Domain: slashdot.org
Stories and comments across the archive that link to slashdot.org.
Stories · 37,380
-
Cybersecurity Tech Accord: More Than 30 Tech Firms Pledge Not to Assist Governments in Cyberattacks (cybertechaccord.org)
Over 30 major technology companies, led by Microsoft and Facebook, on Tuesday announced what they are calling the Cybersecurity Tech Accord, a set of principles that include a declaration that they will not help any government -- including that of the United States -- mount cyberattacks against "innocent civilians and enterprises from anywhere."
The companies that are participating in the initiative are: ABB, Arm, Avast, Bitdefender, BT, CA Technologies, Cisco, Cloudflare, DataStax, Dell, DocuSign, Facebook, Fastly, FireEye, F-Secure, GitHub, Guardtime, HP Inc., HPE, Intuit, Juniper Networks, LinkedIn, Microsoft, Nielsen, Nokia, Oracle, RSA, SAP, Stripe, Symantec, Telefonica, Tenable, Trend Micro, and VMware.
The announcement comes at the backdrop of a growing momentum in political and industry circles to create a sort of Digital Geneva Convention that commits the entire tech industry and governments to supporting a free and secure internet. The effort comes after attacks such as WannaCry and NotPetya hobbled businesses around the world last year, and just a day after the U.S. and U.K. issued an unprecedented joint alert citing the threat of cyberattacks from Russian state-sponsored actors. The Pentagon has said Russian "trolling" activity increased 2,000 percent after missile strikes in Syria.
Interestingly, Amazon, Apple, Google, and Twitter are not participating in the program, though the Tech Accord says it "remains open to consideration of new private sector signatories, large or small and regardless of sector." -
Cybersecurity Tech Accord: More Than 30 Tech Firms Pledge Not to Assist Governments in Cyberattacks (cybertechaccord.org)
Over 30 major technology companies, led by Microsoft and Facebook, on Tuesday announced what they are calling the Cybersecurity Tech Accord, a set of principles that include a declaration that they will not help any government -- including that of the United States -- mount cyberattacks against "innocent civilians and enterprises from anywhere."
The companies that are participating in the initiative are: ABB, Arm, Avast, Bitdefender, BT, CA Technologies, Cisco, Cloudflare, DataStax, Dell, DocuSign, Facebook, Fastly, FireEye, F-Secure, GitHub, Guardtime, HP Inc., HPE, Intuit, Juniper Networks, LinkedIn, Microsoft, Nielsen, Nokia, Oracle, RSA, SAP, Stripe, Symantec, Telefonica, Tenable, Trend Micro, and VMware.
The announcement comes at the backdrop of a growing momentum in political and industry circles to create a sort of Digital Geneva Convention that commits the entire tech industry and governments to supporting a free and secure internet. The effort comes after attacks such as WannaCry and NotPetya hobbled businesses around the world last year, and just a day after the U.S. and U.K. issued an unprecedented joint alert citing the threat of cyberattacks from Russian state-sponsored actors. The Pentagon has said Russian "trolling" activity increased 2,000 percent after missile strikes in Syria.
Interestingly, Amazon, Apple, Google, and Twitter are not participating in the program, though the Tech Accord says it "remains open to consideration of new private sector signatories, large or small and regardless of sector." -
Cybersecurity Tech Accord: More Than 30 Tech Firms Pledge Not to Assist Governments in Cyberattacks (cybertechaccord.org)
Over 30 major technology companies, led by Microsoft and Facebook, on Tuesday announced what they are calling the Cybersecurity Tech Accord, a set of principles that include a declaration that they will not help any government -- including that of the United States -- mount cyberattacks against "innocent civilians and enterprises from anywhere."
The companies that are participating in the initiative are: ABB, Arm, Avast, Bitdefender, BT, CA Technologies, Cisco, Cloudflare, DataStax, Dell, DocuSign, Facebook, Fastly, FireEye, F-Secure, GitHub, Guardtime, HP Inc., HPE, Intuit, Juniper Networks, LinkedIn, Microsoft, Nielsen, Nokia, Oracle, RSA, SAP, Stripe, Symantec, Telefonica, Tenable, Trend Micro, and VMware.
The announcement comes at the backdrop of a growing momentum in political and industry circles to create a sort of Digital Geneva Convention that commits the entire tech industry and governments to supporting a free and secure internet. The effort comes after attacks such as WannaCry and NotPetya hobbled businesses around the world last year, and just a day after the U.S. and U.K. issued an unprecedented joint alert citing the threat of cyberattacks from Russian state-sponsored actors. The Pentagon has said Russian "trolling" activity increased 2,000 percent after missile strikes in Syria.
Interestingly, Amazon, Apple, Google, and Twitter are not participating in the program, though the Tech Accord says it "remains open to consideration of new private sector signatories, large or small and regardless of sector." -
Cybersecurity Tech Accord: More Than 30 Tech Firms Pledge Not to Assist Governments in Cyberattacks (cybertechaccord.org)
Over 30 major technology companies, led by Microsoft and Facebook, on Tuesday announced what they are calling the Cybersecurity Tech Accord, a set of principles that include a declaration that they will not help any government -- including that of the United States -- mount cyberattacks against "innocent civilians and enterprises from anywhere."
The companies that are participating in the initiative are: ABB, Arm, Avast, Bitdefender, BT, CA Technologies, Cisco, Cloudflare, DataStax, Dell, DocuSign, Facebook, Fastly, FireEye, F-Secure, GitHub, Guardtime, HP Inc., HPE, Intuit, Juniper Networks, LinkedIn, Microsoft, Nielsen, Nokia, Oracle, RSA, SAP, Stripe, Symantec, Telefonica, Tenable, Trend Micro, and VMware.
The announcement comes at the backdrop of a growing momentum in political and industry circles to create a sort of Digital Geneva Convention that commits the entire tech industry and governments to supporting a free and secure internet. The effort comes after attacks such as WannaCry and NotPetya hobbled businesses around the world last year, and just a day after the U.S. and U.K. issued an unprecedented joint alert citing the threat of cyberattacks from Russian state-sponsored actors. The Pentagon has said Russian "trolling" activity increased 2,000 percent after missile strikes in Syria.
Interestingly, Amazon, Apple, Google, and Twitter are not participating in the program, though the Tech Accord says it "remains open to consideration of new private sector signatories, large or small and regardless of sector." -
Apple Is Planning To Launch a News Subscription Service (bloomberg.com)
An anonymous reader shares a report: Apple plans to integrate recently acquired magazine app Texture into Apple News and debut its own premium subscription offering, according to people familiar with the matter. The move is part of a broader push by the iPhone maker to generate more revenue from online content and services. The Cupertino, California company agreed last month to buy Texture, which lets users subscribe to more than 200 magazines for $9.99 a month. Apple cut about 20 Texture staff soon after, according to one of the people. The world's largest technology company is integrating Texture technology and the remaining employees into its Apple News team, which is building the premium service. An upgraded Apple News app with the subscription offering is expected to launch within the next year, and a slice of the subscription revenue will go to magazine publishers that are part of the program, the people said. -
Tesla Temporarily Stops Model 3 Production Line (theverge.com)
An anonymous reader quotes a report from The Verge: Tesla is temporarily stopping production of its Model 3 electric car, amid a long waiting list and several missed targets. The company, however, says the shutdown is intended to resolve some of the problems that have contributed to the numerous delays in getting the cars to hundreds of thousands of reservation holders. The automaker said Monday it would halt production of the Model 3 sedan for 4-5 days at its Fremont, California assembly plant, BuzzFeed reported. Tesla, however, says this is part of a planned period of downtime that was similar to another shutdown in February, and it isn't intended to have an affect on the company's current production targets for the car. "Our Model 3 production plan includes periods of planned downtime in both Fremont and Gigafactory 1," a Tesla spokesperson told The Verge. "These periods are used to improve automation and systematically address bottlenecks in order to increase production rates. This is not unusual and is in fact common in production ramps like this." -
Supreme Court Set To Hear Landmark Online Sales Tax Case (gizmodo.com)
An anonymous reader quotes a report from Gizmodo: On Tuesday, the U.S. Supreme Court will hear arguments in a case that could at least somewhat clarify Donald Trump's complaints about Amazon "not paying internet taxes." It will also decide if those cheap deals on NewEgg are going to be less of a steal. The case concerns the state of South Dakota versus online retailers Wayfront, NewEgg, and Overstock.com in a battle over whether or not state sales tax should apply to all online transactions in the U.S., regardless of where the customer or retailer is located. It promises to have an impact on the internet's competition with brick-and-mortar retailers, as well as continue to address the ongoing legal questions surrounding real-world borders in the borderless world of online. -
New Child Protection Nonprofit Strikes Back At Sex-Negative Approach of FOSTA-SESTA (youcaring.com)
qirtaiba writes: When the FOSTA-SESTA online sex trafficking bill passed last month, it sailed through Congress because there were no child protection organizations that stood against it, and because no member of Congress (with the brave exceptions of Ron Wyden and Rand Paul) wanted to face re-election having opposed a bill against sex trafficking, despite its manifest flaws. In the wake of the law's passage, its real targets -- not child sex traffickers, but adult sex workers and the internet platforms used by them -- have borne the brunt of its effects. Websites like the Erotic Review and Craigslist's personals section have either shut down entirely or for U.S. users, while Backpage.com has been seized, leaving many adult sex workers in physical and financial peril.
A new child protection organization, Prostasia Foundation, has just been announced, with the aim of taking a more sex-positive approach that would allow it to push back against laws that really target porn or sex work under the guise of being child protection laws. Instead, the organization promotes a research-based approach to the prevention of child sexual abuse before it happens. From the organization's press release: "Prostasia Director Jaylen MacLaren is a former child prostitute who used a website like this to screen her clients. She now recognizes those clients as abusers, but she does not blame the website for her suffering. 'I am committed to preventing child sexual abuse, but I don't believe that this should come at the cost of civil liberties and sexual freedom,' Jaylen said. 'I have found ways to express my sexuality in consensual and cathartic ways.'" Nerea Vega Lucio, a member of the group's Advisory Council, said, 'Child protection laws need to be informed by accurate and impartial research, and ensuring that policy makers have access to such research will be a top priority for Prostasia.'" -
New Child Protection Nonprofit Strikes Back At Sex-Negative Approach of FOSTA-SESTA (youcaring.com)
qirtaiba writes: When the FOSTA-SESTA online sex trafficking bill passed last month, it sailed through Congress because there were no child protection organizations that stood against it, and because no member of Congress (with the brave exceptions of Ron Wyden and Rand Paul) wanted to face re-election having opposed a bill against sex trafficking, despite its manifest flaws. In the wake of the law's passage, its real targets -- not child sex traffickers, but adult sex workers and the internet platforms used by them -- have borne the brunt of its effects. Websites like the Erotic Review and Craigslist's personals section have either shut down entirely or for U.S. users, while Backpage.com has been seized, leaving many adult sex workers in physical and financial peril.
A new child protection organization, Prostasia Foundation, has just been announced, with the aim of taking a more sex-positive approach that would allow it to push back against laws that really target porn or sex work under the guise of being child protection laws. Instead, the organization promotes a research-based approach to the prevention of child sexual abuse before it happens. From the organization's press release: "Prostasia Director Jaylen MacLaren is a former child prostitute who used a website like this to screen her clients. She now recognizes those clients as abusers, but she does not blame the website for her suffering. 'I am committed to preventing child sexual abuse, but I don't believe that this should come at the cost of civil liberties and sexual freedom,' Jaylen said. 'I have found ways to express my sexuality in consensual and cathartic ways.'" Nerea Vega Lucio, a member of the group's Advisory Council, said, 'Child protection laws need to be informed by accurate and impartial research, and ensuring that policy makers have access to such research will be a top priority for Prostasia.'" -
New Child Protection Nonprofit Strikes Back At Sex-Negative Approach of FOSTA-SESTA (youcaring.com)
qirtaiba writes: When the FOSTA-SESTA online sex trafficking bill passed last month, it sailed through Congress because there were no child protection organizations that stood against it, and because no member of Congress (with the brave exceptions of Ron Wyden and Rand Paul) wanted to face re-election having opposed a bill against sex trafficking, despite its manifest flaws. In the wake of the law's passage, its real targets -- not child sex traffickers, but adult sex workers and the internet platforms used by them -- have borne the brunt of its effects. Websites like the Erotic Review and Craigslist's personals section have either shut down entirely or for U.S. users, while Backpage.com has been seized, leaving many adult sex workers in physical and financial peril.
A new child protection organization, Prostasia Foundation, has just been announced, with the aim of taking a more sex-positive approach that would allow it to push back against laws that really target porn or sex work under the guise of being child protection laws. Instead, the organization promotes a research-based approach to the prevention of child sexual abuse before it happens. From the organization's press release: "Prostasia Director Jaylen MacLaren is a former child prostitute who used a website like this to screen her clients. She now recognizes those clients as abusers, but she does not blame the website for her suffering. 'I am committed to preventing child sexual abuse, but I don't believe that this should come at the cost of civil liberties and sexual freedom,' Jaylen said. 'I have found ways to express my sexuality in consensual and cathartic ways.'" Nerea Vega Lucio, a member of the group's Advisory Council, said, 'Child protection laws need to be informed by accurate and impartial research, and ensuring that policy makers have access to such research will be a top priority for Prostasia.'" -
New Child Protection Nonprofit Strikes Back At Sex-Negative Approach of FOSTA-SESTA (youcaring.com)
qirtaiba writes: When the FOSTA-SESTA online sex trafficking bill passed last month, it sailed through Congress because there were no child protection organizations that stood against it, and because no member of Congress (with the brave exceptions of Ron Wyden and Rand Paul) wanted to face re-election having opposed a bill against sex trafficking, despite its manifest flaws. In the wake of the law's passage, its real targets -- not child sex traffickers, but adult sex workers and the internet platforms used by them -- have borne the brunt of its effects. Websites like the Erotic Review and Craigslist's personals section have either shut down entirely or for U.S. users, while Backpage.com has been seized, leaving many adult sex workers in physical and financial peril.
A new child protection organization, Prostasia Foundation, has just been announced, with the aim of taking a more sex-positive approach that would allow it to push back against laws that really target porn or sex work under the guise of being child protection laws. Instead, the organization promotes a research-based approach to the prevention of child sexual abuse before it happens. From the organization's press release: "Prostasia Director Jaylen MacLaren is a former child prostitute who used a website like this to screen her clients. She now recognizes those clients as abusers, but she does not blame the website for her suffering. 'I am committed to preventing child sexual abuse, but I don't believe that this should come at the cost of civil liberties and sexual freedom,' Jaylen said. 'I have found ways to express my sexuality in consensual and cathartic ways.'" Nerea Vega Lucio, a member of the group's Advisory Council, said, 'Child protection laws need to be informed by accurate and impartial research, and ensuring that policy makers have access to such research will be a top priority for Prostasia.'" -
Russia Begins Blocking Telegram Messenger (reuters.com)
Russia's state telecommunications regulator said on Monday it had begun blocking access to Telegram messenger after the company refused to comply with an order to give Russian state security access to its users' secret messages (encryption keys). From a report: The watchdog, Roskomnadzor, said in a statement on its website that it had sent telecoms operators a notification about blocking access to Telegram inside Russia. The service, set up by a Russian entrepreneur, has more than 200 million global users and is ranked as the world's ninth most popular mobile messaging app. -
Lawmakers Call FBI's 'Going Dark' Narrative 'Highly Questionable' After Motherboard Shows Cops Can Easily Hack iPhones (vice.com)
Joseph Cox, reporting for Motherboard: This week, Motherboard showed that law enforcement agencies across the country, including a part of the State Department, have bought GrayKey, a relatively cheap technology that can unlock fully up-to-date iPhones. That revelation, cryptographers and technologists said, undermined the FBI's renewed push for backdoors in consumer encryption products. Citing Motherboard's work, on Friday US lawmakers sent a letter to FBI Director Christopher Wray, doubting the FBI's narrative around 'going dark', where law enforcement officials say they are increasingly unable to obtain evidence related to crimes due to encryption. Politico was first to report the letter. "According to your testimony and public statements, the FBI encountered 7,800 devices last year that it could not access due to encryption," the letter, signed by 5 Democrat and 5 Republican n House lawmakers, reads. "However, in light of the availability of unlocking tools developed by third-parties and the OIG report's findings that the Bureau was uninterested in seeking available third-party options, these statistics appear highly questionable," it adds, referring to a recent report from the Justice Department's Office of the Inspector General. That report found the FBI barely explored its technical options for accessing the San Bernardino iPhone before trying to compel Apple to unlock the device. The lawmaker's letter points to Motherboard's report that the State Department spent around $15,000 on a GrayKey. -
Is It Time To Stop Using Social Media? (counterpunch.org)
Slashdot reader Nicola Hahn writes: Bulk data collection isn't the work of a couple of bad apples. Corporate social media is largely predicated on stockpiling and mining user information. As Zuckerberg explained to lawmakers, it's their business model...
While Zuckerberg has offered public apologias, spurring genuine regulation will probably be left to the public. Having said that, confronting an economic sector which makes up one of the country's largest political lobbying blocks might not be a tenable path in the short term.
The best immediate option for netizens may be to opt out of social media entirely.
The original submission links to this call-to-action from Counterpunch: Take personal responsibility for your own social life. Go back to engaging flesh and blood people without tech companies serving as an intermediary. Eschew the narcissistic impulse to broadcast the excruciating minutiae of your life to the world. Refuse to accept the mandate that you must participate in social media in order to participate in society. Reclaim your autonomy. -
Is It Time To Stop Using Social Media? (counterpunch.org)
Slashdot reader Nicola Hahn writes: Bulk data collection isn't the work of a couple of bad apples. Corporate social media is largely predicated on stockpiling and mining user information. As Zuckerberg explained to lawmakers, it's their business model...
While Zuckerberg has offered public apologias, spurring genuine regulation will probably be left to the public. Having said that, confronting an economic sector which makes up one of the country's largest political lobbying blocks might not be a tenable path in the short term.
The best immediate option for netizens may be to opt out of social media entirely.
The original submission links to this call-to-action from Counterpunch: Take personal responsibility for your own social life. Go back to engaging flesh and blood people without tech companies serving as an intermediary. Eschew the narcissistic impulse to broadcast the excruciating minutiae of your life to the world. Refuse to accept the mandate that you must participate in social media in order to participate in society. Reclaim your autonomy. -
'Open Source Initiative' President Interviewed by Linux Journal (linuxjournal.com)
The newly-relaunched Linux Journal just interviewed the Open Source Initiative's president, Simon Phipps. An anonymous reader summarizes the highlights: Phipps collects no salary -- unlike the executive director of the Linux Foundation, who reportedly received over $300,000 in 2010. "We're a very small organization actually", Phipps said. "We have a board of directors of 11 people and we have one paid employee..." But he explains their importance by citing the controversy over Facebook's original licensing for React. "I think prior to that, people felt it was okay for there just to be a license and then for there to be arbitrary additional terms applied. I think that the consensus of the community has moved on from that."
Phipps is proud of the OSI's independence from corporate sponsors. "If you want to join a trade association, that's what the Linux Foundation is there for. You can go pay your membership fees and buy a vote there, but OSI is a 501(c)(3). That's means it's a charity that's serving the public's interest and the public benefit. It would be wrong for us to allow OSI to be captured by corporate interests." The article notes that most issues are resolved publicly, adding that one big concern is "freeware" -- proprietary software offered at no cost but erroenously marketed as open source. "In those cases, OSI definitely will reach out and contact the offending companies, and as Phipps says, 'We do that quite often, and we have a good track record of helping people understand why it's to their business disadvantage to behave in that way.'"
And he's also seeking warmer relations with the Free Software community. "As I've been giving keynotes about the first 20 years and the next ten years of open source, I've wanted to make very clear to people that open source is a progression of the pre-existing idea of free software, that there is no conflict between the idea of free software and the way it can be adopted for commercial or for more structured use under the term open source."
He cites the OSI's collaboration with the Free Software Foundation Europe on amicus briefs in important lawsuits, which he says address "significant issues, including privacy and including software patents...
"I hope in the future that we'll be able to continue cooperating and collaborating." -
Investor Tim Draper Pushes Ballot Measure Splitting California Into 3 States (sfgate.com)
"One of several proposals aiming to split California into multiple smaller states has reportedly reached an important new goal thanks in large part to the efforts of its billionaire champion," writes schwit1. SFGate reports: Venture capitalist Tim Draper, who previously pushed a proposal that would split California into six states, says that his three-state proposal has enough signatures to qualify for the November ballot. On Thursday, Draper said in a statement that the "CAL 3" initiative has collected over 600,000 signatures from Californians who would like to see the state split into three. An initiative needs 366,000 signatures to appear on the ballot. "This is an unprecedented show of support on behalf of every corner of California to create three state governments that emphasize representation, responsiveness, reliability and regional identity," Draper said.
The U.S. Congress would still need to approve the change -- and it's probably useful to remember what happened when Draper tried splitting California into six states. He ultimately turned in 1.3 million signatures for a ballot measure in 2014, "only to see nearly half of them disqualified.
"He ended up about 100,000 short of the valid signatures he needed." -
Yahoo's New Privacy Policy Allows Data-Sharing With Verizon (cnet.com)
"Yahoo is now part of Oath and there is a new Privacy and Terms contract..." warns long-time Slashdot reader DigitalLogic. CNET reports: Oath notes that it has the right to read your emails, instant messages, posts, photos and even look at your message attachments. And it might share that data with parent company Verizon, too... When you dig further into Oath's policy about what it might do with your words, photos, and attachments, the company clarifies that it's utilizing automated systems that help the company with security, research and providing targeted ads -- and that those automated systems should strip out personally identifying information before letting any humans look at your data. But there are no explicit guarantees on that.
The update also warns that Oath is now "linking your activity on other sites and apps with information we have about you, and providing anonymized and/or aggregated reports to other parties regarding user trends." For example, Oath "may analyze user content around certain interactions with financial institutions," and "leverages information financial institutions are allowed to send over email."
Oath does offer a "Privacy Controls" page which includes a "legacy" AOL link letting you opt-out of internet-based advertising that's been targeted "based on your online activities" -- but it appears to be functioning sporadically.
CNET also reports that now Yahoo users are agreeing to a class-action waiver and mutual arbitration. "What it means is if you don't like what the company does with your data, you'll have a hard time suing." -
Jailed Kansas 'Swat' Perpetrator Sneaks Online, Threatens More 'Swats' (kansas.com)
An anonymous reader quotes the Wichita Eagle: Tyler Barriss -- the man charged in a swatting hoax that led to the death of an innocent Wichita man -- apparently got access to the internet from jail for at least 28 minutes [last] Friday and threatened to swat again. "How am I on the Internet if I'm in jail? Oh, because I'm an eGod, that's how," a tweet posted at 9:05 a.m. said.
Other developments in the case:- Another tweet from the Barriss account 19 minutes later asked who was "talking shit," warning "your ass is about to get swatted." And nine minutes later his final tweet from jail bragged, "Y'all should see how much swag I got in here." The county sheriff's office blamed an outside vendor's improper software upgrade to an inmate kiosk, arguing that 14 inmates potentially had full internet access "for less than a few hours."
- 25-year-old Barris is still in jail facing an 11-year prison sentence, noted a Twitter user who responded to the tweets. "This will play well at sentencing when you're pretending to be remorseful and asking the judge for mercy."
- Meanwhile, the Wichita police officer who mistakenly fired the fatal shot that killed a 28-year-old father of two will not face charges. The district attorney concluded that several of the officers closest to victim Andrew Finch thought he reached down to pull up his pants, leaving his right arm hidden from the officers, the Wichita Eagle reports. "The officer who fired the shot, along with some others, thought Finch was reaching for a gun."
- "This shooting should not have happened," said the district attorney. "But this officer's decision was made in the context of the false call." Finch was shot 10 seconds after opening his front door, and his family's civil case against the police department is still going forward.
- Two other gamers involved in the shooting -- including one who allegedly hired Barriss over a $1.50 bet in the game Call of Duty -- have not been charged with a crime.
-
Guinness Strips Billy 'King of Kong' Mitchell's World Records (engadget.com)
In February, legendary arcade gamer Billy Mitchell was accused of cheating his way into the record books for high scores in Donkey Kong. As a result, he was stripped of his 1.062 million score on the Donkey Kong Forums. Today, Kotaku reports that "Guinness World Records will remove Billy Mitchell's Donkey Kong scores, as well as his records for Pac-Man, from their database following Mitchell's disqualification from the Twin Galaxies leaderboards yesterday." From the report: Mitchell is one of the world's most famous arcade game players, at one time holding world records in Donkey Kong, Donkey Kong Jr, and Pac-Man. Yesterday, all of Mitchell's records were removed from the leaderboards at Twin Galaxies, an organization that tracks video game records and high scores. The decision came after a lengthy arbitration process determined that Mitchell used the Multiple Arcade Machine Emulator (MAME) to achieve some record scores that had been said to be performed on arcade machines, a violation of Twin Galaxies' rules. In light of this, Guinness World Records will also remove his records.
"The Guinness World Records titles relating to Mr. Mitchell's highest scores on Donkey Kong have all been disqualified due to Twin Galaxies being our source of verification for these achievements," a representative of Guinness told Kotaku via email. Mitchell did not return request for comment. Guinness continued, "We also recognize records for First perfect score on Pac-Man and Highest score on Pac-Man. Twin Galaxies was the original source of verification for these record titles and in line with their decision to remove all of Mr. Mitchell's records from their system, we have disqualified Mr. Mitchell as the holder of these two records. Guinness World Records will look to update and find the appropriate holder of these records in the next few days." -
Tesla Relied On Too Many Robots To Build the Model 3, Elon Musk Says (theverge.com)
An anonymous reader quotes a report from The Verge: Elon Musk says Tesla relied on too many robots to build the Model 3, which is partly to blame for the delays in manufacturing the crucial mass-market electric car. In an interview with CBS Good Morning, Musk agreed with Tesla's critics that there was over-reliance on automation and too few human assembly line workers building the Model 3. Earlier this month, Tesla announced that it had officially missed its goal of making 2,500 Model 3 vehicles a week by the end of the first financial quarter of this year. It will start the second quarter making just 2,000 Model 3s per week, but the company says it still believes it can get to a rate of 5,000 Model 3s per week at the midway point of 2018. Previously, Tesla has blamed bottlenecks in the production of the Model 3's batteries at the company's Gigafactory for the delays. But in a wide-ranging (and largely positive) interview with CBS's Gayle King, Musk also admits it was Tesla's over-reliance on robots in the production. Musk then said the company needs more people working in the factory and that automation slowed the Model 3 production process. He alluded to a "crazy, complex network of conveyor belts" the company had previously used and said the company eliminated it after it became clear it wasn't working. -
Trade War Or Not, China is Closing the Gap on US in Technology IP Race (reuters.com)
China's rising investment in research and expansion of its higher education system mean that it is fast closing the gap with the United States in intellectual property and the struggle to be the No.1 global technology power, according to patent experts. From a report: While U.S. President Donald Trump's threat of punitive tariffs on high-tech U.S. exports could slow Beijing's momentum, it won't turn back the tide, they say. Washington's allegation that the Chinese have engaged in intellectual property theft over many years -- which is denied by Beijing -- is a central reason for the worsening trade conflict between the U.S. and China. Forecasts for how long it will take for Beijing to close the technological gap vary -- though several patent specialists say it could happen in the next decade.
And China is already leapfrogging ahead in a couple of areas. "With the number of scientists China is training every year it will eventually catch up, regardless of what the U.S. does," said David Shen, head of IP for China at global law firm Allen & Overy. Indeed, IP lawyers now see President Xi Jinping's pledge earlier this week to protect foreign IP rights as projecting confidence in China's position as a leading innovator in sectors such as telecommunications and online payments, as well as its ability to catch up in other areas. -
Google is Testing Self-Destructing Emails in New Gmail (techcrunch.com)
The upcoming update to Gmail might include a feature which would allow users to send emails that expire after a user-defined period of time. From a report: Working on an email service is hard as you have to be compatible with all sorts of email providers and email clients. But it doesn't seem to be stopping Google as the company is now evolving beyond the simple POP3/IMAP/SMTP protocols. Based on those screenshots, expiring emails work pretty much like expiring emails in ProtonMail. After some time, the email becomes unreadable. In the compose screen, there's a tiny lock icon called "confidential mode." It says that the recipient won't be able to forward email content, copy and paste, download or print the email. -
Trump Orders Audit of Postal Service After Suggesting Amazon Is To Blame For Their Troubles (politico.com)
An anonymous reader quotes a report from Politico: President Donald Trump ordered the U.S. Postal Service to undergo an audit Thursday evening, a move that comes after president's repeated claims that Amazon is fleecing the USPS through alleged unfair business practices. "The USPS is on an unsustainable financial path and must be restructured to prevent a taxpayer-funded bailout," reads the executive order Trump issued shortly before 9 p.m. While not explicitly mentioned in the order, the president has hammered e-commerce giant Amazon in recent weeks and alleged that the company and its CEO Jeff Bezos are driving the USPS into the ground. "I am right about Amazon costing the United States Post Office massive amounts of money for being their Delivery Boy," Trump wrote on Twitter on April 3. "Amazon should pay these costs (plus) and not have them bourne by the American Taxpayer." According to the executive order, a task force comprise of top officials, including Treasury Secretary Steven Mnuchin, who would chair the group, will lead the investigation into the USPS' finances and will be required to issue recommendations and a final report no later than early August. -
Nearly 1 In 10 Americans Have Deleted Their Facebook Account Over Privacy Concerns, Survey Claims (bgr.com)
An anonymous reader shares a report from BGR, summarizing a survey from TechPinions: With the outrage surrounding Facebook's privacy policies reaching a fever pitch over the past few weeks, there has been something of an underground movement calling for users to delete their Facebook account altogether. To this point, you may have seen the DeleteFacebook hashtag pop up on any number of social media platforms in recent weeks, including, ironically enough, on Facebook itself. While Zuckerberg last week said that the company hasn't seen a meaningful drop off in cumulative users, a new survey from Creative Strategies claims that 9% of Americans may have deleted their accounts.
The report reads in part: "Privacy matters to our panelists. Thirty-six percent said they are very concerned about it and another 41% saying they are somewhat concerned. Their behavior on Facebook has somewhat changed due to their privacy concerns. Seventeen percent deleted their Facebook app from their phone, 11% deleted from other devices, and 9% deleted their account altogether. These numbers might not worry Facebook too much, but there are less drastic steps users are taking that should be worrying as they directly impact Facebook's business model." -
Trump Proposes Rejoining Trans-Pacific Partnership (nytimes.com)
According to The New York Times, "President Trump told a gathering of farm state lawmakers and governors on Thursday morning that he was directing his advisers to look into rejoining the multicountry trade deal known as the Trans-Pacific Partnership (Warning: source may be paywalled; alternative source)." The TPP was a contentious issue during the 2016 presidential election as both Democrats and Republicans attacked it. After signaling during the election that he would pull out of the trade deal "on day one" of his presidency, Trump followed through with his plans. From the report: Rejoining the 11-country pact could be a significant change in fortune for many American industries that stood to benefit from the trade agreement's favorable terms and Republican lawmakers who supported the pact. The deal, which was negotiated by the Obama administration, was largely viewed as a tool to prod China into making the type of economic reforms that the United States and others have long wanted. Both Democrats and Republicans attacked the deal during the president campaign, but many business leaders were disappointed when Mr. Trump withdrew from the agreement, arguing that the United States would end up with less favorable terms attempting to broker an array of individual trade pacts and that scrapping the deal would empower China.
Mr. Trump's decision to reconsider the deal comes as the White House tries to find ways to protect the agriculture sector, which could be badly damaged by the president's trade approach. The risk of an escalating trade war with China has panicked American farmers and ranchers, who send many of their products abroad. China has responded to Mr. Trump's threat of tariffs on as much as $150 billion worth of Chinese goods by placing its own tariffs on American pork, and threatening taxes on soybeans, sorghum, corn and beef. Many American agriculturalists maintain that the easiest way to help them is to avoid a trade war with China in the first place. And many economists say the best way to combat a rising China and pressure it to open its market is through multilateral trade deals like the Trans-Pacific Partnership, which create favorable trading terms for participants. -
Uber's 2016 Breach Affected More Than 20 Million US Users (bloomberg.com)
An anonymous reader quotes a report from Bloomberg: A data breach in 2016 exposed the names, phone numbers and email addresses of more than 20 million people who use Uber's service in the U.S., authorities said on Thursday, as they chastised the ride-hailing company for not revealing the lapse earlier. The Federal Trade Commission said Uber failed to disclose the leak last year as the agency investigated and sanctioned the company for a similar data breach that happened in 2014. "After misleading consumers about its privacy and security practices, Uber compounded its misconduct," said Maureen Ohlhausen, the acting FTC chairman. She announced an expansion of last year's settlement with the company and said the new agreement was "designed to ensure that Uber does not engage in similar misconduct in the future."
In the 2016 breach, intruders in a data-storage service run by Amazon.com Inc. obtained unencrypted consumer personal information relating to U.S. riders and drivers, including 25.6 million names and email addresses, 22.1 million names and mobile phone numbers, and 607,000 names and driver's license numbers, the FTC said in a complaint. Under the revised settlement, Uber could be subject to civil penalties if it fails to notify the FTC of future incidents, and it must submit audits of its data security, the agency said. -
A Wanted Man in China Has Been Caught Because of Facial Recognition Software (fastcompany.com)
An anonymous reader writes: The man was reportedly caught after facial recognition software running on cameras at a concert identified him, reports AbacusNews. That's despite there being over 50,000 people attending the concert, which took place in Nanchang, China. Law enforcement in the country has increasingly been turning to facial recognition software to surveil the public for persons of interest. -
Apple Starts Alerting Users That It Will End 32-Bit App Support On the Mac (techcrunch.com)
An anonymous reader quotes a report from TechCrunch: Tomorrow at midnight PT, Apple will begin issuing an alert box when you open a 32-bit app in MacOS 10.13.4. It's a one-time (per app) alert, designed to help MacOS make the full transition to 64-bit. At some unspecified time in the future, the operating system will end its support for 32-bit technology meaning those apps that haven't been updated just won't work. That time, mind you, is not tomorrow, but the company's hoping that this messaging will help light a fire under users and developers to upgrade before that day comes. Says the company on its help page, "To ensure that the apps you purchase are as advanced as the Mac you run them on, all future Mac software will eventually be required to be 64-bit." As the company notes, the transition's been a long time coming. The company started making it 10 or so years ago with the Power Mac G5 desktop, so it hasn't exactly been an overnight ask for developers. Of course, if you've got older, non-supported software in your arsenal, the eventual end-of-lifing could put a severe damper on your workflow. For those users, there will no doubt be some shades of the transition from OS 9 to OS X in all of this. -
Netflix Pulls Out of Cannes Following Rule Change (variety.com)
Netflix and Cannes are breaking up, at least for now. On Wednesday, Netflix chief Ted Sarandos said that the streaming platform won't be sending any films to the prestigious French festival, formally severing the strained relationship between the two power players. The decision was a long time coming, after Cannes established a rule that forbade films without a theatrical distribution plan from its competition. From, a report: In an exclusive interview with Variety, Netflix's chief content officer says that the festival sent a clear message with a new rule that bans any films without theatrical distribution in France from playing in competition. Netflix could screen some of its upcoming movies out of competition, but Sarandos says that doesn't make sense for the streaming service. "We want our films to be on fair ground with every other filmmaker," Sarandos says. "There's a risk in us going in this way and having our films and filmmakers treated disrespectfully at the festival. They've set the tone. I don't think it would be good for us to be there."
Netflix made a big splash at the prestigious film festival last year with two movies that showed in competition: Bong Joon-ho's "Okja" and Noah Baumbach's "The Meyerowitz Stories." But after the 2017 announcement, French theaters owners and unions protested the inclusion of these films to Thierry Fremaux, the artistic director of Cannes. Netflix was amenable to having their movies play on big screens in France, but a law in the country requires movies to not appear in home platforms for 36 months after their theatrical release. -
Tesla Issues Strongest Statement Yet Blaming Driver For Deadly Autopilot Crash (abc7news.com)
Tesla has released its strongest statement yet blaming the driver of a Tesla Model X that crashed on Autopilot almost three weeks ago. The driver, Walter Huang, died March 23rd in Mountain View when his Model X on Autopilot crashed headfirst into the safety barrier section of a divider that separates the carpool lane from the off-ramp to the left. Huang was an Apple engineer and former EA Games employee. ABC7News reports: Tesla confirmed its data shows Walter Huang was using Autopilot at the time of the crash, but that his hands were off the wheel for six seconds right before impact. Tesla sent Dan Noyes a statement Tuesday night that reads in part, "Autopilot requires the driver to be alert and have hands on the wheel... the crash happened on a clear day with several hundred feet of visibility ahead, which means that the only way for this accident to have occurred is if Mr. Huang was not paying attention to the road." The family's lawyer believes Tesla is blaming Huang to distract from the family's concern about the car's Autopilot.
Here is the full statement from Tesla: "We are very sorry for the family's loss. According to the family, Mr. Huang was well aware that Autopilot was not perfect and, specifically, he told them it was not reliable in that exact location, yet he nonetheless engaged Autopilot at that location. The crash happened on a clear day with several hundred feet of visibility ahead, which means that the only way for this accident to have occurred is if Mr. Huang was not paying attention to the road, despite the car providing multiple warnings to do so. The fundamental premise of both moral and legal liability is a broken promise, and there was none here. Tesla is extremely clear that Autopilot requires the driver to be alert and have hands on the wheel. This reminder is made every single time Autopilot is engaged. If the system detects that hands are not on, it provides visual and auditory alerts. This happened several times on Mr. Huang's drive that day. We empathize with Mr. Huang's family, who are understandably facing loss and grief, but the false impression that Autopilot is unsafe will cause harm to others on the road. NHTSA found that even the early version of Tesla Autopilot resulted in 40% fewer crashes and it has improved substantially since then. The reason that other families are not on TV is because their loved ones are still alive." -
The Personality Traits That Put You At Risk For Smartphone Addiction (washingtonpost.com)
Zorro shares a report from The Washington Post: When the Trump-affiliated firm Cambridge Analytica obtained data on tens of millions of Facebook users, it used the "Big 5" or "Five Factor Model" personality test to target them with ads designed to influence their votes in the 2016 election. The test scores people on five traits -- openness, conscientiousness, extroversion, agreeableness and neuroticism -- and was used in the election to predict the way a voter would respond to an advertisement. But the Big 5 can predict a lot more -- including how likely you are to even use Facebook or any other social media (Warning: source may be paywalled; alternative source).
That's because the way you score on the test can tell you how likely you are to become addicted to your screen. Research shows that people who score high on neuroticism, low on conscientiousness, and low on agreeableness are more likely to become addicted to social media, video games, instant messaging, or other online stimuli. Studies have also found that extraverts are more likely to become addicted to cellphone use than introverts. Some of the correlations make sense. Less agreeable people may be more apt to immerse themselves in technology because it does not require the kind of friendly interactions that real life does. Neurotic people have been shown to spend more time online because it validates their desire to belong or be part of a group. Conscientious people are less impulsive and therefore more able to control and organize their time. But then it gets complicated. Because according to a new study out of the State University of New York at Binghamton, specific combinations of those personality traits can mitigate or exaggerate one's propensity to addiction. -
'Fuchsia Is Not Linux': Google Publishes Documentation Explaining Their New OS (xda-developers.com)
An anonymous reader quotes a report from XDA Developers: You've probably seen mentions of the Fuchsia operating system here and there since it has been in development for almost 2 years. It's Google's not-so-secretive operating system which many speculate will eventually replace Android. We've seen it grow from a barely functional mock-up UI in an app form to a version that actually boots on existing hardware. We've seen how much importance Google places on the project as veteran Android project managers are starting to work on it. But after all of this time, we've never once had either an official announcement from Google about the project or any documentation about it -- all of the information thus far has come as a result of people digging into the source code.
Now, that appears to be changing as Google has published a documentation page called "The Book." The page aims to explain what Fuchsia, the "modular, capability-based operating system" is and is not. The most prominent text on that page is a large section explaining that Fuchsia is NOT Linux, in case that wasn't clear already. Above that are several readme pages explaining Fuchsia's file systems, boot sequence, core libraries, sandboxing, and more. The rest of the page has sections explaining what the Zircon micro-kernel is and how the framework, storage, networking, graphics, media, user interface, and more are implemented. -
'Fuchsia Is Not Linux': Google Publishes Documentation Explaining Their New OS (xda-developers.com)
An anonymous reader quotes a report from XDA Developers: You've probably seen mentions of the Fuchsia operating system here and there since it has been in development for almost 2 years. It's Google's not-so-secretive operating system which many speculate will eventually replace Android. We've seen it grow from a barely functional mock-up UI in an app form to a version that actually boots on existing hardware. We've seen how much importance Google places on the project as veteran Android project managers are starting to work on it. But after all of this time, we've never once had either an official announcement from Google about the project or any documentation about it -- all of the information thus far has come as a result of people digging into the source code.
Now, that appears to be changing as Google has published a documentation page called "The Book." The page aims to explain what Fuchsia, the "modular, capability-based operating system" is and is not. The most prominent text on that page is a large section explaining that Fuchsia is NOT Linux, in case that wasn't clear already. Above that are several readme pages explaining Fuchsia's file systems, boot sequence, core libraries, sandboxing, and more. The rest of the page has sections explaining what the Zircon micro-kernel is and how the framework, storage, networking, graphics, media, user interface, and more are implemented. -
'Fuchsia Is Not Linux': Google Publishes Documentation Explaining Their New OS (xda-developers.com)
An anonymous reader quotes a report from XDA Developers: You've probably seen mentions of the Fuchsia operating system here and there since it has been in development for almost 2 years. It's Google's not-so-secretive operating system which many speculate will eventually replace Android. We've seen it grow from a barely functional mock-up UI in an app form to a version that actually boots on existing hardware. We've seen how much importance Google places on the project as veteran Android project managers are starting to work on it. But after all of this time, we've never once had either an official announcement from Google about the project or any documentation about it -- all of the information thus far has come as a result of people digging into the source code.
Now, that appears to be changing as Google has published a documentation page called "The Book." The page aims to explain what Fuchsia, the "modular, capability-based operating system" is and is not. The most prominent text on that page is a large section explaining that Fuchsia is NOT Linux, in case that wasn't clear already. Above that are several readme pages explaining Fuchsia's file systems, boot sequence, core libraries, sandboxing, and more. The rest of the page has sections explaining what the Zircon micro-kernel is and how the framework, storage, networking, graphics, media, user interface, and more are implemented. -
Mark Zuckerberg Denies Knowledge of Non-Consensual Shadow Profiles Facebook Has Been Building of Non-Users For Years
It has been widely reported that Facebook builds profile of people even if they have never signed up for its services. However, in a hearing with the House Energy & Commerce Committee on Wednesday, when New Mexico Representative Ben Lujan asked Facebook CEO Mark Zuckerberg if he was aware of the so-called practice of building "shadow profiles", Zuckerberg denied knowledge of it. Here's the exchange: Lujan: Facebook has detailed profiles on people who have never signed up for Facebook, yes or no?
Zuckerberg: Congressman, in general we collect data on people who have not signed up for Facebook for security purposes to prevent the kind of scraping you were just referring to [reverse searches based on public info like phone numbers].
Lujan: So these are called shadow profiles, is that what they've been referred to by some?
Zuckerberg: Congressman, I'm not, I'm not familiar with that.
Lujan: I'll refer to them as shadow profiles for today's hearing. On average, how many data points does Facebook have on each Facebook user?
Zuckerberg: I do not know off the top of my head.
Lujan: Do you know how many points of data Facebook has on the average non-Facebook user?
Zuckerberg: Congressman, I do not know off the top of my head but I can have our team get back to you afterward.
Lujan: It's been admitted by Facebook that you do collect data points on non-[Facebook users]. My question is, can someone who does not have a Facebook account opt out of Facebook's involuntary data collection?
Zuckerberg: Anyone can turn off and opt out of any data collection for ads, whether they use our services or not but in order to prevent people from scraping public information ... we need to know when someone is repeatedly trying to access our services. -
Microsoft Removes Antivirus Registry Key Check for All Windows Versions (bleepingcomputer.com)
Microsoft has decided to remove a mandatory "registry key requirement" it introduced in the aftermath of the Meltdown and Spectre vulnerability disclosure. BleepingComputer: Microsoft used this registry key to prevent Windows updates from being installed on computers running antivirus software incompatible with the Meltdown and Spectre patches. Antivirus vendors were supposed to create this registry key on users' computers to signal that they've updated their product and will not interfere with Microsoft's patches. This was a big issue because incompatible antivirus products would crash and BSOD Windows systems. [...] The OS maker removed the registry key check for Windows 10 computers last month, in March, and has announced yesterday that the key is no longer necessary for other Windows operating system versions -- 7, 8, 8.1, Server 2008, and Windows Server 2012. -
Microsoft Removes Antivirus Registry Key Check for All Windows Versions (bleepingcomputer.com)
Microsoft has decided to remove a mandatory "registry key requirement" it introduced in the aftermath of the Meltdown and Spectre vulnerability disclosure. BleepingComputer: Microsoft used this registry key to prevent Windows updates from being installed on computers running antivirus software incompatible with the Meltdown and Spectre patches. Antivirus vendors were supposed to create this registry key on users' computers to signal that they've updated their product and will not interfere with Microsoft's patches. This was a big issue because incompatible antivirus products would crash and BSOD Windows systems. [...] The OS maker removed the registry key check for Windows 10 computers last month, in March, and has announced yesterday that the key is no longer necessary for other Windows operating system versions -- 7, 8, 8.1, Server 2008, and Windows Server 2012. -
Microsoft Removes Antivirus Registry Key Check for All Windows Versions (bleepingcomputer.com)
Microsoft has decided to remove a mandatory "registry key requirement" it introduced in the aftermath of the Meltdown and Spectre vulnerability disclosure. BleepingComputer: Microsoft used this registry key to prevent Windows updates from being installed on computers running antivirus software incompatible with the Meltdown and Spectre patches. Antivirus vendors were supposed to create this registry key on users' computers to signal that they've updated their product and will not interfere with Microsoft's patches. This was a big issue because incompatible antivirus products would crash and BSOD Windows systems. [...] The OS maker removed the registry key check for Windows 10 computers last month, in March, and has announced yesterday that the key is no longer necessary for other Windows operating system versions -- 7, 8, 8.1, Server 2008, and Windows Server 2012. -
AV1 Beats x264 and Libvpx-Vp9 in Practical Use Case (facebook.com)
An anonymous reader shares a blog post by Facebook engineer: We tested AV1 (a new open-source, royalty-free media codec) under conditions that closely match the most common real-world use cases for Facebook video. Our test examined AV1's performance vs. practical open source video encoders that can be deployed to a practical production system, rather than merely testing efficiency vs. standard reference software encoders (i.e., H.264/AVC Joint Model or JM). By structuring the test this way, we were able to show how the codec will perform in a true production environment compared with current widely used alternatives, such as x264 and libvpx-vp9.
Our testing shows AV1 surpasses its stated goal of 30% better compression than VP9, and achieves gains of 50.3%, 46.2% and 34.0%, compared to x264 main profile, x264 high profile and libvpx-vp9, respectively. The new codec requires longer encoding times vs. current alternatives, however, due to increased complexity. Our tests were conducted primarily with Standard Definition (SD) and High Definition (HD) video files, because those are currently the most popular video formats on Facebook. But because AV1's performance increased as video resolution increased, we conclude the new compression codec will likely deliver even higher efficiency gains with UHD/4K and 8K content. -
Facebook Data Collected By Quiz App Included Private Messages (nytimes.com)
In addition to the public profile data of up to 87 million Facebook users, political data firm Cambridge Analytica also reportedly harvested people's private messages, too (Warning: source may be paywalled; alternative source). The New York Times reports: On Monday, Facebook began informing people whose data may have been compromised by Cambridge Analytica through an app developed by the researcher Aleksandr Kogan. In its notifications, Facebook said that while the information harvested was largely limited to what was on people's public profiles, "a small number of people" also shared information from their Facebook timeline, posts and messages. Facebook did not specify how many people's messages were gathered and said it was taking as broad a view as possible when notifying people that their data may have been taken. -
Theranos Lays Off Almost All of Its Remaining Workers (marketwatch.com)
A few months ago, Theranos laid off almost half of its workforce as it struggled to recover from the backlash generated when the company failed to provide accurate results to patients using its proprietary blood test technology. Now, according to people familiar with the matter, the company is laying off most of its remaining workforce in a last-ditch effort to preserve cash and avert or at least delay bankruptcy for a few more months. MarketWatch reports: Tuesday's layoffs take the company's head count from about 125 employees to two dozen or fewer, according to people familiar with the matter. As recently as late 2015, Theranos had about 800 employees. Elizabeth Holmes, the Silicon Valley firm's founder and chief executive officer, announced the layoffs at an all-employee meeting at Theranos's offices in Newark, Calif. on Tuesday, less than a month after settling civil fraud charges with the U.S. Securities and Exchange Commission. Under the SEC settlement, Holmes was forced to relinquish her voting control over the company she founded 15 years ago as a 19-year-old Stanford dropout, give back a big chunk of her stock, and pay a $500,000 penalty. She also agreed to be barred from being an officer or director in a public company for 10 years. -
Firefox Follows Chrome and Blocks the Loading of Most FTP Resources (bleepingcomputer.com)
Mozilla says it will follow in the steps of Google Chrome and start blocking the loading of FTP subresources inside HTTP and HTTPS pages. From a report: By FTP subresources, we refer to files loaded via the FTP protocol inside img, script, or iframe tags that have a src="ftp://". FTP links placed inside normal angle bracket links or typed directly in the browser's address bar will continue to work. The reasoning is that FTP is an insecure protocol that doesn't support modern encryption techniques and will inherently break many other built-in browser security and privacy features, such as HSTS, CSP, XSA, or others. Furthermore, many malware distribution campaigns often rely on compromising FTP servers and redirecting or downloading malware on users' computers via FTP subresources. Mozilla engineers say FTP subresource blocking will ship with Firefox 61, currently scheduled for release on June 26. -
Facebook Launches Bug Bounty Program To Report Data Thieves (cnet.com)
Facebook on Tuesday launched a data abuse bug bounty program, just hours ahead of CEO Mark Zuckerberg's testimony to the Senate judiciary and commerce committees in Washington, DC. The bug bounty program is asking for people to report any apps that abuse data on Facebook, and it offers a reward based on how severe the abuse is. From a report: "While there is no maximum, high impact bug reports have garnered as much as $40,000 for people who bring them to our attention," Collin Greene, Facebook's head of product security, said in a post. The new program comes almost a month after the New York Times and the UK's Observer and Guardian papers revealed that Cambridge Analytica, a voter profiling firm, took advantage of a Facebook app to siphon off personal information on 87 million people. The scandal has fanned the flames of a backlash against Facebook by lawmakers and users. -
Facebook Launches Bug Bounty Program To Report Data Thieves (cnet.com)
Facebook on Tuesday launched a data abuse bug bounty program, just hours ahead of CEO Mark Zuckerberg's testimony to the Senate judiciary and commerce committees in Washington, DC. The bug bounty program is asking for people to report any apps that abuse data on Facebook, and it offers a reward based on how severe the abuse is. From a report: "While there is no maximum, high impact bug reports have garnered as much as $40,000 for people who bring them to our attention," Collin Greene, Facebook's head of product security, said in a post. The new program comes almost a month after the New York Times and the UK's Observer and Guardian papers revealed that Cambridge Analytica, a voter profiling firm, took advantage of a Facebook app to siphon off personal information on 87 million people. The scandal has fanned the flames of a backlash against Facebook by lawmakers and users. -
Oregon Becomes Second State To Pass a Net Neutrality Law (katu.com)
An anonymous reader quotes a report from KATU: Oregon Gov. Kate Brown signed a bill Monday withholding state business from internet providers who throttle traffic, making the state the second to finalize a proposal aimed at thwarting moves by federal regulators to relax net neutrality requirements. The bill stops short of actually putting new requirements on internet service providers in the state, but blocks the state from doing business with providers that offer preferential treatment to some internet content or apps, starting in 2019. The move follows a December vote by the Federal Communications Commission repealing Obama-era rules that prohibited such preferential treatment, referred to generally as throttling, by providers like AT&T, Comcast, and Verizon. Brown's signature makes the state the second to enact such legislation, according to the National Conference of State Legislatures. It also stakes out the state's claim to a moderate approach, compared to others: Five weeks to the day before Brown, Washington State Gov. Jay Inslee signed a bill in his state to directly regulate providers there. The prohibition, which restricts with whom the state may contract for internet services, applies to cities and counties, but exempts areas with only a single provider. -
Backpage Founders Charged With Money Laundering, Aiding Prostitution (theverge.com)
Federal authorities have charged the two founders of classified site Backpage.com, along with five other employees, with laundering money and facilitating prostitution. According to The Washington Post, the Justice Department claims Backpage took "consistent and concerted action" to knowingly allow ads for illegal sex work. The indictment alleges that "virtually every dollar flowing into Backpage's coffers represents the proceeds of illegal activity." The Verge reports: Law enforcement agencies seized Backpage's servers last week, and co-founder Michael Lacey was charged in a sealed 93-count indictment, which has now been revealed. Lacey, as well as his co-founder James Larkin, were already charged with violating California money laundering laws, although a judge threw out state-level pimping charges. Beyond Lacey and Larkin, the Backpage indictment includes charges against the site's chief financial officer, operations manager, assistant operations manager, and marketing director. It also charges the executive vice president of one of Backpage's parent companies. Backpage CEO Carl Ferrer, who was previously charged with pimping in California, was not charged in this indictment. The Justice Department claims Backpage's owners tried to cover up the fact that most of its "adult services" ads involved prostitution, and that Backpage allowed child sex traffickers to keep ads on the site as long as they deleted age-related keywords. The indictment also claims that Backpage disguised payments for illegal services by having customers funnel money to foreign bank accounts or apparently unrelated companies, or by transferring funds into cryptocurrency. These federal chargers are reportedly unrelated to the Stop Enabling Sex Traffickers Act, a bill that would make website operators liable for illegal content posted to their sites. The bill is currently awaiting Trump's signature. -
Northrop Grumman, Not SpaceX, Reported To Be at Fault For Loss of Top-Secret Zuma Satellite (cnbc.com)
Northrop Grumman built and operated the components that failed during the controversial January launch of the U.S. spy satellite known as Zuma, WSJ reported over the weekend. From a report: Two independent investigations, made up of federal and industry officials, pointed to Northrop's payload adapter as the cause of the satellite's loss, the report said, citing people familiar with the probes. The payload adapter is a key part of deploying a satellite in orbit, connecting the satellite to the upper stage of a rocket. Zuma is believed to have cost around $3.5 billion to develop, according to the report. The satellite was funded through a process that received a lesser degree of oversight from Congress compared with similar national security-related satellites, industry officials said. -
'Erotic Review' Blocks US Internet Users To Prepare For Government Crackdown (arstechnica.com)
An anonymous reader quotes a report from Ars Technica: A website that hosts customer reviews of sex workers has started blocking Internet users in the United States because of forthcoming changes in U.S. law. Congress recently passed the Stop Enabling Sex Traffickers Act bill (SESTA), and President Trump is expected to sign it into law. SESTA will make it easier to prosecute websites that host third-party content that promotes or facilitates prostitution, even in cases when the sex workers aren't victims of trafficking. After Congress approved the bill, Craigslist removed its "Personals" section and Reddit removed some sex-related subreddits. The Erotic Review (TER) has followed suit by blocking any user who appears to be visiting the website from the United States.
"As a result of this new law, TER has made the difficult decision to block access to the website from the United States until such time as the courts have enjoined enforcement of the law, the law has been repealed or amended, or TER has found a way to sufficiently address any legal concerns created by the new law," the website's home page says in a notice to anyone who accesses the site from a US location. The Erotic Review explained in an FAQ why it blocked US-based users even before SESTA takes effect. (The bill is also known as the Allow States and Victims to Fight Online Sex Trafficking Act, or FOSTA.) "TER has always operated within the law, and it takes SESTA seriously," the FAQ says. "Because we do not know when SESTA will be signed into law, TER wants to be certain that it is in compliance with the statute the moment it becomes effective." TER can still be accessed outside the U.S., and U.S.-based users can still access the site via a VPN service. "Non-U.S. are asked to agree to a disclaimer, which requires users to agree to 'report suspected exploitation of minors and/or human trafficking' and that they 'will not access TER from a Prohibited Country,'" reports Ars. -
'Erotic Review' Blocks US Internet Users To Prepare For Government Crackdown (arstechnica.com)
An anonymous reader quotes a report from Ars Technica: A website that hosts customer reviews of sex workers has started blocking Internet users in the United States because of forthcoming changes in U.S. law. Congress recently passed the Stop Enabling Sex Traffickers Act bill (SESTA), and President Trump is expected to sign it into law. SESTA will make it easier to prosecute websites that host third-party content that promotes or facilitates prostitution, even in cases when the sex workers aren't victims of trafficking. After Congress approved the bill, Craigslist removed its "Personals" section and Reddit removed some sex-related subreddits. The Erotic Review (TER) has followed suit by blocking any user who appears to be visiting the website from the United States.
"As a result of this new law, TER has made the difficult decision to block access to the website from the United States until such time as the courts have enjoined enforcement of the law, the law has been repealed or amended, or TER has found a way to sufficiently address any legal concerns created by the new law," the website's home page says in a notice to anyone who accesses the site from a US location. The Erotic Review explained in an FAQ why it blocked US-based users even before SESTA takes effect. (The bill is also known as the Allow States and Victims to Fight Online Sex Trafficking Act, or FOSTA.) "TER has always operated within the law, and it takes SESTA seriously," the FAQ says. "Because we do not know when SESTA will be signed into law, TER wants to be certain that it is in compliance with the statute the moment it becomes effective." TER can still be accessed outside the U.S., and U.S.-based users can still access the site via a VPN service. "Non-U.S. are asked to agree to a disclaimer, which requires users to agree to 'report suspected exploitation of minors and/or human trafficking' and that they 'will not access TER from a Prohibited Country,'" reports Ars.