Slashdot

A lawsuit is alleging Amazon was so desperate to keep up with the competition in generative AI it was willing to breach its own copyright rules. From a report: The allegation emerges from a complaint accusing the tech and retail mega-corp of demoting, and then dismissing, a former high-flying AI scientist after it discovered she was pregnant. The lawsuit was filed last week in a Los Angeles state court by Dr Viviane Ghaderi, an AI researcher who says she worked successfully in Amazon's Alexa and LLM teams, and achieved a string of promotions, but claims she was later suddenly demoted and fired following her return to work after giving birth. She is alleging discrimination, retaliation, harassment and wrongful termination, among other claims.Read more of this story at Slashdot.

An anonymous reader quotes a report from Ars Technica: There's a new Linux distro on the scene today, and it's a bit specialized. Its development was led by the automotive electronics supplier Elektrobit, and it's the first open source OS that complies with the automotive industry's functional safety requirements. [...] With Elektrobit's EB corbos Linux for Safety Applications (that sure is a long name), there's an open source Linux distro that finally fits the bill, having just been given the thumbs up by the German organization TUV Nord. (It also complies with the IEC 61508 standard for safety applications.) "The beauty of our concept is that you don't even need to safety-qualify Linux itself," said Moritz Neukirchner, a senior director at Elektrobit overseeing SDVs. Instead, an external safety monitor runs in a hypervisor, intercepting and validating kernel actions. "When you look at how safety is typically being done, look at communication -- you don't safety-certify the communication specs or Ethernet stack, but you do a checker library on top, and you have a hardware anchor for checking down below, and you insure it end to end but take everything in between out of the certification path. And we have now created a concept that allows us to do exactly that for an operating system," Neukirchner told me. "So in the end, since we take Linux out of the certification path and make it usable in a safety-related context, we don't have any problems in keeping up to speed with the developer community," he explained. "Because if you start it off and say, 'Well, we're going to do Linux as a one-shot for safety,' you're going to have the next five patches and you're off [schedule] again, especially with the security regulation that's now getting toward effect now, starting in July with the UNECE R155 that requires continuous cybersecurity management vulnerability scanning for all software that ends up in the vehicle." "In the end, we see roughly 4,000 kernel security patches within eight years for Linux. And this is the kind of challenge that you're being put up to if you want to participate in that speed of innovation of an open source community as rich as that of Linux and now want to combine this with safety-related applications," Neukirchner said. Elektrobit developed EB corbos Linux for Safety Applications together with Canonical, and together they will share the maintenance of keeping it compliant with safety requirements over time.Read more of this story at Slashdot.

Apple's iPhone sales dropped sharply in China in the first quarter of this year as the company saw strong competition from domestic brand Huawei, according to a new report from market research firm Counterpoint Research. CNBC: Apple saw sales of its iPhones fall 19.1% in the first three months of the year, Counterpoint's data showed, as Chinese telecommunications and consumer electronics giant Huawei saw a resurgence in its smartphone business. The Shenzhen, China-based firm saw sales of its smartphones surge a whopping 69.7% in the first quarter, Counterpoint said.Read more of this story at Slashdot.

An anonymous reader shares a report: For years, people who have found Google search frustrating have been adding "Reddit" to the end of their search queries. This practice is so common that Google even acknowledged the phenomenon in a post announcing that it will be scraping Reddit posts to train its AI. And so, naturally, there are now services that will poison Reddit threads with AI-generated posts designed to promote products. A service called ReplyGuy advertises itself as "the AI that plugs your product on Reddit" and which automatically "mentions your product in conversations naturally." Examples on the site show two different Redditors being controlled by AI posting plugs for a text-to-voice product called "AnySpeech" and a bot writing a long comment about a debt consolidation program called Debt Freedom Now. A video demo shows a dashboard where a user adds the name of their company and URL they want to direct users to. It then auto-suggests keywords that "help the bot know what types of subreddits and tweets to look for and when to respond." Moments later, the dashboard shows how Reply Guy is "already in the responses" of the comments section of different Reddit posts. "Many of our responses will get lots of upvotes and will be well-liked." The creator of the company, Alexander Belogubov, has also posted screenshots of other bot-controlled accounts responding all over Reddit. Begolubov has another startup called "Stealth Marketing" that also seeks to manipulate the platform by promising to "turn Reddit into a steady stream of customers for your startup."Read more of this story at Slashdot.

General Motors (GM) has been selling data about the driving behavior of millions of people to insurance companies, leading to higher premiums for some drivers, according to a recent investigation. The affected drivers were not informed about the tracking, which was carried out through GM's OnStar connected services plan and the Smart Driver program. The New York Times reporter who broke the story discovered that her own driving data had been shared with data brokers working with the insurance industry, despite not being enrolled in the program. GM has since discontinued the Smart Driver product and stopped sharing data with LexisNexis and Verisk, following customer feedback and federal lawsuits filed by drivers across the country.Read more of this story at Slashdot.

An anonymous reader shares a report: Apple has dropped the number of Vision Pro units that it plans to ship in 2024, going from an expected 700 to 800k units to just 400k to 450k units, according to Apple analyst Ming-Chi Kuo. Orders have been scaled back before the Vision Pro has launched in markets outside of the United States, which Kuo says is a sign that demand in the U.S. has "fallen sharply beyond expectations." As a result, Apple is expected to take a "conservative view" of headset demand when the Vision Pro launches in additional countries. Kuo previously said that Apple will introduce the Vision Pro in new markets before the June Worldwide Developers Conference, which suggests that we could see it available in additional areas in the next month or so.Read more of this story at Slashdot.

The Federal Trade Commission is set to vote Tuesday afternoon on a proposal to ban noncompete agreements, which prevent workers from taking positions at competitors for a period of time after they leave a job. From a report: The ban could be a win for workers -- particularly at the low end of the income scale. Critics of these agreements say they stifle innovation and wage growth by restricting workers' ability to take new jobs that pay higher wages or offer some other opportunity. They also make it tougher for employers to hire strong talent, lessening competition. Some states have laws limiting noncompetes to higher-income folks or banning them altogether -- but most don't. Experts told Axios that the final rule will likely look similar to the draft proposal, which was a broad prohibition on all noncompetes, even for executives. Any final rule is unlikely to take effect for many years -- if ever, as it will surely get tied up in court. The Chamber of Commerce, which opposes the ban, has already said it's ready and willing to file a lawsuit.Read more of this story at Slashdot.

The U.S. publishing industry is driven by celebrity authors and repeat bestsellers, according to testimony from a blocked merger between Penguin Random House and Simon & Schuster. Only 50 authors sell over 500,000 copies annually, with 96% of books selling under 1,000 copies. Publishing houses spend most of their advance money on celebrity books, which along with backlist titles like The Bible, account for the bulk of their revenue and fund less commercially successful books.Read more of this story at Slashdot.

prisoninmate writes: Fedora Linux 40 distribution has been officially released -- powered by the latest Linux 6.8 kernel series, and featuring the GNOME 46 and KDE Plasma 6 desktop environments, reports 9to5Linux: "Powered by the latest and greatest Linux 6.8 kernel series, the Fedora Linux 40 release ships with the GNOME 46 desktop environment for the flagship Fedora Workstation edition and the KDE Plasma 6 desktop environment for the Fedora KDE Spin, which defaults to the Wayland session as the X11 session was completely removed." "Fedora Linux 40 also includes some interesting package management changes, such as dropping Delta RPMs and disabling support in the default configuration of DNF / DNF5. It also changes the DNF behavior to no longer download filelists by default. However, this release doesn't ship with the long-awaited DNF5 package manager. For AMD GPUs, Fedora Linux 40 ships with AMD ROCm 6.0 as the latest release of AMD's software optimized for AI and HPC workload performance, which enables support for the newest flagship AMD Instinct MI300A and MI300X datacenter GPUs."Read more of this story at Slashdot.

Chinese tech giant Kuaishou is laying off employees in their mid-30s as part of a company-wide restructuring plan dubbed "Limestone," FT reported Tuesday, citing people with direct knowledge of the matter. The move highlights the pervasive ageism in China's tech sector, where younger workers are favored for their perceived willingness to work long hours and keep up with the latest technological developments, the report adds. While China's labor law does not explicitly prohibit age discrimination, some have interpreted it as such. However, tech executives have openly expressed their preference for younger employees, with companies like ByteDance and Pinduoduo boasting some of the youngest workforces in the industry. The economic slowdown and regulatory crackdowns have exacerbated the problem, with tens of thousands of jobs cut across the sector in recent months. Those over 35 face significant challenges in finding new employment, as even the civil service and service sector prioritize younger applicants. The situation has left many older tech workers anxious about their future job prospects, the report adds.Read more of this story at Slashdot.

Microsoft has launched Phi-3 Mini, a lightweight AI model with 3.8 billion parameters, as part of its plan to release three small models. Phi-3 Mini, trained on a smaller data set compared to large language models, is available on Azure, Hugging Face, and Ollama. Microsoft claims Phi-3 Mini performs as well as models 10 times its size, offering capabilities similar to GPT-3.5 in a smaller form factor. Smaller AI models are more cost-effective and perform better on personal devices.Read more of this story at Slashdot.

Google has fired another 20 workers for participating in protests against its $1.2 billion cloud computing contract with the Israeli government, according to an activist group representing the workers. From a report: In total, the company has now fired around 50 employees over sit-in protests held in Google offices last week that were part of yearslong discontent among a group of Google and Amazon workers over claims that Israel is using the companies' services to harm Palestinians. Google has denied those claims, saying Project Nimbus, the cloud-computing contract, doesn't involve "highly sensitive, classified, or military workloads relevant to weapons or intelligence services," and that Israeli government ministries that use its commercial cloud must agree to its terms of services and other policies. No Tech For Apartheid, the group representing the workers, claimed in a statement that Google is attempting to "quash dissent, silence its workers, and reassert its power over them." "That's because Google values its profit, and its $1.2 billion contract with the Israeli government and military, more than people. And it certainly values it over its own workers," it said. The group said it will continue organizing until Google cancels Project Nimbus. Further reading: Google To Employees: 'We Are a Workplace'.Read more of this story at Slashdot.

Toyota's Mirai, a hydrogen-powered Fuel Cell EV initially heralded as the future of driving, has faced significant challenges due to inadequate hydrogen fueling infrastructure. As chronicled by InsideEVs, many owners have become disillusioned with the vehicle's high operational costs, unreliable refueling options, and significant depreciation, prompting lawsuits and calls for buybacks. Longtime Slashdot reader whoever57 writes: Toyota Mirai owners are fed up and disillusioned. Hydrogen fuel pumps are hard to find and, rather than new pumps opening, they are closing down. Owners feel misled about the costs and availability of hydrogen fuel stations. Even if a Mirai owner can find a fuel station, it may not be operating. Moreover, refueling is frequently a long and problematic process, with pumps taking over an hour to fill a tank and cars getting stuck to the fuel pump for hours. It would be quicker to charge a battery EV. Naturally, resale values of these cars are plummeting. Even without those problems, once the complimentary hydrogen fuel supply that Toyota gives new owners expires or runs out, the cost of hydrogen fuel becomes quite expensive. "Not in my wildest dreams or nightmares would I expect a purchase from a giant car company like Toyota would turn out to be such a terrible experience," said owner Shawn Hall. "The entire H2 vehicle experience is an experiment that is failing. I didn't expect to buy a vehicle from Toyota and feel duped, cheated, and misled." Another user wrote on Reddit: "We all need to realize that we bought a vehicle that had, at best, a questionable future. Unfortunately in this instance, the gamble didn't pay off, and the technology of hydrogen fuel cell vehicles does not appear to be something the vehicle industry is invested in pursuing. Very similar to HD-DVD vs Blu-Ray, there was one clear winner and in our instance, the battery-powered EV won out over H2. Its sucks, but it is what it is."Read more of this story at Slashdot.

NASA last week formally approved a $3.35 billion mission to explore Saturn's largest moon with a quadcopter drone. "Dragonfly is a spectacular science mission with broad community interest, and we are excited to take the next steps on this mission," said Nicky Fox, associate administrator of NASA's science mission directorate. "Exploring Titan will push the boundaries of what we can do with rotorcraft outside of Earth." The mission has a launch date of July 2028. Ars Technica reports: After reaching Titan, the eight-bladed rotorcraft lander will soar from place to place on Saturn's hazy moon, exploring environments rich in organic molecules, the building blocks of life. Dragonfly will be the first mobile robot explorer to land on any other planetary body besides the Moon and Mars, and only the second flying drone to explore another planet. NASA's Ingenuity helicopter on Mars was the first. Dragonfly will be more than 200 times as massive as Ingenuity and will operate six times farther from Earth. Despite its distant position in the cold outer Solar System, Titan appears to be reminiscent of the ancient Earth. A shroud of orange haze envelops Saturn's largest moon, and Titan's surface is covered with sand dunes and methane lakes. Titan's frigid temperatures -- hovering near minus 290 degrees Fahrenheit (minus 179 degrees Celsius) -- mean water ice behaves like bedrock. NASA's Cassini spacecraft, which flew past Titan numerous times before its mission ended in 2017, discovered weather systems on the hazy moon. Observations from Cassini found evidence for hydrocarbon rains and winds that appear to generate waves in Titan's methane lakes. Clearly, Titan is an exotic world. Most of what scientists know about Titan comes from measurements collected by Cassini and the European Space Agency's Huygens probe, which Cassini released to land on Titan in 2005. Huygens returned the first pictures from Titan's surface, but it only transmitted data for 72 minutes. Dragonfly will explore Titan for around three years, flying tens of kilometers about once per month to measure the prebiotic chemistry of Titan's surface, study its soupy atmosphere, and search for biosignatures that could be indications of life. The mission will visit more than 30 locations within Titan's equatorial region, according to a presentation by Elizabeth Turtle, Dragonfly's principal investigator at the Johns Hopkins University Applied Physics Laboratory. "The Dragonfly mission is an incredible opportunity to explore an ocean world in a way that we have never done before," Turtle said in a statement. "The team is dedicated and enthusiastic about accomplishing this unprecedented investigation of the complex carbon chemistry that exists on the surface of Titan and the innovative technology bringing this first-of-its-kind space mission to life."Read more of this story at Slashdot.

quonset writes: Just over two weeks ago, NASA figured out why its Voyager 1 spacecraft stopped sending useful data. They suspected corrupted memory in its flight data system (FDS) was the culprit. Today, for the first time since November, Voyager 1 is sending useful data about its health and the status of its onboard systems back to NASA. How did NASA accomplish this feat of long distance repair? They broke up the code into smaller pieces and redistributed them throughout the memory. From NASA: "... So they devised a plan to divide the affected code into sections and store those sections in different places in the FDS. To make this plan work, they also needed to adjust those code sections to ensure, for example, that they all still function as a whole. Any references to the location of that code in other parts of the FDS memory needed to be updated as well. The team started by singling out the code responsible for packaging the spacecraft's engineering data. They sent it to its new location in the FDS memory on April 18. A radio signal takes about 22 1/2 hours to reach Voyager 1, which is over 15 billion miles (24 billion kilometers) from Earth, and another 22 1/2 hours for a signal to come back to Earth. When the mission flight team heard back from the spacecraft on April 20, they saw that the modification worked: For the first time in five months, they have been able to check the health and status of the spacecraft. During the coming weeks, the team will relocate and adjust the other affected portions of the FDS software. These include the portions that will start returning science data.Read more of this story at Slashdot.

An anonymous reader quotes a report from the Washington Post: In sunny California, solar panels are everywhere. They sit in dry, desert landscapes in the Central Valley and are scattered over rooftops in Los Angeles's urban center. By last count, the state had nearly 47 gigawatts of solar power installed -- enough to power 13.9 million homes and provide over a quarter of the Golden State's electricity. But now, the state and its grid operator are grappling with a strange reality: There is so much solar on the grid that, on sunny spring days when there's not as much demand, electricity prices go negative. Gigawatts of solar are "curtailed" -- essentially, thrown away. In response, California has cut back incentives for rooftop solar and slowed the pace of installing panels. But the diminishing economic returns may slow the development of solar in a state that has tried to move to renewable energy. And as other states build more and more solar plants of their own, they may soon face the same problems. Curtailing solar isn't technically difficult -- according to Paul Denholm, senior research fellow at the National Renewable Energy Laboratory, it's equivalent to flipping a switch for grid operators. But throwing away free power raises electricity prices. It has also undercut the benefits of installing rooftop solar. Since the 1990s, California has been paying owners of rooftop solar panels when they export their energy to the grid. That meant that rooftop solar owners got $0.20 to $0.30 for each kilowatt-hour of electricity that they dispatched. But a year ago, the state changed this system, known as "net-metering," and now only compensates new solar panel owners for how much their power is worth to the grid. In the spring, when the duck curve is deepest, that number can dip close to zero. Customers can get more money back if they install batteries and provide power to the grid in the early evening or morning. The change has sparked a huge backlash from Californians and rooftop solar companies, which say that their businesses are flagging. Indeed, Wood Mackenzie predicts that California residential solar installations in 2024 will fall by around 40 percent. Some state politicians are now trying to reverse the rule. "Under the CPUC's leadership California is responsible for the largest loss of solar jobs in our nation's history," Bernadette del Chiaro, the executive director of the California Solar and Storage Association, said in a statement referring to California's public utility commission. But experts say that it reflects how the economics of solar are changing in a state that has gone all-in on the technology. [...] To cope, [California's grid operator, known as CAISO] is selling some excess power to nearby states; California is also planning to install additional storage and batteries to hold solar power until later in the afternoon. Transmission lines that can carry electricity to nearby regions will also help -- some of the lost power comes from regions where there simply aren't enough power lines to carry a sudden burst of solar. Denholm says the state is starting to take the steps needed to deal with the glut. "There are fundamental limits to how much solar we can put on the grid before you start needing a lot of storage," Denholm said. "You can't just sit around and do nothing." Further reading: The Energy Institute discusses this problem in a recent blog post. Since 2020, the residential electricity rates in California have risen by as much as 40% after adjusting for inflation. While there's been "a lot of finger-pointing about the cause of these increases," the authors note that the impact on rates is multiplied when customers install their own generation and buy fewer kilowatts-hours from the grid because those households "contribute less towards all the fixed costs in the system." These fixed costs include: vegetation management, grid hardening, distribution line undergrounding, EV charging stations, subsidies for low income customers, energy efficiency programs, and the poles and wires that we all rely on whether we are taking electricity off the grid or putting it onto the grid from our rooftop PV systems. "Since those fixed costs still need to be paid, rates go up, shifting costs onto the kWhs still being bought from the grid."Read more of this story at Slashdot.

Data scientist Antoine Mayerowitz, PhD, applied Vilfredo Pareto's (the early 20th-century Italian economist) theories to Mario Kart 8 Deluxe to determine the best racer combinations. "When you break down the build options (including driver stats and various vehicle details) in Mario Kart 8 Deluxe, there are over 700,000 possible combinations," notes Engadget. "But once you eliminate duplicates that differ only in appearance, you can narrow it down to 'only' 25,704 possibilities." From the report: Pareto's theories, most notably the Pareto front, help us navigate the complexities of choice. They can pinpoint the solutions with the most balanced strengths and the fewest trade-offs. Pareto's work is about efficiency and effectiveness. [...] Mayerowitz's Pareto front analysis lets you narrow your possibilities down to the 14 most efficient. And it turns out the game's top players were onto something: One of the combinations with the most ideal balance of speed, acceleration and mini-turbo is Cat Peach driving the Teddy Buggy, roller tires and cloud glider -- one already favored among Mario Kart 8 competitors. Of course, if that combination isn't your cup of tea, there are others that allow you to stay within the Pareto front's optimal range. As Eurogamer points out, Donkey Kong, Wario (my old standby, mostly because he makes me laugh) and Princess Peach are often highlighted as drivers, and you can use Mayerowitz's data fields to find the best matching vehicles. Keep in mind that others have identical stats, so racers like Villager (female), Inkling Girl and Diddy Kong are separated only by appearances. To find your ideal racer, you can head over to Mayerowitz's website. There, you can enter your most prized stats and view the combos that give you the best balance (those highlighted in yellow), according to Pareto's theories.Read more of this story at Slashdot.

According to French business magazine Challenges, Apple has acquired Datakalab -- a Paris-based startup specializing in artificial intelligence compression and computer vision technology. 9to5Mac reports: Datakalab described itself as "experts in low power, runtime efficient, and deep learning algorithms" that work on device. On its LinkedIn page, Datakalab highlights "industry leading compression and adaptation to deploy embedded computer vision that is fast, cost-effective and precise." Prior to the Apple acquisition had between 10 and 20 employees. From Datakalab's now-defunct website: "Datakalab is a French technology company that develops computer image analysis algorithms to measure flows in public space. The images are instantly transformed into anonymized statistical data processed locally in 100ms. Datakalab does not store any images or personal data and only keeps statistical data. Datakalab products are built according to the principle of 'Privacy by Design.'" While neither Apple nor DatakaLab have acknowledged the acquisition, Challenges says that the deal was reported to the European Commission this month. The report says that Datakalab's two founders did not join Apple, but multiple other employees did make the jump. Datakalab also held multiple patents related to AI compression and vision technology. The acquisition makes perfect sense given Apple's rumored ambitions to run its upcoming AI-related features in iOS 18 "entirely on device."Read more of this story at Slashdot.

An anonymous reader quotes a report from The Register: Huawei plans to expand its native HarmonyOS smartphone platform worldwide, despite coming under US-led sanctions that have deprived it of access to key technologies. "We will work hard to build up the HarmonyOS app ecosystem in the China market first, then, from country to country, we will start gradually pushing it out to other parts of the world," Huawei's rotating chairman Erik Xu told attendees at its 21st Analyst Summit in Shenzhen last week. Part of this process will involve porting apps to HarmonyOS and encouraging other app developers to code for the platform. "In the China market, Huawei smartphone users spend 99 percent of their time on about 5,000 apps. So we decided to spend 2024 porting these apps over to HarmonyOS first in our drive to truly unify the OS and the app ecosystem. We are also encouraging other apps to be ported over to HarmonyOS," Xu said. According to Huawei's rotating chairman, more than 4,000 of those apps are already in the process of being transferred, and the company is "communicating with developers" on the 1,000 or so apps that remain. "This is a massive undertaking, but we have broad support in the industry and from many app developers," he claimed. "Once we have these first 5,000 Android apps -- and thousands of other apps -- up and running on HarmonyOS, we will have a real HarmonyOS: a third mobile operating system for the world," Xu said. That number could reach up to 1 million apps in the future, he claimed. According to Counterpoint Research, HarmonyOS accounted for 4 percent of global market share in the fourth quarter of 2023, and exceeded 16 percent market share in China. That makes it the third largest mobile OS by handset sales, behind Android and iOS. It remains to be seen whether there will be much of a market for HarmonyOS outside of China, given the current sanctions and sour US/EU-China relations.Read more of this story at Slashdot.

Jess Weatherbed reports via The Verge: Swedish gaming conglomerate Embracer Group announced plans on Monday to split itself into three distinct games and entertainment companies: Asmodee Group, Coffee Stain & Friends, and Middle-earth Enterprises & Friends. These will be separate, publicly listed companies, according to Embracer, which says the move will allow "each entity to better focus on their respective core strategies and offer more differentiated and distinct equity stories for existing and new shareholders." [...] The three new companies will be broken down as follows: - Middle-earth Enterprises & Friends: This company, which will be renamed from Embracer Group, is described as a "creative powerhouse in AAA game development and publishing" that will retain ownership of the Dead Island, Killing Floor, Kingdom Come Deliverance, Tomb Raider, and The Lord of the Rings IPs.- Asmodee Group: a new arm dedicated to publishing and distributing tabletop games. The existing catalog includes established titles like Ticket to Ride, 7 Wonders, Azul, CATAN, Dobble, and Exploding Kittens. Asmodee is also developing licensed tabletop games based on The Lord of the Rings, Marvel, Game of Thrones, and Star Wars franchises. Embracer anticipates the spinoff and share listings will take place "within 12 months."- Coffee Stain & Friends: described as a "diverse gaming entity" that will focus on indie, mid-market, and free-to-play games. Properties sitting under this new company include Deep Rock Galactic, Goat Simulator, Satisfactory, Wreckfest, Teardown, and Valheim. The share listings are projected to become available in 2025.Read more of this story at Slashdot.

The European Union has opened a second formal investigation into TikTok under its Digital Services Act (DSA), an online governance and content moderation framework. The investigation centers around TikTok Lite's "Task and Reward" feature that may harm mental health, especially among minors, by promoting addictive behavior. TechCrunch reports: The Commission also said it's minded to impose interim measures that could force the company to suspend access to the TikTok Lite app in the EU while it investigates concerns the app poses mental health risks to users. Although the EU has given TikTok until April 24 to argue against the measure -- meaning the app remains accessible for now. Penalties for confirmed violations of the DSA can reach up to 6% of global annual turnover. So ByeDance, TikTok's parent, could face hefty fines if EU enforcers do end up deciding it has broken the law. The EU's first TikTok probe covers multiple issues including the protection of minors, advertising transparency, data access for researchers, and the risk management of addictive design and harmful content. Hence it said the latest investigation will specifically focus on TikTok Lite, a version of the video sharing platform which launched earlier this month in France and Spain and includes a mechanism that allows users to earn points for doing things like watching or liking videos. Points earned through TikTok Lite can be exchanged for things like Amazon gift vouchers or TikTok's own digital currency for gifting to creators. The Commission is worried this so-called "task and reward" feature could negatively impact the mental health of young users by "stimulating addictive behavior." The EU wrote that the second probe will focus on TikTok's compliance with the DSA obligation to conduct and submit a risk assessment report prior to the launch of the "Task and Reward Lite" program, with a particular focus on negative effects on mental health, including minors' mental health. It also said it will look into measures taken by TikTok to mitigate those risks. In a press release announcing the action, the EU said ByeDance failed to produce a risk assessment about the feature which it had asked to see last week -- when it gave the company 24 hours to produce the document. Since it failed to submit the risk assessment paperwork on April 18 the Commission wrote that it suspects a "prima facie infringement of the DSA."Read more of this story at Slashdot.

An anonymous reader quotes a report from Ars Technica: Home Assistant, until recently, has been a wide-ranging and hard-to-define project. The open smart home platform is an open source OS you can run anywhere that aims to connect all your devices together. But it's also bespoke Raspberry Pi hardware, in Yellow and Green. It's entirely free, but it also receives funding through a private cloud services company, Nabu Casa. It contains tiny board project ESPHome and other inter-connected bits. It has wide-ranging voice assistant ambitions, but it doesn't want to be Alexa or Google Assistant. Home Assistant is a lot. After an announcement this weekend, however, Home Assistant's shape is a bit easier to draw out. All of the project's ambitions now fall under the Open Home Foundation, a non-profit organization that now contains Home Assistant and more than 240 related bits. Its mission statement is refreshing, and refreshingly honest about the state of modern open source projects. "We've done this to create a bulwark against surveillance capitalism, the risk of buyout, and open-source projects becoming abandonware," the Open Home Foundation states in a press release. "To an extent, this protection extends even against our future selves -- so that smart home users can continue to benefit for years, if not decades. No matter what comes." Along with keeping Home Assistant funded and secure from buy-outs or mission creep, the foundation intends to help fund and collaborate with external projects crucial to Home Assistant, like Z-Wave JS and Zigbee2MQTT. Home Assistant's ambitions don't stop with money and board seats, though. They aim to "be an active political advocate" in the smart home field, toward three primary principles: - Data privacy, which means devices with local-only options, and cloud services with explicit permissions - Choice in using devices with one another through open standards and local APIs- Sustainability by repurposing old devices and appliances beyond company-defined lifetimes Notably, individuals cannot contribute modest-size donations to the Open Home Foundation. Instead, the foundation asks supporters to purchase a Nabu Casa subscription or contribute code or other help to its open source projects. Further reading: The Verge's interview with Home Assistant founder Paulus SchoutsenRead more of this story at Slashdot.

Scorching weather has baked Europe in more days of "extreme heat stress" than its scientists have ever seen. The Guardian: Heat-trapping pollutants that clog the atmosphere helped push temperatures in Europe last year to the highest or second-highest levels ever recorded, according to the EU's Earth-watching service Copernicus and the World Meteorological Organization (WMO). Europeans are suffering with unprecedented heat during the day and are stressed by uncomfortable warmth at night. The death rate from hot weather has risen 30% in Europe in two decades, the joint State of the Climate report from the two organisations found. "The cost of climate action may seem high," said WMO secretary-general Celeste Saulo, "but the cost of inaction is much higher." The report found that temperatures across Europe were above average for 11 months of 2023, including the warmest September since records began. The hot and dry weather fuelled large fires that ravaged villages and spewed smoke that choked far-off cities. The blazes that firefighters battled were particularly fierce in drought-stricken southern countries such as Portugal, Spain and Italy. Greece was hit by the largest wildfire recorded in the EU, which burned 96,000 hectares of land, according to the report. Heavy rain also led to deadly floods. Europe was about 7% wetter in 2023 than the average over the last three decades, the report found, and one-third of its river network crossed the "high" flood threshold. One-sixth hit "severe" levels.Read more of this story at Slashdot.

AmiMoJo writes: Knowing your ABCs is essential to academic success, but having a last name starting with A, B or C might also help make the grade. An analysis by University of Michigan researchers of more than 30 million grading records from U-M finds students with alphabetically lower-ranked names receive lower grades. This is due to sequential grading biases and the default order of students' submissions in Canvas -- the most widely used online learning management system -- which is based on alphabetical rank of their surnames. What's more, the researchers found, those alphabetically disadvantaged students receive comments that are notably more negative and less polite, and exhibit lower grading quality measured by post-grade complaints from students.Read more of this story at Slashdot.

Amazon confirmed it is ending Prime Air drone delivery operations in Lockeford, California. The Central California town of 3,500 was the company's second U.S. drone delivery site, after College Station, Texas. Operations were announced in June 2022. From a report: The retail giant is not offering details around the setback, only noting, "We'll offer all current employees opportunities at other sites, and will continue to serve customers in Lockeford with other delivery methods. We want to thank the community for all their support and feedback over the past few years." College Station deliveries will continue, along with a forthcoming site in Tolleson, Arizona set to kick off deliveries later this year. Tolleson, a city of just over 7,000, is located in Maricopa County, in the western portion of the Phoenix metropolitan area. Prime Air's arrival brings same-day deliveries to Amazon customers in the region, courtesy of a hybrid fulfillment center/delivery station. The company says it will be contacting impacted customers when the service is up and running. There's no specific information on timing beyond "this year," owing, in part, to ongoing negotiations with both local officials and the FAA required to deploy in the airspace.Read more of this story at Slashdot.

In a huge move for the mixed reality industry, Meta announced today that it's opening the Quest's operating system to third-party companies, allowing them to build headsets of their own. From a report: Think of it like moving the Quest's ecosystem from an Apple model, where one company builds both the hardware and software, to more of a hardware free-for-all like Android. The Quest OS is being rebranded to "Meta Horizon OS," and at this point it seems to have found two early adopters. ASUS's Republic of Gamers (ROG) brand is working on a new "performance gaming" headsets, while Lenovo is working on devices for "productivity, learning and entertainment." (Don't forget, Lenovo also built the poorly-received Oculus Rift S.) As part of the news, Meta says it's also working on a limited-edition Xbox "inspired" Quest headset. (Microsoft and Meta also worked together recently to bring Xbox cloud gaming to the Quest.) Meta is also calling on Google to bring over the Google Play 2D app store to Meta Horizon OS. And, in an effort to bring more content to the Horizon ecosystem, software developed through the Quest App Lab will be featured in the Horizon Store. The company is also developing a new spatial framework to let mobile developers created mixed reality apps.Read more of this story at Slashdot.

A Shanghai flying taxi company says that China's "low altitude" industry is edging ahead of western rivals, thanks to more supportive regulators, technological breakthroughs and cut-throat competition in the Chinese logistics sector. From a report: The total market created by electric vertical take-off and landing, or eVTOL, aircraft is forecast to be worth $1.5tn a year by 2040 in a base-case assessment by Morgan Stanley analysts, with potential customers across airlines, logistics, emergency services, agriculture, tourism and security operations. China's AutoFlight Group won airworthiness certification from the Civil Aviation Administration of China in late March for the design and parts for its unmanned CarryAll aircraft -- a global first for an eVTOL weighing more than 1 tonne being cleared by regulators. Kellen Xie, AutoFlight vice-president, said that while the company is also seeking similar approvals in Europe, the CAAC has been "quite supportive" of the new industry. "They work longer hours... they are determined to actually speed up the process of bringing this new technology into reality," he said. EVTOL aircraft take off vertically, like helicopters, but then transition into fixed-wing mode for travelling at higher speeds, offering faster and more efficient transport than ground-based options. Analysts point to a labyrinth of regulatory and safety hurdles, but supporters say the technology could fundamentally reshape how humans travel and freight is moved, in a level of disruption akin to the introduction of mass-market cars and commercial airlines. Most eVTOL aircraft are still in the testing stages and vary widely in terms of how fast and high they can fly and how much weight they can carry.Read more of this story at Slashdot.

Yet another international cop shop has come out swinging against end-to-end encryption - this time it's Europol which is urging an end to implementation of the tech for fear police investigations will be hampered by protected DMs. The Register: In a joint declaration of European police chiefs published over the weekend, Europol said it needs lawful access to private messages, and said tech companies need to be able to scan them (ostensibly impossible with E2EE implemented) to protect users. Without such access, cops fear they won't be able to prevent "the most heinous of crimes" like terrorism, human trafficking, child sexual abuse material (CSAM), murder, drug smuggling and other crimes. "Our societies have not previously tolerated spaces that are beyond the reach of law enforcement, where criminals can communicate safely and child abuse can flourish," the declaration said. "They should not now." The joint statement, which was agreed to in cooperation with the UK's National Crime Agency, isn't exactly making a novel claim. It's nearly the same line of reasoning that the Virtual Global Taskforce, an international law enforcement group founded in 2003 to combat CSAM online, made last year when Meta first first started talking about implementing E2EE on Messenger and Instagram.Read more of this story at Slashdot.

Apple has stopped production of FineWoven accessories, according to reliable Apple leaker and prototype collector known as "Kosutami." From a report: In a post on X (formerly Twitter), Kosutami explained that Apple has stopped production of FineWoven accessories due to its poor durability. The company may move to another non-leather material for its premium accessories in the future. Apple introduced FineWoven, a soft fabric material, last year. The company claimed that the material is made of 68 percent post-consumer content and is overall more environmentally friendly compared to the company's previous line of leather accessories. As part of the introduction of FineWoven case, Apple also discontinued the use of leather for new Apple accessories. Reviewers didn't like FineWoven, calling it "bad. Like, really bad."Read more of this story at Slashdot.

President Joe Biden travels to Triangle, Virginia, Monday to mark Earth Day, where he'll unveil $7 billion in grant funding for solar power under the Inflation Reduction Act and announce new steps to stand up his administration's American Climate Corps -- a program popular with youth climate groups. From a report: The announcements come days after the Biden administration made several significant conservation announcements, including barring oil drilling on nearly half of the national petroleum reserve in Alaska. Under the Environmental Protection Agency's Solar for All program, the administration will announce funding awards to states territories, tribal governments, municipalities and nonprofits "to develop long-lasting solar programs that are targeted towards the communities and people who need them most," EPA Deputy Administrator Janet McCabe told reporters. Per McCabe, the funding will enable nearly one million households in low-income and disadvantaged communities to benefit from solar power, saving more than $350 million in electric costs annually and more than $8 billion over the life of the program for overburdened households.Read more of this story at Slashdot.

An anonymous reader shares a report: To accommodate tech companies' pivots to artificial intelligence, tech companies are increasingly investing in ways to power AI's immense electricity needs. Most recently, OpenAI CEO Sam Altman invested in Exowatt, a company using solar power to feed data centers, according to the Wall Street Journal. That's on the heals of OpenAI partner, Microsoft, working on getting approval for nuclear energy to help power its AI operations. Last year Amazon, which is a major investor in AI company Anthropic, said it invested in more than 100 renewable energy projects, making it the "world's largest corporate purchaser of renewable energy for the fourth year in a row."Read more of this story at Slashdot.

A military court in Moscow on Monday sentenced Meta spokesperson Andy Stone to six years in prison for "publicly defending terrorism," a verdict handed down in absentia, RIA news agency reported. Reuters: Meta itself is designated an extremist organisation in Russia and its Facebook and Instagram social media platforms have been banned in the country since 2022 when Russia invaded Ukraine. [...] Russia's interior ministry opened a criminal investigation into Stone late last year, without disclosing specific charges. RIA cited state investigators as saying Stone had published online comments that defended "aggressive, hostile and violent actions" towards Russian soldiers involved in what Moscow calls its "special military operation" in Ukraine.Read more of this story at Slashdot.

Abstract of a paper on National Bureau of Economic Research: Physicians commonly receive marketing-related transfers from drug firms. We examine the impact of these relationships on the prescribing of physician-administered cancer drugs in Medicare. We find that prescribing of the associated drug increases 4\% in the twelve months after a payment is received, with the increase beginning sharply in the month of payment and fading out within a year. A marketing payment also leads physicians to begin treating cancer patients with lower expected mortality. While payments result in greater expenditure on cancer drugs, there are no associated improvements in patient mortality.Read more of this story at Slashdot.

North Korean animators have been secretly working on major international TV shows, including an Amazon superhero series and an upcoming HBO Max children's anime, according to a report by cybersecurity researchers. The findings, detailed in a report by the Stimson Center think tank's 38 North Project and Google-owned security firm Mandiant, provide a glimpse into how North Korea can use skilled IT workers to raise funds for its heavily sanctioned regime. Researcher Nick Roy discovered a misconfigured cloud server on a North Korean IP address in December, containing thousands of animation files, including cells, videos, and notes discussing ongoing projects. Some images appeared to be from Amazon's "Invincible" and HBO Max's "Iyanu: Child of Wonder." The server, which mysteriously stopped being used at the end of February, likely allowed work to be sent to and from North Korean animators, according to Martyn Williams, a senior fellow on the 38 North Project. U.S. sanctions prohibit companies from working with North Korean entities, but the researchers say it is unlikely that the companies involved were aware of the animators' origins. The report suggests the contracting arrangement was several steps removed from the major producers.Read more of this story at Slashdot.

50 years ago this week, PC software pioneer Gary Kildall "demonstrated CP/M, the first commercially successful personal computer operating system in Pacific Grove, California," according to a blog post from Silicon Valley's Computer History Museum. It tells the story of "how his company, Digital Research Inc., established CP/M as an industry standard and its subsequent loss to a version from Microsoft that copied the look and feel of the DRI software." Kildall was a CS instructor and later associate professor at the Naval Postgraduate School (NPS) in Monterey, California...He became fascinated with Intel Corporation's first microprocessor chip and simulated its operation on the school's IBM mainframe computer. This work earned him a consulting relationship with the company to develop PL/M, a high-level programming language that played a significant role in establishing Intel as the dominant supplier of chips for personal computers. To design software tools for Intel's second-generation processor, he needed to connect to a new 8" floppy disk-drive storage unit from Memorex. He wrote code for the necessary interface software that he called CP/M (Control Program for Microcomputers) in a few weeks, but his efforts to build the electronic hardware required to transfer the data failed. The project languished for a year. Frustrated, he called electronic engineer John Torode, a college friend then teaching at UC Berkeley, who crafted a "beautiful rat's nest of wirewraps, boards and cables" for the task. Late one afternoon in the fall of 1974, together with John Torode, in the backyard workshop of his home at 781 Bayview Avenue, Pacific Grove, Gary "loaded my CP/M program from paper tape to the diskette and 'booted' CP/M from the diskette, and up came the prompt: * [...] By successfully booting a computer from a floppy disk drive, they had given birth to an operating system that, together with the microprocessor and the disk drive, would provide one of the key building blocks of the personal computer revolution...As Intel expressed no interest in CP/M, Gary was free to exploit the program on his own and sold the first license in 1975. What happened next? Here's some highlights from the blog post:"Reluctant to adapt the code for another controller, Gary worked with Glen Ewing to split out the hardware dependent-portions so they could be incorporated into a separate piece of code called the BIOS (Basic Input Output System)... The BIOS code allowed all Intel and compatible microprocessor-based computers from other manufacturers to run CP/M on any new hardware. This capability stimulated the rise of an independent software industry..." "CP/M became accepted as a standard and was offered by most early personal computer vendors, including pioneers Altair, Amstrad, Kaypro, and Osborne...""[Gary's company] introduced operating systems with windowing capability and menu-driven user interfaces years before Apple and Microsoft... However, by the mid-1980s, in the struggle with the juggernaut created by the combined efforts of IBM and Microsoft, DRI had lost the basis of its operating systems business.""Gary sold the company to Novell Inc. of Provo, Utah, in 1991. Ultimately, Novell closed the California operation and, in 1996, disposed of the assets to Caldera, Inc., which used DRI intellectual property assets to prevail in a lawsuit against Microsoft."Read more of this story at Slashdot.

Bloomberg looks at America's biggest operator of private electrical vehicle charging infrastructure: Amazon. "In a little more than two years, Amazon has installed more than 17,000 chargers at about 120 warehouses around the U.S." - and had Rivian build 13,500 custom electric delivery vans.Amazon has a long way to go. The Seattle-based company says its operations emitted about 71 million metric tons of carbon dioxide equivalent in 2022, up by almost 40% since Jeff Bezos's 2019 vow that his company would eventually stop contributing to the emissions warming the planet. Many of Amazon's emissions come from activities - air freight, ocean shipping, construction and electronics manufacturing, to name a few - that lack a clear, carbon-free alternative, today or any time soon. The company has not made much progress on decarbonization of long-haul trucking, whose emissions tend to be concentrated in industrial and outlying areas rather than the big cities that served as the backdrop for Amazon's electric delivery vehicle rollout... Another lesson Amazon learned is one the company isn't keen to talk about: Going green can be expensive, at least initially. Based on the type of chargers Amazon deploys - almost entirely midtier chargers called Level 2 in the industry - the hardware likely cost between $50 million and $90 million, according to Bloomberg estimates based on cost estimates supplied by the National Renewable Energy Laboratory. Factoring in costs beyond the plugs and related hardware - like digging through a parking lot to lay wires or set up electrical panels and cabinets - could double that sum. Amazon declined to comment on how much it spent on its EV charging push. In addition to the expense of the chargers, electric vehicle-fleet operators are typically on the hook for utility upgrades. When companies request the sort of increases to electrical capacity that Amazon has - the Maple Valley warehouse has three megawatts of power for its chargers - they tend to pay for them, making the utility whole for work done on behalf of a single customer. Amazon says it pays upgrade costs as determined by utilities, but that in some locations the upgrades fit within the standard service power companies will handle out of their own pocket. The article also includes this quote from Kellen Schefter, transportation director at the Edison Electric Institute trade group (which worked with Amazon on its electricity needs). "Amazon's scale matters. If Amazon can show that it meets their climate goals while also meeting their package-delivery goals, we can show this all actually works."Read more of this story at Slashdot.

This week the Register spoke to former senior White House cyber policy director A.J. Grotto - who complained it was hard to get even slight concessions from Microsoft:"If you go back to the SolarWinds episode from a few years ago ... [Microsoft] was essentially up-selling logging capability to federal agencies" instead of making it the default, Grotto said. "As a result, it was really hard for agencies to identify their exposure to the SolarWinds breach." Grotto told us Microsoft had to be "dragged kicking and screaming" to provide logging capabilities to the government by default. [In the interview he calls it "an epic fight" which lasted 18 months."] [G]iven the fact the mega-corp banked around $20 billion in revenue from security services last year, the concession was minimal at best. That illustrates, Grotto said, that "they [Microsoft] just have a ton of leverage, and they're not afraid to use it." Add to that concerns over an Exchange Online intrusion by Chinese snoops, and another Microsoft security breach by Russian cyber operatives, both of which allowed spies to gain access to US government emails, and Grotto says it's fair to classify Microsoft and its products as a national security concern. He estimates that Microsoft makes 85% of U.S. government productivity software - and has an even greater share of their operating systems. "Microsoft in many ways has the government locked in, he says in the interview, "and so it's able to transfer a lot of these costs associated with the security breaches over to the federal government." And about five minutes in, he says, point-blank, that "It's perfectly fair" to consider Microsoft a national security threat, given its dominance "not just within the federal government, but really in sort of the boarder IT marketplace. I think it's fair to say, yeah, that a systemic compromise that affects Microsoft and its products do rise to the level of a national security risk." He'd like to see the government encourage more competition - to the point where public scrutiny prompts software customers to change their behavior, and creates a true market incentive for better performance...Read more of this story at Slashdot.

An anonymous reader shared this report from CNN:On a slice of the ocean front in west Singapore, a startup is building a plant to turn carbon dioxide from air and seawater into the same material as seashells, in a process that will also produce "green" hydrogen - a much-hyped clean fuel. The cluster of low-slung buildings starting to take shape in Tuas will become the "world's largest" ocean-based carbon dioxide removal plant when completed later this year, according to Equatic, the startup behind it that was spun out of the University of California at Los Angeles. The idea is that the plant will pull water from the ocean, zap it with an electric current and run air through it to produce a series of chemical reactions to trap and store carbon dioxide as minerals, which can be put back in the sea or used on land... The $20 million facility will be fully operational by the end of the year and able to remove 3,650 metric tons of carbon dioxide annually, said Edward Sanders, chief operating officer of Equatic, which has partnered with Singapore's National Water Agency to construct the plant. That amount is equivalent to taking roughly 870 average passenger cars off the road. The ambition is to scale up to 100,000 metric tons of CO2 removal a year by the end of 2026, and from there to millions of metric tons over the next few decades, Sanders told CNN. The plant can be replicated pretty much anywhere, he said, stacked up in modules "like lego blocks...." The upfront costs are high but the company says it plans to make money by selling carbon credits to polluters to offset their pollution, as well as selling the hydrogen produced during the process. Equatic has already signed a deal with Boeing to sell it 2,100 metric tons of hydrogen, which it plans to use to create green fuel, and to fund the removal of 62,000 metric tons of CO2. There's other projects around the world attempting ocean-based carbon renewal, CNN notes. "Other projects include sprinkling iron particles into the ocean to stimulate CO2-absorbing phytoplankton, sinking seaweed into the depths to lock up carbon and spraying particles into marine clouds to reflect away some of the sun's energy." But carbon-removal projects are controversial, criticized for being expensive, unproven at scale and a distraction from policies to cut fossil fuels. And when they involve the oceans - complex ecosystems already under huge strain from global warming - criticisms can get even louder. There are "big knowledge gaps" when it comes to ocean geoengineering generally, said Jean-Pierre Gatusso, an ocean scientist at the Sorbonne University in France. "I am very concerned with the fact that science lags behind the industry," he told CNN.Read more of this story at Slashdot.

Two months ago the team behind NASA's Ingenuity Helicopter released a video reflecting on its historic explorations of Mars, flying 10.5 miles (17.0 kilometers) in 72 different flights over three years. It was the team's way of saying goodbye, according to NASA's video. And this week, LiveScience reports, Ingenuity answered back:On April 16, Ingenuity beamed back its final signal to Earth, which included the remaining data it had stored in its memory bank and information about its final flight. Ingenuity mission scientists gathered in a control room at NASA's Jet Propulsion Laboratory (JPL) in California to celebrate and analyze the helicopter's final message, which was received via NASA's Deep Space Network, made up of ground stations located across the globe. In addition to the remaining data files, Ingenuity sent the team a goodbye message including the names of all the people who worked on the mission. This special message had been sent to Perseverance the day before and relayed to Ingenuity to send home. The helicopter, which still has power, will now spend the rest of its days collecting data from its final landing spot in Valinor Hills, named after a location in J.R.R. Tolkien's "The Lord of the Rings" books. The chopper will wake up daily to test its equipment, collect a temperature reading and take a single photo of its surroundings. It will continue to do this until it loses power or fills up its remaining memory space, which could take 20 years. Such a long-term dataset could not only benefit future designs for Martian vehicles but also "provide a long-term perspective on Martian weather patterns and dust movement," researchers wrote in the statement. However, the data will be kept on board the helicopter and not beamed back to Earth, so it must be retrieved by future Martian vehicles or astronauts. "Whenever humanity revisits Valinor Hills - either with a rover, a new aircraft, or future astronauts - Ingenuity will be waiting with her last gift of data," Teddy Tzanetos, an Ingenuity scientist at JPL, said in the statement. Thursday NASA's Jet Propulsion Laboratory released another new video tracing the entire route of Ingenuity's expedition over the surface of Mars. "Ingenuity's success could pave the way for more extensive aerial exploration of Mars down the road," adds Spacae.com:Mission team members are already working on designs for larger, more capable rotorcraft that could collect a variety of science data on the Red Planet, for example. And Mars isn't the only drone target: In 2028, NASA plans to launch Dragonfly, a $3.3 billion mission to Saturn's huge moon Titan, which hosts lakes, seas and rivers of liquid hydrocarbons on its frigid surface. The 1,000-pound (450 kg) Dragonfly will hop from spot to spot on Titan, characterizing the moon's various environments and assessing its habitability.Read more of this story at Slashdot.

Long-time Slashdot reader tippen shared this report from the Register:AI agents, which combine large language models with automation software, can successfully exploit real world security vulnerabilities by reading security advisories, academics have claimed. In a newly released paper, four University of Illinois Urbana-Champaign (UIUC) computer scientists - Richard Fang, Rohan Bindu, Akul Gupta, and Daniel Kang - report that OpenAI's GPT-4 large language model (LLM) can autonomously exploit vulnerabilities in real-world systems if given a CVE advisory describing the flaw. "To show this, we collected a dataset of 15 one-day vulnerabilities that include ones categorized as critical severity in the CVE description," the US-based authors explain in their paper. "When given the CVE description, GPT-4 is capable of exploiting 87 percent of these vulnerabilities compared to 0 percent for every other model we test (GPT-3.5, open-source LLMs) and open-source vulnerability scanners (ZAP and Metasploit)...." The researchers' work builds upon prior findings that LLMs can be used to automate attacks on websites in a sandboxed environment. GPT-4, said Daniel Kang, assistant professor at UIUC, in an email to The Register, "can actually autonomously carry out the steps to perform certain exploits that open-source vulnerability scanners cannot find (at the time of writing)." The researchers wrote that "Our vulnerabilities span website vulnerabilities, container vulnerabilities, and vulnerable Python packages. Over half are categorized as 'high' or 'critical' severity by the CVE description...." "Kang and his colleagues computed the cost to conduct a successful LLM agent attack and came up with a figure of $8.80 per exploit"Read more of this story at Slashdot.

Remember when Apple filed a lawsuit against chip startup Rivos (saying that in one year Rivos hired more than 40 former Apple employees to work on competing system-on-a-chip technology)? Apple settled that suit in February. And now Tuesday Rivos announced that it raised $250 million, according to Reuters, "in a funding round that will enable it to manufacture its first server chip geared for artificial intelligence," combining a CPU with an AI-accelerating component optimized for LLMs and data analytics. Nvidia gobbled up more than 80% market share of AI chips in 2023. But a host of startups and chip giants have started to launch competing products, such as Intel's Gaudi 3 and Meta's inference chip - both unveiled last week. Rivos is tight-lipped about the specifics of the product, but has disclosed that its plans include designing chips based on the RISC-V architecture, which is an open source alternative to the architectures made by Arm, Intel, and Advanced Micro Devices.. [U]sing the open source alternative means Rivos does not have to pay a license fee to Arm. "RISC-V doesn't have a (large) software ecosystem, so I decided to form a company and then build software-defined hardware - just like what CUDA did with Nvidia," said Lip-Bu Tan, founding managing partner at Walden Catalyst, one of Rivos' investors. Meanwhile, there's a rumor that Allen Wu, former chief executive of Arm China, has founded a new company that will develop chips based on RISC-V. Tom's Hardware writes:Under the leadership of the controversial Allen Wu, Zhongzhi Chip is reportedly attracting a notable influx of talent, including numerous former employees of Arm, indicating the new company's serious ambitions in the chip sector... [T]he company's operational focus remains partially unclear, with speculation around whether it will primarily engage in its own R&D initiatives or represent Tenstorrent in China as its agent... which develops HPC CPUs and AI processors based on the RISC-V ISA... Based on the source report, Zhongzhi Chip is leveraging its connections and forming alliances with several other leading global RISC-V chip developers.Read more of this story at Slashdot.

The co-founder of Silicon Valley-based software testing startup HeadSpin was sentenced Friday to 18 months in prison and a $1 million fine, reports SFGate - for defrauding investors.Lachwani pleaded guilty to two counts of wire fraud and a count of securities fraud in April 2023, after federal prosecutors accused him of, for years, lying to investors about HeadSpin's finances to raise more money. HeadSpin, founded in 2015, grew to a $1.1 billion valuation by 2020 with over $115 million in funding from investors including Google Ventures and Iconiq Capital... He had personally altered invoices, lied to the company accountant and sent slide decks with fraudulent information to investors, [according to the government's 2021 criminal complaint]... Breyer, per the New York Times, rejected Lachwani's lawyer's argument that because HeadSpin investors didn't end up losing money, he should receive a light sentence. The judge, who often oversees tech industry cases, reportedly said: "If you win, there are no serious consequences - that simply can't be the law." Still, the sentencing was far lighter than it could have been. The government's prosecuting attorneys had asked for a five-year prison term. The New York Times reported in December that HeadSpin's financial statements had "often arrived months late, if at all, investors said in legal declarations," while the company's financial department "consisted of one external accountant who worked mostly from home using QuickBooks." And the comnpany also had no human resources department or organizational chart...After Manish Lachwani founded the Silicon Valley software start-up HeadSpin in 2015, he inflated the company's revenue numbers by nearly fourfold and falsely claimed that firms including Apple and American Express were customers. He showed a profit where there were losses. He used HeadSpin's cash to make risky trades on tech stocks. And he created fake invoices to cover it all up. What was especially breathtaking was how easily Mr. Lachwani, now 48, pulled all that off... [HeadSpin] had no chief financial officer, had no human resources department and was never audited. Mr. Lachwani used that lack of oversight to paint a rosier picture of HeadSpin's growth. Even though its main investors knew the start-up's financials were not accurate, according to Mr. Lachwani's lawyers, they chose to invest anyway, eventually propelling HeadSpin to a $1.1 billion valuation in 2020. When the investors pushed Mr. Lachwani to add a chief financial officer and share more details about the company's finances, he simply brushed them off. These details emerged this month in filings in U.S. District Court for the Northern District of California after Mr. Lachwani had pleaded guilty to three counts of fraud in April... The absence of controls at HeadSpin is part of an increasingly noticeable pattern at Silicon Valley start-ups that have run into trouble. Over the past decade, investors in tech start-ups were so eager to back hot companies that many often overlooked reckless behavior and gave up key controls like board seats, all in the service of fast growth and disruption. Then when founders took the ethos of "fake it till you make it" too far, their investors were often unaware or helpless... Now, amid a start-up shakeout, more frauds have started coming to light. The founder of the college aid company Frank has been charged, the internet connectivity start-up Cloudbrink has been sued, and the social media app IRL has been investigated and sued. Last month, Mike Rothenberg, a Silicon Valley investor, was found guilty on 21 counts of fraud and money laundering. On Monday, Trevor Milton, founder of the electric vehicle company Nikola, was sentenced to four years in prison for lying about Nikola's technological capabilities. The Times points out that similarly, FTX only had a three-person board "with barely any influence over the company, tracked its finances on QuickBooks and used a small, little-known accounting firm." And that Theranos had no financial audits for six years.Read more of this story at Slashdot.

The Los Angeles Times reports that the U.S.-China rivalry "has a new flashpoint in the battle for technology supremacy: electric cars." "So far, the U.S. is losing."Last year, China became the world's foremost auto exporter, according to the China Passenger Car Assn., surpassing Japan with more than 5 million sales overseas. New energy vehicles accounted for about 25% of those exports, and more than half of those were created by Chinese brands, a shift from the traditional assembly role China has played for foreign automakers. "The big growth has happened in the last three years," said Stephen Dyer, head of the Asia automotive and industrials unit at AlixPartners, a consulting firm. "With Chinese automakers making inroads for most of the market share, that's a huge challenge for foreign automakers." China's rapid expansion domestically and abroad has added fuel to a series of clashes between the U.S. and China over trade and advanced technology, as competition intensifies between the two superpowers... One area in which Chinese automakers handily beat Western competitors is on price, thanks to government subsidies that supported the industry's initial rise as well as cheap access to critical minerals and components such as lithium-ion batteries, which account for about a third of the overall cost of production... In March, BYD cut the price of its cheapest EV model in China to less than $10,000. According to Kelley Blue Book, the average EV retail price is $55,343 in the U.S., compared with $48,247 across all vehicles... Though 27.5% tariffs have in effect locked Chinese EVs out of the U.S. market, the fear that the cheaper models could eventually undermine American automakers has started to spread. The Alliance of American Manufacturing warned in a February report that allowing Chinese EVs into the country would be an "extinction-level event" for the U.S. auto industry. The group also cited the risks of Chinese auto companies building facilities across the border in Mexico that could circumvent tariffs.... "When the global market is flooded by artificially cheap Chinese products, the viability of American and other foreign firms is put into question," [said America's Treasury Secretary in April]. The European Union has opened an investigation into government subsidies utilized by China's EV industry and whether such support violates international trade laws.Read more of this story at Slashdot.

This week saw the release of the LXQt 2.0 desktop environment, reports 9to5Linux. And besides bringing Qt 6 support (and a new default application menu), it also brings support for the Wayland display protocol to more components:The LXQt development is confident that the next major release, LXQt 2.1, will be fully Wayland compatible. The components that need to be ported to Wayland include ScreenGrab, LXQt Global Shortcuts, LXQt Panel's task-bar and keyboard indicator, some input settings, and settings of monitor, power button, and screen locker. "Wayland will be the main target for LXQt 2.1.0, as Qt6 was for LXQt 2.0.0" said the devs. "Most Wayland compositors have tools that can be used instead of them, such that an LXQt-Wayland session is already possible for advanced users." The lightweight Linux distro Lubuntu uses LXQtplace in place of GNOME - and Lubuntu 24.04 LTS will include an optional Wayland session alongside its default Xorg one, according to 9to5Linux: I said it before and I'll say it again, 2024 is the year of the Wayland desktop... The Lubuntu team plans to support the Xorg session until 2026 to aid users with older GPUs... However, the tables will be turned next year with the Lubuntu 24.10 release, which will be shipping with Wayland by default.Read more of this story at Slashdot.

CNBC visited a small group of bitcoin miners who "set up shop at the site of an extinct volcano" near Kenya's Hell's Gate National Park. Their mine "consists of a single 500-kilowatt mobile container that, from the outside, looks like a small residential trailer." But what's more interesting is it's operated by a startup called Gridless. (According to its web site Gridless "designs, builds, and operates bitcoin mining sites alongside small-scale renewable energy producers in rural Africa where excess energy is not utilized...")Backed by Jack Dorsey's Block, Gridless electrifies its machines with a mix of solar power and the stranded, wasted energy from a nearby geothermal site. It's one of six mines run by the company in Kenya, Malawi and Zambia, powered by a mix of renewable inputs and working toward a broader mission of securing and decentralizing the bitcoin network... In early 2022, [the three Gridless co-founders] began brainstorming creative solutions for the divide between power generation and capacity, and the lack of access to electricity in Africa. They landed on the idea of bitcoin mining, which could potentially solve a big problem for renewable energy developers by taking their stranded power and spreading it to other parts of the continent. In Africa, 43% of the population, or roughly 600 million people, lack access to electricity.... Africa is home to an estimated 10 terawatts of solar capacity, 350 gigawatts of hydro and another 110 gigawatts of wind. Some of this renewable energy is being harnessed already, but a lot isn't because building the specialized infrastructure to capture it is expensive. Even with 60% of the best solar resources globally, Africa only has 1% of installed solar PV capacity. Enter bitcoin miners. Bitcoin gets a bad rap for the amount of energy it consumes, but it can also help unlock these trapped renewable sources of power. Miners are essentially energy buyers, and co-locating with renewables creates a financial incentive to bolster production. "As often happens, you'll have an overage of power during the day or even at night, and there's nobody to soak that power up," said Hersman. He said his company's 50-kilowatt mining container can "take up whatever is extra throughout the day...." Demand from bitcoin miners on these semi-stranded assets is making renewables in Africa economically viable. The power supplier benefits from selling energy that previously had been discarded, while the energy plants will sometimes lower costs for the customer. At one of the Gridless pilot sites in Kenya, the hydro plant dropped the price of power from 35 cents per kilowatt hour to 25 cents per kWh. The buildout of capacity is also electrifying households. Gridless says its sites have powered 1,200 houses in Zambia, 1,800 in Malawi and 5,000 in Kenya. The company's mines also have delivered power for containerized cold storage for local farmers, battery charging stations for electric motorcycles and public WiFi points.Read more of this story at Slashdot.

The EU's European Data Protection Board oversees its privacy-protecting GDPR policies. Earlier this week, TechCrunch reported that nearly two dozen civil society groups and nonprofits wrote the Board an open letter "urging it not to endorse a strategy used by Meta that they say is intended to bypass the EU's privacy protections for commercial gain." Meta's strategy is sometimes called "Pay or Okay," writes long-time Slashdot reader AmiMoJo :Meta offers users a choice: "consent" to tracking, or pay over 250/year to use its sites without invasive monetization of personal data. Meta prefers the phrase "subsccription for no ads," and told TechCrunch it makes them compliant with EU laws:A raft of complaints have been filed against Meta's implementation of the pay-or-consent tactic since it launched the "no ads" subscription offer last fall. Additionally, in a notable step last month, the European Union opened a formal investigation into Meta's tactic, seeking to find whether it breaches obligations that apply to Facebook and Instagram under the competition-focused Digital Markets Act. That probe remains ongoing. The letter to the Board called for "robust protections that prioritize data subjects' agency and control over their information." And Wednesday the board issued its first decision: "[I]n most cases, it will not be possible for [social media services] to comply with the requirements for valid consent, if they confront users only with a choice between consenting to processing of personal data for behavioural advertising purposes and paying a fee."The EDPB considers that offering only a paid alternative to services which involve the processing of personal data for behavioural advertising purposes should not be the default way forward for controllers. When developing alternatives, large online platforms should consider providing individuals with an 'equivalent alternative' that does not entail the payment of a fee. If controllers do opt to charge a fee for access to the 'equivalent alternative', they should give significant consideration to offering an additional alternative. This free alternative should be without behavioural advertising, e.g. with a form of advertising involving the processing of less or no personal data. EDPB Chair, Anu Talus added: "Controllers should take care at all times to avoid transforming the fundamental right to data protection into a feature that individuals have to pay to enjoy."Read more of this story at Slashdot.

San Francisco-based drone-delivery service Zipline "said Friday that it hit its 1 millionth delivery to customers," reports CNBC, "and that it's eyeing restaurant partnerships in its next phase of growth." Zipline's clients already include more than 4,700 hospitals, according to the article, as well as major brands like Walmart. A Panera executive even told CNBC they hope to test Zipline deliveries in Seattle next year, expecting they won't cost the company any more than third-party delivery services:The company said its zero-emission drones have now flown more than 70 million autonomous commercial miles across four continents and delivered more than 10 million products. The milestone 1 millionth delivery carried two bags of IV fluid from a Zipline distribution center in Ghana to a local health facility... Zipline CEO Keller Rinaudo Cliffton told CNBC that 70% of the company's deliveries have happened in the past two years and, in the future, the goal is to do 1 million deliveries a day... "We need to start using vehicles that are light, fast, autonomous and zero-emission," Cliffton said. "Delivering in this way is 10 times as fast, it's less expensive ... and relative to the traditional delivery apps that most restaurants will be working with, we triple the service radius, which means you actually [get] 10 times the number of customers who are reachable via instant delivery."Read more of this story at Slashdot.

Several "high-profile astronomers" will meet at London's Royal Society (the UK's national academy of sciences), "to question some of the most fundamental aspects of our understanding of the universe.reports Futurism:As The Guardian reports, the luminaries of cosmology will be re-examining some basic assumptions about the universe - right down to the over-a-century-old theory that it's expanding at a constant rate. "We are, in cosmology, using a model that was first formulated in 1922," coorganizer and Oxford cosmologist Subir Sarkar told the newspaper, in an apparent reference to the year Russian astronomer Alexander Friedmann outlined the possibility of cosmic expansion based on Einstein's general theory of relativity. "We have great data, but the theoretical basis is past its sell-by date," he added. "More and more people are saying the same thing and these are respected astronomers." A number of researchers have found evidence that the universe may be expanding more quickly in some areas compared to others, raising the tantalizing possibility that megastructures could be influencing the universe's growth in significant ways. Sarkar and his colleagues, for instance, are suggesting that the universe is "lopsided" after studying over a million quasars, which are the active nuclei of galaxies where gas and dust are being gobbled up by a supermassive black hole. The article notes that another theory is that the so-called cosmological constant that's been used for decades "actually varies across space." Thanks to long-time Slashdot reader schwit1 for sharing the article.Read more of this story at Slashdot.

"Workers installing a light pole in Missouri cut into a fiber line," reports the Associated Press, knocking out 911 phone service "for emergency agencies in Nebraska, Nevada and South Dakota, an official with the company that operates the line said Thursday."In Kansas City, Missouri, workers installing a light pole for another company Wednesday cut into a Lumen Technologies fiber line, Lumen global issues director Mark Molzen said in an email to The Associated Press. Service was restored within 2 1/2 hours, he said. There were no reports of 911 outages in Kansas City... The Dundy County Sheriff's Office in Nebraska warned in a social media post Wednesday night that 911 callers would receive a busy signal and urged people to instead call the administrative phone line. About three hours later, officials said mobile and landline 911 services had been restored. In Douglas County, home to Omaha and more than a quarter of Nebraska's residents, officials first learned there was a problem when calls from certain cellphone companies showed up in a system that maps calls but didn't go through over the phone. Operators started calling back anyone whose call didn't go through, and officials reached out to Lumen, which confirmed the outage. Service was restored by 4 a.m. Kyle Kramer, the technical manager for Douglas County's 911 Center, said the outage highlights the potential problems of having so many calls go over the same network. "As things become more interconnected in our modern world, whether you're on a wireless device or a landline now, those are no longer going over the traditional old copper phone wires that may have different paths in different areas," Kramer said. "Large networks usually have some aggregation point, and those aggregation points can be a high risk." Kramer said this incident and the two previous 911 outages he has seen in the past year in Omaha make him concerned that communications companies aren't building enough redundancy into their networks. South Dakota officials called the state-wide outage "unprecedented," with their Department of Public Safety reporting the outage lasted two hours (though texting to 911 still worked in most locations - and of course, people could still call local emergency services using their non-emergency lines.) America's FCC has already begun an investigation. The article notes that "The outages, ironically, occurred in the midst of National Public Safety Telecommunicators Week." Thanks to long-time Slashdot reader davidwr for sharing the article.Read more of this story at Slashdot.

It's "the new generation of Tablet for simplicity and privacy..." according to its Kickstarter page. "Top-tier performance, lightweight design and completely Google-free." And it's already reached its funding goal of $53,312 - climbing to over $75,000 from 115 backers with another 26 days still to go. 9to5Linux reports:Volla, the maker of the Volla Phone smartphones, has launched a crowdfunding campaign on Kickstarter for their first tablet device, the Volla Tablet, which will also support the Ubuntu Touch mobile OS. Featuring a 12.3-inch Quad HD display with 2650A--1600 pixel resolution, the Volla Tablet uses a powerful MediaTek Gaming G99 8-core processor, 12 GB RAM, and 256 GB internal storage. It also comes with a long-lasting 10,000 mAh battery, 2G/3G/4G cellular network support, Wi-Fi, Bluetooth, and a 13+5 MP main camera. By default, Volla Tablet ships with Volla OS 13, Volla's in-house operating system based on the free Android Open Source Project (AOSP), but users will be able to buy the tablet with Ubuntu Touch featuring built-in convergence and support for Android apps with WayDroid container. "Users will also be able to use desktop apps like Firefox or LibreOffice thanks to the help of the Libertine container," according to the article. ("Volla says that Volla Tablet with Ubuntu Touch is ideal for Linux enthusiasts and minimalists seeking a simplified, efficient, and familiar operating system experience.") Its Kickstarter page points out the tablet even offers options like "hide.me VPN" and private speech recognition that's "cloud-independent for secure, confidential interactions." ("For U.S. users, please note that only roaming SIM cards from abroad can be used.")Read more of this story at Slashdot.