Slashdot Mirror

itwbennett writes: Last week, a database containing 191 million voter records was exposed because of a misconfigured database that no on wants to claim ownership of. Around the same time, a second, smaller database containing fewer than 57 million records similar to those previously discovered was also found by researcher Chris Vickery. But the second database also includes 18 million records that hold targeted demographic information. And as was the case with the previous voter database, no one wants to claim ownership.

schwit1 writes with news that scientists have used a new gene-editing technique called CRISPR to treat mice with defective dystrophin genes. This is the first time that such a method has successfully treated a genetic disease inside a living mammal. The Times reports: "Three research groups, working independently of one another, reported in the journal Science that they had used the Crispr-Cas9 technique to treat mice with a defective dystrophin gene. Each group loaded the DNA-cutting system onto a virus that infected the mice's muscle cells, and excised from the gene a defective stretch of DNA known as an exon. Without the defective exon, the muscle cells made a shortened dystrophin protein that was nonetheless functional, giving all of the mice more strength."

An anonymous reader writes: Twitter shut down Politwoops, a network of deleted tweets from politicians, this summer with the statement: "Imagine how nerve-racking – terrifying, even – tweeting would be if it was immutable and irrevocable? No one user is more deserving of that ability than another. Indeed, deleting a tweet is an expression of the user's voice." To the joy of open-government advocates and with the help of government transparency nonprofits, Twitter says it will work to get Politwoops up and running again. "Politwoops is an important tool for holding our public officials, including candidates and elected or appointed public officials, accountable for the statements they make, and we're glad that we've been able to reach an agreement with Twitter to bring it back online both in the U.S. and internationally," said Jenn Topper, communications director for The Sunlight Foundation

An anonymous reader writes: I'm inclined to agree with the suggestion people make that the web is like the Wild West, but that's not to say we have reached the same conclusion for the same reasons. For me, the web — like the Wild West — is not a world filled with danger, but one occupied by vigilantes. As a proponent of free speech, I find this concerning. One of the most highly-lauded of vigilantes is the disparate group marching under the ragged banner of Anonymous.

One of its taglines is 'We Are Anonymous', a phrase that can be uttered by anyone, as there is no membership process — if you say you are part of Anonymous, you are part of Anonymous. The group is not, for the most part, organized. Individuals and factions can fight for or against whatever cause they want, just like real-world vigilante groups. But Anonymous is not alone. There are hacking collectives and other online crusaders who see fit to take the law into their own hands. This is might sound wonderful, but it's not necessarily a good thing. As New World Hackers demonstrate, attacks can target the wrong people and restrict free speech.

An anonymous reader writes: At the end of November, BlackBerry announced it would pull its operations out of Pakistan after the country's government demanded access to BlackBerry's user data. The Pakistan government has now dropped that request, and BlackBerry will continue operating there as a result. In a statement, BlackBerry COO Marty Beard said, "We are grateful to the Pakistan Telecommunication Authority and the Pakistani government for accepting BlackBerry's position that we cannot provide the content of our customers' BES traffic, nor will we provide access to our BES servers."

An anonymous reader writes: Ok folks, it's been ten years since we've done this. What are your tech/science/nerd/misc predictions for 2016? Is VR going to be the bombshell it's being hyped as? Are wearables going to come into their own? Which tech companies are going to implode, and which are going to blossom? What discoveries are we going to make this year? Will people ever shut up about Donald Trump? Which new movies, books, games, and TV shows are going to be awesome? Which are going to suck? How will our privacy and security erode in 2016? And anything else you'd care to forecast.

theodp writes: The Education Revolution will be patented. USPTO records show that Khan Academy is seeking a patent for Systems and Methods for Split Testing Educational Videos. From the patent application: "Systems and methods are provided for comparing different videos pertaining to a topic. Two different versions of an educational video may be compared using split comparison testing. A set of questions may be provided along with each video about the topic taught in the video. Users may view one of the videos and answer the questions. Data about the user responses may be aggregated and used to determine which video more effectively conveys information to the viewer based on the question responses." Now it's up to the USPTO to decide if something like the test and control studies conducted 40+ years ago (pdf) by the PLATO system to measure the effectiveness of different teaching methods would count as prior art. In response to an earlier post on Khan Academy's pending patents on learning computer programming and 'social programming,' Slashdot user Khan Academy said that the nonprofit is using patents for good, so not to worry.

theodp writes: The Education Revolution will be patented. USPTO records show that Khan Academy is seeking a patent for Systems and Methods for Split Testing Educational Videos. From the patent application: "Systems and methods are provided for comparing different videos pertaining to a topic. Two different versions of an educational video may be compared using split comparison testing. A set of questions may be provided along with each video about the topic taught in the video. Users may view one of the videos and answer the questions. Data about the user responses may be aggregated and used to determine which video more effectively conveys information to the viewer based on the question responses." Now it's up to the USPTO to decide if something like the test and control studies conducted 40+ years ago (pdf) by the PLATO system to measure the effectiveness of different teaching methods would count as prior art. In response to an earlier post on Khan Academy's pending patents on learning computer programming and 'social programming,' Slashdot user Khan Academy said that the nonprofit is using patents for good, so not to worry.

An anonymous reader writes: You may recall a company called CarrierIQ from when it angered tech-savvy internet users four years ago. They developed software that allowed explicit monitoring of anything happening on a cell phone, down to individual keystrokes. It was pre-installed on millions of phones at the time, and Carrier iQ unsuccessfully tried to silence the researchers working to uncover it. As the article notes, the company and its software "became synonymous with creepy, unseen monitoring of everything that you do on a smartphone on behalf of carriers and phone makers." Well, it seems they never really recovered. Carrier iQ seems to have evaporated. The bad news is that they sold most of their assets to AT&T, and handed off some employees as well. AT&T says they've continued to use Carrier iQ's software over the past few years to "improve the customer's network and wireless service experience."

An anonymous reader writes: When Apple made its Swift programming language open source in early December, it opened the floodgates for suggestions and requests from developers. But the project's maintainers have their own ideas about how the language should evolve, so some suggestions are rejected. Now a list has been compiled of some commonly rejected proposals — it's an interesting window into the development of a language. Swift's developers don't want to replace Brace Syntax with Python-style indentation. They don't want to change boolean operators from && and || to 'and' and 'or'. They don't want to rewrite the Swift compiler in Swift. They don't want to change certain keywords like 'continue' from their C precedents. And they have no interest in removing semicolons.

An anonymous reader writes: Two years after the PlayStation 4 was released, and two weeks after it was jailbroken, a group of hackers has now successfully installed Linux on it. "...it appears that the fail0verflow team utilized a WebKit bug similar to the one recently documented by GitHub user CTurt and then took things up a notch. CTurt's workaround focuses on the PlayStation 4's Webkit browser, which is tricked into freeing processes from the core of the console's operating system by an improvised webpage. The PS4 is powered by Sony's Orbis OS, which is based on a Unix-like software called FreeBSD. With a route into the console's system, fail0verflow then identified weaknesses in the PlayStation 4's GPU. It specifically called out engineers from semiconductor company Marvell, accusing them of 'smoking some real good stuff' when they designed the PlayStation 4's southbridge chip."

An anonymous reader writes: Two years after the PlayStation 4 was released, and two weeks after it was jailbroken, a group of hackers has now successfully installed Linux on it. "...it appears that the fail0verflow team utilized a WebKit bug similar to the one recently documented by GitHub user CTurt and then took things up a notch. CTurt's workaround focuses on the PlayStation 4's Webkit browser, which is tricked into freeing processes from the core of the console's operating system by an improvised webpage. The PS4 is powered by Sony's Orbis OS, which is based on a Unix-like software called FreeBSD. With a route into the console's system, fail0verflow then identified weaknesses in the PlayStation 4's GPU. It specifically called out engineers from semiconductor company Marvell, accusing them of 'smoking some real good stuff' when they designed the PlayStation 4's southbridge chip."

An anonymous reader writes with this update about Derby who was born with a congenital deformity that deprived him of front paws and was outfitted with a pair of 3-D-printed prosthetics. According to Gizmag: "You might remember Derby, a dog who was born with a congenital deformity but last year received a 3D-printed prostheses that enabled him to run for the first time. Well, it's onward and upward for Derby and his carers, who have now crafted an upgraded set of custom prostheses allowing him to walk proudly with a straight back and even sit like a healthy dog."

An anonymous reader writes: Last week, Yahoo became the latest company promising to alert users who it suspected were being targeted by state-sponsored attacks (excepting Microsoft, who made a similar announcement just today). Twitter, Facebook and Google had previously assured their users that they would be warned of any potential government spying. The UK, it seems, isn't happy about this. They are pushing through a bill that will punish the leaders of any company that warns its users about British snooping with up to two years in prison. Specifically, UK ministers want to make it a criminal offense for tech firms to warn users of requests for access to their communication data made by security organizations such as MI5, MI6 and GCHQ.

An anonymous reader writes: Workers in New York City have begun installing the city's first LinkNYC kiosks. The kiosks are free, public Wi-Fi access points, which are taking the spots formerly occupied by phone booths. 500 more of these hubs will be installed by mid-July, and the full network will eventually include over 7,500 of them. "Once completed, the hubs will also include USB device charging ports, touchscreen web browsing, and two 55-inch advertising displays." The displays are expected to bring the city $500 million in revenue over the next 12 years. When the project was announced in 2014, officials said construction would start "next year." They sure cut it close.

saizai writes: I just filed my reply to the TSA's opposition to an emergency motion for preliminary injunction and temporary restraining order (PI/TRO) against the TSA's new policy that arbitrarily mandates some people to go through electronic strip search ("AIT"). Case website here (will be kept updated). Court order expected soon, though impossible to know for sure.

I've also released 3 FOIA docs (see 2015-12-30 update), which I submitted as exhibits:

• MD 100.4 2012-01-25 Transportation Security Searches (11p, full) — showing TSA's expansion to "bus, train, [and] other public conveyance"
• SPOT validation study Vol 1 Ch 4 — Descriptive analyses — summary of sources for items (1p) — showing 90% of what they find is immigration and drug related, not weapons
• SPOT validation study Vol 3 App F — Supporting tables — prohibited items data (2p) — giving breakdown list of "prohibited items" they find

See previously:

• Motion Filed In 1st Circuit To Enjoin TSA's New Mandatory "AIT" Screening
• TSA Body Scanner Opt-out No Longer Guaranteed

saizai writes: I just filed my reply to the TSA's opposition to an emergency motion for preliminary injunction and temporary restraining order (PI/TRO) against the TSA's new policy that arbitrarily mandates some people to go through electronic strip search ("AIT"). Case website here (will be kept updated). Court order expected soon, though impossible to know for sure.

I've also released 3 FOIA docs (see 2015-12-30 update), which I submitted as exhibits:

• MD 100.4 2012-01-25 Transportation Security Searches (11p, full) — showing TSA's expansion to "bus, train, [and] other public conveyance"
• SPOT validation study Vol 1 Ch 4 — Descriptive analyses — summary of sources for items (1p) — showing 90% of what they find is immigration and drug related, not weapons
• SPOT validation study Vol 3 App F — Supporting tables — prohibited items data (2p) — giving breakdown list of "prohibited items" they find

See previously:

• Motion Filed In 1st Circuit To Enjoin TSA's New Mandatory "AIT" Screening
• TSA Body Scanner Opt-out No Longer Guaranteed

An anonymous reader writes: Researchers have created an algorithm that can accurately detect code written by different programmers (PDF), even if the code has been compiled into an executable binary. Because of open source coding repositories like GitHub, state agencies can build a database of all developers and their coding styles, and then easily compare the coding style used in "anti-establishment" software to detect the culprit. Despite all the privacy implications this research may have, the algorithm can also be used by security researchers to track down malware authors. We also discussed an earlier phase of this research.

v3rgEz writes: Troy Hunt, a security researcher who tracked breached websites, reflects on the recent "grey hat" hacking of VTech, in which a hacker downloaded millions of kids' photos, chat logs, and more, to blow the whistle on a serious vulnerability. The attacker went way beyond responsible disclosure, offering the data directly to a reporter, but the ensuing publicity got VTech to clean up their act and maybe helped parents better understand the dangers of lax security. Is grey hat ok when it's done for the greater good?

szczys writes: There is little to complain about when it comes to the new FAA rules regarding drones (unless perhaps you live in DC). The regulations are basically an End User Licensing Agreement and focus on educating responsible operators. Eight simple rules cover how to avoid doing dangerous things with Unmanned Aerial Systems. The FAA has even left alone the small toy drones, and the certification system for those above 55 lbs remains. The one aspect that is concerning is that of privacy; the drone database will be publicly searchable and contains names and addresses of drone owners. If the DMV keeps license plate data protected, the FAA should do the same.

Ray Kurzweil is one of the world’s leading authors, inventors, and futurists. Kurzweil was the principal inventor of the first CCD flat-bed scanner, the first omni-font optical character recognition, the first print-to-speech reading machine for the blind, the first text-to-speech synthesizer, the first music synthesizer capable of recreating the grand piano and other orchestral instruments, and the first commercially marketed large-vocabulary speech recognition. Among Kurzweil’s many honors, he received the 2015 Technical Grammy Award for outstanding achievements in the field of music technology; he is the recipient of the National Medal of Technology, was inducted into the National Inventors Hall of Fame, holds twenty honorary Doctorates, and honors from three U.S. presidents. He has given us some of his time to answer any questions you may have. As usual, ask as many as you'd like, but please, one question per post.

theodp writes: In A New Chapter for Computer Science Education, the U.S. Department of Education explained earlier this month that the federal STEM Education Act of 2015 'provides an unprecedented opportunity to fully leverage federal resources' to address large gaps in students' participation in Advanced Placement (AP) computer science classes based on gender and race. "In three states," lamented the DOE, "not a single female student took the AP computer science exam" (that only 8 boys took the AP CS exam in those same 3 states was apparently not a concern). And the DOE has good news for those hoping to tap Title I and II funds for CS, but don't have any computer science teachers. "A background in math or science isn't necessarily a requirement to teach CS," explains the Dept. of Ed, "as disciplines like English, history and civics can also provide a solid foundation for teaching CS concepts."

theodp writes: In A New Chapter for Computer Science Education, the U.S. Department of Education explained earlier this month that the federal STEM Education Act of 2015 'provides an unprecedented opportunity to fully leverage federal resources' to address large gaps in students' participation in Advanced Placement (AP) computer science classes based on gender and race. "In three states," lamented the DOE, "not a single female student took the AP computer science exam" (that only 8 boys took the AP CS exam in those same 3 states was apparently not a concern). And the DOE has good news for those hoping to tap Title I and II funds for CS, but don't have any computer science teachers. "A background in math or science isn't necessarily a requirement to teach CS," explains the Dept. of Ed, "as disciplines like English, history and civics can also provide a solid foundation for teaching CS concepts."

New submitter fardindany writes with news that the months-old Ashley Madison hack seems to have had little impact on new users joining up. CNN reports: "Despite the infamous hack that exposed millions of cheaters online, infidelity dating site Ashley Madison says its ranks are growing. At the time of the hack, Ashley Madison said it had 39 million members. The website now says it has more than 43 million members, according to a rolling count on its homepage."

An anonymous reader writes: Facebook has been under heavy criticism for distributing its "Free Basics" app in areas of the world that have less-developed communications infrastructure. The app essentially provides free access to a limited selection of internet sites. Free Basics was recently banned in India over net neutrality concerns. Mark Zuckerberg has now published a response in the Times of India.

He says, "We have collections of free basic books. They're called libraries. They don't contain every book, but they still provide a world of good. We have free basic healthcare. Public hospitals don't offer every treatment, but they still save lives. We have free basic education. Every child deserves to go to school. And in the 21st century, everyone also deserves access to the tools and information that can help them to achieve all those other public services, and all their fundamental social and economic rights. That's why everyone also deserves access to free basic internet services."

Facebook and Internet.org are also fighting the bad publicity elsewhere online, and even in local newspapers. "In essence, Facebook is claiming that since people quickly move on from Free Basics, it's less of a threat as a restricted replacement to the neutral Internet, and is more of a stepping stone to it."

An anonymous reader writes: The Washington Post has an article about current and near-future AI research while managing to keep a level head about it: "The machines are not on the verge of taking over. This is a topic rife with speculation and perhaps a whiff of hysteria." Every so often, we hear seemingly dire warnings from people like Stephen Hawking and Elon Musk about the dangers of unchecked AI research. But actual experts continue to dismiss such worries as premature — and not just slightly premature. The article suggests our concerns might be better focused in a different direction: "Anyone looking for something to worry about in the near future might want to consider the opposite of superintelligence: superstupidity. In our increasingly technological society, we rely on complex systems that are vulnerable to failure in complex and unpredictable ways. Deepwater oil wells can blow out and take months to be resealed. Nuclear power reactors can melt down. Rockets can explode. How might intelligent machines fail — and how catastrophic might those failures be?"

An anonymous reader writes: The U.S. Federal Aviation Administration has finally started to roll out its new rules for small drones. The agency was notably slow to do so — slow enough that many cities, counties, and states beat them to it. Now, the FAA's rules are clashing with established and more developed rules, frustrating local lawmakers and confusing drone hobbyists. "Lawmakers said the agency's drone rules did not go as far as many states and municipalities that are explicitly banning flights within cities and over homes, strengthening privacy protections and imposing steep criminal and financial penalties on violators."

The FAA's slow and unilateral response is causing local officials to fight the nationwide regulations. "There was not supposed to be such a divide between local and federal drone regulations. Congress instructed the FAA three years ago to write laws for drones, a nascent technology at the time. Yet the agency struggled to create first-time rules for the category that would balance a public outcry over safety concerns with the economic benefits drone makers promised from the machines." Meanwhile, tech companies focused on drone development are pleased with the FAA's light touch. There are hobbyists on each side of the issue; some are glad to avoid more restrictive and complicated local regulations, while others wish the government would do more to slow the rush of unprepared and reckless new drone owners.

An anonymous reader writes: I have a shelf full of books and other book-like things ranging from old to very old that I would like to turn into PDFs (or other similarly portable format), and have been on a slow-burn quest for the right hardware and method to do so on a budget. These are mostly sentimental — things handed down over generations, and they include family bibles, notebooks, and photo albums, as well as some conventional — published, bound — books from the late 19th and early 20th Century. None of them are especially valuable as antiques, as far as I know; my goals in preserving them are a) to make them available to other people in my family who are into genealogy or just nostalgia, and b) so I can read some of those old, interesting books (et cetera) without endangering them any more than it takes to scan them once. I was intrigued by the (funded, but not yet available) scanner mentioned earlier this year on Slashdot; it seems to do a lot of things right, but like any crowdfunded project, the proof is in the pudding, and the pudding hasn't yet arrived. It's also cheap, and that fits my household budget. What methods and hardware are you using to scan old documents? Any tips you have from a similar project, with regard to hardware, treatment of the materials being scanned, light sources, file formats, clean-up and editing tools, file-size-vs-resolution tradeoffs? In the end, I'm likely to err toward high-resolution scans, since they can be knocked down to size later if need be, but I'd be interested in hearing about what tradeoffs you've found to work for you.

One big question that I'd like to have answered: Is there stand-alone Free / Open Source software, or even just cheap software (I am mostly on Linux, by choice, but won't leap onto a sword to keep my Free Software purity) that makes for easy correction of the distortion introduced by camera-based imaging? If I could easily uncurl and keystone-correct pages, then a lot of input methods (even my phone) are suddenly much more attractive. My old Casio camera could do this 10 years ago, but I haven't found a free software desktop utility that lets me turn photos into nicely squared-up pages.

schwit1 writes with Cory Doctorow's story at the Guardian diving into the questions of applied ethics that autonomous cars raise, especially in a world where avoiding accidents or mitigating their dangers may mean breaking traffic laws. From the article: The issue is with the 'Trolley Problem' as applied to autonomous vehicles, which asks, if your car has to choose between a maneuver that kills you and one that kills other people, which one should it be programmed to do? The problem with this formulation of the problem is that it misses the big question that underpins it: if your car was programmed to kill you under normal circumstances, how would the manufacturer stop you from changing its programming so that your car never killed you?

The Steam bug that allowed users to see other users' account details may not have been as harmful as it first appeared. Valve said in a statement (reported on Mashable) that while cached data showed usernames, "sensitive details such as credit card numbers are automatically censored on user account pages, which mitigates the potential harm of someone having seen your personal data." From Mashable's report: "Steam is back up and running without any known issues," Valve told Game Informer in a statement. "As a result of a configuration change earlier today, a caching issue allowed some users to randomly see pages generated for other users for a period of less than an hour. This issue has since been resolved. We believe no unauthorized actions were allowed on accounts beyond the viewing of cached page information and no additional action is required by users."

After being blocked by an obstruction ("the object") which left it idle just over two years ago, repair work has continued on Bertha, Seattle's enormous tunnel-boring machine. Now, reports KOMO News and The Seattle Times, Bertha is once again ready to work. From The Times' coverage: Tuesday morning's push of one and a half feet provided Seattle Tunnel Partners (STP) enough space behind Bertha’s drive motors to fasten the next concrete ring at the 1,085-foot mark of the planned 9,270-foot tube. Chris Dixon, STP project manager, is calling this a testing phase. The team is measuring how Bertha responds while rotating through heavy loads of compacted sand. Last week, a fixed steel arm in the front end broke and needed a one-day repair. ... This week’s two-day push would leave the nose of the drill just short of the north edge of the concrete vault, dug in 2014 so STP could reach and lift the 4million-pound front end for repairs. The winning bid from STP called for the tunnel to be completed this month.

After being blocked by an obstruction ("the object") which left it idle just over two years ago, repair work has continued on Bertha, Seattle's enormous tunnel-boring machine. Now, reports KOMO News and The Seattle Times, Bertha is once again ready to work. From The Times' coverage: Tuesday morning's push of one and a half feet provided Seattle Tunnel Partners (STP) enough space behind Bertha’s drive motors to fasten the next concrete ring at the 1,085-foot mark of the planned 9,270-foot tube. Chris Dixon, STP project manager, is calling this a testing phase. The team is measuring how Bertha responds while rotating through heavy loads of compacted sand. Last week, a fixed steel arm in the front end broke and needed a one-day repair. ... This week’s two-day push would leave the nose of the drill just short of the north edge of the concrete vault, dug in 2014 so STP could reach and lift the 4million-pound front end for repairs. The winning bid from STP called for the tunnel to be completed this month.

After being blocked by an obstruction ("the object") which left it idle just over two years ago, repair work has continued on Bertha, Seattle's enormous tunnel-boring machine. Now, reports KOMO News and The Seattle Times, Bertha is once again ready to work. From The Times' coverage: Tuesday morning's push of one and a half feet provided Seattle Tunnel Partners (STP) enough space behind Bertha’s drive motors to fasten the next concrete ring at the 1,085-foot mark of the planned 9,270-foot tube. Chris Dixon, STP project manager, is calling this a testing phase. The team is measuring how Bertha responds while rotating through heavy loads of compacted sand. Last week, a fixed steel arm in the front end broke and needed a one-day repair. ... This week’s two-day push would leave the nose of the drill just short of the north edge of the concrete vault, dug in 2014 so STP could reach and lift the 4million-pound front end for repairs. The winning bid from STP called for the tunnel to be completed this month.

Earlier this month, we noted the Perl 6 advent calendar. Now, an anonymous reader writes to note that, right on schedule, and after 15 years of work, Perl 6 has been released. The top two bullet points in the linked description say that the newest Perl "retains the core values of Perl: expressiveness, getting the job done, taking influences from natural language, and pushing the boundaries of language design," and that is "has clean, modern syntax, rooted in familiar constructs but revisiting and revising the things that needed it." However, while it's nice to see Perl 6 reach official release, the team behind it takes pains to note that work goes on: "We will continue to ship monthly releases, which will continue to improve performance and our user’s experience." Further, "[T]his Rakudo release is not considered the primary deliverable for this Christmas; it is the language specification, known as “roast” (Repository Of All Spec Tests), that is considered the primary deliverable."

An anonymous reader writes: Back in February, Sony unloaded the part of its business that built PCs. Now, a year later, competitor Fujitsu is doing the same. The company announced it would be spinning off its PC and mobile business, effective 1 February 2016. Your first reaction was probably, "Fujitsu had a PC and mobile business?" You're not alone, and this is likely why the split is happening. In their press release, they say, "With the ongoing commoditization of ubiquitous products, mainly of PCs and smart phones, it has become increasingly difficult to achieve differentiation, and competition with emerging global vendors has intensified." More simply: they couldn't make a competitive product. Hopefully, this is the start of a trend; the race to zero in the Windows laptop market is finally killing off some of the participants.

An anonymous reader writes: If you participate in social media, you've probably noticed the flood of posts that happen any time a social issue becomes prominent in the news. Whether it's sharing a supportive picture, changing their profile, or signing a petition, users flock to these causes. But are they really doing anything useful? An article from USC Dornsife debates whether this form of "lazy activism" is actually effective in pushing social change. It's been long established that people are surrounded by a "filter bubble" online, where they're only exposed to viewpoints they already agree with. There's also the question of whether liking something on Facebook makes you less likely to contribute to a cause in more substantive ways.

On the other hand, this type of internet activism does do what social networks are designed for: building a community. Strangers with the same views can more easily organize into groups, and groups of a certain size are heard by lawmakers, regardless of their origin. Plus, engaging in small, low-risk activism does make people more likely to engage in further activism with more impact. The real question we need to answer is whether the smaller and more ephemeral groups are doing more good than harm. For now, it's clear that protesting face-to-face is far more effective than gathering in a chat room — but at the same time, hacktivism is growing in popularity as well. It may eventually have a similar effect to sit-ins and picket lines as our culture moves more and more online.

An anonymous reader writes: If you participate in social media, you've probably noticed the flood of posts that happen any time a social issue becomes prominent in the news. Whether it's sharing a supportive picture, changing their profile, or signing a petition, users flock to these causes. But are they really doing anything useful? An article from USC Dornsife debates whether this form of "lazy activism" is actually effective in pushing social change. It's been long established that people are surrounded by a "filter bubble" online, where they're only exposed to viewpoints they already agree with. There's also the question of whether liking something on Facebook makes you less likely to contribute to a cause in more substantive ways.

On the other hand, this type of internet activism does do what social networks are designed for: building a community. Strangers with the same views can more easily organize into groups, and groups of a certain size are heard by lawmakers, regardless of their origin. Plus, engaging in small, low-risk activism does make people more likely to engage in further activism with more impact. The real question we need to answer is whether the smaller and more ephemeral groups are doing more good than harm. For now, it's clear that protesting face-to-face is far more effective than gathering in a chat room — but at the same time, hacktivism is growing in popularity as well. It may eventually have a similar effect to sit-ins and picket lines as our culture moves more and more online.

An anonymous reader writes: On Monday, SpaceX successfully landed its Falcon 9 rocket after launching a group of satellites into orbit. It's a huge breakthrough for the commercial space industry, because reusing rockets will dramatically reduce launch costs. The question now is: by how much? Elon Musk says it takes $60 million to build the Falcon 9, and $200,000 to fuel it. That's a big difference, but we can't expect them to immediately launch the rocket again after refueling it.

"The Falcon 9 experiences major temperature changes during its flights, as well as intense pressures and vibrations from the winds in the atmosphere. These all produce wear-and-tear on the vehicle's hardware — meaning the rocket might need repairs and updates before it can launch again." This kind of refurbishing is why the Space Shuttle ended up being way more expensive than expected. Fortunately, the Falcon 9 is not nearly as complex.

This is now the true test of SpaceX's design talents; if the rocket is built to be durable, then repairs and replacements could keep relaunch costs very low indeed. Steve Poulus, a former NASA project manager, suspects final costs could be driven below a million dollars. That figure would give SpaceX the capability of easily underbidding any competitor for government contracts, not to mention bringing it into affordability for any number of companies who'd like to put a satellite in orbit.

An anonymous reader writes: Commercial drone development has come a long way in the past five years or so, but (as evidenced by the near miss in Italy) they still aren't something you'd want to see crowding our skies. They're not terribly reliable, they have a pretty short range, and they're loud. Clearly, there's an even longer road ahead to turn them into everyday tools. Silicon Valley may seem like a natural hotbed for development, but it turns out North Dakota might end up being where bleeding-edge drone development happens. "North Dakota has spent about $34 million fostering the state's unmanned aerial vehicle business, most notably with a civilian industrial park for drones near Grand Forks Air Force Base. The base, a former Cold War installation, now flies nothing but robot aircraft for the United States military and Customs and Border Protection."

Testing drones in North Dakota, with its wide-open spaces, farms, and oil fields, neatly sidesteps many of the safety and privacy issues facing drones in more populated areas. The state is also fostering drone pilots: "[T]he University of North Dakota, which already trains many of the nation's commercial pilots and the air traffic controllers of some 18 countries, has 200 students learning to fly drones in a four-year program that started in 2009; 61 students have graduated from it. North Dakota State University, in Fargo, has also started teaching drone courses."

Evidently even Forrest Mimms isn't famous enough to fly without hassle when carrying a briefcase full of electronics; he writes at Make about his experiences, both before and after 2001. A relevant slice: After police were called when I was going through security at the San Antonio International Airport and after major problems going through security in Kona, Hawaii, I finally realized the obvious: Most people who don’t make things have no idea how to evaluate homemade equipment. Some are terrified by exposed wires and circuit boards, maybe because of bomb scenes in movies. So I gave up. Now my carryon bag is only half stuffed with electronics; the rest is shipped ahead via FedEx.

New submitter saizai writes: TSA has made electronic strip search mandatory whenever they feel like it. "TSA is updating the AIT PIA to reflect a change to the operating protocol regarding the ability of individuals to opt out of AIT screening in favor of physical screening. While passengers may generally decline AIT screening in favor of physical screening, TSA may direct mandatory AIT screening for some passengers as warranted by security considerations in order to safeguard transportation security." I've filed for an injunction against new TSA policy on mandatory AIT, in my general lawsuit challenging TSA's "orders". The court says TSA will respond to my motion by Tuesday. I'll reply immediately. Hopefully will have it put on hold before January. (Note that "AIT" stands for "Advanced Imaging Technology," the term TSA applies to walk-through body scanners.)

An anonymous reader writes: The hacking crew was not kidding about their Christmas DDoS attacks on Xbox & PSN. This morning the group started warmup attacks on the EA network, taking it down for 3 hours. The attacks were severe enough to take down the network completely, and EA issued apologies on its Twitter account. Phantom Squad is now carrying out DDoS attacks on PSN. Users started reporting outages in small areas around the world.

An anonymous reader writes: Earlier this month, Mozilla announced that Firefox OS smartphones would no longer be sold via carriers. Because the company refused to talk about what's next for Firefox OS, aside from saying it will experiment with "connected devices," many were left simply to speculate as to what could be in the pipeline. Today, we have a leaked document, which Mozilla confirmed is legitimate. My favorite of the concepts is a Raspberry Pi-based keyboard.

itwbennett writes: Earlier this month, Wyndham settled a lawsuit with the FTC over weak security practices that resulted in 3 major data breaches in 2008 and 2009 that compromised the credit card information of more than 619,000 customers and led to more than $10.6 million in fraudulent charges. But all the settlement requires Wyndham to do 'is what any company that handles credit card data is supposed to have been doing for more than a decade, under the Payment Card Industry Data Security Standard (PCI DSS),' writes Taylor Armerding. There was no fine and it seemed as though Wyndham had 'dodged a bullet', says Armerding, But things are not always as they seem. Because the PCI DSS is not a government standard and is not a law 'the case was not about fines for noncompliance, which the FTC doesn't even have the authority to impose,' says Armerding. 'It was instead about power – the authority of the FTC to charge Wyndham with 'unfair and deceptive' practices because of its security flaws.'

An anonymous reader sends the latest update on Eddie Tipton, the man who worked for the Multi-State Lottery Association who was convicted of rigging a lottery game so he could win a $14 million jackpot. BGR reports: "Not too long ago, Eddie Tipton was convicted of hacking into the Multi-State Lottery Association's computer system in order to rig a nearly $17 million jackpot in Iowa. Now comes word that an investigation into Tipton's hacking activities is expanding to include a number of other states. Thus far, lottery officials from Colorado, Wisconsin and Oklahoma have indicated that Tipton may have also gamed lottery jackpots in their respective states. What makes this saga all the more interesting is that Tipton actually used to work at the Multi-State Lottery Association as a security director. In that capacity, Tipton allegedly installed a rootkit onto his company's computer system that influenced the manner in which 'random' numbers were generated. As a result, Tipton was able to calculate and gain access to winning lotto numbers before their public unveiling. With the numbers in tow, authorities claim that Tipton would reveal the winning numbers to friends who would then buy 'winning' lotto tickets and then collect on big paydays."

itwbennett writes: Security researchers and crypto experts now believe that a combination of likely malicious third-party modifications and Juniper's own crypto failures are responsible for the recently disclosed backdoor in Juniper NetScreen firewalls. 'To sum up, some hacker or group of hackers noticed an existing backdoor in the Juniper software, which may have been intentional or unintentional — you be the judge!,' Matthew Green, a cryptographer and assistant professor at Johns Hopkins University wrote in a blog post. 'They then piggybacked on top of it to build a backdoor of their own, something they were able to do because all of the hard work had already been done for them. The end result was a period in which someone — maybe a foreign government — was able to decrypt Juniper traffic in the U.S. and around the world. And all because Juniper had already paved the road.'

An anonymous reader writes: Last week, when a Brazilian judge shut down WhatsApp, it affected roughly half of the country's ~200 million residents. It's not the first time — or the second, or the third — that WhatsApp has faced legal pressure, and Bruce Schneier says it's clear evidence of a "massive power struggle" between internet companies and traditional companies. Central to this struggle is the inability of our lawmakers to quickly and effectively regulate new technologies. He says, "Traditionally, new technologies were adopted slowly over decades. There was time for people to figure them out, and for their social repercussions to percolate through society. Legislatures and courts had time to figure out rules for these technologies and how they should integrate into the existing legal structures. ... This isn't a simple matter of needing government to get out of the way and let companies battle in the marketplace. ... We need a better way of regulating new technologies. That's going to require bridging the gap between technologists and policymakers. Each needs to understand the other — not enough to be experts in each other's fields but enough to engage in meaningful conversations and debates. That's also going to require laws that are agile and written to be as technologically invariant as possible."

theodp writes: Two weeks ago, as the nation's schools 'taught kids to program' with an Hour of Code, Microsoft and others celebrated a 6-year lobbying effort that culminated in the passage of legislation that made Computer Science a core K-12 subject, which the software giant said "will advance some of the goals outlined in Microsoft's National Talent Strategy." But on Tuesday, Computerworld reported that the U.S. Bureau of Labor Statistics has put somewhat of a buzzkill on the learn-to-code party, saying IT jobs will grow 12% over the next decade, although computer programmers will see an 8% decline. "Computer programming can be done from anywhere in the world, so companies sometimes hire programmers in countries where wages are lower," explained the government. The silver lining is that software developers, the largest occupational group in IT, will increase by 17% or 186,600, over this period. The nomenclature here is a little muddy, since "programmers" and "software developers" are often used interchangeably. Here's how they're distinguished in this article: "Programmers are focused on coding and implementing requirements, and that’s why they may be more susceptible to offshoring, in contrast to software developers who may be more engaged with the business, analyzing needs and collaborating with multiple parties."

An anonymous reader writes: In the wake of the discovery of two backdoors on Juniper's NetScreen firewall devices, Cisco Systems has announced that they will be reviewing the software running on their devices, just in case. Anthony Grieco, a Senior Director of the Security and Trust Organization at Cisco, made sure to first point out that the popular networking equipment manufacturer has a "no backdoor" policy. According to Grieco, Although our normal practices should detect unauthorized software, we recognize that no process can eliminate all risk. Our additional review includes penetration testing and code reviews by engineers with deep networking and cryptography experience. The reviewers will be looking for backdoors, hardcoded or undocumented account credentials, covert communication channels and undocumented traffic diversions.

itwbennett writes: Slashdot readers will recall the story posted last week about the misconfiguration of the MongoDB database that powers Hzone, a dating app for the HIV-positive, and the ensuing threat of HIV infection the company hurled at DataBreaches.net, who sent the notification. (Hzone later apologized.) But that's not the end of the story. Among other twists and turns that point to a CEO who was in way over his head, in several emails to Dissent, the admin of DataBreaches.net, Hzone CEO Justin Robert accused Dissent of changing the Hzone user database. But follow-up emails suggest that the company couldn't tell what was accessed or when, as Robert says Hzone doesn't have 'a strong tech team to maintain the site.'