Slashdot

Hyper-volumetric DDoS (distributed denial of service) attacks in the first quarter of 2023 have shifted from relying on compromised IoT devices to leveraging breached Virtual Private Servers (VPS). BleepingComputer reports: According to internet security company Cloudflare, the newer generation of botnets gradually abandoned the tactic of building large swarms of individually weak IoT devices and are now shifting towards enslaving vulnerable and misconfigured VPS servers using leaked API credentials or known exploits. This approach helps the threat actors build high-performance botnets easier and often quicker, which can be up to 5,000 times stronger than IoT-based botnets. "The new generation of botnets uses a fraction of the amount of devices, but each device is substantially stronger," explains Cloudflare in the report. "Cloud computing providers offer virtual private servers to allow start ups and businesses to create performant applications. The downside is that it also allows attackers to create high-performance botnets that can be as much as 5,000x stronger." Cloudflare has been working with key cloud computing providers and partners to crack down on these emerging VPS-based threats and says it has succeeded in taking down substantial portions of these novel botnets.Read more of this story at Slashdot.

Amazon has started charging a fee for some returns made at UPS stores. Insider reports: While customers used to be able to drop off their returns at a UPS Store free of charge, Amazon will now charge a $1 fee if customers have another free-return option the same distance away or closer. Customers can still visit those other drop-off locations -- including Whole Foods, Kohl's, and Amazon stores -- and leave their packages for free. The company already charged customers to have UPS pick up returns from their homes or to drop off packages at UPS Access Points, which are located inside third-party businesses, The Information reported. "We always offer a free option for customers to return their item," Amazon spokesperson Steve Kelly told Insider by email. "If a customer would prefer to return their item at a UPS Store when there is a free option closer to their delivery address, a very small amount of customers may incur a $1 fee."Read more of this story at Slashdot.

An anonymous reader quotes a report from PC Gamer: Back in 2017, we learned about the biggest heist in EVE Online history: A year-long inside job that ultimately made off with an estimated 1.5 triillion ISK, worth around $10,000 in real money. But now another EVE player claims to have pulled off a heist worth significantly more than that -- and with significantly less work involved. The 2017 heist, like so many of EVE's most interesting stories, relied primarily on social engineering: Investing months or years of time into grooming a target before pulling the rug out from beneath them. But redditor Flam_Hill said this job was less bloody: Instead of betrayal, this theft was dependent upon learning and exploiting the "shares mechanic" in EVE Online in order to leverage a takeover of Event Horizon Expeditionaries, a 299-member corporation that was part of the Pandemic Horde alliance. Using a "clean account with a character with a little history," Flan_Hill and an unnamed partner applied for membership in the EHEXP corporation. After the account was accepted, Flan_Hill transferred enough of his shares in the corporation to the infiltrator to enable a call for a vote for a new CEO. The conspirators both voted yes, while nobody else in the corporation voted at all. This was vital, because after 72 hours the two "yes" votes carried the day. The infiltrating agent was very suddenly made CEO, which was in turn used to make Flan_Hill an Event Horizon Expeditionaries director, at which point they removed all the other corporate directors and set to emptying the coffers. They stripped 130 billion ISK from the corporate wallet, but that was only a small part of the haul: Counting all stolen assets, including multiple large ships, Flam_Hill estimated the total value of the heist at 2.23 trillion ISK, which works out to more than $22,300 in real money. ISK can't be legally cashed out of EVE Online, but it can be used to buy Plex, an in-game currency used to upgrade accounts, purchase virtual goods, and activate other services.Read more of this story at Slashdot.

Now Australian online businesses that put up hurdles to make it harder for customers to unsubscribe from their services may face a crackdown from the federal government, with plans to be unveiled later this year. The Guardian reports: The practice of "forced continuity" or "subscription trapping" involves building design features of a website or app in a way that impedes a customer's ability to cancel a particular service. The chair of the Australian Competition and Consumer Commission (ACCC), Gina Cass-Gottlieb, said in a speech to the National Press Club on Wednesday a prohibition on unfair trade practices would help protect consumers and small businesses "exposed to manipulative practices designed to get them to agree to unfair or unfavorable contract terms". The consumer watchdog has called for new powers in Australian consumer law to crack down on such practices since 2017. A spokesperson for the regulator said subscription traps can cause "significant harm to consumers and some small businesses." "These practices make it difficult for consumers to cancel subscriptions after fixed-term periods, with the consequence that many subscriptions roll over to paid subscriptions despite consumers no longer utilizing or wanting them," the spokesperson said. The report cites a discrepancy in the steps required to canceled an Amazon Prime subscription. In Europe, "there is a simple two-step process," reports the Guardian. "But customers in Australia must navigate four convoluted steps, with the wording and location of the cancellation button changing between each screen." This is due to Australia's lack of unfair trading practices laws that exist in Europe and other countries.Read more of this story at Slashdot.

Bankrupt crypto exchange FTX has recovered over $7.3 billion in cash and liquid crypto assets, an increase of more than $800 million since January, the company's attorney said on Wednesday at a U.S. bankruptcy court hearing in Delaware. Reuters reports: FTX attorney Andy Dietderich said the company is starting to think about its future after months of effort devoted to collecting resources and figuring out what went wrong under the leadership of indicted ex-founder Sam Bankman-Fried. Bankman-Fried has pleaded not guilty. "The situation has stabilized, and the dumpster fire is out," Dietderich said. FTX has benefited from a recent rise in crypto prices, Dietderich said. Its total recovery would be valued at $6.2 billion based on crypto prices from November 2022, when it filed for bankruptcy after traders pulled $6 billion from the platform in three days and rival exchange Binance abandoned a rescue deal. As it looks to the future, FTX is negotiating with stakeholders about options for restarting its crypto exchange, and it may make a decision on that in the current quarter, Dietderich said.Read more of this story at Slashdot.

An anonymous reader quotes a report from Ars Technica: An Amsterdam court today ordered one of the largest adult entertainment websites, xHamster, to remove all amateur footage showing recognizable people in the Netherlands who did not consent to be featured on the site. The ruling followed complaints raised by the Expertise Bureau for Online Child Abuse, known as EOKM, which identified 10 videos where xHamster could not verify it had secured permission from amateur performers to post. The court found that this violated European privacy laws and conflicted with a prior judgment from the Amsterdam court requiring porn sites to receive permission from all performers recognizably featured before posting amateur videos. According to EOKM director Arda Gerkens, this ruling will require xHamster to clean up its site and is part of EOKM's larger plan to stop all porn sites from distributing amateur footage without consent. The Amsterdam court has given xHamster three weeks to comply with the order and remove all footage posted without consent, or face maximum fines per video up to $32,000 daily. Lawyers assisting EOKM on the case said the verdict had "major consequences for the entire porn industry," including bigger sites like Pornhub, which already was required to remove 10 million videos, as Vice reported in 2020. "Now it's xHamster's turn," Otto Volgenant of Boekx Advocaten said in EOKM's press release, noting that 30 million people visit xHamster daily. On xHamster, only professional producers and verified members can upload content. The website requires everyone who creates an account to upload an ID and share a selfie to become verified. Before any verified member's upload is made public, xHamster moderators -- a team of 28 who use software approved by EOKM to identify illegal content -- conduct a review to block any illegal content. The website's terms of service require that each uploader provides a consent form from each person recognizably featured in all amateur content. Hammy Media told the court that it had already removed all violating content that EOKM had flagged in the case and provided assurances that moderators check to ensure the uploader is the same person as the performer. However, in his order, judge RA Dudok van Heel wrote that "it is sufficiently plausible for the time being that a large amount of footage is being made public on xhamster.com, of which it cannot be demonstrated that permission has been obtained from the persons who appear recognizable in the picture."Read more of this story at Slashdot.

A report released on Wednesday found that wind and solar energy made up a record high 12% of global electricity generation in 2022. Meanwhile EU countries are lagging behind with wind power expansion. From a report: All renewable energy sources, including nuclear power, made up 39% of global electricity last year according to the report by independent energy think tank Ember. The authors predict a phasedown of gas power along with a reduction of coal-fired power, forecasting that fossil fuel generation will decline by 0.3% this year. Electricity is as clean as ever, with the share of solar power rising by 24% and wind by 17% from 2021. Solar and wind energy now makes up over 10% of electricity in more than 60 countries. Ember's annual global electricity review takes data from 78 countries which account for 93% of global electricity demand. The European Union gets 22% of its electricity from wind and solar power. However, EU countries seem to lag behind global wind energy expansion, logging 9% growth from wind power -- below the global average. "The EU started the race to renewables early but, as the world accelerates, it cannot afford complacency," said Sarah Brown, Ember's Europe program lead. Russia's invasion of Ukraine in February last year caused concern among EU member states about declining fossil fuel imports. The European Commission put forward a plan to increase renewable energy to 45%, an increase of 5% compared to the previous year.Read more of this story at Slashdot.

The European Commission on Wednesday said U.S. chipmaker Broadcom's proposed $61 billion takeover of cloud computing company VMware could restrict competition in the market for certain hardware components. From a report: The Commission said it had informed Broadcom of its objection that the deal could restrict competition in the global markets for the supply of so-called fibre channel host bus adapters (FC HBAs) and storage adapters, by limiting access for competitors' hardware to VMware's software.Read more of this story at Slashdot.

The first beta of Google's Android 14 OS is available to download today, introducing new features focused on system navigation, privacy, performance, and user customization. From a report We already had a good idea of what to expect thanks to the first two developer-only previews, but the beta release is the first opportunity for the general public to test the changes. Gesture navigation has been updated to include a more conspicuous Material You-themed back arrow that adjusts to complement the device's theme or wallpaper. Aside from arguably being more aesthetically pleasing, the updated back arrow is designed to help users better understand Android 14's predictive back gesture experience, which now previews the screen users are navigating to within applications. Android 14 also introduces a new system share sheet -- the page that opens when you tap to share content. This allows developers to add custom app-specific actions to the top of the share menu. Google describes this as a "superior" experience compared to the existing Android share sheets in which share targets (the app you're sharing content to) are always sorted alphabetically. The new share sheet also uses more app signals to determine where the direct share targets that appear toward the top of the page should rank (though it's not clear what exactly those signals are).Read more of this story at Slashdot.

Nvidia announced the GeForce RTX 4070 desktop GPU, a move that anyone who's been putting off a new midrange DIY PC build has likely been eagerly awaiting. It puts the company's impressive Ada Lovelace graphics architecture within grasp for people who don't want to spend $1,000 or more on a huge graphics card. From a report: It'll launch Thursday, April 13, starting at $599 for Nvidia's Founders Edition single-fan model. As is always the case, other manufacturers like Asus, Zotac, Gigabyte, MSI, and others are putting out factory overclocked variants, too. The Verge already has a full review up for the RTX 4070. The RTX 4070 Founders Edition card requires a 650 W power supply, and it connects via two PCIe 8-pin cables (an adapter comes in the box). Alternatively, it can connect via a PCIe Gen 5 cable that supports 300 W or higher. The RTX 4070 won't require a humongous case, as it's a two-slot card that's quite a bit smaller than the RTX 4080. It's 9.6 inches long and 4.4 inches wide, which is just about the same size as my RTX 3070 Ti Founders Edition card. Despite being a lower-end GPU compared to Nvidia's RTX 4080 or RTX 4090, it retains the DLSS 3 marquee selling point. It's the next iteration of Nvidia's upscaling technique that drops the render resolution to make games run better, then uses the GPU's AI cores to intelligently upscale what you see.Read more of this story at Slashdot.

It's not HBO Max -- soon it's just going to be Max. From a report: Warner Bros. Discovery officially announced Max as the new name of its flagship streamer, lopping off the HBO part of the name as it mixes in a big bucket of new content from Discovery+ and other new original series. The company announced the name change at a press event Wednesday, where it also revealed a slate of upcoming projects. The rebuilt Max (on the web at max.com) is set to launch first in the U.S. on May 23, featuring what the company promises will be an average of more than 40 new titles and TV show seasons every month. "Max is the one to watch," WBD CEO David Zaslav said on stage at the event, featuring thousands of shows and movies on the service for every member of the household. According to the service's website, Max will be available in three different versions. The first two plans align with the existing HBO Max pricing, and WBD said current HBO Max customers will not see their pricing change (for now) when the new service debuts. The third tier, "Max Ultimate," expands to up to four streams and includes 4K content. The trio of options are:Max Ad-Lite ($9.99/month or $99.99/year): Two concurrent streams, 1080p HD resolution, no offline downloads, 5.1 surround sound qualityMax Ad Free ($15.99/month or $149.99/year): Two concurrent streams, 1080p HD, up to 30 offline downloads, 5.1 surround sound qualityMax Ultimate Ad Free ($19.99/month or $199.99/year): Four concurrent streams, up to 4K Ultra HD resolution, 100 offline downloads, Dolby Atmos sound qualityRead more of this story at Slashdot.

The U.S. Environmental Protection Agency (EPA) on Wednesday proposed sweeping emissions cuts for new cars and trucks through 2032, a move it says could mean two out of every three new vehicles automakers sell will be electric within a decade. From a report: The proposal, if finalized, represents the most aggressive U.S. vehicle emissions reduction plan to date, requiring 13% annual average pollution cuts and a 56% reduction in projected fleet average emissions over 2026 requirements. The EPA is also proposing new stricter emissions standards for medium-duty and heavy-duty trucks through 2032. The EPA projects the 2027-2032 model year rules would cut more than 9 billion tons of CO2 emissions through 2055 - equivalent to more than twice total U.S. CO2 emissions last year. Automakers and environmentalists say the administration is moving quickly in order to finalize new rules by early 2024 to make it much harder for a future Congress or president to reverse them. Then President Donald Trump rolled back tough emissions limits through 2025 set under Barack Obama but the Biden administration reversed the rollback. The agency estimates net benefits through 2055 from the proposal range from $850 billion to $1.6 trillion. By 2032 the proposal would cost about $1,200 per vehicle per manufacturer, but save an owner more than $9,000 on average on fuel, maintenance, and repair costs over an eight-year period.Read more of this story at Slashdot.

An anonymous reader shares a report: About a year ago, Google announced its Assured Open Source Software (Assured OSS) service, a service that helps developers defend against supply chain security attacks by regularly scanning and analyzing some of the world's most popular software libraries for vulnerabilities. Today, Google is launching Assured OSS into general availability with support for well over a thousand Java and Python packages -- and while Google didn't initially disclose pricing when it first announced the service, the company has now revealed that it will be available for free. Software development has long depended on third-party libraries (which are often maintained by only a single developer), but it wasn't until the industry got hit with a number of high-profile exploits that everyone (including the White House) perked up and started taking software supply chain security seriously. Now, you can't attend an open source conference without hearing about Software Bills of Materials (SBOMs), artifact registries and similar topics. It's no surprise then that Google, which has long been at the forefront of releasing open-source products, launched a service like Assured OSS. Google promises that it will constantly keep these libraries up to date (without creating forks) and continuously scan for known vulnerabilities, do fuzz tests to discover new ones and then fix these issues and contribute these fixes back upstream. The company notes that when it first launched the service with around 250 Java libraries, it was responsible for discovering 48% of the new CVEs for these libraries and subsequently addressing them.Read more of this story at Slashdot.

In the never-ending battle against online impersonation scams, the professional social media platform LinkedIn announced today a set of new verification features that enable users to authenticate aspects of their identities and job histories. From a report: Crucially, users will now have a few different options to verify their identity and current jobs on LinkedIn. That way, if someone tries to make a copycat LinkedIn account, there can be clear differences between the imposter account and the verified profile. LinkedIn facilitates verification in three ways that are all free to individual users. The most low-key option launching today is to verify your current employer by receiving a security code on your work email and entering it into LinkedIn. The social media platform has recently been piloting this work email verification feature with a small group of companies. The second option is to verify your identity on LinkedIn through the airport security service Clear. The authentication company will take your United States phone number and government-issued ID and use the information to verify your name. You have to weigh whether you want to trust a third party like Clear with your personal data, but the option might be particularly appealing if you already use the company for travel verification and they have your data on file anyway. The third verification feature allows users to confirm their name and current employer through the Microsoft Entra Verified ID credential, a workplace identification platform Microsoft launched last year. This option will have a slower rollout, and it will be available at the end of the month to employees at a few dozen pilot companies that are already enrolled in Entra.Read more of this story at Slashdot.

Intel on Wednesday said its chip contract manufacturing division will work with U.K.-based chip designer Arm to ensure that mobile phone chips and other products that use Arm's technology can be made in Intel's factories. From a report: Once the biggest name in chips known as central processing units (CPUs), Intel has seen long seen its technological manufacturing edge blunted by rivals such as Taiwan Semiconductor Manufacturing Co, the world leader in making chips for customers such as Apple. Intel's turnaround strategy hinges in part on opening up its factories to other chip companies, particularly those in mobile phones. It has said firms such as Qualcomm are planning to use its factories for future chip designs. "There is growing demand for computing power driven by the digitization of everything, but until now ... customers have had limited options for designing around the most advanced mobile technology," Pat Gelsinger, Intel's chief executive, said in a statement.Read more of this story at Slashdot.

The company behind the Raspberry Pi line of computers has raised fresh investment from Sony's semiconductor unit, in a deal aimed at advancing its efforts in artificial intelligence. From a report: Sony Semiconductor Solutions, a subsidiary of Sony Corporation, invested an undisclosed amount in Raspberry Pi Ltd, the trading company of Raspberry Pi, the company said in a statement on Wednesday. The extent of the funding was not revealed, but Eben Upton, Raspberry Pi's co-founder and CEO, said that the firm raised the cash at the same $500 million valuation it was worth in a 2021 funding round, when it brought in $45 million. Upton established Raspberry Pi in 2012 with the aim of making computing more accessible to young people. Raspberry Pi's tiny single-board computers are the size of a credit card and have been used to build everything from high-altitude balloons to small radio-controlled submarines. Raspberry Pi's customers were mainly hobbyists and teachers in the early days. The company has since become a more active player in the enterprise -- in a typical year, roughly 70% of its sales now come from commercial customers embedding its products into factories or consumer devices, Upton told CNBC.Read more of this story at Slashdot.

Universal Music Group has told streaming platforms, including Spotify and Apple, to block artificial intelligence services from scraping melodies and lyrics from their copyrighted songs, according to emails viewed by the Financial Times. From the report: UMG, which controls about a third of the global music market, has become increasingly concerned about AI bots using their songs to train themselves to churn out music that sounds like popular artists. AI-generated songs have been popping up on streaming services and UMG has been sending takedown requests "left and right," said a person familiar with the matter. The company is asking streaming companies to cut off access to their music catalogue for developers using it to train AI technology. "We will not hesitate to take steps to protect our rights and those of our artists," UMG wrote to online platforms in March, in emails viewed by the FT. "This next generation of technology poses significant issues," said a person close to the situation. "Much of [generative AI] is trained on popular music. You could say: compose a song that has the lyrics to be like Taylor Swift, but the vocals to be in the style of Bruno Mars, but I want the theme to be more Harry Styles. The output you get is due to the fact the AI has been trained on those artists' intellectual property."Read more of this story at Slashdot.

An anonymous reader quotes a report from The Verge: The New York Police Department is reenlisting Digidog, the four-legged robot that the city faced backlash for deploying a few years back, as reported earlier by The New York Times. NYC Mayor Eric Adams announced the news during a press event on Tuesday, stating that the use of Digidog in the city can "save lives." Digidog -- also known as Spot -- is a remote-controlled robot made by the Hyundai-owned Boston Dynamics. It's designed to work in situations that may pose a threat to humans, helping to do things like perform inspections in dangerous areas and monitor construction sites. However, Boston Dynamics also touts its use as a public safety tool, which the NYPD has tried in the past. City officials say that the NYPD will acquire two robot dogs for a total of $750,000, according to the NYT, and that they will only be used during life-threatening situations, such as bomb threats. "I believe that technology is here; we cannot be afraid of it," Mayor Adams said during Tuesday's press conference. "A few loud people were opposed to it, and we took a step back — that is not how I operate. I operate on looking at what's best for the city." The Surveillance Technology Oversight Project (STOP), a group that advocates against the use of local and state-level surveillance, has denounced Mayor Adams' move. "The NYPD is turning bad science fiction into terrible policing," Albert Fox Cahn, STOP's executive director, says in a statement. "New York deserves real safety, not a knockoff robocop. Wasting public dollars to invade New Yorkers' privacy is a dangerous police stunt."Read more of this story at Slashdot.

According to the BBC, the Atacama Cosmology Telescope (ACT) in Chile has traced the distribution of dark matter "on a quarter of the sky and across almost 14 billion years of time." From the report: In the image [here], the colored areas are the portions of the sky studied by the telescope. Orange regions show where there is more mass, or matter, along the line of sight; purple where there is less. Typical features are hundreds of millions of light-years across. The grey/white areas show where contaminating light from dust in our Milky Way galaxy has obscured a deeper view. The distribution of matter agrees very well with scientific predictions. ACT observations indicate that the "lumpiness" of the Universe and the rate at which it has been expanding after 14 billion years of evolution are just what you'd expect from the standard model of cosmology, which has Einstein's theory of gravity (general relativity) at its foundation. Recent measurements that used an alternative background light, one emitted from stars in galaxies rather than the CMB, had suggested the Universe lacked sufficient lumpiness. Another tension concerns the rate at which the Universe is expanding - a number called the Hubble constant. When [the European Space Agency's Planck observatory] looked at temperature fluctuations across the CMB, it determined the rate to be about 67 kilometres per second per megaparsec (A megaparsec is 3.26 million light-years). Or put another way - the expansion increases by 67km per second for every 3.26 million light-years we look further out into space. A tension arises because measurements of the expansion in the nearby Universe, made using the recession from us of variable stars, clocks in at about 73km/s per megaparsec. It's a difference that can't easily be explained. ACT, employing its lensing technique to nail down the expansion rate, outputs a number similar to Planck's. "It's very close - about 68km/s per megaparsec," said Dr Mathew Madhavacheril from the the University of Pennsylvania. ACT team-member Prof Blake Sherwin from Cambridge University, UK, added: "We and Planck and several other probes are coming in on the lower side. Obviously, you could have a scenario where both the measurements are right and there's some new physics that explains the discrepancy. But we're using independent techniques, and I think we're now starting to close the loophole where we could all be riding this new physics and one of the measurements has to be wrong." Papers describing the new results have been submitted to The Astrophysical Journal and posted on the ACT website.Read more of this story at Slashdot.

Apple said it will invest up to an additional $200 million in its Restore Fund, which was created in 2021 to remove carbon from the atmosphere. Reuters reports: The additional investment is expected to help the fund start new projects and carry forward its previously stated goal to remove about 1 million metric tons of carbon dioxide per year, the company said. Apple is making efforts to become carbon neutral through its entire supply chain and the life cycle of every product by 2030. The fund, launched with Goldman Sachs Group Inc (GS.N) and nonprofit Conservation International, has invested in forest properties in Brazil and Paraguay in the last two years. The expanded fund will be managed by Climate Asset Management, a joint venture of HSBC Asset Management and Pollination, Apple added.Read more of this story at Slashdot.

An anonymous reader quotes a report from Ars Technica: Debugging a faulty program can be frustrating, so why not let AI do it for you? That's what a developer that goes by "BioBootloader" did by creating Wolverine, a program that can give Python programs "regenerative healing abilities," reports Hackaday. (Yep, just like the Marvel superhero.) "Run your scripts with it and when they crash, GPT-4 edits them and explains what went wrong," wrote BioBootloader in a tweet that accompanied a demonstration video. "Even if you have many bugs it'll repeatedly rerun until everything is fixed." In the demo video for Wolverine, BioBootloader shows a side-by-side window display, with Python code on the left and Wolverine results on the right in a terminal. He loads a custom calculator script in which he adds a few bugs on purpose, then executes it. "It runs it, it sees the crash, but then it goes and talks to GPT-4 to try to figure out how to fix it," he says. GPT-4 returns an explanation for the program's errors, shows the changes that it tries to make, then re-runs the program. Upon seeing new errors, GPT-4 fixes the code again, and then it runs correctly. In the end, the original Python file contains the changes added by GPT-4.Read more of this story at Slashdot.

If reactors are retired, polluting energy sources that fill the gap could cause more than 5,000 premature deaths, researchers estimate. The findings appear in the journal Nature Energy. MIT News reports: They lay out a scenario in which every nuclear power plant in the country has shut down, and consider how other sources such as coal, natural gas, and renewable energy would fill the resulting energy needs throughout an entire year. Their analysis reveals that indeed, air pollution would increase, as coal, gas, and oil sources ramp up to compensate for nuclear power's absence. This in itself may not be surprising, but the team has put numbers to the prediction, estimating that the increase in air pollution would have serious health effects, resulting in an additional 5,200 pollution-related deaths over a single year. If, however, more renewable energy sources become available to supply the energy grid, as they are expected to by the year 2030, air pollution would be curtailed, though not entirely. The team found that even under this heartier renewable scenario, there is still a slight increase in air pollution in some parts of the country, resulting in a total of 260 pollution-related deaths over one year. When they looked at the populations directly affected by the increased pollution, they found that Black or African American communities -- a disproportionate number of whom live near fossil-fuel plants -- experienced the greatest exposure. "They also calculated that more people are also likely to die prematurely due to climate impacts from the increase in carbon dioxide emissions, as the grid compensates for nuclear power's absence," adds the report. "The climate-related effects from this additional influx of carbon dioxide could lead to 160,000 additional deaths over the next century." Lead author Lyssa Freese, a graduate student in MIT's Department of Earth, Atmospheric and Planetary Sciences (EAPS), said: "We need to be thoughtful about how we're retiring nuclear power plants if we are trying to think about them as part of an energy system. Shutting down something that doesn't have direct emissions itself can still lead to increases in emissions, because the grid system will respond."Read more of this story at Slashdot.

Denver legislators have just passed the first-ever agricultural Right to Repair bill. Today's landslide 44-16 vote in the House follows a successful vote in the Senate last month. iFixit reports: Once the Agricultural Right to Repair bill passes, manufacturers will be required to share all the parts, embedded software, firmware, tools, and documentation necessary for repair. One critical step remains: a signature by Governor Polis, who has signaled that he supports the legislation. To support Right to Repair legislation near you, find your state on Repair.org -- or, if you're outside the US, look for your country's advocacy network here. The summary of HB23-1011 reads: "Starting January 1, 2024, the bill requires a manufacturer to provide parts, embedded software, firmware, tools, or documentation, such as diagnostic, maintenance, or repair manuals, diagrams, or similar information (resources), to independent repair providers and owners of the manufacturer's agricultural equipment to allow an independent repair provider or owner to conduct diagnostic, maintenance, or repair services on the owner's agricultural equipment. The bill folds agricultural equipment into the existing consumer right-to-repair statutes, which statutes provide the following: - A manufacturer's failure to comply with the requirement to provide resources is a deceptive trade practice;- In complying with the requirement to provide resources, a manufacturer need not divulge any trade secrets to independent repair providers and owners; and - Any new contractual provision or other arrangement that a manufacturer enters into that would remove or limit the manufacturer's obligation to provide resources to independent repair providers and owners is void and unenforceable; and - An independent repair provider or owner is not authorized to make modifications to agricultural equipment that permanently deactivate any safety notification system or bring the equipment out of compliance with safety or emissions laws or to engage in any conduct that would evade emissions, copyright, trademark, or patent laws."Read more of this story at Slashdot.

The New York Times added a new daily puzzle game to its library in the form of Digits. GameSpot reports: This collection of math conundrums tasks you with reaching a designated number by using six numbers that you're free to multiply, divide, subtract, or add up to reach the final result, so long as your process doesn't create any fractions or negative numbers. Currently in beta and only available for this week, there'll be five of these math puzzles to solve every day. These aren't one-and-done puzzles like Wordle, and depending on the path you choose to solve one of these math mysteries, you'll be awarded 1-3 star ratings. If Digits proves to be popular with its readers, the New York Times will then start work on the further development of the game.Read more of this story at Slashdot.

An anonymous reader quotes a report from Reuters: Ukrainian hackers claim to have broken into the emails of a senior Russian military spy wanted by the Federal Bureau of Investigation for hacking the Hillary Clinton campaign and other senior U.S. Democrats ahead of Donald Trump's election to the presidency in 2016. In a message posted to Telegram on Monday, a group calling itself Cyber Resistance said it had stolen correspondence from Lt. Col. Sergey Morgachev, who was charged in 2018 with helping organize the hack and leak of emails from the Democratic National Committee (DNC) and the Clinton campaign. InformNapalm said in an article about the breach that it had confirmed Morgachev's identity by poring through personnel files and a curriculum vitae stolen by the hackers, including one document that identified him as a department head in Unit 26165 -- the same position which the FBI accused him of holding in 2018. [...] It wasn't immediately clear what information the hackers had managed to steal or how significant it was. Morgachev's inbox could potentially hold insight into Russia's hacking operations, including the operation against Clinton and the Democrats. In its indictment, the FBI described him as an officer in the Russia's military spy agency, still known by its old acronym, GRU. It said his department was "dedicated to developing and managing malware," including the "X-Agent" spy software used to hack the DNC. In its message announcing the theft, the group said of Morgachev: "A very cool and clever hacker, but ... We hacked him."Read more of this story at Slashdot.

Substack's Twitter-like feature for shorter posts, called Notes, is launching for everyone on Tuesday. The Verge reports: Substack's Notes will appear in their own separate tab, meaning they'll be separate from the full newsletters you can read in the Inbox tab or the threads you can read in the Chat tab, where you can read newsletters. In a blog post, Substack suggests using Notes to share things like "posts, quotes, comments, images, and links," and there is no character limit, Substack spokesperson Helen Tobin tells The Verge. Each post can include up to six photos or GIFs, but video isn't supported. Notes you share won't go to subscriber inboxes; they'll just live on the Substack website and app. And you can interact with other Notes with like, reply, and "restack" (retweet) buttons. Within the Notes tab, you can look through two different feeds: "Home" and "Subscribed." "Home" shows notes from writers you subscribe to and "writers they recommend," meaning you'll see notes from people you may not already be familiar with. "Subscribed" only shows notes from people you subscribe to.Read more of this story at Slashdot.

Ford said Tuesday it will spend $1.34 billion (C$1.8B) to turn its 70-year-old Oakville facility in Canada into an assembly plant for its next-generation of electric vehicles. TechCrunch reports: The campus, which first opened in 1953, will be renamed Oakville Electric Vehicle Complex. The company said Tuesday it will begin modernizing the 487-acre site in the second quarter of 2024. The upgrade includes completely retooling the facility that currently produces the internal combustion engine-powered Ford Edge and Lincoln Nautilus to own that only produces EVs. This is the first time that Ford has completely retooled an existing plant for EVs in North America. Ford also plans to add a 407,000-square-foot battery plant that will use cells and arrays from its BlueOval SK Battery Park in Kentucky. Workers will assemble the components into battery packs and then install them into EVs produced at the plant. "I'm most excited for the world to see the incredible next-generation electric and fully digitally connected vehicles produced in Oakville," CEO Jim Farley said in a statement.Read more of this story at Slashdot.

An anonymous reader quotes a report from Motherboard: Over the past month, classified Pentagon documents have circulated on 4chan, Telegram, and various Discord servers. The documents contain daily intelligence briefings, sensitive information about Ukrainian military positions, and a handwritten character sheet for a table-top roleplaying game. No one knows who leaked the Pentagon documents or how. They appeared online as photographs of printed pages, implying someone printed them out and removed them from a secure location, similar to how NSA translator Reality Winner leaked documents. The earliest documents Motherboard has seen are dated February 23, though the New York Times and Bellingcat reported that some are dated as early as January. According to Bellingcat, the earliest known instances of the leaks appearing online can be traced back to a Discord server. At some point, a Discord user uploaded a zip file of 32 images from the leak onto a Minecraft Discord server. Included in this pack alongside highly sensitive, Top Secret and other classified documents about the Pentagon's strategy and assessment of the war in Ukraine, was a handwritten piece of paper that appeared to be a character sheet for a roleplaying game. It's written on a standard piece of notebook paper, three holes punched out on the side, blue lines crisscrossing the page. The character's name is Doctor "Izmer Trotzky," his character class is "Professor Scientist." They've got a strength of 5, a charisma of 4, and 19 rubles to their name. Doctor Trotzky has 10 points in first aid and occult skills, and 24 in spot hidden. He's carrying a magnifying glass, a fountain pen, a sword cane, and a deringer. [...] But what game is it from? Motherboard reached out to game designer Jacqueline Bryk to find out. Bryk is an award-winning designer of roleplaying games who has worked on Kult: Divinity Lost, Changeling: the Lost, Fading Suns: Pax Alexius, and Vampire: the Masquerade. "I strongly suspect this is Call Of Cthulhu," Bryk said when first looking at the sheet. Call of Cthulhu (COC) is an RPG based on the work of H.P. Lovecraft where players attempt to stave off madness while investigating eldritch horrors. "This is a pretty classic Professor build. The sword cane really clinches it for me. I notice he's currently carrying a derringer and a dagger but took no points in firearms or fighting. I'm not sure which edition this is but it seems like the most he could do with his weapons is throw them." "After some research, Bryk concluded that the game is a homebrewed combination of COC and the Fallout tabletop game based on the popular video game franchise," adds Motherboard. "My best guest here is Fallout: Cthulhu the Homebrew," Bryk said, giving the home designed game a name.Read more of this story at Slashdot.

An anonymous reader writes: Windows users don't like it when Microsoft changes long-used and familiar functions in its OS, so altering something that's been the same for 28 years is always going to bring controversy. Nevertheless, it seems that the Redmond firm is planning on changing the Print Screen button into a key that opens the Windows 11 Snipping Tool. The Print Screen button has performed the same function in the Windows operating system since Windows 95: taking a screenshot of the current screen and copying it to the clipboard, usually so it can be edited in another program. But Windows Latest discovered that Microsoft is changing the default function of the Print Screen key in Windows 11. In the Windows 11 Beta preview builds 22621.1546 and 22624.1546, hitting the key will open the Windows Snipping Tool, Windows' built-in screenshotting tool that's currently accessed by pressing the Windows logo Key + Shift + S.Read more of this story at Slashdot.

After unusually low amounts of rain and snow this winter, the continent faces a severe water shortage. From a report: What happens during the next few months will really matter. Abundant rainfall could ease the situation and stave off the worst-case scenario. But Europe needs a lot. "We're talking about a sea, a sea's worth of water," says Hannah Cloke at the University of Reading in the UK. In terms of volume, hundreds of millions of cubic liters of rain would have to fall across the continent to fill the deficit, she estimates. It would have to amount to higher-than-average rainfall for France and certain other places, including parts of the UK. The chances of that are, unfortunately, not high. The UK's weather agency, the Met Office, estimates there's a 10 percent chance of a wetter-than-average March, April, and May. Conversely, there's a 30 percent chance that this period will be drier than average -- and that is 1.5 times the normal chance at this time of year. The Met Office stresses that this is a "broad outlook," and there might still be patches of very wet weather even if it remains dry overall. Any rain that does fall also has to fall in the right way and in the right places. "There's always this chance that if we do get it all in two days, we see some very serious floods," says Cloke. "What we want is to see sustained, reasonably gentle rain over the next few months." Another important factor is how hot it gets this summer, says Cammalleri. Heat waves push up water consumption and increase evaporation rates. He indicates that European forecasts do not suggest that temperatures will be quite as blisteringly hot as last year -- though there is some uncertainty there too.Read more of this story at Slashdot.

The French Competition Authority is likely to move forward soon with an antitrust investigation into Apple over complaints tied to 2021 changes to its app tracking policies, Axios reported, citing sources. From the report: A formal investigation would mark the first major government move taken globally against Apple related to privacy rule changes that upended the digital advertising world. French regulators are favoring issuing a formal "Statement of Objections" to parties involved in the matter in coming weeks, sources told Axios. That step would signal to groups that issued initial complaints about Apple's actions and Apple that the authority found evidence of illegal anticompetitive behavior in its initial review of the complaints it received. The 2020 complaint argues that Apple's app tracking changes did not adequately adhere to European Union privacy rules and that Apple failed to hold itself to the same ad targeting standards that it forced on its competitors because it targeted iOS users with ads from app tracking data. The complaint was filed jointly by four French advertising trade groups -- IAB France, Mobile Marketing Association (MMA), SRI and UDECAM.Read more of this story at Slashdot.

An anonymous reader shares a report: Firefox has a reputation of being something of a resource hog, even among modern browsers. But it might not be entirely earned, because it looks like a CPU bug affecting Firefox users on Windows was actually the fault of Windows Defender. The latest update to the ubiquitous security tool addresses the issue, and should result in measurably lower CPU usage for the Windows version of Firefox. According to Mozilla senior software engineer Yannis Juglaret, the culprit was MsMpEng.exe, which you might recognize from your Task Manager. It handles the Real-Time protection feature that monitors web activity for malicious threats. The bug was causing Firefox to call on the service much more frequently than comparable browsers like Chrome or Edge, resulting in notable CPU spikes. Said CPU spikes could reduce performance in other applications or affect a laptop's battery life. The issue was first reported on Mozilla's bug tracker system way back in 2018 and quickly assigned to the MsMpEng service, but some more recent and diligent documentation on the part of Juglaret resulted in more swift action from Microsoft's developers.Read more of this story at Slashdot.

A filmmaker walks us through the reasons behind the 'dark cinematography' that's causing so many complaints. From a report: Take, for instance, Wes Craven's 1996 horror classic Scream -- a film often remarked on for just how lit everything in it is at all times. An early scene depicts protagonist Sidney Prescott embracing her boyfriend Billy Loomis in the wake of a terrifying home invasion and her near-death at the hands of a masked killer. After Sidney throws her arms around Billy, Craven cuts to a tight close-up on Billy's face, which is illuminated by a harsh, ominous, icy-cool light that telegraphs his sinister intentions. But where is that light coming from? The bedroom they're in has no lamps switched on. Could it be the moon? Hard to justify, as the only windows in the space are behind Billy, and the light we're staring at is so much brighter and closer than the moon could ever be. So what on Earth is that light? The answer is, simply enough, nothing. Craven often didn't feel any real need to rationalize why a bright light would suddenly appear one second before disappearing again in the following shot. It's a purely stylistic choice, employed for that one moment to cast doubt on Billy's trustworthiness in the audience's mind. Itâ(TM)s an extremely stagey choice that fits neatly within the larger series' heightened, melodramatic style. Scream wouldn't really be Scream without it. The hyper-lit style was a staple of cinematography in American films during the '90s, and like all trends, it eventually fell out of fashion -- in this case, a few years after Scream hit theaters. The 2000s saw filmmakers embracing more directional, shadowy lighting styles, evoking a grittier, more "grounded" aesthetic while retaining a sense of classic Hollywood polish. The 2010s featured another huge shift in style, this time toward hyper-naturalism. Even broad, big-budget blockbusters like Harry Potter and the Deathly Hallows -- Part 1 embraced a look torn straight from indie cinema. Not only are the lights in that film always motivated, they're realistic. Where earlier films might have used the presence of the moon or a table lamp to justify much brighter lighting, movies like Deathly Hallows, Interstellar, and Dawn of the Planet of the Apes let the light of a lamp simply look like a lamp.Read more of this story at Slashdot.

When Dr. Makenzie Lystrup was sworn in as the new director of NASA's Goddard Space Flight Center last week, she didn't take her oath of office on the Bible or the U.S. Constitution, but rather on a tome revered by space enthusiasts everywhere: Carl Sagan's Pale Blue Dot. From a report: The book, published in 1994, is named after an iconic image of Earth, snapped by the Voyager I probe, that depicts the planet as a small speck smothered by the emptiness of space. That photo inspired astronomer Carl Sagan to write: "Look again at that dot. That's here. That's home. That's us." For many, the book serves as a reminder of humanity's place in the universe and the need to preserve our home planet, which makes it similar to holy scripture for a newly appointed NASA director. On Thursday, when Lystrup chose to place her left hand on a copy of Sagan's book while being sworn in by NASA Administrator Bill Nelson, a photographer captured the moment, and NASA Goddard's social media shared the image. The constitution does not require that government officials be sworn in using a particular text, just that they "shall be bound by Oath or Affirmation, to support this Constitution." Most U.S. politicians and officials end up using the Bible.Read more of this story at Slashdot.

An anonymous reader shares a report:Weather apps are not all the same. There are tens of thousands of them, from the simply designed Apple Weather to the expensive, complex, data-rich Windy.App. But all of these forecasts are working off of similar data, which are pulled from places such as the National Oceanic and Atmospheric Administration (NOAA) and the European Centre for Medium-Range Weather Forecasts. Traditional meteorologists interpret these models based on their training as well as their gut instinct and past regional weather patterns, and different weather apps and services tend to use their own secret sauce of algorithms to divine their predictions. On an average day, you're probably going to see a similar forecast from app to app and on television. But when it comes to how people feel about weather apps, these edge cases -- which usually take place during severe weather events -- are what stick in a person's mind. "Eighty percent of the year, a weather app is going to work fine," Matt Lanza, a forecaster who runs Houston's Space City Weather, told me. "But it's that 20 percent where people get burned that's a problem." No people on the planet have a more tortured and conflicted relationship with weather apps than those who interpret forecasting models for a living. "My wife is married to a meteorologist, and she will straight up question me if her favorite weather app says something different than my forecast," Lanza told me. "That's how ingrained these services have become in most peoples' lives." The basic issue with weather apps, he argues, is that many of them remove a crucial component of a good, reliable forecast: a human interpreter who can relay caveats about models or offer a range of outcomes instead of a definitive forecast. [...] What people seem to be looking for in a weather app is something they can justify blindly trusting and letting into their lives -- after all, it's often the first thing you check when you roll over in bed in the morning. According to the 56,400 ratings of Carrot in Apple's App Store, its die-hard fans find the app entertaining and even endearing. "Love my psychotic, yet surprisingly accurate weather app," one five-star review reads. Although many people need reliable forecasting, true loyalty comes from a weather app that makes people feel good when they open it.Read more of this story at Slashdot.

Hackers using spyware made by a little known cyber mercenary company used malicious calendar invites to hack the iPhones of journalists, political opposition figures, and an NGO worker, according to two reports. From a report: Researchers at Microsoft and the digital rights group Citizen Lab analyzed samples of malware they say was created by QuaDream, an Israeli spyware maker that has been reported to develop zero-click exploits -- meaning hacking tools that don't require the target to click on malicious links -- for iPhones. QuaDream has been able to mostly fly under the radar until recently. In 2021, Israeli newspaper Haaretz reported that QuaDream sold its wares to Saudi Arabia. The next year, Reuters reported that QuaDream sold an exploit to hack iPhones that was similar to one provided by NSO Group, and that the company doesn't operate the spyware, its government customers do -- a common practice in the surveillance tech industry. QuaDream's customers operated servers from several countries around the world: Bulgaria, Czech Republic, Hungary, Romania, Ghana, Israel, Mexico, Singapore, United Arab Emirates (UAE), and Uzbekistan, according to internet scans done by Citizen Lab. Both Citizen Lab and Microsoft published groundbreaking new technical reports on QuaDream's alleged spyware on Tuesday. Microsoft said it found the original malware samples, and then shared them with Citizen Lab's researchers, who were able to identify more than five victims -- an NGO worker, politicians, and journalists -- whose iPhones were hacked. The exploit used to hack those targets was developed for iOS 14, and at the time was unpatched and unknown to Apple, making it a so-called zero-day. The government hackers who were equipped with QuaDream's exploit used malicious calendar invites with dates in the past to deliver the malware, according to Citizen Lab.Read more of this story at Slashdot.

South Korea's antitrust regulator has fined Alphabet's Google 42.1 billion won ($31.88 million) for blocking the release of mobile video games on a competitor's platform. From a report: The Korea Fair Trade Commission (KFTC) said on Tuesday that Google bolstered its market dominance, and hurt local app market One Store's revenue and value as a platform, by requiring video game makers to exclusively release their titles on Google Play in exchange for providing in-app exposure between June 2016 and April 2018. Google said it will review the final decision by the KFTC to evaluate the next course of action. "Google makes substantial investments in the success of developers, and we respectfully disagree with the KFTC's conclusions", a spokesperson said. The KFTC said the move against the U.S. technology giant is part of efforts by the government to ensure fair markets.Read more of this story at Slashdot.

Reddit moderators say they already see an increase in spam and that the future will "require a lot of human labor." From a report: In December last year, the moderators of the popular r/AskHistorians Reddit forum noticed posts popping up that appeared to carry the hallmarks of AI-generated text. "They were pretty easy to spot," said Sarah Gilbert, one of the forum's moderators and a postdoctoral associate at Cornell University. "They're not in-depth, they're not comprehensive, and they often contain false information." The team quickly realized their little corner of the internet had become a target for ChatGPT-created content. When ChatGPT launched last year, it set off a seemingly never-ending carousel of hype. According to evangelists, the tech behind ChatGPT may eradicate hundreds of millions of jobs, exhibit "sparks" of singularity-esque artificial general intelligence, and quite possibly destroy the world, but in a way that means you must buy it right now. The less glamorous impacts, like unleashing a tidal wave of AI-produced effluvium on the internet, haven't garnered the same attention so far. The two-million-strong AskHistorians forum allows non-expert Redditors to submit questions about history topics, and receive in-depth answers from historians. Recent popular posts have probed the hive mind on whether the stress of being "on time" is a modern concept; what a medieval scribe would've done if the monastery cat left an inky paw print on their vellum; and how Genghis Khan got fiber in his diet. Shortly after ChatGPT launched, the forum was experiencing five to 10 ChatGPT posts per day, says Gilbert, which soon ramped up as more people found out about the tool. The frequency has tapered off now, which the team believes may be a consequence of how rigorously they've dealt with AI-produced content: even if the posts aren't being deleted for being written by ChatGPT, they tend to violate the sub's standards for quality.Read more of this story at Slashdot.

The federal government is taking what could be the first steps toward requiring safer, more transparent AI systems as a Commerce Department agency invited public comment to help shape specific policy recommendations. From a report: The move is far short of the comprehensive AI legislation critics have advocated. But with the frenzy over generative AI continuing to grow, the Biden administration is trying to get a head start on a government response to the fast-moving industry. The Commerce Department's National Telecommunications and Information Administration (NTIA) is asking the public to weigh in on what role the federal government can play to ensure AI algorithms are acting as claimed and not causing harm. "We really believe in the promise of AI," Assistant Commerce Secretary Alan Davidson, who runs NTIA, tells Axios. "We do believe it needs to be implanted safely and we're concerned that's not happening right now." Davidson said that the government could take a range of actions to shape AI that don't require new legislation -- including mandating audits as part of its procurement standards or offering prizes or bounties to those who find bias within algorithms. "We need to start the hard work of actually putting in place processes that are going to make people feel like the (AI) tools are doing what they say they are going to do, that models are behaving," Davidson said.Read more of this story at Slashdot.

China plans to require a security review of generative AI services before they're allowed to operate, casting uncertainty over ChatGPT-like bots unveiled by the country's largest tech companies including Baidu. From a report: Providers of services must ensure content is accurate and respects intellectual property, and neither discriminates nor endangers security, the Cyberspace Administration of China said in draft guidelines published for public feedback. AI operators must also clearly label AI-generated content, the country's internet overseer said in a statement posted on its website. The CAC's requirements add to Beijing's growing attempts to regulate the explosive growth of generative AI since OpenAI's ChatGPT fired up the industry in November. Companies from Alibaba Group to SenseTime and Baidu all aim to build the definitive next-generation AI platform for the world's largest internet market. That mirrors a growing wave of development abroad with Alphabet's Google and Microsoft among the many tech companies exploring generative AI, which can create original content from poetry to art just with simple user prompts. China's made no secret of its wish to elevate AI at a time the country is locked in a conflict with the US over technology from chips to EVs. But it remains uncertain how the government intends to both galvanize and police the emergent field.Read more of this story at Slashdot.

An anonymous reader quotes a report from Mirage News: One million smokers will be encouraged to swap cigarettes for vapes under a pioneering new "swap to stop" scheme designed to improve the health of the nation and cut smoking rates. As part of the world-first national scheme, almost one in five of all smokers in England will be provided with a vape starter kit alongside behavioral support to help them quit the habit as part of a series of new measures to help the government meet its ambition of being smoke-free by 2030 -- reducing smoking rates to 5% or less. Local authorities will be invited to take part in the scheme later this year and will design a scheme which suits its needs, including deciding which populations to prioritize. In a speech today, Health Minister Neil O'Brien will also announce that following the success of local schemes, pregnant women will be offered financial incentives to help them stop smoking. This will involve offering vouchers, alongside behavioral support, to all pregnant women who smoke by the end of next year. The government will also consult on introducing mandatory cigarette pack inserts with positive messages and information to help people to quit smoking. Additionally, there will be a crackdown on illicit vape sales as part of measures to stop children and non-smokers take up the habit -- which is growing in popularity among young people.Health Minister Neil O'Brien said in a statement: "Up to two out of three lifelong smokers will die from smoking. Cigarettes are the only product on sale which will kill you if used correctly. We will offer a million smokers new help to quit. We will be funding a new national 'swap to stop' scheme -- the first of its kind in the world. We will work with councils and others to offer a million smokers across England a free vaping starter kit."Read more of this story at Slashdot.

For the first time, you can now buy or rent every single Star Trek movie in the latest 4K and HDR standards. That includes all six movies based on the original series cast, all four featuring The Next Generation's cast, and the more recent J.J. Abrams films. Ars Technica reports: On April 4, Paramount released an UltraHD Blu-ray set that included Star Trek: Generations, Star Trek: First Contact, Star Trek: Insurrection, and Star Trek: Nemesis along with several special features. The set marks the first time these films have been available in a 4K and HDR home video release. Alongside the Blu-rays, the films also became available on on-demand storefronts like Apple's TV app. Last year, the original series films (Star Trek: The Motion Picture, Star Trek II: The Wrath of Khan, Star Trek III: The Search for Spock, Star Trek IV: The Voyage Home, Star Trek V: The Final Frontier, and Star Trek VI: The Undiscovered Country) received the same treatment. The reboot films (Star Trek, Star Trek Into Darkness, and Star Trek Beyond) have long been available in modern formats. So as of this week, all 13 theatrically released Star Trek films are finally available in 4K and HDR. The latest releases also support the Dolby Atmos audio standard in addition to Dolby Vision HDR.Read more of this story at Slashdot.

schwit1 shares a report from Inverse: On March 23, sky observers marveled at a gorgeous display of northern and southern lights. It was a reminder that when our Sun gets active, it can spark a phenomenon called "space weather." Aurorae are among the most benign effects of this phenomenon. At the other end of the space weather spectrum are solar storms that can knock out satellites. The folks at Starlink found that out the hard way in February 2022. On January 29 that year, the Sun belched out a class M 1.1 flare and related coronal mass ejection. Material from the Sun traveled out on the solar wind and arrived at Earth a few days later. On February 3, Starlink launched a group of 49 satellites to an altitude only 130 miles above Earth's surface. They didn't last long, and now solar physicists know why. A group of researchers from NASA Goddard Space Flight Center and the Catholic University of America took a closer look at the specifics of that storm. Their analysis identified a mass of plasma that impacted our planet's magnetosphere. The actual event was a halo coronal mass ejection from an active region in the northeast quadrant of the Sun. The material traveled out at around 690 kilometers per second as a shock-driving magnetic cloud. Think of it as a long ropy mass of material writhing its way through space. As it traveled, it expanded and at solar-facing satellites -- including STEREO-A, which took a direct hit from it -- made observations. Eventually, the cloud smacked into Earth's magnetosphere creating a geomagnetic storm. The atmosphere thickened enough that it affected the newly launched Starlink stations. They started to experience atmospheric drag, which caused them to deorbit and burn up on the way down. It was an expensive lesson in space weather and provided people on Earth with a great view of what happens when satellites fall back to Earth. It was also that could have been avoided if they'd delayed their launch to account for the ongoing threat.Read more of this story at Slashdot.

An anonymous reader quotes a report from ScienceAlert: Keeping enough qubits in their ideal state long enough for computations has so far proved a challenge. In a new experiment, scientists were able to keep a qubit in that state for twice as long as normal. Along the way, they demonstrated the practicality of quantum error correction (QEC), a process that keeps quantum information intact for longer by introducing room for redundancy and error removal. The idea of QEC has been around since the mid-90s, but it's now been shown to work in real time. Part of the reason for the experiment's success was the introduction of machine learning AI algorithms to tweak the error correction routine. "For the first time, we have shown that making the system more redundant and actively detecting and correcting quantum errors provided a gain in the resilience of quantum information," says physicist Michel Devoret, from Yale University in Connecticut. [...] Like many quantum physics experiments, this one was run at ultra-cold temperatures -- a hundred times colder than outer space, in this case. The setup has to be carefully controlled in order to protect the qubit as much as possible. The error-corrected qubit lasted for 1.8 milliseconds -- only a blink as we might experience it, but an impressive span for a qubit operating on the quantum level. Now the research team will be able to refine the process further. "Our experiment shows that quantum error correction is a real practical tool," says Devoret. "It's more than just a proof-of-principle demonstration." In this case the breakthrough was down to several different factors, rather than one change. The QEC code was actually one from 2001, but improvements to it as well as upgrades to the quantum circuit fabrication process made a difference. "Our experiment validates a cornerstone assumption of quantum computing, and this makes me very excited about the future of this field," says Volodymyr Sivak, a research scientist at Google and formerly at Yale University. The research has been published in Nature.Read more of this story at Slashdot.

Ascend Elements opened a recycling plant in Covington, Georgia in late March that it says is the largest electric-vehicle battery recycling facility in North America. "It can process 30,000 metric tons of input each year, breaking down old batteries and prepping the most valuable materials inside to be processed and turned into new batteries," reports Canary Media. "That capacity equates to breaking down the battery packs from 70,000 electric vehicles annually, said Ascend CEO Mike O'Kronley." From the report: Recycling can deliver new battery materials without the expense and environmental impact of new mining. It is extremely hard to develop new mines in the U.S., but the federal government is lavishing funds on new battery recycling plants. The revamped EV tax credits also call for increasing shares of domestically sourced batteries and battery materials. Those market and policy shifts made recycling sufficiently desirable that Ascend is paying other companies for their old batteries. At the moment, those deals are mostly with EV or battery makers that have high volumes to get rid of. "Paying for these spent batteries keeps them from going into the landfill," O'Kronley told Canary Media. "It's better to get paid for it rather than throw them away." Ascend also accepts used consumer electronics from battery-collection programs, such as Call2Recycle. That's not to say there are enough old batteries coming in to fill the factory. Currently, 80 to 90 percent of what's going into Ascend's Covington facility is scrap materials from battery factories, including SK Battery America's plant in Commerce, Georgia. That relationship influenced Ascend's choice of location: Covington sits in the emerging "Battery Belt," a swath of new battery factories and electric-vehicle plants opening up across the Midwest and the Carolinas, Georgia, Tennessee and Kentucky (look for all the blue icons in this White House map of new industrial investments). Fellow battery-recycling startup Redwood Materials also chose South Carolina for a forthcoming $3.5 billion recycling facility. "There will need to be a recycling plant within about an hour's drive of every single one of those [new battery gigafactories]," O'Kronley said. "You don't want to be [long-distance] shipping these very large, heavy EV batteries that are classified as Class 9 hazardous materials." The report notes that the company's second commercial-scale facility in Hopkinsville, Kentucky will "introduce a brand-new technique for efficiently extracting cathode materials from black mass, which Ascend has dubbed 'hydro to cathode.'"Read more of this story at Slashdot.

If you want to sneak malware onto people's Android devices via the official Google Play store, it may cost you about $20,000 to do so, Kaspersky suggests. The Register reports: This comes after the Russian infosec outfit studied nine dark-web markets between 2019 and 2023, and found a slew of code and services for sale to infect and hijack the phones and tablets of Google Play users. Before cybercriminals can share their malicious apps from Google's official store, they'll need a Play developer account, and Kaspersky says those sell for between $60 and $200 each. Once someone's bought one of these accounts, they'll be encouraged use something called a loader. Uploading straight-up spyware to the Play store for people to download and install may attract Google's attention, and cause the app and developer account to be thrown out. A loader will attempt to avoid that: it's software a criminal can hide in their otherwise innocent legit-looking app, installed from the official store, and at some convenient point, the loader will fetch and apply an update for the app that contains malicious code that does stuff like steal data or commit fraud. That update may ask for extra permissions to access the victim's files, and may need to be pulled from an unofficial store with the victim's blessing; it depends on the set up. The app may refuse to work as normal until the loader is allowed to do its thing, convincing marks into opening up their devices to crooks. These tools are more pricey, ranging from $2,000 to $20,000, depending on the complexity and capabilities required. Would-be crims who don't want to pay thousands for a loader can pay substantially less -- between $50 and $100 -- for a binding service, which hides a malicious APK file in a legitimate application. However, these have lower successful install rates compared to loaders, so even in the criminal underground you get what you pay for. Some other illicit services offered for sale on these forums include virtual private servers ($300), which allow attackers to redirect traffic or control infected devices, and web injectors ($25 to $80) that look out for victims' visiting selected websites on their infected devices and replacing those pages with malicious ones that steal login info or similar. Criminals can pay for obfuscation of their malware, and they may even get a better price if they buy a package deal. "One of the sellers offers obfuscation of 50 files for $440, while the cost of processing only one file by the same provider is about $30," Team Kaspersky says. Additionally, to increase the number of downloads to a malicious app, thus making it more attractive to other mobile users, attackers can buy installs for 10 cents to $1 apiece. Kaspersky's report can be found here.Read more of this story at Slashdot.

The U.S. Federal Trade Commission has approved a final consent order in its first-ever enforcement action over a case involving "review hijacking," or when a marketer steals consumer reviews of another product to boost the sales of its own. TechCrunch reports: In this case, the FTC has ordered supplements retailer The Bountiful Company, the maker of Nature's Bounty vitamins and other brands, to pay $600,000 for deceiving customers on Amazon where it used a feature to merge the reviews of different products to make some appear to have better ratings and reviews than they otherwise would have had if marketed under their own listings. The case exposes how sellers have been exploiting an Amazon feature that allows sellers to request the creation of "variation" relationships between different products and SKUs. The feature is meant to help marketers and consumers alike as it creates a single detail page on Amazon.com that shows similar products that are different only in narrow, specific ways, the FTC explains -- like items that come in a different color, size, quantity or flavor. For instance, a t-shirt may have a dozen SKUs associated with one another because the shirt comes in a wide variety of colors. For shoppers, it's helpful to see all the options on one page so you can pick the item that best matches your needs and budget. In the case of supplements, the feature could be used to combine the same products by merging various SKUs featuring different quantities of the item in question, like bottles with 50, 100 or 200 pills, for example. However, The Bountiful Company exploited Amazon's feature to merge its newer products with older, well-established products which had different formulations, the FTC said. The FTC cited and screenshotted more than a dozen examples from 2020 and 2021 in its original complaint (PDF) against the vitamin and supplement maker, which in 2021 sold its core brands -- including Nature's Bounty and Sundown -- to Nestle. As a result of these product merges, consumers who happened across any of the newer products would believe them to be better received than they were in reality, as they were benefiting from the merged ratings and reviews of other, differentiated items. "Boosting your products by hijacking another product's ratings or reviews is a relatively new tactic, but is still plain old false advertising," Samuel Levine, Director of the FTC's Bureau of Consumer Protection, said this February when the consent order was first announced ahead of its public comment period and finalized version. With today's decision, Bountiful will have to pay the Commission $600,000 as monetary relief for consumers. It's also prohibited from making similar types of misrepresentations and barred from using "deceptive review tactics that distort what consumers think about its products or services," the FTC said in a unanimous 4-0 decision.Read more of this story at Slashdot.

An anonymous reader quotes a report from Popular Mechanics: Americans' IQ scores are trending in a downward direction. In fact, they've been falling for over a decade. According to a press release, in studying intelligence testing data from 2006 to 2018, Northwestern University researchers noticed that test scores in three out of four "cognitive domains" were going down. This is the first time we've seen a consistent negative slope for these testing categories, providing tangible evidence of what is known as the "Reverse Flynn Effect." In a 1984 study, James Flynn noticed that intelligence test scores had steadily increased since the early 1930s. We call that steady rise the Flynn Effect. Considering that overall intelligence seemed to be increasing faster than could be explained by evolution, the reason increase became a source of debate, with many attributing the change to various environmental factors. But now, it seems that a Reverse Flynn Effect is, well, in effect. The study, published in the journal Intelligence, used an online, survey-style personality test called the Synthetic Aperture Personality Assessment Project to analyze nearly 400,000 Americans. The researchers recorded responses from 2006 and 2018, in order to examine if and how cognitive ability scores were changing over time within the country. The data showed drops in logic and vocabulary (known as verbal reasoning), visual problem solving and analogies (known as matrix reasoning), and computational and mathematical abilities (known as letter and number series). Not every domain is going down though, notes the report. "[S]cores in spatial reasoning (known as 3D rotation) followed the opposite pattern, trending upward over the 12-year period." "If all the scores were going in the same direction, you could make a nice little narrative about it, but that's not the case," says Elizabeth Dworak, a research assistant professor at Northwestern University and one of the authors on the study. "We need to do more to dig into it." She adds: "It doesn't mean their mental ability is lower or higher; it's just a difference in scores that are favoring older or newer samples. It could just be that they're getting worse at taking tests or specifically worse at taking these kinds of tests."Read more of this story at Slashdot.

According to South Korean prosecutors, Terraform Labs co-founder Do Kwon converted most of the illicit funds associated with him and his associates into Bitcoin. CoinTelegraph reports: South Korean prosecutors have identified 414.5 billion won ($314.2 million) in illicit assets associated with Terraform Labs co-founder Do Kwon and his associates. Out of the identified illegal assets, prosecutors have linked about 91.4 billion won ($69 million) of the specified amount directly to Kwon. Although Kwon amassed millions, none of the assets tied to him are recoverable or under the jurisdiction of the South Korean authorities. This is mainly because the now-arrested former CEO reportedly converted most of the illicit funds into Bitcoin using overseas crypto exchanges instead of investing in physical assets, per a report published by local media outlet KBS. The South Korean authorities have requested Binance to halt any withdrawal request associated with Kwon. Binance confirmed to Cointelegraph that they are cooperating with the prosecutors and offering any assistance they need. South Korean prosecutors are actively tracing properties associated with Terraform Labs executives to recover some illicit funds from the Terra debacle. On April 3, prosecutors seized homes and other assets to stop former Terra employees from selling things that might be tied to legal cases. In addition to the residences in Seoul owned by former CEO Shin Hyun-seong and others, the prosecutors also filed foreclosure actions against their foreign-registered vehicles, lands in Hwaseong and Gapyeong in Gyeonggi-do, and Taean in South Chungcheong Province. Kwon evaded arrest for almost a year before getting caught in Montenegro on March 23rd.Read more of this story at Slashdot.

Tesla will open a factory in Shanghai to produce its Megapack large-scale batteries, cementing another foothold for the U.S. company in China even as political and economic tensions between Washington and Beijing swirl. The Washington Post reports: Tesla said in a brief tweet on Sunday that its "Megafactory" in Shanghai will be capable of producing 10,000 Megapacks annually, an output equivalent to its other Megafactory in Lathrop, Calif., about 70 miles east of San Francisco. The company, which disbanded its public relations department, did not provide further details. Elon Musk, Tesla's chief executive, said in a tweet that the factory in Shanghai would "supplement" the production in California. The Chinese factory will be built in Lingang, a suburban area of Shanghai where Tesla's vehicle factory is also located, according to Chinese media. Lu Yu, an official in Lingang, told local media that production could start as soon as the second quarter of 2024. The investment in China by Tesla comes after the coronavirus pandemic brought some supply chains to a halt as factories in China shut down amid strict "zero covid" protocols. With those setbacks still fresh in many executives' minds -- and amid concerns over alleged human rights violations and chilly relations between Washington and Beijing -- China has struggled to attract foreign investment since the pandemic. The Megapacks differ from most of Tesla's consumer-focused offerings, like the electric vehicles it is widely known for, in that they are more a piece of energy infrastructure than a consumer product. The batteries are intended to store energy from renewable sources such as wind and solar, allowing energy to be drawn even when the sun isn't shining and the wind isn't blowing. Batteries like the Megapack are not yet widely implemented in the United States and purchases of the technology have mostly been kept under wraps. But the Megapack has been bought for Apple's renewable energy storage project in California, according to the Verge, and for a storage project outside Houston, Bloomberg first reported. A Megapack, Tesla says, "stores energy for the grid reliably and safely, eliminating the need for gas peaker plants and helping to avoid outages." Each pack can store enough energy to power 3,600 homes for an hour, Tesla says.Read more of this story at Slashdot.