Slashdot

An anonymous reader quotes a report from TechCrunch: Stripe is in talks to acquire stablecoin platform Bridge for a whopping $1 billion, according to Forbes (paypalled). The talks are reportedly in advanced stages, although nothing has been finalized. Bridge, co-founded by Coinbase alumni Zach Abrams and Sean Yu, has built an API that helps companies accept stablecoins. The pair raised $58 million from investors like Index Ventures and Sequoia Capital, according to PitchBook. If the deal with Stripe goes through, it would be a huge jump from Bridge's $200 million valuation, as well as being Stripe's largest acquisition to date.Read more of this story at Slashdot.

The blockchain-based identity verification company founded by Sam Altman is now called "World." It also unveiled a new version of the "Orb" biometric devices the company uses to scan users' eyes. CoinTelegraph reports: World, as it's now known, also revealed a slew of other updates including a new version of its Orb biometric scanning devices, new options for identity verification and partnership integrations with popular apps including FaceTime, WhatsApp, and Zoom. [...] The new Orb, powered by Nvidia hardware, will be more efficient and "five times" more powerful than its predecessor with a smaller footprint and fewer parts. The company also said the new Orb would eventually be available in self-service kiosks in some markets. World also announced that users will soon be able to verify their identity through methods other than the firm's Orb hardware. Through a program called World ID Credentials, the company says users with NFC-enabled government issued passports will allow them to verify their identity on the World app. Another major announcement came in the form of World ID Deep Face, a service the company claims has "solved deepfakes." According to the company, its software can be implemented into just about any app where video can be uploaded or streamed to determine whether videos featuring verified persons are real or have been faked using AI. Finally, the company also announced that so far 15 million users have signed up for its World app service; among them, seven million are verified.Read more of this story at Slashdot.

AWS CEO Matt Garman has harsh words for remote workers: return to the office or quit. TechCrunch: The Amazon executive recently told employees who don't like the new five-day in-person work policy that, "there are other companies around," presumably companies they can work for remotely, Reuters reported on Thursday. Amazon's top boss, Andy Jassy, told employees last month that there will be a full return-to-office starting in 2025, an increase from three days for roughly the last year.Read more of this story at Slashdot.

An anonymous reader quotes a report from The Verge: Donald Trump said Apple CEO Tim Cook called him to discuss the billions of dollars that Apple has been fined in the European Union. Trump made the statement during his appearance on the PBD Podcast -- and said that he won't let the EU "take advantage" of US companies like Apple if reelected. "Two hours ago, three hours ago, he [Cook] called me," Trump said. "He said the European Union has just fined us $15 billion... Then on top of that, they got fined by the European Union another $2 billion." In March, the EU fined Apple around $2 billion after finding that Apple used its dominance to restrict music streaming apps from telling customers about cheaper subscription deals outside the App Store. The EU later won its fight to make Apple pay $14.4 billion in unpaid taxes. "He [Cook] said something that was interesting," Trump said. "He said they're using that to run their enterprise, meaning Europe is their enterprise. "I said, 'That's a lot... But Tim, I got to get elected first, but I'm not going to let them take advantage of our companies -- that won't, you know, be happening.'" Trump has talked to several Big Tech executives over the past several months. "During an interview this week, Trump said he spoke with Google CEO Sundar Pichai to complain about all the 'bad stories' the search engine shows about him," notes The Verge. "Elon Musk recently spoke at a Trump rally in Pennsylvania, while Meta CEO Mark Zuckerberg called Trump over the summer 'a few times,' according to the former president."Read more of this story at Slashdot.

During its MAX event yesterday, Adobe teased some experimental photo and video editing tools for PhotoShop and Premiere Pro. There are a total of nine features, which include being able to rotate vector images, produce sound effects from text descriptions, and generate images in various shapes and sizes. Engadget reports: [W]e'll start with Project Perfect Blend for PS, which improves natural blending and makes shadow casting more realistic, creating more lifelike images. Project Clean Machine removes photo flashes, fireworks and objects blocking the camera's view. One feature that stands out is Project In Motion, which lets users transform custom shape animations into video by entering a prompt, while Project Know How is a content authenticator tool that can search for a video file's source online. Project Turntable lets users rotate 2D vector art in 3D, thereby allowing the 2D vector art to face a direction of their choice. The generative AI model fills in any blanks to create presentable 3D vector art. Another standout tool is Project Super Sonic, which generates sound effects via prompts or clicking on objects in a video. The latter method can create sounds without typing prompts into the generative AI model. Project Super Sonic seems helpful for people looking to design the sounds they want. Adobe is also working on Microsoft Copilot integration in Project Scenic. This tool creates 3D scene layouts using Copilot prompts, and the camera and objects in the layout can be tweaked. Project Remix A Lot leverages generative AI to create images in various shapes and sizes, all fully editable. In other words, users can "remix" creations into shapes they like, including unusual ones. Finally, we have Project Hi-Fi. With this tool, it's possible to transform sketches and concepts into high-quality images. These images can easily be dragged into PhotoShop for editing.Read more of this story at Slashdot.

Google's NotebookLM app has been updated to let you generate custom podcasts from almost any source material. The AI software is also dropping the "experimental" tag. Wired reports: To make an AI podcast using NotebookLM, open up the Google Labs website and start a New Notebook. Then, add any source documents you would like to be used for the audio output. These can be anything from files on your computer to YouTube links. Next, when you click on the Notebook guide, you'll now see the option to generate a deep dive as well as the option to customize it first. Choose Customize and add your prompt for how you'd like the AI podcast to come out. The software suggests that you consider what sections of the sources you'd like highlighted, larger topics you want further explored, or different intended audiences who you want the message to reach. One tip [Raiza Martin, who leads the NotebookLM team inside of Google Labs] shares for trying out the new feature is to generate the Audio Overview without changes, and while you're listening to this first iteration, write down any burning questions you have or topics you wish it expanded on. Afterwards, use these notes as a launching pad to create your prompts for NotebookLM and regenerate that AI podcast with your interests in mind. [...] Yes, Google's NotebookLM might flatten the specifics of a big document or get some details mixed up, but being able to generate more personalized podcasts from disparate sources truly does feel like a transformation -- and luckily nothing like turning into a giant bug. You can view some examples of AI-generated podcasts here.Read more of this story at Slashdot.

An anonymous reader quotes a report from BleepingComputer: A new ClickFix campaign is luring users to fraudulent Google Meet conference pages showing fake connectivity errors that deliver info-stealing malware for Windows and macOS operating systems. ClickFix is a social-engineering tactic that emerged in May, first reported by cybersecurity company Proofpoint, from a threat actor (TA571) that used messages impersonating errors for Google Chrome, Microsoft Word, and OneDrive. The errors prompted the victim to copy to clipboard a piece of PowerShell code that would fix the issues by running it in Windows Command Prompt. Victims would thus infect systems with various malware such as DarkGate, Matanbuchus, NetSupport, Amadey Loader, XMRig, a clipboard hijacker, and Lumma Stealer. In July, McAfee reported that the ClickFix campaigns were becoming mode frequent, especially in the United States and Japan. A new report from Sekoia, a SaaS cybersecurity provider, notes that ClickFix campaigns have evolved significantly and now use a Google Meet lure, phishing emails targeting transport and logistics firms, fake Facebook pages, and deceptive GitHub issues. According to the French cybersecurity company, some of the more recent campaigns are conducted by two threat groups, the Slavic Nation Empire (SNE) and Scamquerteo, considered to be sub-teams of the cryptocurrency scam gangs Marko Polo and CryptoLove.Read more of this story at Slashdot.

In a memo from CEO Sundar Pichai, Google said it is moving the team behind the Gemini app to its AI research lab DeepMind. The shift "will improve feedback loops, enable fast deployment of our new models in the Gemini app," said Pichai. Reuters reports: Gemini is Google's most advanced AI technology, developed by DeepMind. The Gemini app is the direct consumer interface to the latest Gemini models. The Gemini app team, led by Sissie Hsiao, will join Google DeepMind under the leadership of its CEO Demis Hassabis. Google also announced that Prabhakar Raghavan, who has led the company's products including search, ads and commerce will become chief technologist and work closely with Pichai. Raghavan's role as lead of the Knowledge and Information team will be taken up by Nick Fox, who has closely worked with Google on its AI product roadmap.Read more of this story at Slashdot.

404 Media journalist and Slashdot contributor samleecole shares a report: After an exodus of employees at Automattic who disagreed with CEO Matt Mullenweg's recently divisive legal battle with WP Engine, he's upped the ante with another buyout offer -- and a threat that employees speaking to the press should "exit gracefully, or be fired tomorrow with no severance." Earlier this month, Mullenweg posed an "Alignment Offer" to all of his employees: Stand with him through a messy legal drama that's still unfolding, or leave. "It became clear a good chunk of my Automattic colleagues disagreed with me and our actions," he wrote on his personal blog on Oct. 3, referring to the ongoing dispute between himself and website hosting platform WP Engine, which Mullenweg called a "cancer to WordPress" and accusing WP Engine of "strip-mining the WordPress ecosystem. In the last month, he and WP Engine have volleyed cease and desist letters, and WP Engine is now suing Automattic, accusing Mullenweg of extortion and abuse of power. "I'm certain that Matt hasn't eliminated all dissenters, because I'm still there, but I expect that within the next six to twelve months, everyone who didn't leave but wasn't 'aligned' will have found a new job and left on their own terms," a current employee told 404 Media. "My personal morale has never been lower at this job, and I know that I'm not alone." Mullenweg himself, in internal screenshots viewed by 404 Media, acknowledged that his first "Alignment Offer" did not make everyone who disagreed with him leave the company. On Wednesday Mullenweg posted another ultimatum in Automattic's Slack: a new offer that would include nine months of compensation (up from the previous offer of six months). "We have technical means to identify the leaker as well, that I obviously can't disclose," he continued. "So this is their opportunity to exit gracefully, or be fired tomorrow with no severance and probably a big legal case for violating confidentiality agreement."Read more of this story at Slashdot.

The FBI has arrested an Alabama man who is accused of hacking the Securities and Exchange Commission's X account in January. From a report: The indictment alleges that 25-year-old Eric Council Jr. worked with co-conspirators to take control of the account and post a fake message from SEC Chair Gary Gensler about Bitcoin ETFs that caused the price of Bitcoin to jump by more than $1,000 momentarily. To carry out this scheme, Council is accused of creating a fake ID using the information belonging to the person in control of the SEC's X account. He then allegedly tricked AT&T into providing a SIM card with the victim's phone number and install it into a new iPhone he purchased. Finally, Council was able to gain control of the SEC's account using recovery authentication codes sent to the number, and later return the iPhone to the Apple Store where he'd bought it.Read more of this story at Slashdot.

An anonymous reader quotes a report from MacRumors: Apple today reminded developers that the EU trader requirement in the European Union is now being enforced. Developers who distribute apps in the EU will now need to share information that includes address, phone number, and email address on the EU App Store. Submitting updates for apps on the App Store in the European Union now requires trader information that's added via App Store Connect, with those details shared on each developer's App Store page. App updates can no longer be submitted without trader information, and starting on February 17, 2025, apps that do not have a trader status set will be removed from the App Store in the EU until trader status is provided and verified. The Digital Services Act (DSA) in the European Union requires Apple to verify and display trader contact information for all "traders" who are distributing apps on the App Store in the European Union. Developers who make money from the App Store through either an upfront purchase price or through in-app purchases are considered traders, regardless of size. Contact information for each developer that is considered a trader will be publicly available, and there will undoubtedly be some developers that are unhappy with the requirement. Independent developers and small companies may not have dedicated business addresses and phone numbers to provide, and will likely be reluctant to provide their personal contact information. You can learn more about the requirements on Apple's website.Read more of this story at Slashdot.

In a press release today, the FCC said it is requiring all mobile phones sold in the U.S. to be compatible with hearing aids. TechCrunch reports: The FCC has not yet issued a specific timeline for compliance, only noting that the rules will be fully in effect "after a transition period." The rules discourage handset makers from instituting proprietary Bluetooth coupling, which could limit device compatibility with over-the-counter hearing aids. Under the new rules, companies will be required to note on their website if a given handset is compatible with hearing aids. Two years ago, the FDA announced that hearing aids would no longer require a prescription. The agency also recently approved Apple AirPods as hearing aids.Read more of this story at Slashdot.

Chipmaker Qualcomm has indefinitely paused production and support of its Snapdragon Developer Kit for Windows, citing quality concerns. Qualcomm says the product "has not met our usual standards of excellence." The cancellation comes shortly after the recent launch of over 30 Snapdragon X-series powered PCs.Read more of this story at Slashdot.

The business world's favourite software program enters its 40th year. The Economist: Excel has featured in plenty of workplace blunders -- though its defenders will be quick to blame human error. The financial world is littered with tales of costly spreadsheet errors. Excel has also been blamed for botching gene names in over a third of genomics papers (because it labelled them as dates); underreporting covid-19 cases in England (because it only had a limited number of rows in which to record the results); and disrupting the trial of January 6th rioters in America (because sensitive information was left in hidden cells). Such snafus have not dented Excel's dominance. Might artificial intelligence (AI) steal its crown? With whizzy new tools powered by the technology promising to make data analysis easier, the familiar grid of numbers and calculations could soon feel outdated. Rather than replacing spreadsheets, though, AI might make them even better. Last month Microsoft introduced an AI assistant for Excel which lets users crunch data using natural-language prompts. Excel, and its faithful, aren't ready to be filtered out just yet.Read more of this story at Slashdot.

schwit1 writes: The Department of Defense wants technology so it can fabricate online personas that are indistinguishable from real people. The United States' secretive Special Operations Command is looking for companies to help create deepfake internet users so convincing that neither humans nor computers will be able to detect they are fake, according to a procurement document reviewed by The Intercept. The plan, mentioned in a new 76-page wish list by the Department of Defense's Joint Special Operations Command, or JSOC, outlines advanced technologies desired for country's most elite, clandestine military efforts. "Special Operations Forces (SOF) are interested in technologies that can generate convincing online personas for use on social media platforms, social networking sites, and other online content," the entry reads.Read more of this story at Slashdot.

More than half the world's food production will be at risk of failure within the next 25 years as a rapidly accelerating water crisis grips the planet, unless urgent action is taken to conserve water resources and end the destruction of the ecosystems on which our fresh water depends, experts have warned in a landmark review. From a report: Half the world's population already faces water scarcity, and that number is set to rise as the climate crisis worsens, according to a report from the Global Commission on the Economics of Water published on Thursday. Demand for fresh water will outstrip supply by 40% by the end of the decade, because the world's water systems are being put under "unprecedented stress," the report found. The commission found that governments and experts have vastly underestimated the amount of water needed for people to have decent lives. While 50 to 100 litres a day are required for each person's health and hygiene, in fact people require about 4,000 litres a day in order to have adequate nutrition and a dignified life. For most regions, that volume cannot be achieved locally, so people are dependent on trade -- in food, clothing and consumer goods -- to meet their needs. Some countries benefit more than others from "green water," which is soil moisture that is necessary for food production, as opposed to "blue water" from rivers and lakes. The report found that water moves around the world in "atmospheric rivers" which transport moisture from one region to another.Read more of this story at Slashdot.

An anonymous reader shares a report: Starting on October 14, 2024, news outlets including Yahoo and NME reported that year-over-year, the U.S. vinyl market was down 33 percent. The data for these articles came from a weekly report from Billboard called "Market Watch," which automatically updates with data provided by the company Luminate. Amid the vinyl revolution, this news signified a shift in buyer habits: a sales decline among vinyl for the first time in 17 years. On October 15, Discogs contacted Chris Muratore, director of partnerships at Luminate, who confirmed that the reported data is incorrect. Vinyl sales are actually up 6.2 percent. Billboard has since added language to their "Market Watch" report, clearing up the error. Luminate has been the gold standard for physical music sales numbers for decades. However, at the beginning of this year, the company changed its reporting process, frustrating many record store owners and industry personnel.Read more of this story at Slashdot.

South Korea will prepare stronger measures in a bid to prevent overseas leaks of business secrets amid intensifying competition for advanced technologies, the finance minister said on Thursday. From a report: "We will prevent illegal leaks of advanced technologies to raise the global competitiveness of our companies and strengthen technology leadership," Minister Choi Sang-mok said. The government will set up a "big data" system aimed at preventing technology leaks at the patent agency and introduce new regulations to ensure stronger punishment for culprits, Choi said. He did not specify what the stronger penalties would be under the new regulations. In the past five years, there have been 97 attempts to leak business secrets to a foreign country, with 40 of them in the semiconductor industry, according to the National Intelligence Service.Read more of this story at Slashdot.

An anonymous reader shares a report: Impact, an app that describes itself as "AI-powered infrastructure for shaping and managing narratives in the modern world," is testing a way to organize and activate supporters on social media in order to promote certain political messages. The app aims to summon groups of supporters who will flood social media with AI-written talking points designed to game social media algorithms.In video demos and an overview document provided to people interested in using a prototype of the app that have been viewed by 404 Media, Impact shows how it can send push notifications to groups of supporters directing them at a specific social media post and provide them with AI-generated text they can copy and paste in order to flood the replies with counter arguments.Read more of this story at Slashdot.

An anonymous reader quotes a report from Hackread: The United States Department of Justice (DoJ) has indicted two Sudanese nationals for their alleged role in operating the hacktivist group Anonymous Sudan. The group claimed fame for conducting "tens of thousands" of large-scale and crippling Distributed Denial of Service attacks (DDoS attacks) targeting critical infrastructure, corporate networks, and government agencies globally. Ahmed Salah Yousif Omer, 22, and Alaa Salah Yusuuf Omer, 27, stand accused of conspiracy to damage protected computers. Ahmed Salah faces additional charges for damaging protected computers. The duo is believed to have controlled Anonymous Sudan, which, since early 2023, launched attacks on high-profile entities such as ChatGPT, UAE's Flydubai Airline, London Internet Exchange, Microsoft, and the Israeli BAZAN Group. The group and its clients also utilized the Distributed Cloud Attack Tool (DCAT) to conduct over 35,000 DDoS attacks. These attacks targeted sensitive government and critical infrastructure in the U.S. and globally, including the Department of Justice, Department of Defense, FBI, State Department, and Cedars-Sinai Medical Center in Los Angeles. The attacks, which sometimes lasted days, reportedly caused major damage, often crippling websites and networks. For instance, the attack on Cedars-Sinai Medical Center forced the redirection of incoming patients for eight hours, causing over $10 million in damages to U.S. victims.Read more of this story at Slashdot.

The Cybersecurity Association of China (CSAC) has recommended a security review of Intel's products sold in China, accusing the U.S. chipmaker of harming national security and citing vulnerabilities in its chips. Reuters reports: While CSAC is an industry group rather than a government body, it has close ties to the Chinese state and the raft of accusations against Intel, published in a long post on its official WeChat account, could trigger a security review from China's powerful cyberspace regulator, the Cyberspace Administration of China (CAC). "It is recommended that a network security review is initiated on the products Intel sells in China, so as to effectively safeguard China's national security and the legitimate rights and interests of Chinese consumers," CSAC said. [...] CSAC in its post accuses Intel chips, including Xeon processors used for artificial intelligence tasks, of carrying several vulnerabilities, concluding that Intel "has major defects when it comes to product quality, security management, indicating that it is extremely irresponsible attitude towards customers." The industry group goes on to state that operating systems embedded in all Intel processors are vulnerable to backdoors created by the U.S. National Security Agency (NSA). "This poses a great security threat to the critical information infrastructures of countries all over the world, including China...the use of Intel products poses a serious risk to national security." CSAC said.Read more of this story at Slashdot.

Longtime Slashdot reader schwit1 shares a report from Via Satellite: SpaceX submitted a request to the FCC to modify the second generation, Gen2, of its Starlink satellite system with changes that SpaceX said will allow the constellation to deliver gigabit-speed broadband. SpaceX submitted the filing to the FCC on Oct. 11, and it was made public on Tuesday. The operator wants to make changes to the orbital configuration and operational parameters, and requests modifications for its Gen2 frequency authorization. These modifications "will enable the Gen2 system to deliver gigabit-speed, truly low-latency broadband and ubiquitous mobile connectivity to all Americans and the billions of people globally who still lack access to adequate broadband," Jameson Dempsey, SpaceX director of Satellite Policy said in the filing. For comparison, Starlink's current statement on service speeds is that users typically experience download speeds between 25 and 220 Mbps, and a majority of users experience speeds over 100 Mbps. In 2022, the FCC partially approved SpaceX to deploy a Gen2 Starlink constellation of up to 7,500 satellites for fixed satellite services (FSS) in the Ku- and Ka-bands, then later authorized Gen2 operations using additional frequencies in the E- and V-bands. SpaceX reported that since then, it has deployed more than 3,000 satellites in the Gen2 system and the full Starlink constellation serves more than four million people.Read more of this story at Slashdot.

An anonymous reader quotes a report from Wired: Real-time video deepfakes are a growing threat for governments, businesses, and individuals. Recently, the chairman of the US Senate Committee on Foreign Relations mistakenly took a video call with someone pretending to be a Ukrainian official. An international engineering company lost millions of dollars earlier in 2024 when one employee was tricked by a deepfake video call. Also, romance scams targeting everyday individuals have employed similar techniques. "It's probably only a matter of months before we're going to start seeing an explosion of deepfake video, face-to-face fraud," says Ben Colman, CEO and cofounder at Reality Defender. When it comes to video calls, especially in high-stakes situations, seeing should not be believing. The startup is laser-focused on partnering with business and government clients to help thwart AI-powered deepfakes. Even with this core mission, Colman doesn't want his company to be seen as more broadly standing against artificial intelligence developments. "We're very pro-AI," he says. "We think that 99.999 percent of use cases are transformational -- for medicine, for productivity, for creativity -- but in these kinds of very, very small edge cases the risks are disproportionately bad." Reality Defender's plan for the real-time detector is to start with a plug-in for Zoom that can make active predictions about whether others on a video call are real or AI-powered impersonations. The company is currently working on benchmarking the tool to determine how accurately it discerns real video participants from fake ones. Unfortunately, it's not something you'll likely be able to try out soon. The new software feature will only be available in beta for some of the startup's clients. As Reality Defender works to improve the detection accuracy of its models, Colman says that access to more data is a critical challenge to overcome -- a common refrain from the current batch of AI-focused startups. He's hopeful more partnerships will fill in these gaps, and without specifics, hints at multiple new deals likely coming next year. After ElevenLabs was tied to a deepfake voice call of US president Joe Biden, the AI-audio startup struck a deal with Reality Defender to mitigate potential misuse. [...] "We don't ask my 80-year-old mother to flag ransomware in an email," says Colman. "Because she's not a computer science expert." In the future, it's possible real-time video authentication, if AI detection continues to improve and shows to be reliably accurate, will be as taken for granted as that malware scanner quietly humming along in the background of your email inbox.Read more of this story at Slashdot.

A new study counters the widely held belief that standing desks are good for your health, discovering that it does not reduce the risk of diseases such as stroke and heart failure. In fact, it "found that being on your feet for more than two hours a day may increase the risk of developing problems such as deep vein thrombosis and varicose veins," reports The Guardian. The findings have been published in the International Journal of Epidemiology. From the report: To establish if standing provided any health benefits, the researchers studied data from 83,013 adults who are part of the UK Biobank health records database. These people did not have heart disease at the start of the study and wore devices on their wrists to track movement. The team found that for every extra 30 minutes spent standing beyond two hours, the risk of circulatory disease increased by 11%. Standing was not found to reduce the risk of heart conditions such as stroke, heart failure and coronary heart disease, the researchers said. "The key takeaway is that standing for too long will not offset an otherwise sedentary lifestyle and could be risky for some people in terms of circulatory health," said Dr Matthew Ahmadi, of the University of Sydney's faculty of medicine and health. "We found that standing more does not improve cardiovascular health over the long-term and increases the risk of circulatory issues."Read more of this story at Slashdot.

wiredmikey shares a report from SecurityWeek: Dane Stuckey, the former Chief Information Security Officer (CISO) of big data analytics and AI firm Palantir, has joined OpenAI CISO. Stuckey served in senior security roles at Palantir for more than ten years, including 6 plus years as the company's CISO. In his new role, Stuckey said he would be working alongside Matt Knight, Head of Security at OpenAI. "Security is germane to OpenAI's mission," said Stuckey in a post on X. "It is critical we meet the highest standards for compliance, trust, and security to protect hundreds of millions of users of our products, enable democratic institutions to maximally benefit from these technologies, and drive the development of safe AGI for the world." "I am so excited for this next chapter, and can't wait to help secure a future where AI benefits us all," Stuckey added.Read more of this story at Slashdot.

An anonymous reader quotes a report from Reuters: Robinhood launched its long-awaited desktop platform and added futures and index options trading features to its mobile app on Wednesday, as the fintech firm aims to take market share from traditional brokerages. The 11-year-old commission-free trading app, which became synonymous with mom-and-pop investors in 2021, is now seeking to mature into a full-fledged financial services provider and compete with established brokerages that serve institutional investors. The Menlo Park, California-based company said its desktop trading platform, dubbed "Robinhood Legend," will focus on active traders. The platform, available at no additional cost, will offer advanced trading tools, real-time data, as well as custom and preset layouts.Meanwhile, the app will allow users to trade futures on the benchmark S&P 500 index, oil and bitcoin, among others. Customers can also trade index options. [...] Subscribers to Robinhood's premium Gold tier will be able to trade futures for as low as 50 cents per contract, while non-Gold users will need to pay a commission of 75 cents. You can tune in to the company's live product announcement on YouTube.Read more of this story at Slashdot.

Apple is enhancing its Business Connect tool, allowing companies to customize how they appear in emails, phone calls, and payment interfaces on iPhones. The Verge reports: Each registered business can confirm its info is accurate and add additional details like photos or special offers. Collecting verified, up-to-date business information could be useful for Apple if it ever launches its own search engine or inside features for Apple Intelligence instead of sending users to outside sources like Google, Yelp, or Meta. Branded Mail is a feature businesses can sign up for today before it starts rolling out to users later this year, potentially making emails easier to identify in a sea of unread messages. Additionally, if companies opt into Business Caller ID, Apple will display their name, logo, and department on an iPhone's inbound call screen. This feature should come in handy when you're trying to figure out whether the random number that's calling you is spam, or if it's a legitimate business. It will start rolling out next year. A smaller update coming to Apple's Tap to Pay service will let companies show their logo when accepting payments instead of just displaying a category icon. You can read more about it in Apple's press release.Read more of this story at Slashdot.

According to The Verge, Meta has "begun laying off employees across various departments, including WhatsApp, Instagram, and Reality Labs." From the report: Rather than a mass, companywide layoff, these smaller cuts seem to coincide with reorganizations of specific teams. Some Meta employees have started posting that they've been laid off. Among them is Jane Manchun Wong, who gained notoriety for reporting on unannounced features coming to apps before joining the Threads team in 2023. Meta laid off 11,000 employees in 2022 and then cut 10,000 more people as part of CEO Mark Zuckerberg's "year of efficiency" in 2023. Further reading: Tech Layoffs Highest Since Dot-Com CrashRead more of this story at Slashdot.

The parents of a Massachusetts student are suing his school after he was penalized for using AI in a Social Studies project, claiming it was for research purposes only. The student received a detention and a lower grade, which his parents argue could harm his college prospects. The school is defending its AI policy and fighting to dismiss the case. The Register reports: "The Plaintiff Student will suffer irreparable harm that far outweighs any harm that may befall the Defendants," their filing reads [PDF]. "He is applying to elite colleges and universities given his high level of academic and personal achievement. Early decision and early action applications in a highly competitive admissions process are imminent and start in earnest on October 1, 2024. Absent the grant of an injunction by this Court, the Student will suffer irreparable harm that is imminent." The school, however, is fighting back with a motion to dismiss [PDF] the case. The school argues that RNH, along with his classmates, was given a copy of the student handbook in the Fall of last year, which specifically called out the use of AI by students. The class was also shown a presentation about the school's policy. Students should "not use AI tools during in-class examinations, processed writing assignments, homework or classwork unless explicitly permitted and instructed," the policy states. "RNH unequivocally used another author's language and thoughts, be it a digital and artificial author, without express permission to do so," the school argues. "Furthermore, he did not cite to his use of AI in his notes, scripts or in the project he submitted. Importantly, RNH's peers were not allowed to cut corners by using AI to craft their projects; thus, RNH acted 'unfairly in order to gain an advantage.'"Read more of this story at Slashdot.

An anonymous reader quotes a report from 404 Media: The code that runs Redbox DVD rental machines has been dumped online, and, in the wake of the company's bankruptcy, a community of tinkerers and reverse engineers are probing the operating system to learn how it works. Naturally, one of the first things people did was make one of the machines run Doom. As has been detailed in several great articles elsewhere, the end of Redbox has been a clusterfuck, with pharmacies, grocery stores, and other retailers stuck with very large, heavy, abandoned DVD rental kiosks. To many people's surprise, many of the kiosks remain operational even with the bankruptcy of Redbox's parent company, which has led some people to "liberate" DVDs from the abandoned kiosks. Reddit is full of posts by people who say they have taken dozens of DVDs from kiosks all over the country. Free DVDs is one thing. But in recent days, people have realized that they can, in some cases, get free Redbox kiosks. In an August filing, Walgreens told the bankruptcy court that it has 5,400 abandoned kiosks at its stores, and that it is spending $184,000 a month keeping them powered. "Walgreens should not be required to continue to 'store' and power Redbox kiosks across the country without any form of payment," the company wrote. And so tinkerers and reverse engineers have begun asking stores whether they can take the devices off their hands. There are also posts on Reddit by contractors who are selling them, and I was able to find various Redbox DVD kiosks being advertised for sale on Facebook Marketplace. (There are far more listings on Facebook Marketplace from people who have obtained hundreds or thousands of Redbox DVDs and are now selling them.) Recently the operating system for Redbox kiosks was dumped online, and this community is now probing it to see how it works. In a thread on Mastodon, reverse engineer Foone Turing has been posting some of her findings, which include the fact that Redbox machines contain a file that has "a complete list of titles ever rented, and the email addresses of the people who rented them, and where and when." She also found that the first six and last four digits of credit card information was logged. She said that the records on the particular unit that she was looking at contained 2,471 different transactions and had records on it dating back to 2015. Other reverse engineers have found that Redbox kiosks contained information about the physical locations of every other kiosk. The server that they communicated with is currently offline (because the company is bankrupt). But people have also been putting together information about what different error codes in the software mean (for example, the error code "0020BDT" would happen when an obstruction was detected in the machine). They have also found and dumped service manuals for different parts of the device and have found a few login passwords (one password is "US#1Choice4movierentals"). [...] There has also been discussion about how the machines could be modified to talk to a new server, or whether the operating system could be put on a DIY Redbox device. Another person installed Minecraft on their Redbox. It is still very early days, but, with the bankruptcy of Redbox's parent company, ironically these devices are being given new life.Read more of this story at Slashdot.

Apple's $3,499 Vision Pro is struggling to attract major software-makers to develop apps for the device, a challenge that threatens to slow the progress of the company's biggest new product in a decade. WSJ: New apps released on the Vision Pro every month have slowed since its launch in January. Some of the most successful virtual-reality software developers have so far opted not to build apps for the headset. Without enough killer apps, certain users have found the device less useful and are opting to sell it. "It's a chicken-or-egg problem," said Bertrand Nepveu, who previously worked on the Vision Pro at Apple and is now an investor in this area at Triptyq Capital. Nepveu and app developers think Apple should fund app makers to give them an incentive to port over their existing apps from other headsets or to develop fresh content. This practice has become common in the industry, with headset leader Meta Platforms funding many developers and even buying several app makers. The social-media company is a formidable competitor to Apple, with a market share of all headsets reaching 74% in the second quarter this year, according to Counterpoint Research.Read more of this story at Slashdot.

An anonymous reader shares a report: The big financial moments in life used to be marked with a flourish of a pen. Buying a house. A car. Breakfast. Not anymore. Visa, Mastercard, Discover and American Express dropped the requirement to sign for charges like restaurant checks in 2018. They don't look at our scribbles to verify identity or stop fraud. Taps, clicks and electronic signatures took over the heavy lifting for many everyday purchases -- and many contracts, loan applications and even Social Security forms. The John Hancock was written off as a relic useful mainly to inflate the value of sports memorabilia. But signatures didn't die. We continue to be asked to sign with ink on paper or using fingers on touch screens at many restaurants, bars and other businesses. And people keep signing card receipts out of habit -- even when there is no blank space for it -- because it feels weird not to, payment networks and retail groups say. "Traditions have this odd way of sticking around," said Doug Kantor, general counsel of the National Association of Convenience Stores. Signatures had been used to verify identity and agree to financial terms for centuries. Banks kept records of customer signatures to check against, but the sheer number of transactions and advancements in technology eventually made that impractical. By the 1980s, charges could be processed electronically. Signatures were still used in cases of fraud or stolen cards. Banks could call merchants and ask them to present a signed receipt. Yet given how easy signatures are to forge, they proved limited as a fraud prevention tool. Now there are more sophisticated ways to determine whether cards are stolen or misused, according to Mark Nelsen, global head of consumer payments at Visa.Read more of this story at Slashdot.

An anonymous reader shares a report: Households on individual streets will be targeted with personalised adverts under plans being rolled out by Channel 4. The channel is to use new technology which will allow brands to tailor who sees their advert by enabling them to select a demographic within a specific location down to street level. For example, someone watching Made in Chelsea on Channel 4's streaming service could be served an ad for a fashion brand in a local outlet to them if a particular fashion trend is being discussed. Advertisers can further optimise their campaign by selecting from 26 programme genres, as well as time of day and device the show is being watched on. It forms part of a wider update to Channel 4's streaming platform that the broadcaster hopes could boost revenues by as much as $13m. The company will launch a new private marketplace enabling brands to buy advertising space directly in real-time. This will allow advertisers to amend their campaigns to respond to events, whether that be real-world events such as local weather or developments in fictional storylines within TV shows. Channel 4's new ad targeting also includes more detailed data to track whether a viewer has made a purchase after seeing an ad, as well as new viewer profiles for brands to target.Read more of this story at Slashdot.

AeroGarden, which sells Wi-Fi-connected indoor gardening systems, is going out of business on January 1. While Scotts Miracle-Gro has continued selling AeroGarden products after announcing the impending shutdown, the future of the devices' companion app is uncertain.Read more of this story at Slashdot.

smooth wombat writes: In 2013, James Howell's partner inadvertently threw out a hard drive along with other trash. Unknown to this person, this hard drive contained approximately 8,000 bitcoins. For the past decade Howell has been petitioning the town council of Newport to excavate the landfill in the hope of recovering the drive which would now hold approximately $647 million worth of cryptocurrency. Now he is suing the council in an attempt to force them to let him excavate. Should the hard drive be recovered, Howells thinks there is an 80 percent chance that the coins on it would be retrievable. If it all works out, he has offered the council 10% of the recovered Bitcoin: $65 million worth. But, citing environmental concerns, the council has rejected his proposal to dig through over a decade's worth of garbage. The council issued a report wherein a spokesperson said, "The council has told Mr. Howells multiple times that excavation is not possible under our environmental permit and that work of that nature would have a huge negative environmental impact on the surrounding area. The council is the only body authorized to carry out operations on the site."Read more of this story at Slashdot.

New research challenges assumptions about decision-making, revealing people tend to believe they have sufficient information regardless of actual data at hand. A study by Gehlbach, Robinson, and Fletcher, published earlier this month, found participants consistently overestimated their knowledge when given partial information on a hypothetical school merger scenario. Nearly 90% favored merger when presented pro-merger facts, while only 25% did when given opposing data. However, opinions shifted when full information was provided, suggesting malleability of views despite initial overconfidence. Researchers caution this bias could be exploited in today's fractured media landscape, where partial or misleading information often circulates unchecked.Read more of this story at Slashdot.

In a rather critical analysis of the 2024 Economics Nobel, commentator Noah Smith has questioned the prize's shift back to "big-think" theories. He argues that Acemoglu, Johnson, and Robinson's (the winner of the 2024 Economics Nobel) influential work on institutions and development, while intriguing, lacks robust empirical validation. From his blog: The science prizes rely very heavily on external validity to determine who gets the prize -- your theory or your invention has to work, basically. If it doesn't, you can be the biggest genius in the world, but you'll never get a Nobel. The physicist Ed Witten won a Fields Medal, which is even harder to get than a Nobel, for the math he invented for string theory. But he'll almost certainly never get a Physics Nobel, because string theory can't be empirically tested. The Econ Nobel is different. Traditionally, it's given to economists whose ideas are most influential within the economics profession. If a whole bunch of other economists do research that follows up on your research, or which uses theoretical or empirical techniques you pioneered, you get an Econ Nobel. Your theory doesn't have to be validated, your specific empirical findings can already have been overturned by the time the prize is awarded, but if you were influential, you get the prize. You could argue that this is appropriate for what Thomas Kuhn would call a "pre-paradigmatic" science -- a field that's still looking for a set of basic concepts and tools. But it's been 55 years since they started giving the prize, and that seems like an awfully long time for a field to still be tooling up. Meanwhile, making "influence within the economics profession" the criterion for successful research seems a little too much like a popularity contest. It's how you end up with prizes like the one in 2004, which was given to some macroeconomic theorists whose theory said that recessions are caused by technological slowdowns and that mass unemployment is a voluntary vacation. In recent years, that looked like it might be changing. Often, the prize was given to empirical economists associated with the so-called "credibility revolution" -- basically, quasi-experiments. Those cases include Goldin in 2023, Card/Angrist/Imbens in 2021, and Banerjee/Duflo/Kremer in 2019. And when it was given to theorists, they tended to be game theorists whose theories are very predictive of real-world outcomes -- Milgrom/Wilson in 2020, Hart/Holmstrom in 2016, Tirole in 2014, and Roth/Shapley in 2012. Even when the prize was given to macro -- a field where validity is much harder to establish -- it was given to economists whose theories have seen immediate application to pressing problems of the day, such as Bernanke/Diamond/Dybvig in 2022 and Nordhaus in 2018.In other words, the recent Nobels have made it seem like economics might be becoming more like a natural science, where practical applications and external validity are the ultimate arbiter of the value of research, rather than cultural influence within the economics profession. But this year's prize seems like a step away from that, and back toward the sort of big-think that used to be more popular in the prize's early years.Read more of this story at Slashdot.

Digital River has not paid numerous merchants since midsummer for software and digital products they sold through its MyCommerce platform. The Register: "After over 20 years of partnership with Digital River, Traction Software Ltd has been left feeling as though we've been 'rug pulled,'" Lee Midgley, managing director of Traction Software, told The Register. "For the past three months, we've experienced a complete halt in software sales revenue payments with no support, no direct contact, and only additional terms and conditions designed to delay resolution and extract more money from us. "Astonishingly, Digital River continued to take sales from our loyal customers until we removed them from the order system. It now appears they have no intention of making payments and may be entering a liquidation process under a new CEO who has been involved in similar situations before." The new CEO, Barry Kasoff, was first noted on the e-commerce biz website in August. Kasoff is also listed as the president of Realization Services, "a full-service strategic consulting firm specializing in turnaround management and value enhancement..." The privately-owned, Minnesota-based business appears to have laid off a significant number of employees, presumably the result of what its UK subsidiary describes as cost reduction initiatives implemented in late 2022.Read more of this story at Slashdot.

The U.S. Federal Trade Commission adopted a final rule on Wednesday requiring businesses to make it as easy to cancel subscriptions and memberships as it is to sign up, in the agency's last major rulemaking before the Nov. 5 election. From a report: The "click to cancel" rule requires retailers, gyms and other businesses to get consumers' consent for subscriptions, auto-renewals and free trials that convert to paid memberships. The cancellation method must be "at least as easy to use" as the sign up process. FTC Chair Lina Khan said in an interview that the rule is an overdue response to a rising number of consumer complaints about situations in which it is "extraordinarily easy to sign up for a subscription, but absurdly difficult to cancel." "Companies shouldn't be able to trick you into paying for subscriptions that you don't want," Khan said. The rule prohibits requiring consumers who signed up through an app or a website to go through a chat bot or agent to cancel. For in-person signups, companies must provide means to cancel by phone or online. "The pandemic brought to the surface just how businesses are making people jump through endless hoops," Khan said. Requiring in-person cancellations while the businesses themselves were closed "really highlighted the absurdity of these practices," she said.Read more of this story at Slashdot.

Amazon has unveiled its first color e-reader, the Kindle Colorsoft Signature Edition, priced at $279.99. The 7-inch device, available for preorder with shipments starting October 30th, utilizes E Ink's Kaleido technology and a new display stack. Kevin Keith, head of Kindle products, claims the Colorsoft maintains Kindle's hallmark features while introducing color without compromising performance. The e-reader boasts a 300ppi screen, enhanced LED pixels, and improved light distribution for vivid colors. It offers faster page turns and book openings compared to previous models. The color screen enhances the user interface, allowing for full-color book covers and a more vibrant standby display.Read more of this story at Slashdot.

Amazon said on Wednesday it has signed three agreements on developing the nuclear power technology called small modular reactors, becoming the latest big tech company to push for new sources to meet surging electricity demand from data centers. From a report: Amazon said it will fund a feasibility study for an SMR project near a Northwest Energy site in Washington state. The SMR is planned to be developed by X-Energy. Financial details were not disclosed. Under the agreement, Amazon will have the right to purchase electricity from four modules. Energy Northwest, a consortium of state public utilities, will have the option to add up to eight 80 MW modules, resulting in a total capacity up to 960 MWs, or enough to power the equivalent of more than 770,000 U.S. homes. The additional power would be available to Amazon and utilities to power homes and businesses. "Our agreements will encourage the construction of new nuclear technologies that will generate energy for decades to come," said Matt Garman, CEO of Amazon Web Services. SMRs will have their components built in a factory to reduce construction costs. [...] Amazon said it is also leading a funding round for $500 million to support X-Energy's development of SMRs. Amazon and X-Energy aim to bring more than 5 gigawatts online in the United States by 2039, which the companies call the largest commercial deployment target of SMRs yet. Amazon also signed an agreement with Dominion Energy, opens new tab to explore the development of an SMR project near the utility's existing power station in Virginia. The about 300 megawatt project would help meet power needs in a region where demand is expected to jump 85% in 15 years, Dominion said.Read more of this story at Slashdot.

New submitter king*jojo writes: The owners of WinAmp have just deleted their entire repo one month after uploading the source code to GitHub. Lots of source code, and quite possibly, not all of it theirs. The deletion happened soon after The Register enquired about the seeming inclusion of Shoutcast DNAS code and some Microsoft and Intel codecs.Read more of this story at Slashdot.

An anonymous reader quotes a report from TorrentFreak: Korean game publisher Nexon is using the U.S. legal system to address online copyright infringement. The company obtained a DMCA subpoena that requires Discord to hand over the personal details of suspected pirates. While Discord has shared information in the past, it doesn't plan to cooperate any longer, refusing to play the role of 'anti-piracy police'. [...] The messaging platform wrote that it is prepared to file a motion to quash the subpoena, if needed. It further urged Nexon to withdraw their demands, and cease sending any similar 'defective' subpoenas going forward. To support its stance, Discord made a list of twenty-two general objections and reservations. Among other things, the company wants to protect user privacy and their first amendment right to anonymous speech. "Discord objects to the Requests as infringing its users' decisions to remain anonymous, an aspect of their freedom of speech protected by the First Amendment. The Requests improperly seek to unmask anonymous speakers and consequently compel disclosure of material protected by the First Amendment," it reads. This strongly-worded letter didn't have the desired result, however. Instead of backing off, Nexon doubled down, filing a motion to compel (PDF) at a Texas federal court late last week. The game company refutes Discord's objections and asks the court to enter an order requiring Discord to produce the requested user data. Nexon says that it needs this information to protect its copyrights. "Discord's failure to cooperate discovery has impeded Nexon's ability to discover relevant, non-privileged information that will support its potential claims against the users who have provided access to the infringing material," Nexon writes. While the court has yet to rule on the matter, Discord is expected to file a formal motion to quash the subpoena in response, as indicated in its earlier communications.Read more of this story at Slashdot.

The University of Toronto is constructing a 14-story building using mass timber, one of the largest and most recent projects to employ this innovative building technology. "Mass timber is an appealing alternative to energy-intensive concrete and steel, which together account for almost 15 percent of global carbon dioxide emissions," reports Knowable Magazine. "Though experts are still debating mass timber's role in fighting climate change, many are betting it's better for the environment than current approaches to construction. It relies on wood, after all, a renewable resource." From the report: Today, the tallest mass timber building is the 25-story Ascent skyscraper in Milwaukee, completed in 2022. As of that year, there were 84 mass timber buildings eight stories or higher either built or under construction worldwide, with another 55 proposed. Seventy percent of the existing and future buildings were in Europe, about 20 percent in North America and the rest in Australia and Asia, according to a report (PDF) from the Council on Tall Buildings and Urban Habitat. When you include smaller buildings, at least 1,700 mass timber buildings had been constructed in the United States alone as of 2023. [...] In principle, mass timber is like plywood but on a much larger scale: The smaller pieces are layered and glued together under pressure in large specialized presses. Today, beams up to 50 meters long, usually made of what's called glue-laminated timber, or glulam, can replace steel elements. Panels up to 50 centimeters thick, typically cross-laminated timber, or CLT, replace concrete for walls and floors. These wood composites can be surprisingly strong -- stronger than steel by weight. But a mass timber element must be bulkier to achieve that same strength. As a building gets higher, the wooden supports must get thicker; at some point, they simply take up too much space. So for taller mass timber buildings, including the Ascent skyscraper, architects often turn to a combination of wood, steel and concrete.Read more of this story at Slashdot.

The Euclid mission has revealed the first part of a 3D map of the universe, showcasing 14 million galaxies and tens of millions of stars with unprecedented detail. "The Euclid mission, launched in 2023 and run by the European Space Agency (Esa) with contributions from Nasa, sent its first snapshots in November of that year and in May 2024," reports The Guardian. "The goal of Euclid is to enable the creation of a 3D map in time and space of the universe, in an attempt to elucidate its evolution and, as a result, shed light on the mysterious phenomena of dark energy and dark matter that together make up 95% of the universe." From the report: The newly released data is a mosaic of 208 gigapixels and covers 1% of what will be the final map. The completed map is expected to involve six years of observations and will take in a third of the sky, with observations expected to capture billions of galaxies out to 10 billion light years. [...] Images released by Esa highlight the area of the sky covered by the new mosaic, together with the mosaic itself and zoomed-in views within it. Esa said regions of light blue that can be seen in the mosaic were galactic cirrus clouds that sit between stars in the Milky Way. These wispy clouds, composed of gas and dust, reflect optical light, allowing them to be captured by the mission's super-sensitive visible light camera. Zoom in on the mosaic further and other features can be seen, including the spiral galaxy NGC 2188 and the galaxy cluster Abell 3381. In a view zoomed in 600 times relative to the original mosaic, a distant swirling galaxy is visible in incredible detail.Read more of this story at Slashdot.

An anonymous reader quotes a report from NPR: There's a valley in rural southwest Utah that's become a hub for renewable energy. Dozens of tall white wind turbines whoosh up in the sky. A sea of solar panels glistens in the distance. But the new kid on the block is mostly hidden underground. From the surface, Fervo Energy's Cape Station looks more or less like an oil derrick, with a thin metal tower rising above the sagebrush steppe. But this $2 billion geothermal project, which broke ground last year, is not drilling for gas. It's drilling for underground heat that CEO Tim Latimer believes holds the key to generating carbon-free power -- lots of it. "Just these three well pads alone will produce 100 megawatts of electricity. Around-the-clock, 24/7 electricity," he said. Latimer stood overlooking the project, which is currently under construction, on one of the drill rig's metal platforms 40 feet off the ground. This well is one of the 24 Fervo is in the process of completing at Cape Station to harness the Earth's natural heat and generate electricity. This isn't the type of geothermal that's already active in volcanic hot spots like Iceland or The Geysers project in California. It's called an enhanced geothermal system. Cold water goes down into a well that curves like a hockey stick as it reaches more than 13,000 feet underground. Then the water squeezes through cracks in 400-degree rock. The water heats up and returns to the surface through a second well that runs parallel to the first. That creates steam that turns turbines to produce electricity, and the water gets sent back underground in a closed loop. This horizontal well technique has been pioneered at a $300 million federal research project called Utah FORGE located in this same valley, which has paved the way for private companies to take the tech and run with it. Recent innovations like better drill bits -- made with synthetic diamonds to eat through hard subterranean granite -- have helped Fervo drill its latest well in a quarter of the time that it took just a couple of years ago. That efficiency has meant an 80% drop in drilling costs, Latimer said. Last year, Fervo's pilot project in Nevada used similar techniques to begin sending electricity to a Google data center. And the company's early tests at Cape Station in Utah show the new project can produce power at triple the rate of its Nevada pilot. "This is now a proven tech. That's not a statement you could have made two or three years ago," Latimer said. "Now, it just comes down to how do we get more of these megawatts on the grid so we have a bigger impact?" The report notes that Fervo signed a landmark deal with Southern California Edison, one of the country's largest electric utilities with 15 million customers. "It will send the first 70 megawatts of geothermal juice to the grid in 2026," reports NPR. "By the time the project is fully completed in 2028, this Utah plant will deliver 320 megawatts total -- enough to power 350,000 homes. The project's full output will be 400 megawatts."Read more of this story at Slashdot.

The Register's Jessica Lyons reports: Apple wants to shorten SSL/TLS security certificates' lifespans, down from 398 days now to just 45 days by 2027, and sysadmins have some very strong feelings about this "nightmarish" plan. As one of the hundreds that took to Reddit to lament the proposal said: "This will suck. My least favorite vendor manages something like 10 websites for us, and we have to provide the certs manually every time. Between live and test this is gonna suck." The Apple proposal, a draft ballot measure that will likely go up for a vote among Certification Authority Browser Forum (CA/B Forum) members in the upcoming months, was unveiled by the iThings maker during the Forum's fall meeting. If approved, it will affect all Safari certificates, which follows a similar push by Google, that plans to reduce the max-validity period on Chrome for these digital trust files down to 90 days. ... [W]hile it's generally agreed that shorter lifespans improve internet security overall -- longer certificate terms mean criminals have more time to exploit vulnerabilities and old website certificates -- the burden of managing these expired certs will fall squarely on the shoulders of systems administrators. [...] Even certificate provider Sectigo, which sponsored the Apple proposal, admitted that the shortened lifespans "will no doubt prove a headache for busy IT security teams, juggling with lots of certificates expiring at different times." While automation is often touted as the solution to this problem, sysadmins were quick to point out that some SSL certs can't be automated. "This is somewhat nightmarish," said one sysadmin. "I have about 20 appliance like services that have no support for automation. Almost everything in my environment is automated to the extent that is practical. SSL renewal is the lone achilles heel that I have to deal with once every 365 days."Read more of this story at Slashdot.

Donald Trump's new crypto project, World Liberty Financial, had a rocky start today with frequent website outages during its token sale. According to CNBC, only about 4% of registered investors have bought tokens, and the project sold less than 3% of the 20 billion tokens available. From the report: WLF's website suffered regular and lengthy outages for much of the morning and early afternoon, contributing to a limited number of sales. Only about 4,300 unique walled addresses hold the token as of Tuesday afternoon, according to blockchain data tracked by Etherscan, representing roughly 4% of the total number of people who registered. The platform says it has sold more than 532 million tokens at 15 cents per token. That is less than 3% of the 20 billion tokens made available for public sale. Over the course of the day, the website frequently showed a page saying, "We are under maintenance." The glitchy launch is a potential setback to the Republican presidential nominee with just three weeks until the election. Trump and his family have been touting the project since August, branding it as "The DeFiant Ones," a play on DeFi, which is short for decentralized finance.Read more of this story at Slashdot.

Longtime Slashdot reader mprindle shares a report from BleepingComputer: Cisco has confirmed to BleepingComputer that it is investigating recent claims that it suffered a breach after a threat actor began selling allegedly stolen data on a hacking forum. [...] This statement comes after a well-known threat actor named "IntelBroker" said that he and two others called "EnergyWeaponUser and "zjj" breached Cisco on October 6, 2024, and stole a large amount of developer data from the company. "Compromised data: Github projects, Gitlab Projects, SonarQube projects, Source code, hard coded credentials, Certificates, Customer SRCs, Cisco Confidential Documents, Jira tickets, API tokens, AWS Private buckets, Cisco Technology SRCs, Docker Builds, Azure Storage buckets, Private & Public keys, SSL Certificates, Cisco Premium Products & More!," reads the post to a hacking forum. IntelBroker also shared samples of the alleged stolen data, including a database, customer information, various customer documentation, and screenshots of customer management portals. However, the threat actor did not provide further details about how the data was obtained.Read more of this story at Slashdot.

An anonymous reader quotes a report from Reuters: Global sales of fully electric and plug-in hybrid vehicles rose by an annual 30.5% in September, as China surpassed its record numbers recorded in August and Europe resumed growth, market research firm Rho Motion said on Tuesday. Gains in the U.S. market have been slow and steady in anticipation of the Nov. 5 election, which makes it difficult to predict future trends in the country, data manager Charles Lester told Reuters. EVs -- whether fully electric (BEV) or plug-in hybrids (PHEVs) -- sold worldwide reached 1.69 million in September, Rho Motion data showed. Sales in China jumped 47.9% in September and reached 1.12 million vehicles, while in the United States and Canada they were up 4.3% to 0.15 million. In Europe, EV sales rose 4.2% to 0.3 million units, thanks to a 24% jump in the United Kingdom and gains in Italy, Germany and Denmark, Lester said. In the Chinese market, the penetration rate of BEV and PHEV is growing faster than some expected and sales "could be a record every month until the end of the year", Lester said. He added that Germany's 7% year-on-year growth was "definitely positive news", and that intermediate carbon emission reduction goals set in the EU for next year will test the bloc's market.Read more of this story at Slashdot.