Slashdot Mirror

An anonymous reader writes: Anti-piracy firm Rightscorp says that it's working on a next-generation technology called Scalable Copyright, under which it plans to extract cash settlements from suspected Internet pirates. The company says its new technology will lock users' browsers and prevent Internet access until they pay a fine. (Sounds familiar?) To encourage ISPs to play along, Rightscorp says the system could help to limit their copyright liability. For those unaware, Rightscorp works with copyright owners such as movie studios, music labels, and game developers, and tracks the IP addresses of people who are torrenting copyright infringing material. Sadly, the company's previous tactics haven't worked so well. The company doesn't have many clients, and it posted a net loss of $3.43m in 2015, up from the $2.85m net loss recorded in 2014.

An anonymous reader quotes a report from Gizmodo: While the [Oculus Rift] is cool, like any interesting gadget, it's worth looking through the Terms of Service, because there are some worrisome things included. Quite a few of the items in the document are pretty typical in any sort of Terms of Service agreement. These include details like waiving your right to a juried trial and agreeing to go into arbitration instead. Oculus can also terminate your service for myriad reasons, and third parties can collect information on you. However, there are some even more devilish details in the Rift's full Terms of Service. If you create something with the Rift, the Terms of Service say that you surrender all rights to that work and that Oculus can use it whenever it wants, for whatever purposes. Basically, if you create something using the device, Oculus can't own it, but the company can use it -- and they don't have to pay you for for using it. Oculus can use it even if you don't agree with its use. Oculus can collect data from you while you're using the device. Furthermore, the information that they collect can be used to directly market products to you. As UploadVR noted, the Oculus Rift is a device that is always on (much like Microsoft's Xbox One Kinect feature) which leads to further concerns about when the information will be collected.

An anonymous reader writes: After receiving more than 198,000 Model 3 preorders in the first 24 hours, Tesla may need more cash if it hopes to deliver their new electric vehicle to customers on time, analysts said. Elon Musk plans to launch the Model 3 in late 2017, eventually boosting the company's annual production tenfold to 500,000 by 2020. Many analysts believe some customers making early reservations may not receive their vehicle until 2019 or 2020. Morgan Stanley analyst Adam Jonas, predicted Tesla's sales will hit under 250,000 in 2020. Barclays analyst Brian Johnson, believes the surge of Model 3 reservations could reach 300,000 by the end of June. Some analysts expect the first cars will sell for an average of $50,000-$60,000, but Tesla prices its current models in several "tiers," depending on content and optional features. RBC analyst Joseph Spak said strong initial orders for the Model 3 could help Tesla achieve positive free cash flow. In February, the company said it expected to be cash-flow positive in March. Spak said Tesla may not be able to fulfill many of the early orders before 2019: "Demand was never really our concern, it is more about execution and getting production up to meet demand."

An anonymous reader writes: Wim Coekaerts, formerly Oracle's Senior VP of Linux and Virtualization Engineering, has left Oracle for Microsoft. Many of you may know of Coekaerts as "Mr. Linux" as he delivered the first Linux products, transitioned Oracle's programming staff from Windows to Linux desktops, and turned Oracle into a Linux distributor with the launch of its Red Hat Enterprise Linux (RHEL) clone, Oracle Linux. Mike Neil, Microsoft's Corporate Vice President of the Enterprise Cloud, told ZDNet, "Wim Coekaerts has joined Microsoft as Corp VP of Open Source in our Enterprise Cloud Group. As we continue to deepen our commitment to open source, Wim will focus on deepening our engagement, contributions and innovation to the open-source community."

An anonymous reader writes: Wim Coekaerts, formerly Oracle's Senior VP of Linux and Virtualization Engineering, has left Oracle for Microsoft. Many of you may know of Coekaerts as "Mr. Linux" as he delivered the first Linux products, transitioned Oracle's programming staff from Windows to Linux desktops, and turned Oracle into a Linux distributor with the launch of its Red Hat Enterprise Linux (RHEL) clone, Oracle Linux. Mike Neil, Microsoft's Corporate Vice President of the Enterprise Cloud, told ZDNet, "Wim Coekaerts has joined Microsoft as Corp VP of Open Source in our Enterprise Cloud Group. As we continue to deepen our commitment to open source, Wim will focus on deepening our engagement, contributions and innovation to the open-source community."

An anonymous reader writes: Wim Coekaerts, formerly Oracle's Senior VP of Linux and Virtualization Engineering, has left Oracle for Microsoft. Many of you may know of Coekaerts as "Mr. Linux" as he delivered the first Linux products, transitioned Oracle's programming staff from Windows to Linux desktops, and turned Oracle into a Linux distributor with the launch of its Red Hat Enterprise Linux (RHEL) clone, Oracle Linux. Mike Neil, Microsoft's Corporate Vice President of the Enterprise Cloud, told ZDNet, "Wim Coekaerts has joined Microsoft as Corp VP of Open Source in our Enterprise Cloud Group. As we continue to deepen our commitment to open source, Wim will focus on deepening our engagement, contributions and innovation to the open-source community."

Salvador Hernandez, reporting for BuzzFeed: Just days after breaking into a terrorist's iPhone using a mysterious third-party technique, FBI officials on Friday told local law enforcement agencies it will assist them with unlocking phones and other electronic devices. The advisory, obtained by BuzzFeed News, was sent in response to law enforcement inquiries about its new method of unlocking devices. Though the dispatch does not explicitly state if the FBI will use the mysterious third-party method to unlock phones for local authorities, officials said the agency "will of course consider any tool that might be helpful to our partners."

An anonymous reader shares a report on BetaNews: Red Hat -- fresh from celebrating a historic $2 billion in annual revenue -- releases a developer-focused gift to the world. The Red Hat Enterprise Linux Developer Suite is totally free, including an RHEL license and valuable developer tools, like the JBoss Middleware portfolio. This is through the Red Hat Developer Program. If you want to take advantage of this amazing offer, you can sign up through the company's website Red Hat seems a bit late to the party. Many argue that the company should've made its update-only subscription for individuals free from the beginning -- especially considering it isn't a major source of revenue for the company. Exciting time for developers, nonetheless.

An anonymous reader shares an article on Ars Technica: The teenager who grabbed headlines earlier this week for hacking a fake game listing on to Valve's Steam store says there are "definitely" more vulnerabilities to be found in the popular game distribution service. But he won't be the one to find them, thanks to what he sees as Valve "giv[ing] so little of a shit about people's [security] findings." Ruby Nealon, a 16-year-old university student from England, says that probing various corporate servers for vulnerabilities has been a hobby of his since the age of 11. His efforts came to the attention of Valve (and the wider world) after an HTML-based hack let him post a game called "Watch paint dry" on Steam without Valve's approval over the weekend."It looks like their website hasn't been updated for years," Nealon told Ars. "Compared to even other smaller Web startups, they're really lacking. This stuff was like the lowest of the lowest hanging fruit."

An anonymous reader writes: Over 115,000 reservations at $1,000 each were placed for the Model 3 in the first 24 hours. This gives Tesla a little extra operating cash. If each tech-savvy enthusiast who preordered the Model 3 in the first 24 hours follows through with their $35,000 purchase, Tesla would make $4 billion in sales. Right now, they're sitting pretty with $115 million from the down payment required for preordering. It looks like Tesla may have a big hit on their hands.

An anonymous reader quotes a report from VentureBeat: On top of the slew of news coming out of Microsoft's Build 2016 developer conference, a story broke yesterday that Microsoft was building an ad blocker into its Microsoft Edge browser. While this would be a big deal, it apparently isn't true. "We have no plans to build a native ad blocker into Microsoft Edge," a Microsoft spokesperson told VentureBeat. Microsoft was originally referencing the extension support it is building into Edge, which would allow ad blocking to work exactly like any other desktop browser. For those hoping for an Edge browser with built-in ad blocking, well, you're stuck with 'niche browsers' like Brave from Mozilla cofounder Brendan Eich and Adblock Browser.

An anonymous reader writes: Apple, on Thursday, rolled out a minor update to iPhone, iPad, and iPod devices. The update, dubbed iOS 9.3.1, brings with it a fix for a software glitch that caused many apps -- including Safari, and Chrome -- to freeze and crash when trying to open a link. The issue was related to Universal Link, a feature Apple first introduced with iOS 9. Many reported that some apps including Booking.com were abusing this capability, causing the Universal Link database to overload.

An anonymous reader writes: The FBI has been citing a 1789 law, the All Writs Act, to compel Apple to assist the authorities in unlocking the iPhone 5c belonging to San Bernardino killer, Syed Farook. The law allows for judges to issue orders for people or companies to do something despite Congress not passing laws to cover specific instances. According to the Civil Liberties Union, the U.S. government has cited the All Writs Act in 63 cases since 2008 to compel Apple or Google to assist in accessing data stored on an iPhone or Android device. Most of the orders involved Apple. "To the extent we know about the underlying facts, these cases predominantly arise out of investigations into drug crimes," said Eliza Sweren-Becker, an ACLU attorney.

An anonymous reader writes: During its Build conference, Microsoft demoed how Skype users would be able to book trips, shop, and plan their schedule, just by chatting with Cortana. "Cortana is brokering the conversation with a third-party bot," says Lilian Rincon, Skype's program manager. Essentially, Skype will know which company or service you want to talk to, bring a new bot into your chat to help out, and then get rid of the bot when you're done. Video bots may also be in the works as Rincon mentioned, "We will also be bringing intelligence into real-time video." The new features are very similar to Facebook's "Messenger Bot Store," which the company announced at F8. Facebook's AI-powered assistant, called M, would enable Messenger users to make purchases, restaurant reservations, and travel bookings within the messaging interface, similar to Cortana but with more human input.

After reports that the FBI managed to unlock an iPhone 5c belonging to one of the San Bernardino shooters without the help of Apple, Apple is now the one that needs the FBI's assistance. "The responsible thing for the government to do is privately disclose the vulnerability to Apple so they can continue hardening security on their devices," said Justin Olsson, product counsel at security software maker AVG Technologies. However, many experts in the field believe that the government isn't legally obligated to provide the information to Apple. As mentioned in Los Angeles Times, this creates a new ethical dilemma: Should tech companies be made aware of flaws in their products, or should law enforcement be able to deploy those bugs as crime-fighting tools?

An anonymous reader writes: As promised, Microsoft started shipping its $3,000 HoloLens development kits today. In addition to sharing that bots are coming to the new platform, the company also released a HoloLens emulator, which lets developers test holographic apps on their PC without the need for a physical HoloLens. You can download the emulator now directly from here. Thinking about building a holographic app? HoloToolkit on GitHub is a collection of scripts and components that may help accelerate your development.

Russell Brandom reports for The Verge: Apple's San Bernardino fight may be over, but the government is still seeking both Apple and Google's help in unlocking phones. New research from the American Civil Liberties Union shows 63 different cases in which the government compelled help from Apple or Google in unlocking a handset. It's unclear how many of the orders were filled, although companies often complied with such orders where possible before last year. The bulk of the cases target Apple, but nine of the orders also look to compel Google's help, typically to reset the password on a given device. The devices include phones from Alcatel, Kyocera, and Samsung, many of which shipped without the default device encryption that blocked the use of traditional forensic tools in the San Bernardino case.

An anonymous reader shares a report on VentureBeat: Microsoft today is introducing the Bot Framework, a new tool in preview to help developers build their own chatbots for their applications. Using this, anyone can create a text program that they can chat with. A BotBuilder software-development kit (SDK) is available on GitHub under an open-source MIT license. These bots can be implemented into a variety of applications, including Slack or Telegram or even email. "Bots are like new applications," Microsoft chief executive Satya Nadella said. "And digital assistants are meta apps, or like the new browsers. And intelligence is infused into all of your interactions. That's the rich platform that we have." Microsoft will want to tread carefully.

An anonymous reader writes: Security researchers have discovered 1,418 vulnerabilities in CareFusion's Pyxis SupplyStation system -- automated cabinets used to dispense medical supplies -- that are still being used in the healthcare and public health sectors in the US and around the world. The vulnerabilities can be exploited remotely by attackers with low skills, and exploits that target these vulnerabilities are publicly available. Things already seem to be getting out hand.

An anonymous reader quotes a report from Los Angeles Times: The successful hack of a phone linked to the San Bernardino terror attacks is unlikely to help police win greater access to encrypted data contained inside thousands of smartphones sitting in evidence lockers nationwide, legal experts and law enforcement officials said Tuesday. The process used to gain access to Syed Rizwan Farook's iPhone 5c might not work on other devices, according to an FBI official with knowledge of the investigation. Though the FBI might want to use the new tool to help solve outstanding criminal cases, doing so would also make the process subject to discovery during criminal trials and place the information in the public domain, according to the official, who was not authorized to discuss the case and spoke on the condition of anonymity. "From all the chiefs that I've talked to, we're hopeful this will give us some insight into how we're going to be able to get into some of the phones sitting in all of our evidence rooms," said Terry Cunningham, police chief in Wellesley, Mass., and president of the International Assn. of Chiefs of Police. "We're clearly anxious to learn what they did and how they did it and if it can be replicated."

An anonymous reader writes: A security researcher found two bypasses in Valve's game review process that eventually allowed him to publish Steam Trading Cards and a full game on the Steam Store called "Watch Paint Dry" (reference to this case from last month involving the British film censors). The game was supposed to be an April Fools' Day prank, but the researcher forgot to set a release date, and [the game] was published on the Steam Store last weekend. Valve has fixed the security bypass in the meantime. These bypasses were extremely dangerous since they allowed anyone to publish games on the Store (possibly containing malware) without a Valve employee ever taking a look at them, or knowing they went through the review process.

An anonymous reader writes: IT staff at multiple hospitals have been forced to stop all routine and net new operations and perform an all hands on deck emergency malware control effort in the last several weeks. The latest instance of this can be seen at MedStar Hospital. From a ZDNet report, "Malware has infected the computer network of MedStar Health, forcing the healthcare provider to shut down large portions of its electronic operations. A statement by the health system said that all facilities remain open, and that there was "no evidence of compromised information." The not-for-profit healthcare system operates ten hospitals across the Washington and Baltimore region, with more than a hundred outpatient health facilities. According to the system's website, it has more than 31,000 employees and serves hundreds of thousands of patients annually." This outbreak appears to be fairly widespread and not limited to the single story listed. A similar story appeared on Slashdot several weeks ago and a quick search on Google provides multiple hits that indicate that this type of incident is much more commonplace than I would have believed. Hospitals provide round the clock service to patients and many of these services are critical to the health of the hospital clients. Most hospitals invest significant resources into security. Vendors may limit local IT staff in terms of how well a turnkey solution is designed to prevent infection. In short, hospital IT staff seem to be in the position of having to respond to rather than prevent these types of incidents. IT analysts predicted that 2015 would be the year that hospitals became targets for hackers. It appears that 2015 was just the first wave of the potential storm coming that is headed directly towards our healthcare IT infrastructure. How can hospitals guard themselves against these attacks when perpetrators can adapt almost instantly to new security measures while hospitals are constrained by operating concerns?

New submitter A_Mang writes: After asking for a delay last week, today the FBI revealed that a third party has succeeded in unlocking the iPhone used by a shooter in the San Bernadino attack. They've asked the court to vacate their request for an injunction forcing Apple to provide tools for unlocking the phone. "The government has now successfully accessed the data stored on Farook's iPhone and therefore no longer requires the assistance from Apple Inc. mandated by Court's Order," the filing reads. The report doesn't elaborate on how they've gained access, nor does it reveal any of the information stored on the phone. What we do know is that last week the FBI contracted Israeli software provider, Cellebrite, to help break into the phone.

An anonymous reader writes: The Japan Aerospace Exploration Agency (JAXA) announced that it has lost contact with its "Hitomi" satellite -- a state-of-the-art X-ray observatory, developed in conjunction with NASA, to spy on energetic processes in space including black holes, massive galaxies, and exploding stars. On Sunday, March 27, the Japanese Space Agency announced it had lost contact with the satellite on March 26, just a little more than a month after it was launched on February 17. Now, Members of the U.S. Joint Space Operations Center (JSpOC), a military organization that identifies and tracks space debris near Earth, said five objects were drifting near the location of Hitomi at around the same time it lost communication with Earth, Nature reports. It's being reported that Hitomi has separated into "multiple pieces" before March 26. Currently, there are about 40 JAXA technicians scouring the skies, trying to locate the expensive observatory.

Reader MojoKid sheds more light on NASA's unmanned cargo ship: The Orbital ATK CRS-6 mission that launched last week at NASA Cape Canaveral, Florida not only delivered supplies to the International Space Station (ISS), but also carried a number of research projects on NASA's Cygnus spacecraft. On board the CRS-6 were Gecko Grippers, which attempt to mimic the adhesion properties of gecko feet. Through the use of nanomaterials, Gecko Grippers can be repeatedly applied and removed from a surface without losing their adhesive properties via the use of van der Waals forces. They are also unaffected by temperature, pressure or radiation. Also in tow for the mission are supplies for the Saffire Experiment, which will be the largest man-made fire in space with data beamed back to earth so researchers can understand its properties and results. It's also impressive to see the NASA VAB (Vehicle Assembly Building), which is one of the biggest structures in the world covering 8 acres and measuring 525 ft tall, as well as the SLS Crawler, which is designed to move large spacecraft components supporting up to 18 million pounds and has been utilized for the Apollo and Space Shuttle programs.

An anonymous reader quotes a report on Polygon about Sony's alleged PlayStation 4K, which Kotaku reported about earlier: Sony's more powerful version of the PlayStation 4 -- also known as the "PlayStation 4.5" and "PlayStation 4K" -- is expected to be announced prior to the launch of PlayStation VR this October, according to a new report from the Wall Street Journal (paywall link). The upgraded PS4 will reportedly be able to play 4K resolution content, according to the report, and deliver "a richer gaming environment, including a high-end virtual-reality experience."

One year ago, Easter Sunday was greeted with the news that many companies were increasingly cracking down on "Easter Eggs," like the harmless snippets of vanity code playfully hidden by developers. "As programming becomes more corporate, more official, one cannot appear to have code that is not officially sanctioned," the author of The Elements of Computing Style told the BBC, though other programmers they spoke to disagreed.

The Easter Egg is a tradition which dates back at least to a hidden room in a 1979 Atari game, and I still have fond memories of the Batmobile Easter Egg (video) in King's Quest II (1985) and tales of that weird musical Easter Egg in Windows 95 which scrolled the names of their entire development team.

So share your favorites in the comments. What's your favorite Easter Egg?

theodp writes: USA Today reports that one day after defending the scheduled screening of a controversial documentary linking vaccinations to autism, Tribeca Film Festival co-founder Robert De Niro announced that the film is being pulled from the event. The film, Vaxxed: From Cover-Up to Catastrophe, was scheduled to debut April 24. It is directed by Andrew Wakefield, known to many as the father of the anti-vaccine movement. Wakefield authored a 1998 report on vaccinations and autism that was later retracted, He also had his medical license revoked. The decision to include the film in the festival resulted in outrage from many who are upset that the film's inclusion could offer legitimacy to a study debunked by leading scientists. "My intent in screening this film was to provide an opportunity for conversation around an issue that is deeply personal to me and my family," said De Niro, who has a child with autism. "But after reviewing it over the past few days with the Tribeca Film Festival team and others from the scientific community, we do not believe it contributes to or furthers the discussion I had hoped for."

New submitter FourG writes: Not much fanfare (which is to be expected given the niche of the device now) but it looks like Sony posted a fix for the much maligned "can't download dashboard" error. It requires a USB key and can't be done over-the-air. My Dash required a factor reset afterward before it successfully downloaded the dashboard, but YMMV...

An anonymous reader writes: The FAA is predicting that the number of drones in the U.S. will increase to 7 million by 2020, though they're still prohibited within 15 miles of Washington D.C. Earlier this month a drone even performed the first FAA-sanctioned drone delivery to an urban area, carrying food, water and a first-aid kit in a box attached to a rope, while a team led by a 15-year-old pilot won the $250,000 first-place prize in the first World Drone Prix in Dubai. The FAA logged 538 drone incidents in the U.S. over the last six months, according to a new report released Friday, including hundreds of incidents in which drones approached airports. But while one incident involved a drone within 20 feet of a plane, "the majority of the incidents are minor," reports The Verge, "with pilots or bystanders reporting drones that are flying in restricted airspace without necessarily endangering anyone."

skywire writes: We've all followed the recent story of AlphaGo beating a top Go master. Now IBM researchers Tayfun Gokmen and Yurii Vlasov have described what could be a game changer for machine learning — an array of resistive processing units that would use stochastic techniques to dramatically accelerate the backpropagation algorithm, speeding up neural network training by a factor of 30,000. They argue that such an array would be reliable, low in power use, and buildable with current CMOS fabrication technology. "Even Google's AlphaGo still needed thousands of chips to achieve its level of intelligence," adds Tom's Hardware. "IBM researchers are now working to power that level of intelligence with a single chip, which means thousands of them put together could lead to even more breakthroughs in AI capabilities in the future."

An anonymous reader quotes an article on The Independent: The more time young adults spend on social media, the more likely they are to become depressed, a study has found. Of the 19- to 32-year-olds who took part in the research, those who checked social media most frequently throughout the week were 2.7 times more likely to develop depression than those who checked least often. The 1,787 U.S. participants used social media for an average 61 minutes every day, visiting accounts 30 times per week. Of them a quarter were found to have high indicators of depression. Dr Brian Primack, the director of Pitt's Centre for Research on Media, Technology and Health, led the study, said, "One strong possibility is that people who are already having depressive symptoms start to use social media more, perhaps because they do not feel the energy or drive to engage in as many direct social relationships." Update: 03/26 17:06 GMT by M : Oops -- as many of you correctly pointed out, we originally covered this story on Friday. Apologies for the error. Thanks!

An anonymous reader links to a Business Insider report: Uber has found a new way to lure engineers to work for the fast-growing startup. The taxi-aggregator service tests coding skills of select riders during their ride. Uber insists that it is not using individual information to identify recruits, but are just identifying geographies where tech jobs are concentrated to find candidates. "The option to play gives interested riders the opportunity to show us their skills in a fun and different way -- whether they code on the side or are pursuing a career as a developer," a Uber spokesperson said. If they accept the test, Uber challenges the ride with three coding problems to solve, each with a 60-second countdown, and scores them based on their answers. Uber is not the only Silicon Valley giant which has found a "creative" way to hire people. Last year, we saw Google offer at least one person a job based on his search queries.

insitus quotes a report from Speier.House.Gov: Congresswoman Jackie Speier (D-San Francisco/San Mateo) introduced the Closing the Pre-Paid Mobile Device Security Gap Act of 2016, which would require people to present identification when purchasing "burner phones" and other pre-paid mobile devices, as well as requiring merchants to keep records of those purchases. "Burner phones" are pre-paid phones that terrorists, human traffickers, and narcotics dealers often use to avoid scrutiny by law enforcement because they can be purchased without identification and record-keeping requirements. This bill would close that legal gap. "This bill would close one of the most significant gaps in our ability to track and prevent acts of terror, drug trafficking, and modern-day slavery," said Speier. "The 'burner phone' loophole is an egregious gap in our legal framework that allows actors like the 9/11 hijackers and the Times Square bomber to evade law enforcement while they plot to take innocent lives. The Paris attackers also used 'burner phones.' As we've seen so vividly over the past few days, we cannot afford to take those kinds of risks. It's time to close this 'burner phone' loophole for good."

An anonymous reader quotes a report from NBC News: The brothers behind this week's Brussels bombings also spied on a top nuclear researcher and hoped to build a so-called "dirty bomb," an expert involved in a probe into ISIS threats told NBC News on Thursday. Khalid and Ibrahim El Bakraoui were responsible for planting a hidden camera outside the Belgian researcher's house, according to Claude Moniquet, a French former intelligence official who was hired to investigate potential plots targeting Europe's nuclear sector. This camera produced more than 10 hours of film showing the comings and goings of senior researcher at a Belgian nuclear center and his family. "The terrorist cell ... naively believed they could use him to penetrate a lab to obtain nuclear material to make a dirty bomb," Moniquet, CEO of the European Strategic Intelligence and Security Center privacy consultancy said. The researcher worked at a center which stored a "significant portion of the world's supply of radioisotopes," according to the Center for Public Integrity, a nonprofit, nonpartisan investigative news organization in Washington, D.C. These isotopes are used in hospitals and factories around the world but can also be used to make a so-called "dirty bomb" -- a device that could spread radioactive material across a wide area.

On Wednesday, it was reported that FBI has contracted Cellebrite, an Israeli software provider specializing in mobile phone forensics, for $15,000 to break into the iPhone. It is believed that Cellebrite knows of a flaw in the iPhone which could allow circumvention of iOS' built-in security layers. Cellebrite could have worked with Apple on this flaw, but it chose to help FBI instead. It doesn't take rocket science to understand why Cellebrite chose to take the other route. The New York Times says that many security firms and hackers would love to work with Apple to further improve its products, but they don't because of a lack of incentive. There's little to no monetary incentive in helping the company with finding loopholes in its products. Apple -- unlike a number of Silicon Valley giants including Facebook, Microsoft, Google, Mozilla, and recently added to the list, Uber -- doesn't maintain a Bug Bounty program. Nicole Perlroth and Katie Benner report for the Times: When hackers do find flaws in Apple's code, they have little incentive to turn them over to the company for fixing. [...] Apple, which has had relatively strong security over the years, has been open about how security is a never-ending cat-and-mouse game and how it is unwilling to engage in a financial arms race to pay for code exploits. The company has yet to give hackers anything more than a gold star. When hackers do turn over serious flaws in its products, they may see their name listed on the company's website -- but that is it. That is a far cry from what hackers can expect if they sell an Apple flaw on the thriving underground market where a growing number of companies and government agencies are willing to pay hackers handsomely.

On Wednesday, it was reported that FBI has contracted Cellebrite, an Israeli software provider specializing in mobile phone forensics, for $15,000 to break into the iPhone. It is believed that Cellebrite knows of a flaw in the iPhone which could allow circumvention of iOS' built-in security layers. Cellebrite could have worked with Apple on this flaw, but it chose to help FBI instead. It doesn't take rocket science to understand why Cellebrite chose to take the other route. The New York Times says that many security firms and hackers would love to work with Apple to further improve its products, but they don't because of a lack of incentive. There's little to no monetary incentive in helping the company with finding loopholes in its products. Apple -- unlike a number of Silicon Valley giants including Facebook, Microsoft, Google, Mozilla, and recently added to the list, Uber -- doesn't maintain a Bug Bounty program. Nicole Perlroth and Katie Benner report for the Times: When hackers do find flaws in Apple's code, they have little incentive to turn them over to the company for fixing. [...] Apple, which has had relatively strong security over the years, has been open about how security is a never-ending cat-and-mouse game and how it is unwilling to engage in a financial arms race to pay for code exploits. The company has yet to give hackers anything more than a gold star. When hackers do turn over serious flaws in its products, they may see their name listed on the company's website -- but that is it. That is a far cry from what hackers can expect if they sell an Apple flaw on the thriving underground market where a growing number of companies and government agencies are willing to pay hackers handsomely.

An anonymous reader writes: According to Business Insider, "[Apple] worries that some of the equipment and cloud services it buys has been compromised by vendors who have agreed to put "back door" technology for government spying, according to a report from The Information's Amir Efrati and Steve Nellis." With many of its cloud-based services like iTunes, the App Store, and iCloud requiring enormous data center to operate, Apple hasn't been able to build all the data centers it needs, and has instead been using services from its rivals, namely Amazon Web Services and Microsoft. Google recently landed Apple as a customer for the Google Cloud Platform. "Meanwhile, [Apple] has embarked on yet another attempt to build more of its own data centers to handle all of that, called Project McQueen, reports Jordan Novet at VentureBeat, and the project is having a rough go of it, reports The Information." Apple suspects that backdoors have been added to many of the servers it has been ordering from others. "At one point, the company even had people taking photographs of the motherboards in the computer servers it was using, then mark down exactly what each chip was, to make sure everything was fully understood."

tlhIngan writes: Earlier this week, the FBI asked the court for a continuance so it could do some research into a proposed method of cracking the [iPhone belonging to one of the San Bernardino, California shooters]. It turns out the FBI has contracted Cellebrite for $15,000 to break into the phone. Cellebrite is an Israeli software provider specializing in mobile phone forensics software. If they succeed, it would mean Apple would no longer need to be involved.

An anonymous reader cites ZDNet's Zack Whittaker report: William Binney, a former NSA official who spent more than three decades at the agency, said the US government's mass surveillance programs have become so engorged with data that they are no longer effective, losing vital intelligence in the fray. That, he said, can -- and has -- led to terrorist attacks succeeding. Binney said that an analyst today can run one simple query across the NSA's various databases, only to become immediately overloaded with information. With about four billion people -- around two-thirds of the world's population -- under the NSA and partner agencies' watchful eyes, according to his estimates, there is too much data being collected. Perhaps that's one of the reasons why NSA wants to dump the phone records it gathered over the past 14 years.

Reader MojoKid writes: Some might say there's no such thing as a one-size-fits-all solution when it comes to computing, and that's especially true for workstation graphics professionals who need varying levels of performance and memory space. For that reason, NVIDIA is now offering a version of its Quadro M6000 graphics card with 24GB of GDDR5 memory, twice as much memory as much as the original model. According to NVIDIA, customers rendering datasets larger than 12GB can experience up to 5X faster performance compared to the previous Quadro M6000. Like the 12GB version, the new 24GB Quadro M6000 is based on NVIDIA's Maxwell architecture. It has 3,072 CUDA cores, a 384-bit memory bus, four DisplayPort 1.2 connectors, a single DVI-I connectors, and a maximum power consumption rating of 250W. In addition to the doubling the memory buffer, NVIDIA added a few other features, including more GPU clock options, greater software temperature control to keep the GPU temp below the point where throttling occurs, and a new under-power boot message if the card is ever under powered.

An anonymous reader writes: The Institute for Critical Infrastructure Technology, which advises both government and industry, has released an unusually fervent paper calling for NASA to push harder for funding for a massive cybersecurity project called Gryphon-X, which it claims has been lost in congressional confusion and administrative bureaucracy. Details are scarce as to how Gryphon-X could prevent cyber-incursions such as AnonSec's attempted drone sabotage in February, or even what new technologies might be on the table, but mentions that a significant new site would be built in Silicon Valley, and would include academic facilities. Extending Gryphon-X's scope far beyond NASA's security to a global role, the authors write that it would contain 'the fusion center, virtualization environment, and cyber-physical capabilities needed to analyze, prepare, and prevent threats like these from harming the nation, its organizations, or its people.'

An anonymous reader writes: Dominic Frisby writes with a very interesting, albeit heavily opinionated, article from The Guardian discussing why we should all fear a cashless world. He argues "it will hand yet more power to the financial sector in that banks and related fintech companies will oversee all transactions." Every payment you will make will be traceable. While inequality is already a problem, it may be exacerbated even further in a cashless society. Frisby writes, "Cash, on the other hand, empowers its users. It enables them to buy and sell, and store their wealth, without being dependent on anyone else. They can stay outside the financial system, if so desired."

An anonymous reader quotes from a report on AndroidHeadlines: Following the attacks at Brussels International Airport and the Maelbeek Subway Station in Brussels, Belgium earlier this morning, all four major U.S. carriers have announced that they will be offering their customers the opportunity to make free calls to Brussels, as a means of letting customers keep in contact with friends and loved ones who live or are traveling within the city, a gesture which both Verizon and Sprint offered to customers last year following the attacks in Paris, France. As the city of Brussels begins and continues to mourn in the wake of the attacks, Sprint, T-Mobile, ATT, and Verizon Wireless will all offer free calls and texts to Brussels from the U.S., beginning today and lasting throughout the next few days to a week.

Less than 24 hours since we read this dire climate study, an anonymous reader writes from a Washington Post report about several more concerning things: James Hansen, a former NASA scientist, says his new study suggests the impact of global warming will be quicker and more catastrophic than generally envisioned. The research invokes collapsing ice sheets, violent megastorms and even the hurling of boulders by giant waves in its quest to suggest that even 2 degrees Celsius of global warming above pre-industrial levels would be far too much. Hansen has called it the most important work he has ever done. "I think almost everybody who is really familiar with both paleo and modern is now very concerned that we are approaching, if we have not passed, the points at which we have locked in really big changes for young people and future generations," Hansen said.

The cool Wine-related news of the week isn't just for Android Remix; an anonymous reader writes with some news applicable to a wider set of users: While no Windows-only Vulkan games have yet to be released, Wine developers are ready and have worked out experimental support for wrapping Vulkan Windows programs on Linux. Assuming you have a Vulkan Linux driver, the latest Wine-Staging build allows for Vulkan Windows programs/games to be dynanically translated and run on Linux 32-bit and 64-bit. Wine's Vulkan wrapper is passing all Khronos conformance tests, but hopefully the ever-expanding Linux game catalog will make this 10k+ lines of code not necessary moving into the future.

Mickeycaskill writes with this news from TechWeek Europe: Every Year 7 student in England and Wales, Year 8 student in Northern Ireland and S1 student in Scotland will be handed, for free, a BBC micro:bit computer specially designed to help pupils learn to code. Micro:bits, which are smaller than the size of a credit card and can be hooked up to a mobile app or accessed via the Internet, will be delivered nationwide through schools and made available to home-schooled students over the course of the next few weeks. The students are able to keep their devices as their own, meaning they can work with the device for homework, in school holidays, and use it for more applications as their grasp on coding increases. The initiative follows on from the BBC's Micro programme that was introduced in the 1980s, and sees a partnership between the BBC and some of the world's most notable technology companies such as ARM, Microsoft, and Samsung. The computer will hope to emulate the Raspberry Pi, of which more than eight million have been sold. A BBC story explains a bit about the project's ambitions, and points out a few "bumps in the road"; originally, the hardware was to be in classrooms several months sooner. The BBC's own micro:bit page features more on programming the device, as well as many sample projects.

An anonymous reader writes: A year after Uber announced a collaboration with the Robotics Department of Carnegie Mellon University, not a single project has been developed. The ride-sharing company set up its Advanced Technologies Center on CMU's doorstep in 2015 and promptly 'compensated' the poaching of 40 of the University's best talent with a $5.5 million grant, leaving CMU with a staff crisis. The university is taking the appropriation philosophically, and considering the relationship as symbiotic. In the meantime Uber is rapidly co-opting Carnegie Mellon into a feeding ground for its own labs, moving a great deal of robotics research out of academic transparency into the realm of jealously-guarded corporate secrets.

An anonymous reader writes from a DailyDot's Kernel Mag article: Welcome to the Internet of Things, what Schneier calls "the World Size Web," already growing around you as we speak, which creates such a complete picture of our lives that Dr. Richard Tynan of Privacy International calls them "doppelgangers" -- mirror images of ourselves built on constantly updated data. These doppelgangers live in the cloud, where they can easily be interrogated by intelligence agencies. Nicholas Weaver, a security researcher at University of California, Berkeley, points out that "Under the FISA Amendments Act 702 (aka PRISM), the NSA can directly ask Google for any data collected on a valid foreign intelligence target through Google's Nest service, including a Nest Cam." And that's just one, legal way of questioning your digital doppelgangers; we've all heard enough stories about hacked cloud storage to be wary of trusting our entire lives to it. [...] But with the IoT, the potential goes beyond simple espionage, into outright sabotage. Imagine an enemy that can remotely disable the brakes in your car, or (even more subtly) give you food poisoning by hacking your fridge. That's a new kind of power. "The surveillance, the interference, the manipulation the full life cycle is the ultimate nightmare," says Tynan. [...] That makes the IoT vulnerable -- our society vulnerable -- to any criminal with a weekend to spend learning how to hack. "When we talk about vulnerabilities in computers... people are using a lot of rhetoric in the abstract," says Privacy International's Tynan. "What we really mean is, vulnerable to somebody. That somebody you're vulnerable to is the real question." The state of security around IoT, the chip or sensor-equipped devices connected to each other over the Internet, is deeply concerning. Just in the past few months, we have seen several instances of these devices getting hacked. We have also seen things such as Shodan, a search engine for the Internet of Things that can allow someone to browse vulnerable webcams. Many people continue to overlook the significance and potential consequences of their "smart" devices getting compromised. Someone recently asked, "So what if my coffee maker gets hacked? What are criminals going to do? Burn my coffee?" They can do a lot more than burn your coffee. You see these devices are connected to your Wi-Fi network, which gives them the ability to interact with other gadgets connected to the same network. When attackers manage to access one of these devices, it's only a matter of time before they own your entire network.

An anonymous reader writes from a DailyDot's Kernel Mag article: Welcome to the Internet of Things, what Schneier calls "the World Size Web," already growing around you as we speak, which creates such a complete picture of our lives that Dr. Richard Tynan of Privacy International calls them "doppelgangers" -- mirror images of ourselves built on constantly updated data. These doppelgangers live in the cloud, where they can easily be interrogated by intelligence agencies. Nicholas Weaver, a security researcher at University of California, Berkeley, points out that "Under the FISA Amendments Act 702 (aka PRISM), the NSA can directly ask Google for any data collected on a valid foreign intelligence target through Google's Nest service, including a Nest Cam." And that's just one, legal way of questioning your digital doppelgangers; we've all heard enough stories about hacked cloud storage to be wary of trusting our entire lives to it. [...] But with the IoT, the potential goes beyond simple espionage, into outright sabotage. Imagine an enemy that can remotely disable the brakes in your car, or (even more subtly) give you food poisoning by hacking your fridge. That's a new kind of power. "The surveillance, the interference, the manipulation the full life cycle is the ultimate nightmare," says Tynan. [...] That makes the IoT vulnerable -- our society vulnerable -- to any criminal with a weekend to spend learning how to hack. "When we talk about vulnerabilities in computers... people are using a lot of rhetoric in the abstract," says Privacy International's Tynan. "What we really mean is, vulnerable to somebody. That somebody you're vulnerable to is the real question." The state of security around IoT, the chip or sensor-equipped devices connected to each other over the Internet, is deeply concerning. Just in the past few months, we have seen several instances of these devices getting hacked. We have also seen things such as Shodan, a search engine for the Internet of Things that can allow someone to browse vulnerable webcams. Many people continue to overlook the significance and potential consequences of their "smart" devices getting compromised. Someone recently asked, "So what if my coffee maker gets hacked? What are criminals going to do? Burn my coffee?" They can do a lot more than burn your coffee. You see these devices are connected to your Wi-Fi network, which gives them the ability to interact with other gadgets connected to the same network. When attackers manage to access one of these devices, it's only a matter of time before they own your entire network.