plucky street kid who finds himself equipped with a military-grade spine implant. You know, typical teenage stuff. Will his newfound power keep him on the wrong side of the law? And will he ever get revenge against the people who ruined his life? The show doesn't do much new, but it features genuinely compelling characters and some of the best animation in recent years.

The Midnight Club

Mike Flanagan can do no wrong. The talent behind Midnight Mass, Doctor Sleep, and the excellent “Haunting of…” horror shows on Netflix has now set his sights on a Christopher Pike adaptation, and the results are glorious. The show, co-created by Leah Fong, follows a group of terminally ill teenagers as they tell spooky stories and explore the supernatural mysteries of their hospice mansion. It's a meditation on the power of storytelling, but also yet another Flanagan exploration of the value of life.

Also on Netflix:

Wednesday: Come to see Tim Burton finally get his shot at The Addams Family, stay for Jenna Ortega's perfectly deadpan performance.

Hulu

The Bear

Can an award-winning chef truly come back home and save his family's beleaguered sandwich shop? Or is he just trying to work through the death of his brother the only way he knows? The Bear captures the energy and madness of kitchen life better than any TV show — forget all the glossy stuff you've seen on Chef's Table. But amid the insanity, it's the story of a found family banding together to mourn and save the place they all love.

The Dropout

What makes Elizabeth Holmes tick? This series, which stars Amanda Seyfried as the notorious Theranos founder, paints a more complete picture of Holmes than the 2019 HBO documentary The Inventor. We see Holmes' early life, as well as her initial connection with Sunny Balwani (Naveen Andrews, perhaps the best TV adaptation glow-up any South Asian man can hope for). After proving her smarts in college, she sets off to build the world's best blood testing machine with Theranos. We all know how that went. When the hype around Theranos starts to fall apart, The Dropout turns into a fascinating portrait of self-deception.

Also on Hulu:

Fleishman is in Trouble: Toby Fleishman is going through a divorce. But as he starts to rebuild his own identity, he also needs to deal with the wreckage of his marriage (and find his missing ex-wife).

Apple TV+

Severance

Taking the idea of work/life balance a step too far, Severance follows a group of people who’ve received a procedure that completely splits their memories between home and office life. The result is two completely separate personalities within the same body, both trapped in their respective cages. Severance is a bit of a slow burn, but it’s a fascinating exploration of corporate control akin to Terry Gilliam’s Brazil. (Be sure to check out our interview with the creator of the show, Dan Erickson, on the Engadget Podcast.)

Pachinko

An adaptation of Min Jin Lee’s 2017 novel, Pachinko follows a Korean family across several generations starting in 1917 and reaching into the late ‘80s. We see a young fish seller fall in love and make her way to Japan as an outsider, while her grandson struggles to maintain his identity in the pressure-filled business world. Pachinko has almost everything you’d want in a family epic: Children struggling to live up to their parents’ standards, forbidden love and the constant threat of generational trauma. Also, it has one of the best opening sequences of the year.

Other things to watch

The Good Fight (Paramount+): Over its six-season span, The Good Fight tackled the insanity of our current social and political environment better than any other TV show. It’s first and foremost a legal procedural, but coming from the minds of Michelle and Robert King, it ends up being so much more.

Gangs of London (AMC+): Now on its second season, Gangs of London is one of the most brutal crime shows on TV. It’s part gangster epic, part martial arts smackdown (it comes from Gareth Evans, director of The Raid films). While the plot becomes increasingly ludicrous, it’s worth a watch just for the sheer ambition of its action sequences, many of which go far harder than anything we’ve seen in American films lately.

In Japan, the big premiere week of James Cameron’s Avatar sequel was hit with technical problems in some movie theaters. One venue in central Japan was forced to reduce the 48 fps frame rate down to the traditional 24 fps – one of the major technical innovations of Avatar: The Way of Water. The Avatar sequel is actually available in multiple formats, including 2D 48 fps, 3D 48 fps and regular 24 fps. If you see the 48 fps version, it only uses the HFR tech for action sequences, while dialog and slower scenes are dialed down to 24 fps by duplicating frames. Intrigued by high frame rates? Check out Devindra Hardawar’s (spoiler-free) review of Avatar: The Way of Water, right here.

Despite being the widest movie release of all time in Japan, Avatar: The Way of Water failed to claim the top ranking last weekend, beaten by the anime basketball movie called The First Slam Dunk.

– Mat Smith

Hands-on with LG's 240Hz UltraGear gaming monitors

Setting a new bar for OLED refresh rates.

Engadget

Earlier this year, Alienware released what’s arguably the best all-around gaming monitor on the market right now: the AW3423DW. But last week, LG quietly announced its latest batch of UltraGear gaming monitors. LG’s monitors are available in two sizes intended for slightly different use cases. There’s the 27-inch option with a flat panel, meant for both general use and more demanding competitive play, while the 45-inch monitor has a curved display with an 800R radius, designed to deliver a more immersive experience. Regardless of which one you pick, both feature 240Hz refresh rates – the highest you can get from any OLED monitor available today.

Continue reading.

Ukraine strikes deal with SpaceX for thousands more Starlink antennas

Several EU countries will reportedly share the costs.

Ukraine will receive an additional 10,000-plus Starlink satellite dishes from Elon Musk's SpaceX to help provide internet amid Russian attacks on communications infrastructure. Financial issues around the terminals have reportedly been resolved, with several European countries stepping up to share the costs, according to Ukraine's deputy prime minister Mykhailo Federov. The 10,000 new terminals add to the 22,000 already received and will be used to "stabilize connections for critical situations," according to Federov. "There is no alternative to satellite connections," he added.

Continue reading.

The best free games for 2023

Some great games don't cost a thing.

Blizzard

Free games used to mean ropey puzzle games and knock-off clones of games that had a price tag. But now, courtesy of in-app payments and the ease of offering both a sample of a title alongside its full-fat version, there are plenty of great games to play without spending a dime. Following the continued success of titles like Fortnite, the level of quality across mobile, PC and consoles has never been higher. Put your card away, and consider this your starting point. Oh and while it’s not in the current edition of our guide, check out Vampire Survivors too — my latest addiction, and free-to-play on smartphones.

Continue reading.

Canada plans to enforce an ambitious zero-emission vehicle sales quota by 2026

At least 20 percent of new vehicles sold will need to be zero-emission models.

The Canadian government has announced enforceable quotas for zero-emission vehicle sales. By 2026, a fifth of all new passenger cars, trucks and SUVs sold in the country will need to be zero-emission models, such as electric or hydrogen fuel cell vehicles. "We're moving forward with a regulated sales target that requires at least 20 percent of new vehicles sold by 2026 to be zero emission, increasing that to 60 percent by 2030 and 100 percent by 2035," Julie Dabrusin, parliamentary secretary to the Minister of Environment and Climate Change. There's still some way to go. In the first six months of 2022, EVs (including plug-in hybrid models) made up 7.2 percent of new car registrations.

Continue reading.

The biggest stories you might have missed

• Tesla reportedly plans more layoffs as the company’s stock tanks

• The best co-op games for PC, Nintendo Switch, PS5 and more

• Nike brings workout videos to Netflix on December 30th

• NASA officially retires its InSight Mars lander

• How the tech titans crashed head-first into reality

The FCC has proposed a $299,997,000 fine against "the largest robocall firm" it has ever investigated, the regulator announced. It would be the FCC's largest fine ever, and targets a firm that made over 5 billion calls in three months, enough "to have called each person in the United States 15 times," it wrote. 

The operation is run by Roy Cox, Jr. and Michael Aaron Jones via their Sumco Panama company, along with other domestic and foreign entities. In July of this year, the FCC issued its first ever "K4 Notice" and "N2 Order" directing all US telephone providers to stop carrying traffic related to the car warranty scam calls. "This resulted in a massive, 99 percent drop in the volume of such calls since June, according to [spam blocking app] RoboKiller," the FCC wrote. 

The FCC proposed its largest-ever fine because it found the robocallers met the criteria for "egregious violations." Consumers described the calls as "incessant" and "harassment," and the robocallers used dirty practices like calling health care workers from spoofed hospital numbers. The firm also violated multiple FCC rules, like failing to identify the caller at the start of a message. 

In the calls, a message would open with something like "we've been trying to reach you concerning your car's extended warranty," and prompt you to speak to a scam "warranty specialist." Robokiller advises users to avoid the calls in the first place if possible, not follow prompts, and above all, never provide personal information like banking details.

Top FTX executives close to Sam Bankman-Fried, Caroline Ellison and Zixiao "Gary" Wang, have pleaded guilty to fraud and are cooperating with prosecutors. The pair were convicted "in connection with their roles in the fraud that contributed to FTX's collapse," said Damian Williams, the US Attorney for the Southern District of New York in a press conference.

Ellison, the former CEO of FTX sister company Alameda Research and ex-girlfriend of Bankman-Fried, pleaded guilty to seven counts and faces up to 110 years in prison. Former FTX co-founder Wang pleaded guilty to four counts and faces 50 years. Depending on the level of cooperation, however, they could receive lighter sentences. The pair also face civil fraud charges filed by the Securities and Exchange Commission (SEC) and Commodity Future Trading Commission (CFTC). Both were released on $250,000 bonds.

The announcement was made as Bankman-Fried was being extradited from the Bahamas to New York, and add to his mounting legal woes. Wang's lawyer Ilan Graff said that his client has "accepted responsibility for his actions and takes seriously his obligations as a cooperating witness," according to The Washington Post. 

Despite their cooperation, the SEC didn't mince words in laying out its case against Ellison and Wang. "Mr. Bankman-Fried, Ms. Ellison, and Mr. Wang were active participants in a scheme to conceal material information from FTX investors," said SEC deputy director of enforcement, Sanjay Wadhwa. "By surreptitiously siphoning FTX’s customer funds onto the books of Alameda, defendants hid the very real risks that FTX’s investors and customers faced."

Bankman-Fried, meanwhile, is accused of a long list of misdeeds by multiple agencies, including the SEC, Department of Justice and CFTC. Those include defrauding FTX investors and customers of more than $1.9 billion, multiple counts of wire fraud, conspiracy to defraud investors by sharing misleading information and "surreptitiously" siphoning customer funds. The CFTC also alleges that Bankman-Fried and his cohorts "took hundreds of millions of dollars in poorly-documented 'loans' from Alameda," which they then used to purchase real estate and make political donations.

The two-year-old Meta Quest 2 is now faster due to a surprise performance boost in the headset's latest update. Meta boosted the maximum frequency from 490 MHz to 525 MHz, giving all Quest 2 headsets up to 7 percent more performance. 

"No integration or coding is needed to start reaping the benefits of this improvement — the dynamic clocking system will automatically increase the frequency as it detects that your app would benefit from it," Meta wrote. To get the extra speed, all you'll need to do is either a doff/don (take it off and put it back on) or sleep cycle by clicking the power button twice.

What's more, if you have dynamic foveation enabled in your app, the GPU will boost from 490 MHz to 525 MHz to maintain higher visual quality rather than increasing foveation (foveation lowers image detail depending on what you're looking at). The result should be better overall image quality. 

Quest 2 owners will benefit from the extra speed with no app changes, but developers could also update apps, using the extra power to boost resolution. In any case, it makes the headset more useful in the final year of its lifespan, with the Quest 3 set to launch next year. 

Netflix announced today that Nike Training Club workout videos are heading to the streaming service. The first batch of videos will be available for all Netflix subscribers starting on December 30th.

Nike Training Club videos were previously exclusive to the iOS and Android app, which guides users through workout programs and wellness strategies. Nike says it will upload over 30 hours of videos to Netflix, released in two parts and available in 10 languages. Before arriving on Netflix, the only way to watch them on a big screen was to connect your phone to a TV, either through an HDMI cable or wirelessly with AirPlay or a Chromecast. Considering the limitations of working out while staring at a phone screen, starting a video from Netflix should give you one less excuse to avoid exercising (while helping Nike expand the app’s reach).

The first collection includes five programs spread across 46 videos. “Kickstart Fitness with the Basics” (13 episodes), “Two Weeks to a Stronger Core” (seven episodes), “Fall in Love with Vinyasa Yoga” (six episodes), “HIT & Strength with Tara” (14 episodes) and “Feel-Good Fitness” (six episodes) all arrive at the end of December. A second batch will arrive in 2023. Once the series is available, you can find them in a Nike collection on Netflix or by searching for “Nike.”

Nike Training Club was among the first high-profile mobile apps when it launched in 2009. It asks you to input your fitness goals and then uses workout videos, customized warmups, tips and motivation to help you stay on track. The service added Apple Watch support in 2018 and adaptive workouts for people with disabilities earlier this year.

Okta is responding to a major security incident for at least the second time this year. According to BleepingComputer, Okta began notifying customers earlier today of an event that saw an unnamed party steal the company’s source code. In early December, Okta was notified by GitHub of possible suspicious access to its online code repositories. Following an investigation, Okta determined someone had used that access to copy over its source code but that they had subsequently not gained unauthorized access to its identity and access management systems.

“We have confirmed no unauthorized access to the Okta service, and no unauthorized access to customer data,” writes David Bradbury, Okta’s chief security officer, in the email obtained by BleepingComputer. “Okta does not rely on the confidentiality of its source code for the security of its services.”

Okta did not immediately respond to Engadget’s comment request. In Bradbury’s email, the company promises to publish a blog post about the incident later today. As of the writing of this article, Okta has yet to do that.

While the damage from the GitHub incident appears minimal, the event is still a significant test of Okta. Following the Lapsus$ breach that saw hackers from the ransomware gang access two active customer accounts, the company admitted it “made a mistake” in handling the disclosure of that data breach. You may recall it took Okta two months to notify customers of what had happened, and one of the things it promised to do in the aftermath of the incident was “communicate more rapidly with customers.” Now that pledge is being put to the test.

Would you pay a few bucks to skip an interminably long taxi wait line at the airport? That's essentially what Daniel Abayev and Peter Leyman did, according to the DOJ, except they focused on taxi drivers. The two men, both from Queens, have been arrested for hacking into JFK's taxi dispatch system with the help of Russian nationals. From September 2019 and September 2021, they charged drivers $10 to jump ahead of JFK's taxi queue. Typically, those cars are sent out depending on their order of arrival.

"For years, the defendants’ hacking kept honest cab drivers from being able to pick up fares at JFK in the order in which they arrived," U.S. Attorney Damian Williams said in a statement. "Now, thanks to this Office’s teamwork with the Port Authority, these defendants are facing serious criminal charges for their alleged cybercrimes.”

According to the DOJ's indictment, both men explored a variety of ways to break into JFK's taxi dispatch system, from bribing people to insert a malware-filled flash drive into a computer, stealing tablets and logging into the system over Wi-Fi. Abayev at one point messaged one of the Russian hackers: “I know that the Pentagon is being hacked[.]. So, can’t we hack the taxi industry[?]”

The pair used chat threads to communicate with drivers, some of whom also had their $10 fee waived if they could recruit others. Abayev and Leyman have been charged with two counts of conspiracy to commit computer intrusion, which carry a maximum 10-year sentence in prison. Their story follows a spate of Russian cyberattacks over the last ten years, including the infamous hack on Florida's voter databases in 2016, a decade-long malware scheme to steal millions, and the theft of NATO data in 2014.

Twitter appears to have cut off Google Voice numbers from two-factor authentication (2FA). Although it's hardly the first company to block virtual phone numbers from SMS authentication, the change could be connected to CEO Elon Musk’s aggressive moves to snuff out bot accounts from the platform.

The new behavior, reported by 9to5Google, appears to block users from using a Google Voice number to authenticate their accounts. (I tried it today, and it rejected my Google Voice number.) Further, users previously authenticated with Google Voice could find themselves locked out of their accounts. Engadget reached out to Google to confirm, and we’ll update the story if we hear back. Twitter no longer has a PR department.

Since buying Twitter and taking over as CEO (a title he now says he’ll abandon once he finds a successor), Musk has been vocal about vanquishing bots from the platform. Earlier this month, Platformerreported the company blocked traffic from 30 mobile carriers worldwide — including networks in Russia, Indonesia, India and Malaysia. The move cut off access for thousands of accounts, including legitimate ones using those wireless carriers for 2FA. Musk accused the carriers of initiating the bogus texts to inflate what Twitter owed them contractually for SMS.

That report didn’t mention Google Voice, but anyone with a Gmail account can set up a free Google Voice number, making it an easy authentication tool for bots, scammers and spammers. Although it’s tempting to lump this move together with Musk’s seemingly erratic overhauls since taking over, it’s standard practice for apps ranging from financial institutions to dating apps to bar virtual numbers from 2FA.

If you set up your Twitter account with Google Voice authentication, you should be able to change the number without contacting support. You can go to Twitter Settings > Security and Account Access > Security > Two-Factor Authentication to remove that number and add your primary carrier line.

Prominent news organizations are high-value targets for hackers and it appears that The Guardian is the latest to have fallen victim to an attack. A "serious IT incident" struck the publication on Tuesday evening. “We believe this to be a ransomware attack but are continuing to consider all possibilities," editor-in-chief Katharine Viner and Guardian Media Group chief executive Anna Bateson told employees in a note. "Our technology teams have been working to deal with all aspects of this incident, with the vast majority of our staff able to work from home as we did during the pandemic."

Some of The Guardian's tech infrastructure and "behind-the-scenes services" have been impacted, according to the publication. Employees were asked to work from home for the remainder of the week. The Guardian has still been able to publish stories on its website and app, and leaders were confident of being able to deliver a print edition on Thursday.

Other news organizations have suffered security breaches in recent months. Fast Company was forced offline for eight days amid a cyberattack that saw hackers deliver obscene push notifications through Apple News. The New York Post, meanwhile, claimed in October that a rogue employee took over its website and Twitter accounts and was the culprit behind racist and sexist posts.