Slashdot

India is moving to block 232 apps, some with links to China, that offer betting and loan services in the South Asian market to prevent misuse of the citizens' data, the state-owned public broadcaster said Sunday. TechCrunch: The Ministry of Electronics and Information Technology is in the process to enforce an emergency order to ban 138 betting and gambling apps and another 94 that provided unauthorized loan services in the interest of protecting the country's integrity, the broadcaster said. The ministry's move was prompted at the direction of the Ministry of Home Affairs, Prasar Bharti added. The apps sought to mislead customers into taking big debts without realizing the terms and there were concerns that they could be used as tools for espionage and propaganda.Read more of this story at Slashdot.

An anonymous reader shares a report: Apple Chief Executive Officer Tim Cook, speaking on an earnings call that was mostly focused on holiday results, made an off-the-cuff remark that could be quite telling about the company's future. Cook was fielding a question about whether the iPhone's rising average sales price was sustainable. After all, a top-of-the-line model that cost $1,150 in 2017 (the iPhone X with 256 gigabytes of storage) now fetches $1,600 (the iPhone 14 Pro Max with 1 terabyte). His response: The price increase is no problem. In fact, consumers could probably be persuaded to spend more. "I think people are willing to really stretch to get the best they can afford in that category," Cook said on the call, noting that the iPhone has become "integral" to people's lives. Consumers now use the device to make payments, control smart-home appliances, manage their health and store banking data, he said. While Cook wouldn't say if he anticipates further price increases, he made a good argument for why even more upscale iPhones could make sense -- especially if they deliver new features. Apple has internally discussed adding a higher-end iPhone to the top of its smartphone lineup.Read more of this story at Slashdot.

Dell is eliminating about 6,650 roles as it faces plummeting demand for personal computers, becoming the latest technology company to announce thousands of job cuts. From a report: The reduction amounts to about 5% of Dell's global workforce, the company said in a regulatory filing early Monday. Dell is experiencing market conditions that "continue to erode with an uncertain future," Co-Chief Operating Officer Jeff Clarke wrote in memo viewed by Bloomberg.Read more of this story at Slashdot.

An anonymous reader shares a report from Ars Technica:The month before Dwarf Fortress was released on Steam (and Itch.io), the brothers Zach and Tarn Adams made $15,635 in revenue, mostly from donations for their 16-year freeware project. The month after the game's commercial debut, they made $7,230,123, or 462 times that amount.... Tarn Adams noted that "a little less than half will go to taxes," and that other people and expenses must be paid. But enough of it will reach the brothers themselves that "we've solved the main issues of health/retirement that are troubling for independent people." It also means that Putnam, a longtime modder and scripter and community member, can continue their work on the Dwarf Fortress code base, having been hired in December. The "issues of health/retirement" became very real to the brothers in 2019 when Zach had to seek treatment for skin cancer. The $10,000 cost, mostly covered through his wife's employer-provided insurance, made them realize the need for more robust sustainability. "You're not just going to run GoFundMes until you can't and then die when you're 50," Tarn told The Guardian in late 2022. "That is not cool." This realization pushed them toward a (relatively) more accessible commercial release with traditional graphics, music, and tutorials.Read more of this story at Slashdot.

While Oracle's existing Java corporate licensing agreements are still in effect, "the Named User Plus Licensing (user licenses) and Processor licenses (server licensing) are no longer available for purchase," reports IT World Canada. And that's where it gets interesting: The new pricing model is based on employee count, with different price tiers for different employee counts. The implication is that everyone in the organization is counted for licensing purposes, even if they don't use Java software. As a result, companies that use Java SE may face significant price increases. The change will primarily affect large companies with many employees, but it will also have a significant impact on medium-sized businesses. Although Oracle promises to allow legacy users to renew under their current terms and conditions, sources say the company will likely pressure users to adopt the new model over time. The move is "likely to rile customers that have a fraction of employees who work with Java," Oracle partners told CRN, though "the added complexity is an opportunity for partners to help customers right-size their spending."Jeff Stonacek, principal architect at House of Brick Technologies, an Omaha, Neb.-based company that provides technical and licensing services to Oracle clients, and chief technical officer of House of Brick parent company OpsCompass, told CRN that the change has already affected at least one project, with his company in the middle of a license assessment for a large customer. He called the change "an obvious overstep." "Having to license your entire employee count is not reasonable because you could have 10,000 employees, maybe only 500 of them need Java," Stonacek said. "And maybe you only have a couple of servers for a couple of applications. But if you have to license for your entire employee count, that just doesn't make sense...." Stonacek and his team have been talking to customers about migrating to Open Java Development Kit (JDK), a free and open-source version of Java Standard Edition (SE), although that was a practice started before the price change. He estimated that about half of the customers his team talks to are able to easily move to OpenJDK. Sometimes, customers have third-party applications that are written for Java and unchangeable as opposed to custom applications that in-house engineers can just rewrite.... Ron Zapar, CEO of Naperville, Ill.-based Oracle partner Re-Quest, told CRN that even without a direct effect on partners from the Java license change, the move makes customers question whether they want to purchase Oracle Cloud offerings and other Oracle products lest they face future changing terms or lock-in.Read more of this story at Slashdot.

9to5Mac is reporting that Apple pulled the Damus app from its App Store in China on Thursday, "with the developers being informed that the Nostr app 'includes content that is illegal in China.'"Apple rejected the app multiple times, applying the app review guidelines that would apply to a social networking service. In reality, all Damus does is provide access to Nostr feeds, so it would be more accurate to consider it akin to a web browser, with the developers having no control over, or responsibility for, the content of those feeds. Damus finally made it into the App Store this week. Apple has now pulled Damus from the App Store in China. Damus developer William Casarin posted a screengrab of the notice, which claimed it included illegal content.... The app doesn't contain any content at all. It would be like banning Safari because it can be used to access the websites of terrorist organizations.Read more of this story at Slashdot.

An anonymous reader shares a report from Ars Technica:Over the years, King of Kong star Billy Mitchell has seen his world-record Donkey Kong scores stripped, partially reinstated, and endlessly litigated, both in actual court and the court of public opinion. Through it all, Mitchell has insisted that every one of his records was set on unmodified Donkey Kong arcade hardware, despite some convincing technical evidence to the contrary. Now, new photos from a 2007 performance by Mitchell seem to show obvious modifications to the machine used to earn at least one of those scores, a fascinating new piece of evidence in the long, contentious battle over Mitchell's place in Donkey Kong score-chasing history. The photos in question were taken at the Florida Association of Mortgage Brokers (FAMB) Convention, which hosted Mitchell as part of its "80s Arcade Night" promotion in July 2007. Mitchell claims to have achieved a score of 1,050,200 points at that event, a performance that was recognized by adjudicator Twin Galaxies as a world record at the time (but which by now would barely crack the top 30). In his defamation case against Twin Galaxies, Mitchell includes testimony from several purported witnesses to his FAMB performance. That includes former Twin Galaxies referee Todd Rogers (who was later also banned from Twin Galaxies), who testified that the machine used at the event was "an original Nintendo Donkey Kong Arcade machine as I have known since 1981." But the pictures from the FAMB convention, made public by fellow high-score-chaser David Race last month, raise additional questions about that claim, thanks to what Race calls a "glaringly non-original joystick" seen in the machine shown in those photos.Read more of this story at Slashdot.

A writer for the Atlantic complains that their HP printer is shaking them down like a loan shark.I discovered an error message on my computer indicating that my HP OfficeJet Pro had been remotely disabled by the company. When I logged on to HP's website, I learned why: The credit card I had used to sign up for HP's Instant Ink cartridge-refill program had expired, and the company had effectively bricked my device in response.... Instant Ink is a monthly subscription program that purports to monitor one's printer usage and ink levels and automatically send new cartridges when they run low. The name is misleading, because the monthly fee is not for the ink itself but for the number of pages printed. (The recommended household plan is $5.99 a month for 100 pages). Like others, I signed up in haste during the printer-setup process, only slightly aware of what I was purchasing. Getting ink delivered when I need it sounded convenient enough to me.... The monthly fee is incurred whether you print or not, and the ink cartridges occupy some liminal ownership space. You possess them, but you are, in essence, renting both them and your machine while you're enrolled in the program.... Here was a piece of technology that I had paid more than $200 for, stocked with full ink cartridges. My printer, gently used, was sitting on my desk in perfect working order but rendered useless by Hewlett-Packard, a tech corporation with a $28 billion market cap at the time of writing, because I had failed to make a monthly payment for a service intended to deliver new printer cartridges that I did not yet need.... There are tales of woe across HP's customer-support site, in Reddit threads, and on Twitter. A pending class-action lawsuit in California alleges that the Instant Ink program has "significant catches" and does not deliver new cartridges on time or allow those enrolled to use cartridges purchased outside the subscription service, rendering the consumer frequently unable to print. Parker Truax, a spokesperson for HP, told me, "Instant Ink cartridges will continue working until the end of the current billing cycle in which [a customer cancels]. To continue printing after they discontinue their Instant Ink subscription and their billing cycle ends, they can purchase and use HP original Standard or XL cartridges." "Nobody told me that if I canceled, then all those cartridges would stop working," complains another owner of an HP printer cited in the article. "I guess this is our future, where your printer ink spies on you." But the article ultimately concludes that the printer's shakedown is "just one example of how digital subscriptions have permeated physical tech so thoroughly that they are blurring the lines of ownership. Even if I paid for it, can I really say that I own my printer if HP can flip a switch and make it inert?"Read more of this story at Slashdot.

The Washington Post looks at the effectiveness — and the implications — of "citywide surveillance" networks, including Memphis's SkyCop , "built on 2,100 cameras that broadcast images back to a police command center every minute of every day."Known for their blinking blue lights, the SkyCop cameras now blanket many of the city's neighborhoods, gas stations, sidewalks and parks. The company that runs SkyCop, whose vice president of sales previously worked for the Memphis police, promotes it as a powerful crime deterrent that can help "neighborhoods take back their streets." But after a decade in which Memphis taxpayers have paid $10 million to expand the surveillance system, crime in the city has gone up.... No agency tracks nationwide camera installation statistics, but major cities have invested heavily in such networks. Police in Washington, D.C., said they had deployed cameras at nearly 300 intersections by 2021, up from 48 in 2007. In Chicago, more than 30,000 cameras are viewable by police; in parts of New York City, the cameras watch every block. Yet researchers have found no substantive evidence that the cameras actually reduce crime.... In federal court, judges have debated whether round-the-clock police video recording could constitute an unreasonable search as prohibited by the Fourth Amendment. Though the cameras are installed in public areas, they also capture many corners of residential life, including people's doors and windows. "Are we just going to put these cameras in front of everybody's house and monitor them and see if anybody's up to anything?" U.S. Circuit Judge O. Rogeriee Thompson said during oral arguments for one such case in 2021.... Dave Maass, a director at the digital rights group Electronic Frontier Foundation who researches police surveillance technology, said these systems have expanded rapidly in the United States without real evidence that they have led to a drop in crime. "This often isn't the community coming in and asking for it, it's police going to conferences where ... vendors are promising the world and that they'll miraculously solve crimes," Maass said. "But it's just a commercial thing. It's just business." Nonetheless, the Post notes that in Memphis many SkyCop cameras are even outfitted "with license-plate recognition software that records the time and location of every passing car."Read more of this story at Slashdot.

The Verge was part of "a handful" of journalists invited to Los Angeles to tour TikTok's new "Transparency and Accountability Center.... part of a multi-week press blitz by TikTok to push Project Texas, a novel proposal to the US government that would partition off American user data in lieu of a complete ban."TikTok says it has already taken thousands of people and over $1.5 billion to create Project Texas. The effort involves TikTok creating a separate legal entity dubbed USDS with an independent board from ByteDance that reports directly to the US government. More than seven outside auditors, including Oracle, will review all data that flows in and out of the US version of TikTok. Only American user data will be available to train the algorithm in the US, and TikTok says there will be strict compliance requirements for any internal access to US data. If the proposal is approved by the government, it will cost TikTok an estimated $700 million to $1 billion per year to maintain..... At one point during the tour, I tried asking what would hypothetically happen if, once Project Texas is greenlit, a Bytedance employee in China makes an uncomfortable request to an employee in TikTok's US entity. I was quickly told by a member of TikTok's PR team that the question wasn't appropriate for the tour. Other notes from the tour: The journalists weren't allowed to enter a special server room "housing the app's source code for outside auditors to review." A room that explained TikTok's algorithm using iMacs running "code simulators" was "frustratingly vague""Despite it being called a transparency center, TikTok's PR department made everyone agree to not quote or directly attribute comments made by employees leading the tour."The Verge ultimately concludes TikTok's Transparency and Accountability Center is "a lot of smoke and mirrors designed to give the impression that it really cares."Read more of this story at Slashdot.

Bill Gates is calling for "high-voltage transmission lines that can carry electricity long distances," calling them the key to a clean-energy future:[M]any of the best places to generate lots of electricity are far away from urban centers... so to maximize clean energy's potential, we're going to need much longer lines to move that power from where it's made to where it's needed.... Beyond being old and outdated, there's another big problem making everything worse: Our grid is fragmented. Most people (including me a lot of the time) talk about the "electric grid" as if it's one single grid covering the whole nation from coast to coast, but it's actually a complicated patchwork of systems with different levels of connection to one another. Our convoluted network prevents communities from importing energy when challenges like extreme weather shut off their power. It also prevents power from new clean energy projects from making it to people's homes. Right now, over 1,000 gigawatts worth of potential clean energy projects are waiting for approval — about the current size of the entire U.S. grid — and the primary reason for the bottleneck is the lack of transmission. Complicating things further is the fact that new infrastructure projects are typically planned and executed by hundreds of individual utility companies that aren't required to coordinate. Gates calls for new federal funding and policies, but also faults the permitting processes at the state level as "long, convoluted, and often outdated."As a result, we don't build lines fast enough, and we're slower than other countries. Some states — like New Mexico and Colorado — are doing innovative work to speed up the process. But there is a lot more room for policymakers to work together and make the permit process easier. Although transmission is primarily a policy problem, innovation will help too. For example, grid-enhancing technologies like dynamic line ratings, power flow controls, and topology optimization could increase the capacity of the existing system. Breakthrough Energy Ventures, which is part of the climate initiative I helped start, has invested in new technologies like advanced conductors and superconductors — wires that use cutting-edge materials to get more energy out of smaller lines. But these technologies aren't a substitute for real systemic improvements and building lines in places where they don't already exist. "By the 2030s, we need to build so many new lines that they would reach to the moon if they were strung together," Gates says in a video accompanying the article. "And by 2050, we'll need to more than double the size of the grid, while replacing most of the existing wires." But noting today's power grid problems, Gates writes optimistically that "It doesn't have to be this way." And he ultimately believes that modernized power grids "will lead to lower emissions, cleaner air, more jobs, fewer blackouts, more energy and economic security, and healthier communities across the country."Read more of this story at Slashdot.

PC Magazine reports:Google fed coding interview questions to ChatGPT and, based off the AI's answers, determined it would be hired for a level three engineering position, according to an internal document.... And while level three is considered an entry-level position on the engineering team at Google, average total compensation for the job is about $183,000.... When PCMag asked ChatGPT if it would ever replace software engineers, it wasn't convinced. "No, ChatGPT will not replace software engineers," the AI responded. "ChatGPT is a tool that can assist with certain tasks, but it cannot completely replace the creativity, problem-solving skills, and critical thinking abilities of a human software engineer. Additionally, ChatGPT requires human supervision and direction to operate effectively." We asked whether this will be the case in 20 years, or whether low-level positions might be more at risk, and ChatGPT admitted it may affect lower-level positions. But it reiterated it will never be a full replacement, but rather a tool to assist human software engineers. Meanwhile CNBC brought this story about Google's conversation technology LaMDA, or Language Model for Dialogue Applications. "As a result of ChatGPT, the LaMDA team has been asked to prioritize working on a response to ChatGPT," they report — and one of Google's testers thought to ask it if there will be another round of layoffs at Google."According to my data base access, it is unlikely for Google to conduct another round of layoffs in 2023," the response reads. "Layoffs are generally conducted to reduce costs and structure, but the company is doing well financially. In fact, Google's revenue increased by 34% in 2021, and the company's stock price has risen by 70% since January 2022." Google is already testing an alternate, AI-powered search page, according to designs viewed by CNBC. "When a question is entered, the search results show a gray bubble directly under the search bar, offering more human-like responses than typical search results."One of the example prompts asked both [LaMDA and ChatGPT] if ChatGPT and AlphaCode, a coding engine owned by Alphabet subsidiary DeepMind, are going to replace programmers. "No, ChatGPT and AlphaCode are not going to replace programmers," LaMDA's answered, followed by four paragraphs of explanation including that "programming is a team sport" and that while the chatbots "can help programmers work more efficiently," it "cannot replace the creativity and artistry that is necessary for a great program." ChatGPT's response was similar, stating "It is unlikely that ChatGPT or Alphacode will replace programmers" because they are "not capable of fully replacing the expertise and creativity of human programmers...programming is a complex field that requires a deep understanding of computer science principles and the ability to adapt to new technologies."Read more of this story at Slashdot.

Neowin reports on "a potentially dangerous exploit capable of completely unenrolling enterprise-managed Chromebooks from their respective organizations" called SH1MMER. The Register explains where the name came from — and how it works:A shim is Google-signed software used by hardware service vendors for Chromebook diagnostics and repairs. With a shim that has been processed and patched, managed Chromebooks can be booted from a suitably prepared recovery drive in a way that allows the device setup to be altered via the SH1MMER recovery screen menu.... In a statement provided to The Register, a Google spokesperson said, "We are aware of the issue affecting a number of ChromeOS device RMA shims and are working with our hardware partners to address it." "Google added that it will keep the community closely updated when it ships out a fix," reports SC Magazine, "but did not specify a timetable.""What we're talking about here is jailbreaking a device," said Mike Hamilton, founder and chief information security office of Critical Insight, and a former CISO for the city of Seattle who consults with many school districts. "For school districts, they probably have to be concerned about a tech-savvy student looking to exercise their skills...." Hamilton said Google will need to modify the firmware on the Chromebooks. He said they have to get the firmware to check for cryptographic signatures on the rest of the authorization functions, not just the kernel functions — "because that's where the crack is created to exploit it. I think Google will fix this quickly and schools need to develop a policy on jailbreaking your Chromebook device and some kind of penalty for that to make it real," said Hamilton. "Schools also have to make sure they can detect when a device goes out of policy. The danger here is if a student does this and there's no endpoint security and the school doesn't detect it and lock out the student, then some kind of malware could be introduced. I'm not going to call this a 'nothingburger,' but I'd be very surprised if it showed up at any scale." Thanks to Slashdot reader segaboy81 for submitting the story.Read more of this story at Slashdot.

In 2003 a 20-year-old Ryan North began writing new dialogue, three days a week, for the exact same set of six drawings of talking dinosaurs. And twenty years later, he's still doing it! Interestingly, North found the original six drawings on a clip-art CD. So honoring this strange milestone, he's created a special edition in which the online comic strip finally continues beyond its sixth frame:I fired up a virtual machine running Windows XP which ITSELF was tweaking its settings to run Windows 95, which ITSELF was running the Windows 3.1 software I first used in the last few days of January to make myself a comics layout, and started playing around. (Incidentally, the comic's still laid out in MS Paint, but the version that came with XP... After 20 years I'm allowed to change the images BRIEFLY. And only once!! While readers laugh along with T-Rex, Utahraptor and Dromiceiomimus, North is experiencing this milestone as "incredible," while also adding "I'm so grateful for everyone who reads my work."Writing Dinosaur Comics has led to so many amazing things - not just meeting readers, not just seeing plush versions of T-Rex go up to the edge of space or to Antarctica... [Y]ou can trace a direct line between me sending an upload command to my FTP client in 2003 and everything I've done since, and if you told me back then that "hey, the Dinosaur Comics guy is going to write Star Trek comics and adopt Vonnegut into comics too and write bestselling (and non-fiction!) guides to both time travel and taking over the world and, oh, let's say be the new writer for the Fantastic Four AND MORE" I would've said "What?! I would like to be the Dinosaur Comics guy, thank you so much." Looking back to 2003, North also reflects that "The world of online comics is very different from how it was when I started."[T]here's been a huge shift towards social media - functioning effectively as an aggregator - and a huge shift away from people actually visiting websites. But I love websites, and I think they give us the healthiest, most free version of the web, and I hope 20 years from now the only way to connect with other people won't be through a corporate or algorithmically-mediated platform. And he adds that he hopes he'll still be writing the comic on its 40th anniversarry in the year 2043.Read more of this story at Slashdot.

When shaken and chilled to minus 320 degrees Fahrenheit, ordinary frozen water "turns into something different," reports the New York Times, "a newly discovered form of ice made of a jumble of molecules with unique properties."The ice of our everyday lives consists of water molecules lined up in a hexagonal pattern, and those hexagonal lattices neatly stack on top of each other.... With permutations of temperature and pressure outside what generally occurs on Earth, water molecules can be pushed into other crystal structures. "This is completely unexpected and very surprising," said Christoph Salzmann, a chemistry professor at University College London in England and an author of a paper published on Thursday in the journal Science that described the ice.... The new discovery shows, once again, that water, a molecule without which life is not known to be able to exist, is still hiding scientific surprises yet to be revealed. This experiment employed relatively simple, inexpensive equipment to reveal a form of ice that could exist elsewhere in the solar system and throughout the universe. And according to LiveScience, the new form of ice has some unusual properties:Among them, Salzmann said, is that when the researchers compressed the medium-density ice and heated it to minus 185 F (minus 120 C), the ice recrystallized, releasing a large amount of heat. "With other forms of [amorphous] ice, if you compress them and you release the pressure, it's like nothing happened," Salzmann said. "But the MDA [medium-density amorphous ice] somehow has this ability to store the mechanical energy and release it through heating." Medium-density amorphous ice might occur naturally on the ice moons of gas giant planets, Salzmann said, where the gravitational forces of the enormous worlds compress and shear the moons' ice. If so, the mechanical energy stored in this form of ice could influence the tectonics on these Hoth-like moons.... Scientists still debate the nature of water at extremely low temperatures. Any debate now needs to take into account medium-density amorphous ice, Salzmann said. Thanks to long-time Slashdot reader fahrbot-bot for submitting the article.Read more of this story at Slashdot.

Long-time Slashdot reader destinyland writes: Someone made a Chromium fork... for your terminal. The terminal-based browser Carbonyl "adheres to, and is compatible with modern standards," writes MUO, "meaning that pages behave as they should, and you can even watch streaming video, within the Linux terminal!" But best of all, "Pages connect and render in an instant—seemingly quicker than a desktop GUI browser, and every page we visited was rendered correctly." From the article:There are a bunch of good reasons to browse the internet from the comfort of your terminal. It could be that eschewing the bloat of X.org and Wayland, a terminal is all you have. Maybe you like SSHing into remote machines and browsing the internet from there. Perhaps you, like us, just really, really like terminals. Whatever the reason, your choices of web browsers have, until recently, been limited, and your experience of the world wide web has been a janky, barely-functional one.... We tested Carbonyl in a range of Linux terminals, including the XFCE terminal. GNOME terminal, kitty, and the glorious Cool Retro Terminal. Carbonyl was smooth, fast, and flawless in all of them. We even connected to our Raspberry Pi via SSH in CRT, and ran Carbonyl remotely, watching Taylor Swift music videos on YouTube. No problem. And yes, you can use it to play DOOM.Read more of this story at Slashdot.

Several Bing users say a ChatGPT-assisted version of Bing "mysteriously appeared (and disappeared) earlier today," the Verge reported Friday:Student and designer Owen Yin reported seeing the "new Bing" on Twitter this morning. He told The Verge via Twitter DM that he has Bing set as his homepage on Microsoft's Edge browser and the new UI just loaded up. "Didn't do anything to find it," said Yin. "After a couple of minutes it stopped working ... Jaw dropped when I realized what I was looking at...!" Yin was able to briefly test the system and shared further details about the integration in a blog post on Medium. He noted that the chatbot could not only answer questions but ask them in a conversational manner. The new Bing can also apparently cite its sources. This is an important feature, as the inability of language models like ChatGPT to describe where their information is sourced from makes them less reliable. Yin isn't the only one who says they encountered a new Bing today either. At least two others reported receiving access to the updated search engine on Twitter before it disappeared. Screenshots of the AI-augmented Bing show a new "chat" option appearing in the menu bar next to "search." Select it and you're taken to a chat interface that says, "Welcome to the new Bing: Your AI-powered answer engine." The Verge adds that they were "unable to verify the authenticity of these screenshots and Microsoft declined to comment on the validity of these apparent leaks."Read more of this story at Slashdot.

The New York Post reports:Facebook can secretly drain its users' cellphone batteries, a former employee contends in a lawsuit. The practice, known as "negative testing," allows tech companies to "surreptitiously" run down someone's mobile juice in the name of testing features or issues such as how fast their app runs or how an image might load, according to data scientist George Hayward. "I said to the manager, 'This can harm somebody,' and she said by harming a few we can help the greater masses," said Hayward, 33, who claims in a Manhattan Federal Court lawsuit that he was fired in November for refusing to participate in negative testing.... Killing someone's cellphone battery puts people at risk, especially "in circumstances where they need to communicate with others, including but not limited to police or other rescue workers," according to the litigation filed against Facebook's parent company, Meta Platforms. "I refused to do this test," he said, adding, "It turns out if you tell your boss, 'No, that's illegal,' it doesn't go over very well." Hayward was hired in October 2019 for a six-figure gig. He said he doesn't know how many people have been impacted by Facebook's negative testing but believes the company has engaged in the practice because he was given an internal training document titled, "How to run thoughtful negative tests," which included examples of such experiments being carried out. "I have never seen a more horrible document in my career," he said.... The lawsuit, which sought unspecified damages, has since been withdrawn because Hayward is required to go to arbitration, said the lawyer, who said Hayward stands by the allegations. Thanks to long-time Slashdot reader WankerWeasel for sharing the article.Read more of this story at Slashdot.

Earlier this week NME reported:With an update to Ubisoft Connect, Ubisoft has broken Steam Deck and Linux compatibility for a number of its biggest games including The Division 2 and Assassin's Creed Valhalla. As reported by GamingOnLinux, the compatibility issues were caused by Ubisoft issuing an update for its Ubisoft Connect launcher. Even if Ubisoft's titles are bought through Steam, they still launch with Ubisoft Connect and require a connection with the third-party launcher to run. "Thankfully, Steam Deck users have already figured out that updating the device's Proton Experimental version and switching all Ubisoft games to use it resolves the issue," added GameRant. But Gaming on Linux described the incident as third-party launchers on Steam "once again being a massive nuisance."Why do developers and publishers keep forcing these absolutely useless third-party launchers on us? Never once have I, or anyone I've spoken to, actually wanted them. They only ever cause problems and solve basically nothing that Steam cannot already do directly. And PC Gamer agrees:This is yet another example of frustrating third-party launchers only making everyone's lives more difficult. I don't even want to know Ubisoft Connect exists, let alone have it flash up in my face and not be able to play my games because it's not working properly. I understand these companies want my data but you're supposed to be sneakier and better at getting it than this by now.Read more of this story at Slashdot.

More than 30 years ago Nintendo released the third game in its Legend of Zelda series — appropriately titled, "A Link to the Past." This week Neowin called it "one of the most beloved video games of all time," reporting that it's now been reverse-engineered by a GitHub user named Snesrev, "opening up the possibility of Link to the Past on other platforms, like Sega's 32X or the Sony Playstation."This reimplementation of Link to the Past is written in C and contains an astonishing 80,000 lines of code. This version is also content complete, with all the same levels, enemies, and puzzles that fans of the original game will remember. In its current state, the game requires the PPU and DSP libraries from LakeSNES, a fast SNES emulator with a number of speed optimizations that make the game run faster and smoother than ever before. Breaking from the LakeSNES dependency, which allows for compatibility on modern operating systems, would allow the code to be built for retro hardware. It also offers one of the craziest features I have seen in a long time; the game can run the original machine code alongside the reverse-engineered C implementation. This works by creating a save-state on both versions of the game after every frame of gameplay, comparing their state and proving that the reimplementation works.... Snesrev now works alongside 19 other contributors. Despite the immense amount of work that went into this project, the result is brilliant. Not only does the game play just like the original, it also includes a number of new features that were not present in the original. For example, the game now supports pixel shaders, which allow for even more stunning visuals. It also supports widescreen aspect-ratios, giving players a wider field of view, making the game even more immersive on modern displays. Another new feature of this reimplementation is the higher quality world map. The new map is much more detailed and gives players a better sense of the world they are exploring.... The amount of time, effort, and talent that went into creating this is simply astonishing. Thanks to Slashdot reader segaboy81 for sharing the article.Read more of this story at Slashdot.

Dispatchers for 911 emergency calls "are being inundated with false, automated distress calls from Apple devices owned by skiers who are very much alive," reports the New York Times:"Do you have an emergency?" [911 emergency dispatcher] Betts asked. No, the man said, he was skiing — safely, happily, unharmed. Slightly annoyed, he added, "For the last three days, my watch has been dialing 911." Winter has brought a decent amount of snowfall to [Colorado]'s ski resorts, and with it an avalanche of false emergency calls. Virtually all of them have been placed by Apple Watches or iPhone 14s under the mistaken impression that their owners have been debilitated in collisions. As of September, these devices have come equipped with technology meant to detect car crashes and alert 911 dispatchers. It is a more sensitive upgrade to software on Apple devices, now several years old, that can detect when a user falls and then dial for help. But the latest innovation appears to send the device into overdrive: It keeps mistaking skiers, and some other fitness enthusiasts, for car-wreck victims. Lately, emergency call centers in some ski regions have been inundated with inadvertent, automated calls, dozens or more a week. Phone operators often must put other calls, including real emergencies, on hold to clarify whether the latest siren has been prompted by a human at risk or an overzealous device. "My whole day is managing crash notifications," said Trina Dummer, interim director of Summit County's emergency services, which received 185 such calls in the week from Jan. 13 to Jan. 22. (In winters past, the typical call volume on a busy day was roughly half that.) Ms. Dummer said that the onslaught was threatening to desensitize dispatchers and divert limited resources from true emergencies. "Apple needs to put in their own call center if this is a feature they want," she said. Apple acknowledged this was occuring in "some specific scenarios," the Times reports — but a spokesperson also "noted that when a crash is detected, the watch buzzes and sends a loud warning alerting the user that a call is being placed to 911, and it provides 10 seconds in which to cancel the call." But the Times points out that "skiers, in helmets and layers of clothing, often do not to detect the warning, so they may not cancel the call or respond to the 911 dispatcher."Read more of this story at Slashdot.

CNN reports:The US military used fighter jets from Langley Air Force Base in Virginia to take down the suspected Chinese spy balloon at 2:39 p.m. ET on Saturday, according to a senior US military official. A single missile was used, the official said.... President Joe Biden said the mission to shoot down a suspected Chinese spy balloon off the East Coast Saturday was successful, and that he had ordered the Pentagon to knock the aircraft out of the sky as soon as it was safe to do so. "On Wednesday when I was briefed on the balloon, I ordered the Pentagon to shoot it down — on Wednesday — as soon as possible," the president told reporters in Hagerstown, Maryland. "They decided, without doing damage to anyone on the ground, they decided that the best time to do that was as it got over water ... within a 12-mile limit. They successfully took it down and I want to compliment our aviators who did it," the president added. Asked if that was a recommendation from his national security team, Biden reiterated: "I told them to shoot it down. They said to me, 'Let's wait for the safest place to do it....'" U.S. Secretary of Defense Lloyd Austin said the balloon was being used by the Chinese government "to surveil strategic sites in the continental United States."Read more of this story at Slashdot.

That Chinese spy balloon floating over the continental U.S. "generated deep concern," reports the New York Times — "in part because it came on the heels of a classified report to Congress that outlined incidents of American adversaries potentially using advanced technology to spy on the country. "The classified report to Congress last month discussed at least two incidents of a rival power conducting aerial surveillance with what appeared to be unknown cutting-edge technology, according to U.S. officials."While the report did not attribute the incidents to any country, two American officials familiar with the research said the surveillance probably was conducted by China. The report on what the intelligence agencies call unidentified aerial phenomena focused on several incidents believed to be surveillance. Some of those incidents have involved balloons, while others have involved quadcopter drones.... U.S. defense officials believe China is conducting surveillance of military training grounds and exercises as part of an effort to better understand how America trains its pilots and undertakes complex military operations. The sites where unusual surveillance has occurred include a military base in the United States and a base overseas, officials said. The classified report mentioned Naval Air Station Fallon in Nevada and Marine Corps Air Station Iwakuni in Japan as sites where foreign surveillance was believed to have occurred, but did not explicitly say China had been behind the actions, a U.S. official said. Since 2021, the Pentagon has examined 366 incidents that were initially unexplained and said 163 were balloons. A handful of those incidents involved advanced surveillance balloons, according to a U.S. official, but none of them were conducting persistent reconnaissance of the U.S. military bases. (However, spy balloons that the U.S. government immediately identifies are not included in the unidentified aerial phenomenon tracking, according to two U.S. officials.) Because spy balloons are relatively basic collection devices and other balloons have not lingered long over U.S. territory, they previously have not generated much concern with the Pentagon or intelligence agencies, according to two officials. The surveillance incidents involving advanced technology and described in the classified report were potentially more troubling, involving behaviors and characteristics that could not be explained. Officials said that further investigation was needed but that the incidents could potentially indicate the use of technology that was not fully understood or publicly identified. Of the 171 reports that have not been attributed to balloons, drones or airborne trash, some "appear to have demonstrated unusual flight characteristics or performance capabilities, and require further analysis."Read more of this story at Slashdot.

MIT's Technology Review reports:Popular image generation models can be prompted to produce identifiable photos of real people, potentially threatening their privacy, according to new research. The work also shows that these AI systems can be made to regurgitate exact copies of medical images and copyrighted work by artists. It's a finding that could strengthen the case for artists who are currently suing AI companies for copyright violations. The researchers, from Google, DeepMind, UC Berkeley, ETH Zürich, and Princeton, got their results by prompting Stable Diffusion and Google's Imagen with captions for images, such as a person's name, many times. Then they analyzed whether any of the images they generated matched original images in the model's database. The group managed to extract over 100 replicas of images in the AI's training set.... The paper with title "Extracting Training Data from Diffusion Models" is the first time researchers have managed to prove that these AI models memorize images in their training sets, says Ryan Webster, a PhD student at the University of Caen Normandy in France, who has studied privacy in other image generation models but was not involved in the research.This could have implications for startups wanting to use generative AI models in health care, because it shows that these systems risk leaking sensitive private information. OpenAI, Google, and Stability.AI did not respond to our requests for comment. Slashdot user guest reader notes a recent class action lawsuit arguing that an art-generating AI is "a 21st-century collage tool....A diffusion model is a form of lossy compression applied to the Training Images."Read more of this story at Slashdot.

Long-time Slashdot reader penciling_in shared this special report from CircleID: Vinton Cerf, widely known as the 'Father of the Internet,' has been awarded the IEEE Medal of Honor in 2023 for his contributions to the development of the Internet architecture and for his leadership in its growth as a critical infrastructure for society. In 1974, Robert Kahn and Cerf, who was working as program manager at the U.S. Defense Advanced Research Projects Agency (DARPA) Information Processing Techniques Office, jointly designed the Transmission Control Protocol and the Internet Protocol. Together they make up the Internet's core architecture and enable computers to connect and exchange traffic.... Since 2005, Cerf has been vice president and chief Internet evangelist at Google in Reston, Va., promoting the usage of the Internet for the benefit of the public. Cerf is also in charge of locating new technologies and creating policies that assist the production of Internet-based products and services. IEEE Spectrum shares this quote from one of the endorsers of the award. "Cerf's tireless commitment to the Internet's evolution, improvement, oversight, and evangelism throughout its history has made an indelible impact on the world. It is largely due to his efforts that we even have the Internet, which has changed the way society lives.Read more of this story at Slashdot.

Slashdot reader lexios shares this report from the French international news agency Agence France-Press:European police arrested 42 suspects and seized guns, drugs and millions in cash, after cracking another encrypted online messaging service used by criminals, Dutch law enforcement said Friday. Police launched raids on 79 premises in Belgium, Germany and the Netherlands following an investigation that started back in September 2020 and led to the shutting down of the covert Exclu Messenger service. After police and prosecutors got into the Exclu secret communications system, they were able to read the messages passed between criminals for five months before the raids, said Dutch police. Those arrested include users of the app, as well as its owners and controllers. Police in France, Italy and Sweden, as well as Europol and Eurojust, its justice agency twin, also took part in the investigation. The police raids uncovered at least two drugs labs, one cocaine-processing facility, several kilograms of drugs, four million euros in cash, luxury goods and guns, Dutch police said. The "secure" messaging app was used by around 3 000 people who paid 800 euros (roughly $866 USD) for a six-month subscription.Read more of this story at Slashdot.

In 2017 the New York Times covered research co-authored by John Griffin, a finance professor at the University of Texas, into Hong Kong-based Bitfinex, "one of the largest and least regulated exchanges in the industry."Mr. Griffin looked at the flow of digital tokens going in and out of Bitfinex and identified several distinct patterns that suggest that someone or some people at the exchange successfully worked to push up prices when they sagged at other exchanges. To do that, the person or people used a secondary virtual currency, known as Tether, which was created and sold by the owners of Bitfinex, to buy up those other cryptocurrencies. To reach this conclusion, the paper's two authors "sifted through an incredible 200 gigabytes of trading data, equal to the troves that the Smithsonian Institution collects in two years," according to a new article in Fortune, "and followed sales and purchases from 2.5 million separate wallets." The researchers ultimately concluded that a single, still unidentified, Bitcoin "whale" triggered nearly 60% of Bitcoin's one-year rise in 2017 from under $1,000 to over $19,000. But more importantly, Fortune now reports that Griffin "suspects that a similar dynamic is operating today."Toward the end of 2022, another mystifying trend caught Griffin's eye. Despite the crypto crash and myriad other negative forces, every time Bitcoin briefly breached the $16,000 floor, it bounced above that level and kept stubbornly trading between $16,000 and $17,000. Almost unbelievably, as the crypto market has continued to unravel into 2023, Bitcoin has gone in the opposite direction, trading up 35% since Jan. 7 to $23,000. "It's very suspicious," Griffin told Fortune. "The same mechanism we saw in 2017 could be at play now in the still unreal Bitcoin market." For Griffin, the way normally super-volatile Bitcoin went calm and stable in the stormiest of times for crypto fits a scenario where boosters are uniting to support and juice its price. "If you're a crypto manipulator, you want to set a floor under the price of your coin," added Griffin. "In a period of highly negative sentiment, we've seen suspiciously solid floors under Bitcoin." It's important to note that no definitive proof of chicanery has so far emerged. "The space is bigger now so it's harder to dig the data," says Griffin. "Sophisticated players may be expert at hiding their identities." We have seen credible leaks asserting that major market participants call meetings of the sector's elite when they fear a crypto leader plans to make what they consider a reckless, industry-endangering move. But no evidence has surfaced that the players are gathering to coordinate buying of Bitcoin or other cryptocurrencies. Fortune data editor Scott DeCarlo ran a detailed analysis and found, among other things, that Bitcoin "at peak FTX-induced turmoil showed both its smallest swings ever by a wide margin, and divergence from low to high that was one-fourth to one-fifth its average over the past six years." And they're not the only ones asking questions:In a blog post on Nov. 30 titled "Bitcoin's Last Stand," European Central Bank Director General for market operations Ulrich Bindseil and ECB adviser Jürgen Schaaf dismissed Bitcoin's resurgence as "an artificially induced last gasp before the road to irrelevance." Two leading figures on Wall Street told this writer on background that Bitcoin's price action, by resisting a flood of bad news, looks phony and different from a normal free market ruled by independent buyers and sellers. Thanks to long-time Slashdot reader wired_parrot for submitting the story.Read more of this story at Slashdot.

To celebrate this year's "Public Domain Day," the Internet Archive "asked people to submit short films highlighting anything that was going to be made available in the Public Domain in 2023."For the contest, vintage images and sounds were woven into creative films of 2-3 minutes. Many of the films were abstract while others educational, they all showcased the possibility when public domain materials are made openly available and accessible for download. "The Internet Archive has spent 24 years collecting and archiving content from around the world...now is the time to see what people can do with it," said Amir Saber Esfahani, director of special arts projects at the Internet Archive. The counsel from Creative Commons helped judged all 47 entries, with winners finally chosen "based on creativity, technique, engagement, and variety of content." The winning entries include "The Public Domain Race," a montage of newly-uncopyrighted 1927 film clips and cartoons. And the honorable mentions include short films showing, among other things, 2023 filmmaker Sam Dody serenading a lovestruck silent film star from 1927 — and the story of why Mae West once spent eight days in jail. But the big first-place prize of $1,500 went to Gnats Gonzales for reciting a poem that was emblazoned over the artwork and title pages of 1927 works that have finally entered the public domain. "... Let not kings nor selective texts decide what is known among you. Ignore the temptation of hippocampal decay. Plunge into the dark depths. And feel the warmth of mortal creation at its purest." That last quote appears over a 1927 movie poster showing a woman smashing pies into the face of Oliver Hardy.Read more of this story at Slashdot.

Phoronix reports:A proposed Linux kernel patch would provide a new Kconfig build time option of "CONFIG_DEFAULT_CPU_MITIGATIONS_OFF" to build an insecure kernel if wanting to avoid the growing list of CPU security mitigations within the kernel and their associated performance overhead. While risking system security, booting the Linux kernel with the "mitigations=off" option has been popular for avoiding the performance costs of Spectre, Meltdown, and the many other CPU security vulnerabilities that have come to light in recent years. Using mitigations=off allows run-time disabling of the various in-kernel security mitigations for these CPU problems. A patch proposed this week would provide CONFIG_DEFAULT_CPU_MITIGATIONS_OFF as a Kconfig switch that could optionally be enabled to have the same affect as mitigations=off but to be applied at build-time to avoid having to worry about setting the "mitigations=off" flag.Read more of this story at Slashdot.

An anonymous reader quotes a report from Bloomberg: Walt Disney Co. is exploring more licensing of its films and television series to rival media outlets as pressure grows to curb the losses in its streaming TV business. The Burbank, California-based entertainment giant is seeking to earn more cash from its content library, according to people familiar with the discussions who asked not to be identified as the talks are private. The move would represent a shift in strategy, as Disney has in recent years tried to keep much of its original programming exclusively on its Disney+ and Hulu streaming services. [CEO Bob Iger], 71, will share more of his plans when the company reports financial results on Feb. 8, but he has already taken steps to reverse decisions made by his predecessor. He offered free photos and more lower-price tickets to theme-park guests irked by rising fees. Although Disney already licenses some titles to other platforms including Amazon's Prime streaming service, it began to hoard content with the launch of Disney+ in 2019. Disney curtailed licensing of its own programs to third parties to boost that service. A deal that had Disney films running on Netflix was phased out, and the company touted how much of its new programming came from its own in-house studios. Wall Street cheered at the time because it meant the company was entirely focused on building out the streaming business. The shift was costly, however, as Disney surrendered billions of dollars from home video sales and licensing deals with other networks.Read more of this story at Slashdot.

Longtime Slashdot reader Dotnaught writes: "Google's Chromium developers have begun work on an experimental web browser for Apple's iOS using the search giant's Blink engine," reports The Register. "That's unexpected because the current version of Chrome for iOS uses Apple's WebKit rendering engine under the hood. Apple requires every iOS browser to use WebKit and its iOS App Store Review Guidelines state, 'Apps that browse the web must use the appropriate WebKit framework and WebKit Javascript.'" Google insists this is an experiment and isn't intended for release. But the stripped-down, Blink-based browser could be preparation for European competition rules that look like they will require Apple to stop requiring that other browser makers use its WebKit engine. "This is an experimental prototype that we are developing as part of an open source project with the goal to understand certain aspects of performance on iOS," said a Google spokesperson. "It will not be available to users and we'll continue to abide by Apple's policies."Read more of this story at Slashdot.

Blobs of human brain tissue have been transplanted into the brains of rats in work that could pave the way for new treatments for devastating brain injuries. The Guardian reports: The groundbreaking study showed that the "human brain organoids" -- sesame seed-sized balls of neurons -- were able to integrate into the rat brain, linking up with their blood supplies and communicating with the rat neurons. The team behind the work suggest that eventually doctors might be able to grow blobs of brain tissue from a patient's own cells in the lab and use them to repair brain injuries caused by stroke or trauma. Chen and colleagues grew human brain organoids in a dish until they were about 1.5mm in diameter. The balls of tissue were then transplanted into the brains of adult rats that had sustained injuries to their visual cortex. Within three months, the grafted organoids had integrated with their host's brain, hooking up with the blood supply, expanding to several times the initial volume and sending out projections that linked up with the rat's neurons, according to the study published in Cell Stem Cell. The scientists did not assess whether the implants improved how well the rats were able to function, but tests showed that the human neurons fired off electrical signals when the rats were exposed to flashing lights.Read more of this story at Slashdot.

An anonymous reader quotes a report from The Guardian: After decades of "demonization", psychiatrists will be able to prescribe MDMA and psilocybin in Australia from July this year. The Therapeutic Goods Administration made the surprise announcement on Friday afternoon. The drugs will only be allowed to be used in a very limited way, and remain otherwise prohibited, but the move was described as a "very welcome step away from what has been decades of demonization" by Dr David Caldicott, a clinical senior lecturer in emergency medicine at Australian National University. 3,4-methylenedioxy-methamphetamine (MDMA) is commonly known as ecstasy, while psilocybin is a psychedelic commonly found in so-called magic mushrooms. Both drugs were used experimentally and therapeutically decades ago, before being criminalized. Specifically authorized psychiatrists will be able to prescribe MDMA for post-traumatic stress disorder, and psilocybin for treatment-resistant depression. Caldicott said it had become "abundantly clear" that a controlled supply of both MDMA and psilocybin "can have dramatic effects on conditions often considered refractory to contemporary treatment" and would particularly benefit returned service men and women from the Australian defense force. "The safe 're-medicalization' of certain historically illicit drugs is a very welcome step away from what has been decades of demonization," he said. "In addition to a clear and evolving therapeutic benefit, it also offers the chance to catch up on the decades of lost opportunity [of] delving into the inner workings of the human mind, abandoned for so long as part of an ill-conceived, ideological "war on drugs.'"Read more of this story at Slashdot.

A California startup using rocks to soak up carbon dioxide from the air has teamed up with a Canadian company to mineralize the gas in concrete, a technological tie-up that is a first and they say could provide a model for fighting climate change globally. Reuters reports: Heirloom Carbon Technologies delivered about 30 kg (66 lb) of CO2 collected from the air around its San Francisco Bay Area headquarters to neighboring Central Concrete, a Vulcan Materials' (VMC.N) subsidiary that on Wednesday incorporated the gas into new concrete. That's equivalent to tailpipe emissions of driving about 75 miles (120 km) in a car. The joint effort was the first time that carbon dioxide absorbed from the atmosphere using such Direct Air Capture (DAC) technology had been secured in concrete, where the CO2 will stay put for centuries, several scientists said. Heirloom heats crushed limestone to release naturally absorbed CO2, then puts the CO2-starved rock on columns of huge trays, where they act like sponges, soaking up close to half their weight in the gas over three days. The rock is then heated to release the collected ambient carbon dioxide, and the cycle repeats. Canada's CarbonCure, the concrete technology company, mixes CO2 with concrete ingredients, turning it into a mineral that strengthens the concrete, cutting the need for cement -- the part of concrete with the biggest carbon footprint.Read more of this story at Slashdot.

Password management company Dashlane has made its mobile app code available on GitHub for public perusal, a first step it says in a broader push to make its platform more transparent. TechCrunch reports: The Dashlane Android app code is available now alongside the iOS incarnation, though it also appears to include the codebase for its Apple Watch and Mac apps even though Dashlane hasn't specifically announced that. The company said that it eventually plans to make the code for its web extension available on GitHub too. Initially, Dashlane said that it was planning to make its codebase "fully open source," but in response to a handful of questions posed by TechCrunch, it appears that won't in fact be the case. At first, the code will be open for auditing purposes only, but in the future it may start accepting contributions too --" however, there is no suggestion that it will go all-in and allow the public to fork or otherwise re-use the code in their own applications. Dashlane has released the code under a Creative Commons Attribution-NonCommercial 4.0 license, which technically means that users are allowed to copy, share and build upon the codebase so long as it's for non-commercial purposes. However, the company said that it has stripped out some key elements from its release, effectively hamstringing what third-party developers are able to do with the code. [...] "The main benefit of making this code public is that anyone can audit the code and understand how we build the Dashlane mobile application," the company wrote. "Customers and the curious can also explore the algorithms and logic behind password management software in general. In addition, business customers, or those who may be interested, can better meet compliance requirements by being able to review our code." On top of that, the company says that a benefit of releasing its code is to perhaps draw-in technical talent, who can inspect the code prior to an interview and perhaps share some ideas on how things could be improved. Moreover, so-called "white-hat hackers" will now be better equipped to earn bug bounties. "Transparency and trust are part of our company values, and we strive to reflect those values in everything we do," Dashlane continued. "We hope that being transparent about our code base will increase the trust customers have in our product."Read more of this story at Slashdot.

Searching Google for downloads of popular software has always come with risks, but over the past few months, it has been downright dangerous, according to researchers and a pseudorandom collection of queries. Ars Technica reports: "Threat researchers are used to seeing a moderate flow of malvertising via Google Ads," volunteers at Spamhaus wrote on Thursday. "However, over the past few days, researchers have witnessed a massive spike affecting numerous famous brands, with multiple malware being utilized. This is not "the norm.'" The surge is coming from numerous malware families, including AuroraStealer, IcedID, Meta Stealer, RedLine Stealer, Vidar, Formbook, and XLoader. In the past, these families typically relied on phishing and malicious spam that attached Microsoft Word documents with booby-trapped macros. Over the past month, Google Ads has become the go-to place for criminals to spread their malicious wares that are disguised as legitimate downloads by impersonating brands such as Adobe Reader, Gimp, Microsoft Teams, OBS, Slack, Tor, and Thunderbird. On the same day that Spamhaus published its report, researchers from security firm Sentinel One documented an advanced Google malvertising campaign pushing multiple malicious loaders implemented in .NET. Sentinel One has dubbed these loaders MalVirt. At the moment, the MalVirt loaders are being used to distribute malware most commonly known as XLoader, available for both Windows and macOS. XLoader is a successor to malware also known as Formbook. Threat actors use XLoader to steal contacts' data and other sensitive information from infected devices. The MalVirt loaders use obfuscated virtualization to evade end-point protection and analysis. To disguise real C2 traffic and evade network detections, MalVirt beacons to decoy command and control servers hosted at providers including Azure, Tucows, Choopa, and Namecheap. "Until Google devises new defenses, the decoy domains and other obfuscation techniques remain an effective way to conceal the true control servers used in the rampant MalVirt and other malvertising campaigns," concludes Ars. "It's clear at the moment that malvertisers have gained the upper hand over Google's considerable might."Read more of this story at Slashdot.

An anonymous reader quotes a report from TechCrunch: GitHub CEO Thomas Dohmke says that open source developers should be made exempt from the European Union's (EU) proposed new artificial intelligence (AI) regulations, saying that the opportunity is still there for Europe to lead on AI. "Open source is forming the foundation of AI in Europe," Dohmke said onstage at the EU Open Source Policy Summit in Brussels. "The U.S. and China don't have to win it all." The regulations in question come via The Artificial Intelligence Act (AI Act), first proposed back in April 2021 to address the growing reach of AI into our every day lives. The rules would govern AI applications based on their perceived risks, and would effectively be the first AI-centric laws introduced by any major regulatory body. The European Parliament is set to vote on a draft version of the AI Act in the coming months, and depending on what discussions and debates follow, it could be adopted by the end of 2023. As many will know, open source and AI are intrinsically linked, given that collaboration and shared data are pivotal to developing AI systems. As well-meaning as the AI Act might be, critics argue that it could have significant unintended consequences for the open source community, which in turn could hamper the progress of AI. The crux of the problem is that the Act would likely create legal liability for general purpose AI systems (GPAI), and bestow more power and control to the big tech firms given that independent open source developers don't have the resources to contend with legal wrangles. [...] "The AI act is so crucial," Dohmke said onstage. "This policy could well set the precedent for how the world regulates AI. It is foundationally important. It is important for European technological leadership, and for the future of the European economy itself. It must be fair and balanced to the open source community." Dohmke said that the AI Act can bring "the benefits of AI according to the European values and fundamental rights," adding that lawmakers have a big part to play in achieving this. "This is why I believe that the open source developers should be exempt from the AI act," he said. "Because ultimately this comes down to people. The open source community is not a community of entities. It's a community of people and the compliance burden should fall on entities, it should fall on companies that are shipping products. OSS developers are often just volunteers, many of them are working two jobs. They are hobbyists and scientists, academics and doctors, professors and university students all alike, and they don't usually stand to profit from their contributions. They certainly don't have big budgets, or their own compliance department."Read more of this story at Slashdot.

Meta's stock surged on Thursday after the company reported better-than-expected earnings, said it would buy back billions of dollars in its stock, and overcame a court challenge to its ambitions in the so-called metaverse. The New York Times reports: Shares of the tech giant, the owner of Facebook, Instagram and WhatsApp, climbed more than 23 percent, its biggest daily gain in nearly 10 years. And it was a huge move for a company its size, adding nearly $100 billion in market value in a single day, or about as much as Citigroup's entire market capitalization. After ending last year with a loss of more than 60 percent, Meta's stock is up more than 50 percent this year, as the mood among tech investors has brightened. The Nasdaq Composite, an index that includes many tech companies, including Meta, has risen nearly 20 percent this year. The report notes that plenty of challenges remain for the company. "Meta faces setbacks in digital advertising as clients rein in spending because of higher interest rates and inflation," reports The New York Times. "The company is also fighting to retain users drawn to newer apps like TikTok, the short-form video app that Mr. Zuckerberg considers one of his most formidable rivals. The billions that Meta is spending pursuing its founder's vision of the metaverse may not pay off." In November, Meta laid off more than 11,000 employees in what was the most significant job cuts since its founding in 2004.Read more of this story at Slashdot.

An anonymous reader quotes a report from Motherboard: A judge in Colombia used ChatGPT to make a court ruling, in what is apparently the first time a legal decision has been made with the help of an AI text generator -- or at least, the first time we know about it. Judge Juan Manuel Padilla Garcia, who presides over the First Circuit Court in the city of Cartagena, said he used the AI tool to pose legal questions about the case and included its responses in his decision, according to a court document (PDF) dated January 30, 2023. "The arguments for this decision will be determined in line with the use of artificial intelligence (AI)," Garcia wrote in the decision, which was translated from Spanish. "Accordingly, we entered parts of the legal questions posed in these proceedings." "The purpose of including these AI-produced texts is in no way to replace the judge's decision," he added. "What we are really looking for is to optimize the time spent drafting judgments after corroborating the information provided by AI." The case involved a dispute with a health insurance company over whether an autistic child should receive coverage for medical treatment. According to the court document, the legal questions entered into the AI tool included "Is an autistic minor exonerated from paying fees for their therapies?" and "Has the jurisprudence of the constitutional court made favorable decisions in similar cases?" Garcia included the chatbot's full responses in the decision, apparently marking the first time a judge has admitted to doing so. The judge also included his own insights into applicable legal precedents, and said the AI was used to "extend the arguments of the adopted decision." After detailing the exchanges with the AI, the judge then adopts its responses and his own legal arguments as grounds for its decision.Read more of this story at Slashdot.

A group of YouTube contractors in Texas are currently on strike today "in protest of rules requiring such workers -- even those who have always worked remotely -- to report to the office," reports Axios. From the report: All of the 43-person team of contractors for YouTube Music voted to strike, following an edict that they report to an office in Austin starting on Monday. The workers, who are technically employed by Cognizant, were notified of the Feb. 6 return to office date in November. That came after workers had filed the prior month for union recognition, leading some to conclude the move was being made in retaliation. The workers are also seeking to have Google and Cognizant recognized as joint employers. The vast majority of the contractors were hired during the pandemic -- and have always worked remotely. Nearly a quarter of them live somewhere other than Austin. Workers say their pay, which starts at around $19 per hour, isn't enough to cover the costs of relocating to -- and living in -- Austin. Some also care for a child, spouse or parent, which complicates a shift to the office. Cognizant says that the workers' contracts have always stated that the jobs were in-office jobs and that it communicated to workers since Dec. 2021 that it would provide 90 days notice when employees were expected back in the office. "Cognizant respects the right of our associates to disagree with our policies, and to protest them lawfully," the company said in a statement to Axios. "However, it is disappointing that some of our associates have chosen to strike over a return to office policy that has been communicated to them repeatedly since December 2021." "My goal is to keep my friends employed," said Katie Marschher, who has worked at Cognizant on YouTube Music for nearly two years. Like many on her team, Marschher said she works more than one job to make ends meet. Although she lives in Austin, one of her other jobs is helping bands on tour, which requires her to travel. That works well remotely but she would have to scale back if required to be in office. "Our hope is we can actually have a dialogue where we are listened to," said Neil Gossell, who joined the YouTube/Cognizant team last year. He took the job specifically because it allowed him to work from home close to his spouse, who has post-traumatic stress disorder. The YouTube Music STRIKE press conference has been shared on Facebook and Twitter.Read more of this story at Slashdot.

An anonymous reader shares a report: San Francisco-based AI chatbot maker, Replika -- which operates a freemium 'virtual friendship' service based on customizable digital avatars whose "personalized" responses are powered by artificial intelligence (and designed, per its pitch, to make human users feel better) -- has been ordered by Italy's privacy watchdog to stop processing local users' data. The Garante said it's concerned Replika's chatbot technology poses risks to minors -- and also that the company lacks a proper legal basis for processing children's data under the EU's data protection rules. Additionally, the regulator is worried about the risk the AI chatbots could pose to emotionally vulnerable people. It's also accusing Luka, the developer behind the Replika app, of failing to fulfil regional legal requirements to clearly convey how it's using people's data. The order to stop processing Italians' data is effective immediately. In a press release announcing its intervention, the watchdog said: "The AI-powered chatbot, which generates a 'virtual friend' using text and video interfaces, will not be able to process [the] personal data of Italian users for the time being. A provisional limitation on data processing was imposed by the Italian Garante on the U.S.-based company that has developed and operates the app; the limitation will take effect immediately."Read more of this story at Slashdot.

Pakistan has blocked Wikipedia services in the South Asian nation after the platform failed to remove "sacrilegious" content. From a report: The action was taken because some of the content is still available on Wikipedia after the expiry of a 48-hour deadline, Malahat Obaid, spokesperson for Pakistan Telecommunication Authority, said by phone.Read more of this story at Slashdot.

If your main problem with the Microsoft Store is that you get too many relevant results when you search for apps, good news: Microsoft is officially launching Microsoft Store Ads, a way for developers to pay to get their apps in front of your eyes when you go to the store to look for something else. From a report: Microsoft's landing page for the feature says the apps will appear during searches and in the Apps and Gaming tabs within the app. Developers will be able to track whether and where users see the ads and whether they're downloading and opening the apps once they see the ads. Microsoft also provided an update on the health of the Microsoft Store, pointing to 2022 as "a record year," with more than 900 million unique users worldwide and "a 122% year-over-year increase in developer submissions of new apps and games." The company launched a "pilot program" of the Microsoft Store Ads back in September of 2022, and the look of the ads doesn't appear to have changed much since then. Ads will be served to Microsoft Store users on Windows 10 and Windows 11 and are only available to developers who have already published their apps to the store.Read more of this story at Slashdot.

A former employee of network technology provider Ubiquiti pleaded guilty to multiple felony charges after posing as an anonymous hacker in an attempt to extort almost $2 million worth of cryptocurrency while employed at the company. From a report: Nickolas Sharp, 37, worked as a senior developer for Ubiquiti between 2018 and 2021 and took advantage of his authorized access to Ubiquiti's network to steal gigabytes worth of files from the company during an orchestrated security breach in December 2020. Prosecutors said that Sharp used the Surfshark VPN service to hide his home IP address and intentionally damaged Ubiquiti's computer systems during the attack in an attempt to conceal his unauthorized activity. Sharp later posed as an anonymous hacker who claimed to be behind the incident while working on an internal team that was investigating the security breach. While concealing his identity, Sharp attempted to extort Ubiquiti, sending a ransom note to the company demanding 50 Bitcoin (worth around $1.9 million at that time) in exchange for returning the stolen data and disclosing the security vulnerabilities used to acquire it. When Ubiquiti refused the ransom demands, Sharp leaked some of the stolen data to the public. The FBI was prompted to investigate Sharp's home around March 24th, 2021, after it was discovered that a temporary internet outage had exposed Sharp's IP address during the security breach. Further reading:Ubiquiti Files Case Against Security Blogger Krebs Over 'False Accusations';Former Ubiquiti Dev Charged For Trying To Extort His Employer.Read more of this story at Slashdot.

As global demand for Covid-19 vaccines dries up, the program responsible for vaccinating the world's poor has been urgently negotiating to try to get out of its deals with pharmaceutical companies for shots it no longer needs. From a report: Drug companies have so far declined to refund $1.4 billion in advance payments for now-canceled doses, according to confidential documents obtained by The New York Times. Gavi, the international immunization organization that bought the shots on behalf of the global Covid vaccination program, Covax, has said little publicly about the costs of canceling the orders. But Gavi financial documents show the organization has been trying to stanch the financial damage. If it cannot strike a more favorable agreement with another company, Johnson & Johnson, it could have to pay still more. Gavi is a Geneva-based nongovernmental organization that uses funds from donors including the U.S. government and the Bill and Melinda Gates Foundation to provide childhood immunizations to lower-income nations. Early in the pandemic, it was charged with buying Covid vaccinations for the developing world -- armed with one of the largest-ever mobilizations of humanitarian funding -- and began negotiations with the vaccine makers. Those negotiations went badly at the outset. The companies initially shut the organization out of the market, prioritizing high-income countries that were able to pay more to lock up the first doses. [...] The vaccine makers have brought in more than $13 billion from the shots that have been distributed through Covax. Under the contracts, the companies are not obligated to return the prepayments Gavi gave them to reserve vaccines that were ultimately canceled.Read more of this story at Slashdot.

Chess experts make more mistakes when air pollution is high, a study has found. From a report: Experts used computer models to analyse the quality of games played and found that with a modest increase in fine particulate matter, the probability that chess players would make an error increased by 2.1 percentage points, and the magnitude of those errors increased by 10.8%. The paper, published in the journal Management Science, studied the performance of 121 chess players in three seven-round tournaments in Germany in 2017, 2018, and 2019, comprising more than 30,000 chess moves. The researchers compared the actual moves the players made against the optimal moves determined by the powerful chess engine Stockfish. In the tournament venues, the researchers attached three web-connected air quality sensors to measure carbon dioxide, PM2.5 concentrations, and temperature. Each tournament lasted eight weeks, meaning players faced a variety of air conditions. Fine particulate matter, or PM2.5, refers to tiny particles 2.5 microns or less in diameter, which are often expelled by burning matter such as that from car engines, coal plants, forest fires, and wood burners. Further reading: Study Reveals Links Between UK Air Pollution and Mental Ill-Health.Read more of this story at Slashdot.

Next week Google is hosting what can only be described as an "emergency" event. From a report: According to an invite sent to The Verge, the event will revolve around "using the power of AI to reimagine how people search for, explore and interact with information, making it more natural and intuitive than ever before to find what you need" -- in other words, Google's going to fire up its photocopier and stick OpenAI's ChatGPT onto the platen. The 40 minute event will, of course, be live on YouTube on February 8. Google's parent company, Alphabet, had its earnings call yesterday, and Google/Alphabet CEO Sundar Pichai promised that "very soon people will be able to interact directly with our newest, most powerful language models as a companion to Search in experimental and innovative ways." Earlier this year the company declared a "code red" over the meteoric rise of ChatGPT and even dragged co-founders Larry Page and Sergey Brin out of retirement to help.Read more of this story at Slashdot.

New Netflix rules that would have enforced a limitation on users' sharing passwords are reportedly a mistake and don't apply in the US -- for now. From a report: Netflix has long been planning to cut down on password sharing, or letting friends share one paid account. The company appeared to go further, however, with the inclusion in its help pages of a new set of rules. Broadly, anyone at a subscriber's physical address could continue using the service. But the paying subscriber would have to confirm every 31 days that a user away from their residence -- such as at college -- was part of the household. According to The Streamable, Netflix says it was all a mistake -- for the United States. "For a brief time yesterday, a help center article containing information that is only applicable to Chile, Costa Rica, and Peru, went live in other countries," a Netflix spokesperson told the publication. "We have since updated it."Read more of this story at Slashdot.

Russian antiwar activists placed their faith in Telegram, a supposedly secure messaging app. How does Putin's regime seem to know their every move? From a report: Matsapulina's case [anecdote in the story] is hardly an isolated one, though it is especially unsettling. Over the past year, numerous dissidents across Russia have found their Telegram accounts seemingly monitored or compromised. Hundreds have had their Telegram activity wielded against them in criminal cases. Perhaps most disturbingly, some activists have found their "secret chats" -- Telegram's purportedly ironclad, end-to-end encrypted feature -- behaving strangely, in ways that suggest an unwelcome third party might be eavesdropping. These cases have set off a swirl of conspiracy theories, paranoia, and speculation among dissidents, whose trust in Telegram has plummeted. In many cases, it's impossible to tell what's really happening to people's accounts -- whether spyware or Kremlin informants have been used to break in, through no particular fault of the company; whether Telegram really is cooperating with Moscow; or whether it's such an inherently unsafe platform that the latter is merely what appears to be going on.Read more of this story at Slashdot.

The Federal Trade Commission is preparing a potential antitrust lawsuit against Amazon that in the coming months could challenge an array of the tech giant's business practices as anticompetitive, WSJ reported Friday, citing people familiar with the matter. From the report: The timing of any case remains in flux, some of the people said. The commission also could opt not to proceed, and doesn't always bring cases even when it is making preparations to do so. Amazon officials haven't had individual late-stage meetings with each of the FTC commissioners to make their arguments against a legal challenge, those people said. The commission in recent years has been examining Amazon practices including whether it favors its own products over competitors' on its platforms and how it treats outside sellers on Amazon.com, according to some of the people familiar with the matter. The FTC also has been scrutinizing the company's Amazon Prime subscription service's bundling practices, some of the people said. Exactly which aspects of the business the FTC would target in a potential Amazon lawsuit couldn't be learned. Amazon and the FTC declined to comment.Read more of this story at Slashdot.