AI Avatars Are Doing Job Interviews Now

An anonymous reader quotes a report from 404 Media: Jack Ryan from San Diego was recently being interviewed for a job. On a video call, the interviewer, a woman with red hair, said, "I find it helps when candidates tell me a story in answering the questions." "I'm looking for examples from your work experience," the woman added. During the conversation, Ryan had a smirk on his face. That's because the woman is not real. She is an AI avatar from a company called Fairgo.ai, which uses AI agents to interview job candidates on behalf of other companies.

On its website, Fairgo says its AI agent "talks to candidates any time, any where." The company claims that it can "Ensure every candidate is evaluated on a level playing field with consistent and unbiased interview practices." Julian Bright, founder and CEO of Fairgo, told 404 Media in an email that after an introductory video voiced by the AI avatar, candidate interviews are done by an audio-only AI. "At no point is any of the video or audio captured used to evaluate the candidate," he wrote. Instead, that is done with a transcript afterwards. Bright said that Fairgo does not make decisions on who to shortlist for a role; that instead falls to the hirers. Fairgo also says on its site that the interview process is low stress, and that "candidates consistently love the interview experience." "This HR AI avatar is a perfect demonstration of late stage capitalism," Ryan told 404 Media in an online chat. "While Fairgo's intent is to provide a fair and equitable interview process, I can't imagine AI, LLMs, and other tools are able to interpret the human emotion and facial reactions to provide an actual, well rounded interview."

"As someone who has interviewed upwards of 50 candidates for prior roles, human connection and interaction is the single most important indicator of how a team will mesh and jive together. If an AI is running the early stage process, it eliminates potential candidates because of its algorithmic design," he added. "It shows how executives and corporations are further trying to cut costs on the human side of business. As someone who has seen these layoffs at numerous top tech companies that then go on to rehire 6-12-18 months later for the same roles because they realized their strategy failed and they actually need good people to do the work, it's laughable at best and terrifying at worst."

https://slashdot.org/story/24/09/27/2232220/ai-avatars-are-doing-job-interviews-now?utm_source=rss1.0moreanon&utm_medium=feed
 at Slashdot.

https://slashdot.org/story/24/09/27/2232220/ai-avatars-are-doing-job-interviews-now?utm_source=rss1.0mainlinkanon&utm_medium=feed


Meta Fined $102 Million For Storing 600 Million Passwords In Plain Text

Meta has been fined $101.5 million by the Irish Data Protection Commission (DPC) for storing over half a billion user passwords in plain text for years, with some engineers having access to this data for over a decade. The issue, discovered in 2019, predominantly affected non-US users, especially those using Facebook Lite. AppleInsider reports: Meta Ireland was found guilty of infringing four parts of GDPR, including how it "failed to notify the DPC of a personal data breach concerning storage of user passwords in plain text." Meta Ireland did report the failure, but only some months after it was discovered. "It is widely accepted that user passwords should not be stored in plaintext, considering the risks of abuse that arise from persons accessing such data," said Graham Doyle, Deputy Commissioner at the DPC, in a statement about the fine. "It must be borne in mind, that the passwords the subject of consideration in this case, are particularly sensitive, as they would enable access to users' social media accounts."

Other than the fine and an official reprimand, the full extent of the DPC's ruling is yet to be released publicly. The details published so far do not reveal whether the passwords included any of US users as well as ones in Ireland or across the rest of the European Union. It's most likely that the issue concerns only non-US users, however. That's because in 2019, Facebook told CNN that the majority of the plain text passwords were for a service called Facebook Lite, which it described as being a cut-down service for areas of the world with slower connectivity.

https://yro.slashdot.org/story/24/09/27/2226229/meta-fined-102-million-for-storing-600-million-passwords-in-plain-text?utm_source=rss1.0moreanon&utm_medium=feed
 at Slashdot.

https://yro.slashdot.org/story/24/09/27/2226229/meta-fined-102-million-for-storing-600-million-passwords-in-plain-text?utm_source=rss1.0mainlinkanon&utm_medium=feed


IBM Opens Its Quantum-Computing Stack To Third Parties

An anonymous reader quotes a report from Ars Technica, written by John Timmer: [P]art of the software stack that companies are developing to control their quantum hardware includes software that converts abstract representations of quantum algorithms into the series of commands needed to execute them. IBM's version of this software is called Qiskit (although it was made open source and has since been adopted by other companies). Recently, IBM made a couple of announcements regarding Qiskit, both benchmarking it in comparison to other software stacks and opening it up to third-party modules. [...] Right now, the company is supporting six third-party Qiskit functions that break down into two categories.

The first can be used as stand-alone applications and are focused on providing solutions to problems for users who have no expertise programming quantum computers. One calculates the ground-state energy of molecules, and the second performs optimizations. But the remainder are focused on letting users get more out of existing quantum hardware, which tends to be error prone. But some errors occur more often than others. These errors can be due to specific quirks of individual hardware qubits or simply because some specific operations are more error prone than others. These can be handled in two different ways. One is to design the circuit being executed to avoid the situations that are most likely to produce an error. The second is to examine the final state of the algorithm to assess whether errors likely occurred and adjust to compensate for any. And third parties are providing software that can handle both of these.

One of those third parties is Q-CTRL, and we talked to its CEO, Michael Biercuk. "We build software that is really focused on everything from the lowest level of hardware manipulation, something that we call quantum firmware, up through compilation and strategies that help users map their problem onto what has to be executed on hardware," he told Ars. (Q-CTRL is also providing the optimization tool that's part of this Qiskit update.) "We're focused on suppressing errors everywhere that they can occur inside the processor," he continued. "That means the individual gate or logic operations, but it also means the execution of the circuit. There are some errors that only occur in the whole execution of a circuit as opposed to manipulating an individual quantum device." Biercuk said Q-CTRL's techniques are hardware agnostic and have been demonstrated on machines that use very different types of qubits, like trapped ions. While the sources of error on the different hardware may be distinct, the manifestations of those problems are often quite similar, making it easier for Q-CTRL's approach to work around the problems.

Those work-arounds include things like altering the properties of the microwave pulses that perform operations on IBM's hardware, and replacing the portion of Qiskit that converts an algorithm to a series of gate operations. The software will also perform operations that suppress errors that can occur when qubits are left idle during the circuit execution. As a result of all these differences, he claimed that using Q-CTRL's software allows the execution of more complex algorithms than are possible via Qiskit's default compilation and execution. "We've shown, for instance, optimization with all 156 qubits on [an IBM] system, and importantly -- I want to emphasize this word -- successful optimization," Biercuk told Ars. "What it means is you run it and you get the right answer, as opposed to I ran it and I kind of got close."

https://tech.slashdot.org/story/24/09/27/2210240/ibm-opens-its-quantum-computing-stack-to-third-parties?utm_source=rss1.0moreanon&utm_medium=feed
 at Slashdot.

https://tech.slashdot.org/story/24/09/27/2210240/ibm-opens-its-quantum-computing-stack-to-third-parties?utm_source=rss1.0mainlinkanon&utm_medium=feed


Europe's Space Agency Will Destroy a Brand-New Satellite in 2027 Just To See What Happens

The European Space Agency (ESA) plans to launch a satellite into Earth's orbit in 2027 to watch it get wrecked as it reenters the atmosphere. From a report: The project is intended to help understand how exactly satellites break apart so that scientists can learn how to prevent the creation of more space debris. Space junk is becoming a bigger problem as we send more satellites into orbit, but there are efforts to try and address it. This mission is part of the ESA's Zero Debris Charter initiative to stop the creation of additional space debris by 2030. The mission is called the Destructive Reentry Assessment Container Object (DRACO), and the insides of the satellite will collect data as the craft gets destroyed during reentry into the atmosphere. It will also contain a 40-centimeter capsule designed to survive the destruction that will transmit the collected data as the capsule moves toward the ocean.

https://science.slashdot.org/story/24/09/27/1924212/europes-space-agency-will-destroy-a-brand-new-satellite-in-2027-just-to-see-what-happens?utm_source=rss1.0moreanon&utm_medium=feed
 at Slashdot.

https://science.slashdot.org/story/24/09/27/1924212/europes-space-agency-will-destroy-a-brand-new-satellite-in-2027-just-to-see-what-happens?utm_source=rss1.0mainlinkanon&utm_medium=feed


Controversial Windows Recall AI Search Tool Returns

wiredmikey writes: Three months after pulling previews of the controversial Windows Recall feature due to public backlash, Microsoft says it has completely overhauled the security architecture with proof-of-presence encryption, anti-tampering and DLP checks, and screenshot data managed in secure enclaves outside the main operating system.

In an interview with SecurityWeek, Microsoft vice president David Weston said the company's engineers rewrote the security model of Windows Recall to reduce attack surface on Copilot+ PCs and minimize the risk of malware attackers targeting the screenshot data store.

https://it.slashdot.org/story/24/09/27/1722216/controversial-windows-recall-ai-search-tool-returns?utm_source=rss1.0moreanon&utm_medium=feed
 at Slashdot.

https://it.slashdot.org/story/24/09/27/1722216/controversial-windows-recall-ai-search-tool-returns?utm_source=rss1.0mainlinkanon&utm_medium=feed


Apple Rolls Back Its Big Plans to Release Movies in Theaters

An anonymous reader shares a report: Apple is rethinking its movie strategy after the disappointing box office performance of several big-budget films, including Martin Scorsese's Killers of the Flower Moon, Napoleon, Argylle and Fly Me to the Moon. Apple canceled plans to release Wolfs -- an action comedy starring George Clooney and Brad Pitt -- in thousands of theaters globally. Instead, the picture made its debut in a limited number of venues before it became available on the Apple TV+ streaming service on Sept. 27. Apple plans to use a similar approach with the next few titles on its calendar, including the World War II drama Blitz. Apple, which previously had intended to spend about $1 billion annually on blockbusters for cinemas, won't return to the big screen with a wide, global theatrical release until June with F1 -- a film starring Pitt as a former Formula One driver who returns to racing to mentor a rising star.

[...] Apple is pulling back from theaters at the same time Netflix Inc. and Amazon are reworking their movie strategies. Earlier this year, Netflix hired producer Dan Lin to oversee its film studio, which had spent billions of dollars a year to produce more films than any other company in Hollywood. Yet Netflix struggled to control the quality and cost of its slate, which in some years approached 50 movies. For every hit, such as Bird Box, there were several misses. Lin's predecessor Scott Stuber also clashed with management over its strategy for movie theaters. Stuber wanted to release movies such as Scorsese's The Irishman and the Knives Out sequel Glass Onion widely in cinemas, but he couldn't persuade Netflix co-Chief Executive Officer Ted Sarandos. Lin aims to make fewer movies and develop more projects in-house to keep costs down. He has considered scrapping several of the more expensive projects in development at Netflix.

https://apple.slashdot.org/story/24/09/27/1542238/apple-rolls-back-its-big-plans-to-release-movies-in-theaters?utm_source=rss1.0moreanon&utm_medium=feed
 at Slashdot.

https://apple.slashdot.org/story/24/09/27/1542238/apple-rolls-back-its-big-plans-to-release-movies-in-theaters?utm_source=rss1.0mainlinkanon&utm_medium=feed


Promises of 'Passive Income' On Amazon Led To Death Threats For Negative Online Review, FTC Says

"The Federal Trade Commission is cracking down on 'automation' companies that launch and manage online businesses on behalf of customers in exchange for an upfront investment," reports CNBC's Annie Palmer. "The latest case targets Ascend Ecom, which ran an e-commerce money-making scheme, primarily on Amazon." The FTC accuses the e-commerce company of defrauding consumers of at least $25 million through false claims, deceptive marketing practices, and attempts to suppress negative reviews. From the report: Jamaal Sanford received a disturbing email in May of last year. The message, whose sender claimed to be part of a "Russian shadow team," contained Sanford's home address, social security number and his daughter's college. It came with a very specific threat. The sender said Sanford, who lives in Springfield, Missouri, would only only be safe if he removed a negative online review. "Do not play tough guy," the email said. "You have nothing to gain by keeping the reviews and EVERYTHING to lose by not cooperating."

Months earlier, Sanford had left a scathing review for an e-commerce "automation" company called Ascend Ecom on the rating site Trustpilot. Ascend's purported business was the launching and managing of Amazon storefronts on behalf of clients, who would pay money for the service and the promise of earning thousands of dollars in "passive income." Sanford had invested $35,000 in such a scheme. He never recouped the money and is now in debt, according to a Federal Trade Commission lawsuit unsealed on Friday. His experience is a key piece of the FTC's suit, which accuses Ascend of breaking federal laws by making false claims related to earnings and business performance, and threatening or penalizing customers for posting honest reviews, among other violations. The FTC is seeking monetary relief for Ascend customers and to prevent Ascend from doing business permanently.

https://news.slashdot.org/story/24/09/27/0047225/promises-of-passive-income-on-amazon-led-to-death-threats-for-negative-online-review-ftc-says?utm_source=rss1.0moreanon&utm_medium=feed
 at Slashdot.

https://news.slashdot.org/story/24/09/27/0047225/promises-of-passive-income-on-amazon-led-to-death-threats-for-negative-online-review-ftc-says?utm_source=rss1.0mainlinkanon&utm_medium=feed


NIST Proposes Barring Some of the Most Nonsensical Password Rules

Ars Technica's Dan Goodin reports: Last week, NIST released its second public draft of SP 800-63-4, the latest version of its Digital Identity Guidelines. At roughly 35,000 words and filled with jargon and bureaucratic terms, the document is nearly impossible to read all the way through and just as hard to understand fully. It sets both the technical requirements and recommended best practices for determining the validity of methods used to authenticate digital identities online. Organizations that interact with the federal government online are required to be in compliance. A section devoted to passwords injects a large helping of badly needed common sense practices that challenge common policies. An example: The new rules bar the requirement that end users periodically change their passwords. This requirement came into being decades ago when password security was poorly understood, and it was common for people to choose common names, dictionary words, and other secrets that were easily guessed.

Since then, most services require the use of stronger passwords made up of randomly generated characters or phrases. When passwords are chosen properly, the requirement to periodically change them, typically every one to three months, can actually diminish security because the added burden incentivizes weaker passwords that are easier for people to set and remember. Another requirement that often does more harm than good is the required use of certain characters, such as at least one number, one special character, and one upper- and lowercase letter. When passwords are sufficiently long and random, there's no benefit from requiring or restricting the use of certain characters. And again, rules governing composition can actually lead to people choosing weaker passcodes.

The latest NIST guidelines now state that:
- Verifiers and CSPs SHALL NOT impose other composition rules (e.g., requiring mixtures of different character types) for passwords and
- Verifiers and CSPs SHALL NOT require users to change passwords periodically. However, verifiers SHALL force a change if there is evidence of compromise of the authenticator.
("Verifiers" is bureaucrat speak for the entity that verifies an account holder's identity by corroborating the holder's authentication credentials. Short for credential service provider, "CSPs" are a trusted entity that assigns or registers authenticators to the account holder.) In previous versions of the guidelines, some of the rules used the words "should not," which means the practice is not recommended as a best practice. "Shall not," by contrast, means the practice must be barred for an organization to be in compliance. Several other common sense practices mentioned in the document include: 1. Verifiers and CSPs SHALL require passwords to be a minimum of eight characters in length and SHOULD require passwords to be a minimum of 15 characters in length.
2. Verifiers and CSPs SHOULD permit a maximum password length of at least 64 characters.
3. Verifiers and CSPs SHOULD accept all printing ASCII [RFC20] characters and the space character in passwords.
4. Verifiers and CSPs SHOULD accept Unicode [ISO/ISC 10646] characters in passwords. Each Unicode code point SHALL be counted as a single character when evaluating password length.
5. Verifiers and CSPs SHALL NOT impose other composition rules (e.g., requiring mixtures of different character types) for passwords.
6. Verifiers and CSPs SHALL NOT require users to change passwords periodically. However, verifiers SHALL force a change if there is evidence of compromise of the authenticator.
7. Verifiers and CSPs SHALL NOT permit the subscriber to store a hint that is accessible to an unauthenticated claimant.
8. Verifiers and CSPs SHALL NOT prompt subscribers to use knowledge-based authentication (KBA) (e.g., "What was the name of your first pet?") or security questions when choosing passwords.
9. Verifiers SHALL verify the entire submitted password (i.e., not truncate it).

https://yro.slashdot.org/story/24/09/27/0021240/nist-proposes-barring-some-of-the-most-nonsensical-password-rules?utm_source=rss1.0moreanon&utm_medium=feed
 at Slashdot.

https://yro.slashdot.org/story/24/09/27/0021240/nist-proposes-barring-some-of-the-most-nonsensical-password-rules?utm_source=rss1.0mainlinkanon&utm_medium=feed


Dozens of Fortune 100 Companies Have Unwittingly Hired North Korean IT Workers

"Dozens of Fortune 100 organizations" have unknowingly hired North Korean IT workers using fake identities, generating revenue for the North Korean government while potentially compromising tech firms, according to Google's Mandiant unit. "In a report published Monday [...], researchers describe a common scheme orchestrated by the group it tracks as UNC5267, which has been active since 2018," reports The Record. "In most cases, the IT workers 'consist of individuals sent by the North Korean government to live primarily in China and Russia, with smaller numbers in Africa and Southeast Asia.'" From the report: The remote workers "often gain elevated access to modify code and administer network systems," Mandiant found, warning of the downstream effects of allowing malicious actors into a company's inner sanctum. [...] Using stolen identities or fictitious ones, the actors are generally hired as remote contractors. Mandiant has seen the workers hired in a variety of complex roles across several sectors. Some workers are employed at multiple companies, bringing in several salaries each month. The tactic is facilitated by someone based in the U.S. who runs a laptop farm where workers' laptops are sent. Remote technology is installed on the laptops, allowing the North Koreans to log in and conduct their work from China or Russia.

Workers typically asked for their work laptops to be sent to different addresses than those listed on their resumes, raising the suspicions of companies. Mandiant said it found evidence that the laptops at these farms are connected to a "keyboard video mouse" device or multiple remote management tools including LogMeIn, GoToMeeting, Chrome Remote Desktop, AnyDesk, TeamViewer and others. "Feedback from team members and managers who spoke with Mandiant during investigations consistently highlighted behavior patterns, such as reluctance to engage in video communication and below-average work quality exhibited by the DPRK IT worker remotely operating the laptops," Mandiant reported.

In several incident response engagements, Mandiant found the workers used the same resumes that had links to fabricated software engineer profiles hosted on Netlify, a platform often used for quickly creating and deploying websites. Many of the resumes and profiles included poor English and other clues indicating the actor was not based in the U.S. One characteristic repeatedly seen was the use of U.S-based addresses accompanied by education credentials from universities outside of North America, frequently in countries such as Singapore, Japan or Hong Kong. Companies, according to Mandiant, typically don't verify credentials from universities overseas. Further reading: How Not To Hire a North Korean IT Spy

https://it.slashdot.org/story/24/09/27/0011212/dozens-of-fortune-100-companies-have-unwittingly-hired-north-korean-it-workers?utm_source=rss1.0moreanon&utm_medium=feed
 at Slashdot.

https://it.slashdot.org/story/24/09/27/0011212/dozens-of-fortune-100-companies-have-unwittingly-hired-north-korean-it-workers?utm_source=rss1.0mainlinkanon&utm_medium=feed


Mozilla Hit With Privacy Complaint In EU Over Firefox Tracking Tech

Mozilla has been hit with a complaint by EU privacy group noyb, accusing it of violating GDPR by tracking Firefox users by default without their consent. TechCrunch reports: Mozilla calls the feature at issue "Privacy Preserving Attribution" (PPA). But noyb argues this is misdirection. And if EU privacy regulators agree with the complaint the Firefox-maker could be slapped with orders to change tack -- or even face a penalty (the GDPR allows for fines of up to 4% of global revenue). "Contrary to its reassuring name, this technology allows Firefox to track user behaviour on websites," noyb wrote in a press release. "In essence, the browser is now controlling the tracking, rather than individual websites. While this might be an improvement compared to even more invasive cookie tracking, the company never asked its users if they wanted to enable it. Instead, Mozilla decided to turn it on by default once people installed a recent software update. This is particularly worrying because Mozilla generally has a reputation for being a privacy-friendly alternative when most other browsers are based on Google's Chromium."

Another component of noyb's objection is that Mozilla's move "doesn't replace cookies either" -- Firefox simply wouldn't have the market share and power to shift industry practices -- so all it's done is produce another additional way for websites to target ads. [...] The noyb-backed complaint (PDF), which has been filed with the Austrian data protection authority, accuses Mozilla of failing to inform users about the processing of their personal data and of using an opt-out -- rather than an affirmative "opt-in" -- mechanism. The privacy rights group also wants the regulator to order the deletion of all data collected so far. In a statement attributed to Christopher Hilton, its director of policy and corporate communications, Mozilla said that it has only conducted a "limited test" of a PPA prototype on its own websites.While acknowledging poor communication around the effort, the company emphasized that no user data has been collected or shared and expressed its commitment to engaging with stakeholders as it develops the technology further.

https://tech.slashdot.org/story/24/09/27/002223/mozilla-hit-with-privacy-complaint-in-eu-over-firefox-tracking-tech?utm_source=rss1.0moreanon&utm_medium=feed
 at Slashdot.

https://tech.slashdot.org/story/24/09/27/002223/mozilla-hit-with-privacy-complaint-in-eu-over-firefox-tracking-tech?utm_source=rss1.0mainlinkanon&utm_medium=feed


Google's NotebookLM Can Help You Dive Deeper Into YouTube Videos

The Verge's Emma Roth reports: NotebookLM, Google's AI note-taking app, can now summarize and help you dig deeper into YouTube videos. The new capability works by analyzing the text in a YouTube video's transcript, including autogenerated ones. Once you add a YouTube link to NotebookLM, it will use AI to provide a brief summary of key topics discussed in the transcript. You can then click on these topics to get more detailed information as well as ask questions. (If you're struggling to come up with something to ask, NotebookLM will suggest some questions.)

After clicking on some of the topics, I found that NotebookLM backs up the information provided in its chat window with a citation that links you directly to the point in the transcript where it's mentioned. You can also create an Audio Overview based on the content, which is a podcast-style discussion hosted by AI. I found that the feature worked on most of the videos I tried, except for ones published within the past two days or so. [...] In addition to adding support for YouTube videos, Google announced that NotebookLM now supports audio recordings as well, allowing you to search transcribed conversations for certain information and create study guides.

https://news.slashdot.org/story/24/09/26/217228/googles-notebooklm-can-help-you-dive-deeper-into-youtube-videos?utm_source=rss1.0moreanon&utm_medium=feed
 at Slashdot.

https://news.slashdot.org/story/24/09/26/217228/googles-notebooklm-can-help-you-dive-deeper-into-youtube-videos?utm_source=rss1.0mainlinkanon&utm_medium=feed


US Court Orders LibGen To Pay $30 Million To Publishers, Issues Broad Injunction

A New York federal court has ordered (PDF) the operators of shadow library LibGen to pay $30 million in copyright damages to publishers. The default judgment also comes with a broad injunction that affects third-party services including domain registries, browser extensions, CDN providers, IPFS gateways, advertisers, and more. These parties must restrict access to the pirate site. An anonymous reader quotes a report from TorrentFreak: Yesterday, U.S. District Court Judge Colleen McMahon granted the default judgment without any changes. The anonymous LibGen defendants are responsible for willful copyright infringement and their activities should be stopped. "Plaintiffs have been irreparably harmed as a result of Defendants' unlawful conduct and will continue to be irreparably harmed should Defendants be allowed to continue operating the Libgen Sites," the order reads. The order requires the defendants to pay the maximum statutory damages of $150,000 per work, a total of $30 million, for which they are jointly and severally liable. While this is a win on paper, it's unlikely that the publishers will get paid by the LibGen operators, who remain anonymous.

To address this concern, the publishers' motion didn't merely ask for $30 million in damages, they also demanded a broad injunction. Granted by the court yesterday, the injunction requires third-party services such as advertising networks, payment processors, hosting providers, CDN services, and IPFS gateways to restrict access to the site. [...] The injunction further targets "browser extensions" and "other tools" that are used to provide direct access to the LibGen Sites. While site blocking by residential Internet providers is mentioned in reference to other countries, ISP blocking is not part of the injunction itself. In addition to the broad measures outlined above, the order further requires domain name registrars and registries to disable or suspend all active LibGen domains, or alternatively, transfer them to the publishers. This includes Libgen.is, the most used domain name with 16 million monthly visits, as well as Libgen.rs, Libgen.li and many others.

At the moment, it's unclear how actively managed the LibGen site is, as it has shown signs of decay in recent years. However, when faced with domain seizures, sites typically respond by registering new domains. The publishers are aware of this risk. Therefore, they asked the court to cover future domain names too. The court signed off on this request, which means that newly registered domain names can be taken over as well; at least in theory. [...] All in all, the default judgment isn't just a monetary win, on paper, it's also one of the broadest anti-piracy injunctions we've seen from a U.S. court.

https://yro.slashdot.org/story/24/09/26/2052249/us-court-orders-libgen-to-pay-30-million-to-publishers-issues-broad-injunction?utm_source=rss1.0moreanon&utm_medium=feed
 at Slashdot.

https://yro.slashdot.org/story/24/09/26/2052249/us-court-orders-libgen-to-pay-30-million-to-publishers-issues-broad-injunction?utm_source=rss1.0mainlinkanon&utm_medium=feed


Apple Quietly Removed 60 More VPNs From Russian App Store

Apple has pulled 60 VPNs from its App Store in Russia, according to research from anti-censorship org GreatFire. From a report: The iThing-maker's action comes amid a Kremlin crackdown on VPNs that has already seen a ban on privacy-related extensions to the open source Firefox browser. The software's developer, Mozilla, defied that ban and allowed the extensions back into its web store. In July, Apple removed at least one VPN from its Russian App Store. Cupertino removed at least 60 more between early July and September 18, according to research by GreatFire posted to its site that tracks Apple censorship. The org's research asserts that 98 VPNs are now unavailable in Russia -- but doesn't specify if the removals were made in the iOS or macOS app stores.

https://apple.slashdot.org/story/24/09/26/1927250/apple-quietly-removed-60-more-vpns-from-russian-app-store?utm_source=rss1.0moreanon&utm_medium=feed
 at Slashdot.

https://apple.slashdot.org/story/24/09/26/1927250/apple-quietly-removed-60-more-vpns-from-russian-app-store?utm_source=rss1.0mainlinkanon&utm_medium=feed


Google Restricts Creation of New Accounts in Russia

Google has restricted the creation of new accounts for Russian users, state news agencies cited Russia's digital ministry as saying on Thursday. Reuters: Google has been under pressure in Russia for several years, particularly for not taking down content Moscow considers illegal and for blocking the YouTube channels of Russian media and public figures since Moscow's invasion of Ukraine. "The ministry confirms that Google has restricted the creation of new accounts," Interfax quoted the digital ministry as saying. "Telecom operators have also recorded a significant reduction in the number of SMS messages sent by the company to Russian users."

https://tech.slashdot.org/story/24/09/26/1918250/google-restricts-creation-of-new-accounts-in-russia?utm_source=rss1.0moreanon&utm_medium=feed
 at Slashdot.

https://tech.slashdot.org/story/24/09/26/1918250/google-restricts-creation-of-new-accounts-in-russia?utm_source=rss1.0mainlinkanon&utm_medium=feed


Kaspersky Defends Stealth Swap of Antivirus Software on US Computers

Cybersecurity firm Kaspersky has defended its decision to automatically replace its antivirus software on U.S. customers' computers with UltraAV, a product from American company Pango, without explicit user consent. The forced switch, affecting nearly one million users, occurred as a result of a U.S. government ban on Kaspersky software.

Kaspersky spokesperson Francesco Tius told TechCrunch that the company informed eligible U.S. customers via email about the migration, which began in early September. Windows users experienced an automatic transition to ensure continuous protection, while Mac and mobile users were instructed to manually install UltraAV. Some customers expressed alarm at the unannounced software swap. Kaspersky blamed missed notifications on unregistered email addresses, directing users to in-app messages and an online FAQ. The abrupt change raises concerns about user autonomy and privacy in software updates, particularly as UltraAV lacks an established security track record.

https://it.slashdot.org/story/24/09/26/1825249/kaspersky-defends-stealth-swap-of-antivirus-software-on-us-computers?utm_source=rss1.0moreanon&utm_medium=feed
 at Slashdot.

https://it.slashdot.org/story/24/09/26/1825249/kaspersky-defends-stealth-swap-of-antivirus-software-on-us-computers?utm_source=rss1.0mainlinkanon&utm_medium=feed


Tor Project Merges With Tails

The Tor Project: Today the Tor Project, a global non-profit developing tools for online privacy and anonymity, and Tails, a portable operating system that uses Tor to protect users from digital surveillance, have joined forces and merged operations. Incorporating Tails into the Tor Project's structure allows for easier collaboration, better sustainability, reduced overhead, and expanded training and outreach programs to counter a larger number of digital threats. In short, coming together will strengthen both organizations' ability to protect people worldwide from surveillance and censorship.

Countering the threat of global mass surveillance and censorship to a free Internet, Tor and Tails provide essential tools to help people around the world stay safe online. By joining forces, these two privacy advocates will pool their resources to focus on what matters most: ensuring that activists, journalists, other at-risk and everyday users will have access to improved digital security tools.

In late 2023, Tails approached the Tor Project with the idea of merging operations. Tails had outgrown its existing structure. Rather than expanding Tails's operational capacity on their own and putting more stress on Tails workers, merging with the Tor Project, with its larger and established operational framework, offered a solution. By joining forces, the Tails team can now focus on their core mission of maintaining and improving Tails OS, exploring more and complementary use cases while benefiting from the larger organizational structure of The Tor Project.

This solution is a natural outcome of the Tor Project and Tails' shared history of collaboration and solidarity. 15 years ago, Tails' first release was announced on a Tor mailing list, Tor and Tails developers have been collaborating closely since 2015, and more recently Tails has been a sub-grantee of Tor. For Tails, it felt obvious that if they were to approach a bigger organization with the possibility of merging, it would be the Tor Project.

https://yro.slashdot.org/story/24/09/26/1431201/tor-project-merges-with-tails?utm_source=rss1.0moreanon&utm_medium=feed
 at Slashdot.

https://yro.slashdot.org/story/24/09/26/1431201/tor-project-merges-with-tails?utm_source=rss1.0mainlinkanon&utm_medium=feed


DoNotPay Has To Pay $193K For Falsely Touting Untested AI Lawyer, FTC Says

An anonymous reader quotes a report from Ars Technica: Among the first AI companies that the Federal Trade Commission has exposed as deceiving consumers is DoNotPay -- which initially was advertised as "the world's first robot lawyer" with the ability to "sue anyone with the click of a button." On Wednesday, the FTC announced that it took action to stop DoNotPay from making bogus claims after learning that the AI startup conducted no testing "to determine whether its AI chatbot's output was equal to the level of a human lawyer." DoNotPay also did not "hire or retain any attorneys" to help verify AI outputs or validate DoNotPay's legal claims.

DoNotPay accepted no liability. But to settle the charges that DoNotPay violated the FTC Act, the AI startup agreed to pay $193,000, if the FTC's consent agreement is confirmed following a 30-day public comment period. Additionally, DoNotPay agreed to warn "consumers who subscribed to the service between 2021 and 2023" about the "limitations of law-related features on the service," the FTC said. Moving forward, DoNotPay would also be prohibited under the settlement from making baseless claims that any of its features can be substituted for any professional service. "The complaint relates to the usage of a few hundred customers some years ago (out of millions of people), with services that have long been discontinued," DoNotPay's spokesperson said. The company "is pleased to have worked constructively with the FTC to settle this case and fully resolve these issues, without admitting liability."

https://yro.slashdot.org/story/24/09/25/2241246/donotpay-has-to-pay-193k-for-falsely-touting-untested-ai-lawyer-ftc-says?utm_source=rss1.0moreanon&utm_medium=feed
 at Slashdot.

https://yro.slashdot.org/story/24/09/25/2241246/donotpay-has-to-pay-193k-for-falsely-touting-untested-ai-lawyer-ftc-says?utm_source=rss1.0mainlinkanon&utm_medium=feed


Astronomers Discover Black Hole With Energy Jets Spanning 23 Million Light Years

"The New York Times reports that astronomers have discovered a black hole spitting energy across 23 million light-years of intergalactic space (source paywalled; alternative source)," writes longtime Slashdot reader fahrbot-bot. From the report: Two jets, shooting in opposite directions, compose the biggest lightning bolt ever seen in the sky -- about 140 times as long as our own Milky Way galaxy is wide, and more than 10 times the distance from Earth to Andromeda, the nearest large spiral galaxy. Follow-up observations with optical telescopes traced the eruption to a galaxy 7.5 billion light-years away that existed when the universe was less than half its current age of 14 billion years. At the heart of that galaxy was a black hole spewing energy equivalent to the output of more than a trillion stars.

"The Milky Way would be a little dot in these two giant eruptions," said Martijn Oei, a postdoctoral researcher at the California Institute of Technology. Dr. Oei led the team that made the discovery, which was reported in Nature on Sept. 18 and announced on the journal's cover with an illustration reminiscent of a "Star Wars" poster. The astronomers have named the black hole Porphyrion, after a giant in Greek mythology -- a son of Gaia -- who fought the gods and lost. The discovery raises new questions of how such black holes could affect the evolution and structure of the universe.

https://science.slashdot.org/story/24/09/25/2223236/astronomers-discover-black-hole-with-energy-jets-spanning-23-million-light-years?utm_source=rss1.0moreanon&utm_medium=feed
 at Slashdot.

https://science.slashdot.org/story/24/09/25/2223236/astronomers-discover-black-hole-with-energy-jets-spanning-23-million-light-years?utm_source=rss1.0mainlinkanon&utm_medium=feed


McDonald's Touchscreen Kiosks, Feared As Job Killers, Created More Jobs Instead

An anonymous reader quotes a report from CNN: Some McDonald's franchisees -- which own and operate 95% of McDonald's in the United States -- are now rolling out kiosks that can take cash and accept change. But even in these locations, McDonald's is reassigning cashiers to other roles, including new "guest experience lead" jobs that help customers use the kiosks and assist with any issues. "In theory, kiosks should help save on labor, but in reality, restaurants have added complexity due to mobile ordering and delivery, and the labor saved from kiosks is often reallocated for these efforts," said RJ Hottovy, an analyst who covers the restaurant and retail industries at data analytics firm Placer.ai. Kiosks "have created a restaurant within a restaurant." And in some cases, kiosks have even been a flop. Bowling ally chain Bowlero added kiosks in lanes for customers to order food and drinks, but they went unused because staff and customers weren't fully trained on using them. "The unintended consequences have surprised a lot of people," Hottovy said.

Even some of the benefits of kiosks touted by chains -- they upsell customers by suggesting menu items and speed up orders -- don't always play out. A recent study from Temple University researchers found that, when a line forms behind customers using kiosks, they experience more stress when placing their orders and purchase less food. And some customers take longer to order tapping around on kiosks and paying than they do telling a cashier they'd like to order a burger and fries. Not to mention the kiosks can malfunction or break down. "If kiosks really improved speed of service, order accuracy, and upsell, they'd be rolled out more extensively across the industry than they are today," Hottovy said.

Kiosks have also been threatened as a fast-food industry response to higher minimum wage laws. [...] But the quick-service and fast-casual segments of the restaurant industry continue to grow. Staffing levels were nearly 150,000 jobs, or 3%, above pre-pandemic levels, according to the latest Labor Department data. Christopher Andrews, a sociologist at Drew University who studies the effects of technology on work, said the impacts of kiosks were similar to other self-service technology such as ATMs and self-checkout machines in supermarkets. Both technologies were predicted to cause job losses. "The introduction of ATMs did not result in massive technological unemployment for bank tellers," he said. "Instead, it freed them up from low-value tasks such as depositing and cashing checks to perform other tasks that created value." Self-checkout have also not resulted in retail job losses, the report adds. "In some cases, self-checkout backfired for chains because self-checkout leads to higher merchandise losses from customer errors and more intentional shoplifting than when human cashiers are ringing up customers."

https://hardware.slashdot.org/story/24/09/25/220217/mcdonalds-touchscreen-kiosks-feared-as-job-killers-created-more-jobs-instead?utm_source=rss1.0moreanon&utm_medium=feed
 at Slashdot.

https://hardware.slashdot.org/story/24/09/25/220217/mcdonalds-touchscreen-kiosks-feared-as-job-killers-created-more-jobs-instead?utm_source=rss1.0mainlinkanon&utm_medium=feed


Critical Unauthenticated RCE Flaw Impacts All GNU/Linux Systems

"Looks like there's a storm brewing, and it's not good news," writes ancient Slashdot reader jd. "Whether or not the bugs are classically security defects or not, this is extremely bad PR for the Linux and Open Source community. It's not clear from the article whether this affects other Open Source projects, such as FreeBSD." From a report: A critical unauthenticated Remote Code Execution (RCE) vulnerability has been discovered, impacting all GNU/Linux systems. As per agreements with developers, the flaw, which has existed for over a decade, will be fully disclosed in less than two weeks. Despite the severity of the issue, no Common Vulnerabilities and Exposures (CVE) identifiers have been assigned yet, although experts suggest there should be at least three to six. Leading Linux distributors such as Canonical and RedHat have confirmed the flaw's severity, rating it 9.9 out of 10. This indicates the potential for catastrophic damage if exploited. However, despite this acknowledgment, no working fix is still available. Developers remain embroiled in debates over whether some aspects of the vulnerability impact security.

https://it.slashdot.org/story/24/09/25/2150210/critical-unauthenticated-rce-flaw-impacts-all-gnulinux-systems?utm_source=rss1.0moreanon&utm_medium=feed
 at Slashdot.

https://it.slashdot.org/story/24/09/25/2150210/critical-unauthenticated-rce-flaw-impacts-all-gnulinux-systems?utm_source=rss1.0mainlinkanon&utm_medium=feed


Amazon Employees Plead For Reversal of 5-Day RTO Mandate in Anonymous Survey

An anonymous reader shares a report: Some Amazon workers are refusing to "disagree and commit," as one of the company's famed leadership principles requires of those who aren't on board with a decision. Instead, hundreds of the online retailing giant's employees are complaining that CEO Andy Jassy's five-days-per-week return-to-office mandate, announced last week, will negatively impact their lives -- and productivity at work -- and how they hope the company will reverse course.

The feedback is from an anonymous survey created by Amazon employees that was viewed by Fortune on Tuesday. Corporate employees have shared it widely via the messaging app Slack, including in one "remote advocacy" Slack channel with more than 30,000 members that a former employee created when Amazon first announced a three-day return-to-office mandate last year. As a result, employees who are in favor of remote or hybrid work may have been more likely to respond to the survey and therefore skew the findings.

As of the afternoon of September 24, the average satisfaction rating related to the RTO mandate among survey respondents was 1.4 out of scale up to 5 (with 1 meaning "strongly dissatisfied" and 5 representing "strongly satisfied"). The survey's creators said in an introduction to their questionnaire that they plan to aggregate and share the results by email with Jassy and other company executives "to provide them with clear insight into the impact of this policy on employees, including the challenges identified and proposed solutions."

https://slashdot.org/story/24/09/25/1941205/amazon-employees-plead-for-reversal-of-5-day-rto-mandate-in-anonymous-survey?utm_source=rss1.0moreanon&utm_medium=feed
 at Slashdot.

https://slashdot.org/story/24/09/25/1941205/amazon-employees-plead-for-reversal-of-5-day-rto-mandate-in-anonymous-survey?utm_source=rss1.0mainlinkanon&utm_medium=feed


OpenAI To Remove Non-Profit Control and Give Sam Altman Equity

OpenAI is working on a plan to restructure its core business into a for-profit benefit corporation that will no longer be controlled by its non-profit board. "Chief executive Sam Altman will also receive equity for the first time in the for-profit company, which could be worth $150 billion after the restructuring as it also tries to remove the cap on returns for investors," reports Reuters. From the report: The OpenAI non-profit will continue to exist and own a minority stake in the for-profit company, the sources said. The move could also have implications for how the company manages AI risks in a new governance structure. [...] The details of the proposed corporate structure, first reported by Reuters, highlight significant governance changes happening behind the scenes at one of the most important AI companies. The plan is still being hashed out with lawyers and shareholders and the timeline for completing the restructuring remains uncertain, the sources said. "We remain focused on building AI that benefits everyone, and we're working with our board to ensure that we're best positioned to succeed in our mission. The non-profit is core to our mission and will continue to exist," an OpenAI spokesperson said.

Earlier today, OpenAI's chief technology officer Mira Murati announced her departure from the company. Her resignation follows the departures of founders Ilya Sutskever and John Schulman.

Further reading: OpenAI Pitched White House On Unprecedented Data Center Buildout

https://news.slashdot.org/story/24/09/25/2141233/openai-to-remove-non-profit-control-and-give-sam-altman-equity?utm_source=rss1.0moreanon&utm_medium=feed
 at Slashdot.

https://news.slashdot.org/story/24/09/25/2141233/openai-to-remove-non-profit-control-and-give-sam-altman-equity?utm_source=rss1.0mainlinkanon&utm_medium=feed


Russia Blocks OONI Explorer, a Large Open Dataset On Internet Censorship

As of September 11th, Russia has blocked access to OONI Explorer, citing concerns over circumvention tools. This block affects Russian users' ability to access not only circumvention data but also the extensive dataset on global internet censorship that OONI provides. From a blog post: OONI Explorer is one of the largest open datasets on internet censorship around the world. We first launched this web platform back in 2016 with the goal of enabling researchers, journalists, and human rights defenders to investigate internet censorship based on empirical network measurement data that is contributed by OONI Probe users worldwide. Every day, we publish new measurements from around the world in real-time.

Today, OONI Explorer hosts more than 2 billion network measurements collected from 27 thousand distinct networks in 242 countries and territories since 2012. Out of all countries, OONI Probe users in Russia contribute the second largest volume of measurements (following the U.S, where OONI Probe users contribute the most measurements out of any country). This has enabled us to study various cases of internet censorship in Russia, such as the blocking of Tor, the blocking of independent news media websites, and how internet censorship in Russia changed amid the war in Ukraine.

In this report, we share OONI data on the blocking of OONI Explorer in Russia.

https://yro.slashdot.org/story/24/09/25/191225/russia-blocks-ooni-explorer-a-large-open-dataset-on-internet-censorship?utm_source=rss1.0moreanon&utm_medium=feed
 at Slashdot.

https://yro.slashdot.org/story/24/09/25/191225/russia-blocks-ooni-explorer-a-large-open-dataset-on-internet-censorship?utm_source=rss1.0mainlinkanon&utm_medium=feed


OpenAI CTO Mira Murati Is Leaving Firm

OpenAI's chief technology officer Mira Murati has announced her departure from the company, marking the latest high-profile exit from the Microsoft-backed AI firm. Murati, who briefly served as interim CEO during last year's leadership turmoil, cited a desire for personal exploration after six and a half years at OpenAI.

Her resignation follows the departures of founders Ilya Sutskever and John Schulman earlier this year. The startup, creator of ChatGPT, is currently in talks to raise over $6 billion at a $150 billion valuation, according to media reports.

https://slashdot.org/story/24/09/25/1959208/openai-cto-mira-murati-is-leaving-firm?utm_source=rss1.0moreanon&utm_medium=feed
 at Slashdot.

https://slashdot.org/story/24/09/25/1959208/openai-cto-mira-murati-is-leaving-firm?utm_source=rss1.0mainlinkanon&utm_medium=feed


LG TVs Start Showing Ads On Screensavers

LG has started displaying ads on TV screensavers, intensifying the proliferation of ads in smart TV software. The South Korean company quietly announced the move to advertisers on September 5, forgoing a public statement to consumers.

https://entertainment.slashdot.org/story/24/09/25/1840253/lg-tvs-start-showing-ads-on-screensavers?utm_source=rss1.0moreanon&utm_medium=feed
 at Slashdot.

https://entertainment.slashdot.org/story/24/09/25/1840253/lg-tvs-start-showing-ads-on-screensavers?utm_source=rss1.0mainlinkanon&utm_medium=feed


Meta Unveils AR Glasses Prototype

Meta unveiled prototype AR glasses codenamed Orion on Wednesday, featuring a 70-degree field of view, Micro LED projectors, and silicon carbide lenses that beam graphics directly into the wearer's eyes. In an interview with The Verge, CEO Mark Zuckerberg demonstrated the device's capabilities, including ingredient recognition, holographic gaming, and video calling, controlled by a neural wristband that interprets hand gestures through electromyography.

Despite technological advances, Meta has shelved Orion's commercial release, citing manufacturing complexities and costs reaching $10,000 per unit, primarily due to difficulties in producing the silicon carbide lenses. The company now aims to launch a refined, more affordable version in coming years, with executives hinting at a price comparable to high-end smartphones and laptops.

Zuckerberg views AR glasses as critical to Meta's future, potentially freeing the company from its reliance on smartphone platforms controlled by Apple and Google. The push into AR hardware comes as tech giants and startups intensify competition in the space, with Apple launching Vision Pro and Google partnering with Magic Leap and Samsung on headset development.

https://tech.slashdot.org/story/24/09/25/181226/meta-unveils-ar-glasses-prototype?utm_source=rss1.0moreanon&utm_medium=feed
 at Slashdot.

https://tech.slashdot.org/story/24/09/25/181226/meta-unveils-ar-glasses-prototype?utm_source=rss1.0mainlinkanon&utm_medium=feed


China-Linked Hackers Breach US Internet Providers in New 'Salt Typhoon' Cyberattack

Hackers linked to the Chinese government have broken into a handful of U.S. internet-service providers in recent months in pursuit of sensitive information, WSJ reported Wednesday, citing people familiar with the matter. From the report: The hacking campaign, called Salt Typhoon by investigators, hasn't previously been publicly disclosed and is the latest in a series of incursions that U.S. investigators have linked to China in recent years. The intrusion is a sign of the stealthy success Beijing's massive digital army of cyberspies has had breaking into valuable computer networks in the U.S. and around the globe.

In Salt Typhoon, the actors linked to China burrowed into America's broadband networks. In this type of intrusion, bad actors aim to establish a foothold within the infrastructure of cable and broadband providers that would allow them to access data stored by telecommunications companies or launch a damaging cyberattack. Last week, U.S. officials said they had disrupted a network of more than 200,000 routers, cameras and other internet-connected consumer devices that served as an entry point into U.S. networks for a China-based hacking group called Flax Typhoon. And in January, federal officials disrupted Volt Typhoon, yet another China-linked campaign that has sought to quietly infiltrate a swath of U.S. critical infrastructure.

"The cyber threat posed by the Chinese government is massive," said Christopher Wray, the Federal Bureau of Investigation's director, speaking earlier this year at a security conference in Germany. "China's hacking program is larger than that of every other major nation, combined." U.S. security officials allege that Beijing has tried and at times succeeded in burrowing deep into U.S. critical infrastructure networks ranging from water-treatment systems to airports and oil and gas pipelines. Top Biden administration officials have issued public warnings over the past year that China's actions could threaten American lives and are intended to cause societal panic. The hackers could also disrupt the U.S.'s ability to mobilize support for Taiwan in the event that Chinese leader Xi Jinping orders his military to invade the island.

https://it.slashdot.org/story/24/09/25/1623228/china-linked-hackers-breach-us-internet-providers-in-new-salt-typhoon-cyberattack?utm_source=rss1.0moreanon&utm_medium=feed
 at Slashdot.

https://it.slashdot.org/story/24/09/25/1623228/china-linked-hackers-breach-us-internet-providers-in-new-salt-typhoon-cyberattack?utm_source=rss1.0mainlinkanon&utm_medium=feed


45 Years Ago CompuServe Connected the World Before the World Wide Web

Tony Isaac shares a report from WOSU Public Media: Silicon Valley has the reputation of being the birthplace of our hyper-connected Internet age, the hub of companies such as Apple, Google and Facebook. However, a pioneering company here in central Ohio is responsible for developing and popularizing many of the technologies we take for granted today. A listener submitted a question to WOSU's Curious Cbus series wanting to know more about the legacy of CompuServe and what it meant to go online before the Internet. That legacy was recently commemorated by the Ohio History Connection when they installed a historical marker in Upper Arlington -- near the corner of Arlington Center and Henderson roads -- where the company located its computer center and corporate building in 1973. The plaque explains that CompuServe was "the first major online information service provider," and that its subscribers were among the first to have access to email, online newspapers and magazines and the ability to share and download files. CompuServe, founded in 1969 in Ohio as a subsidiary of Golden United Life Insurance, began as a computer time-sharing service for businesses. In 1979, it launched an online service for consumers, partnering with RadioShack since they "were key in reaching early computer users."

Acquired by H&R Block in 1980, CompuServe became a leader in digital innovations like email, online newspapers, and chat forums, with The Columbus Dispatch becoming the first online newspaper. "... it turned out that what was most popular is not reading reliable news sources, but just shooting the breeze with your friends or arguing with strangers over politics," said former tech journalist and early Compuserve user Dylan Tweney.

 Despite competing with Prodigy and AOL through the 1990s, CompuServe struggled with the rise of the internet. AOL acquired the company in 1997, but CompuServe remains a digital pioneer for fostering online communities. "For a lot of people, CompuServe was a connection to the world and their first introduction to the idea that their computer could be more than a computer," said Tweney. "It was a communications device, an information device."

https://tech.slashdot.org/story/24/09/25/0442254/45-years-ago-compuserve-connected-the-world-before-the-world-wide-web?utm_source=rss1.0moreanon&utm_medium=feed
 at Slashdot.

https://tech.slashdot.org/story/24/09/25/0442254/45-years-ago-compuserve-connected-the-world-before-the-world-wide-web?utm_source=rss1.0mainlinkanon&utm_medium=feed


Car Software Patches Are Over 20% of Recalls, Study Finds

An anonymous reader quotes a report from Ars Technica: Software fixes are now responsible for more than 1 in 5 automotive recalls. That's the key finding from a decade's worth of National Highway Traffic Safety Administration recall data, according to an analysis from the law firm DeMayo Law. While that's a sign of growing inconvenience for drivers, the silver lining is that a software patch is usually a much quicker fix than something requiring hardware replacement. "Our analysis suggests we're witnessing a shift in how automotive recalls are handled. The growing number of software-related recalls, coupled with the ability to address issues remotely, could revolutionize the recall process for both manufacturers and vehicle owners," said a spokesperson for DeMayo Law.

In 2014, 34 of 277 automotive recalls were software fixes. The percentage of software recalls floated around 12-13 percent (apart from a spike in 2015) before growing steadily from 2020. In 2021, 16 percent of automotive recalls (61 out of 380) were for software. In 2022, almost 22 percent of recalls were software fixes (76 out of 348), and last year topped 23 percent (82 out of 356). Leading the way was Chrysler, with 82 different software recalls since 2014. Ford (66 recalls) and Mercedes-Benz (60) are the two runner-ups. Meanwhile, Tesla ranks only eighth, with 26 software recalls since 2014, which puts it on par with Hyundai (25) and Kia (25).

Electrical systems were the most common problem area, which makes sense -- this is also the second-most common hardware fix recall and would probably be the top if it were not for the massive Takata airbag recall, which has affected more than 100 million cars worldwide. The other common systems affected by recalls requiring software remedies were related to backover prevention -- whether that be reversing cameras, collision warnings, or automatic emergency braking -- airbags, powertrains, and exterior lighting. "It should be noted that not all recalls involving a software fix are to solve a software problem," notes Ars' Jonathan M. Gitlin. "Take the recent Jaguar I-Pace recall, which was triggered by battery fires caused by battery cells damaged during assembly. Jaguar's fix? A software update that sets a new, lower limit to the storage capacity of the battery pack, preventing it from fully charging to 100 percent."

https://tech.slashdot.org/story/24/09/25/0018219/car-software-patches-are-over-20-of-recalls-study-finds?utm_source=rss1.0moreanon&utm_medium=feed
 at Slashdot.

https://tech.slashdot.org/story/24/09/25/0018219/car-software-patches-are-over-20-of-recalls-study-finds?utm_source=rss1.0mainlinkanon&utm_medium=feed


Ancient US Air Traffic Control Systems Won't Get a Tech Refresh Before 2030

The FAA's air traffic control systems are significantly out of date and won't be updated until the 2030s, according to a report from the U.S. Government Accountability Office (GAO). The Register reports: In a report released Monday, the GAO said that 51 of the FAA's 138 ATC systems -- more than a third -- were unsustainable due to a lack of parts, shortfalls in funding to sustain them, or a lack of technology refresh funding to replace them. A further 54 systems were described as "potentially unsustainable" for similar reasons, with the added caveat that tech refresh funding was available to them. "FAA has 64 ongoing investments aimed at modernizing 90 of the 105 unsustainable and potentially unsustainable systems," the GAO said in its report. "However, the agency has been slow to modernize the most critical and at-risk systems."

The report said the seemingly perilous status of 17 systems was "especially concerning" as these are deemed to have critical operational impact at the same time as being unsustainable and having extended completion dates -- the first of them won't be modernized until 2030 at the earliest. Others aren't planned to be complete until 2035, and four of the 17 "most critical and at-risk FAA ATC systems" have no modernization plans at all. Of the systems on the list, two are more than 40 years old, and a further seven have been in service for more than 30 years.

https://news.slashdot.org/story/24/09/25/005248/ancient-us-air-traffic-control-systems-wont-get-a-tech-refresh-before-2030?utm_source=rss1.0moreanon&utm_medium=feed
 at Slashdot.

https://news.slashdot.org/story/24/09/25/005248/ancient-us-air-traffic-control-systems-wont-get-a-tech-refresh-before-2030?utm_source=rss1.0mainlinkanon&utm_medium=feed


James Cameron Joins Board of Stability AI In Coup For Tech Firm

An anonymous reader quotes a report from the Hollywood Reporter: In a major coup for the artificial intelligence company, Stability AI says that Avatar, Terminator and Titanic director James Cameron will join its board of directors. Stability AI is the firm that developed the Stable Diffusion text-to-image generative AI model, an image- and video-focused model that is among those being closely watched by many in Hollywood, particularly in the visual effects industry. In fact, Stability AI's CEO, Prem Akkaraju, is no stranger to the business, having previously served as the CEO of visual effects firm WETA Digital. Sean Parker, the former president of Facebook and founder of Napster, also recently joined the AI firm as executive chairman.

As a director, Cameron has long been eager to push the boundaries of what is technologically possible in filmmaking (anyone who has seen the Terminator franchise knows that he is also familiar with the pitfalls of technology run amok). He was among the earliest directors to embrace the potential of computer-generated visual effects, and he continued to use his films (most recently Avatar: The Way of Water) to move the entire field forward. "I've spent my career seeking out emerging technologies that push the very boundaries of what's possible, all in the service of telling incredible stories," Cameron said in a statement. "I was at the forefront of CGI over three decades ago, and I've stayed on the cutting edge since. Now, the intersection of generative AI and CGI image creation is the next wave. The convergence of these two totally different engines of creation will unlock new ways for artists to tell stories in ways we could have never imagined. Stability AI is poised to lead this transformation. I'm delighted to collaborate with Sean, Prem, and the Stability AI team as they shape the future of all visual media."

https://entertainment.slashdot.org/story/24/09/24/2124251/james-cameron-joins-board-of-stability-ai-in-coup-for-tech-firm?utm_source=rss1.0moreanon&utm_medium=feed
 at Slashdot.

https://entertainment.slashdot.org/story/24/09/24/2124251/james-cameron-joins-board-of-stability-ai-in-coup-for-tech-firm?utm_source=rss1.0mainlinkanon&utm_medium=feed


Caroline Ellison Sentenced To Two Years In Jail For Role In FTX Fraud, Must Forfeit $11 Billion

Caroline Ellison, the former CEO of Alameda Research, must serve 24 months in prison and forfeit $11 billion. "I've seen a lot of cooperators in 30 years. I've never seen one quite like Ms. Ellison," said Judge Lewis Kaplan during the sentencing hearing today. The Verge reports: Ellison pleaded guilty to two counts of wire fraud and five conspiracy counts in December 2022 as part of a cooperation agreement with the government. Prosecutors had recommended a lenient sentence because of Ellison's "extraordinary" and "very timely" cooperation. Her own lawyers asked for no jail time, as did the federal Probation Department.

Ellison was the key witness at the trial of FTX cofounder Sam Bankman-Fried, where she testified for three days. A statement submitted by the prosecution before Ellison's sentencing said the speed at which she came clean made it possible to indict her ex-boyfriend Bankman-Fried quickly, "ensuring that he did not flee the Bahamas or further obstruct the government's investigation." The document also noted that Ellison was completely and immediately forthcoming in her meetings with the government.

Ellison was also prompt in assisting John J. Ray, the new CEO charged with cleaning up the FTX mess, in locating and recovering customer assets, according to a statement written by Ray submitted by the defense. Her "early cooperation" was "valuable" in recovering debtors' assets, he wrote. Ellison is working on a deal where she will turn over "substantially all of her remaining assets after satisfying her forfeiture obligations" to the FTX debtors.

https://slashdot.org/story/24/09/24/2041203/caroline-ellison-sentenced-to-two-years-in-jail-for-role-in-ftx-fraud-must-forfeit-11-billion?utm_source=rss1.0moreanon&utm_medium=feed
 at Slashdot.

https://slashdot.org/story/24/09/24/2041203/caroline-ellison-sentenced-to-two-years-in-jail-for-role-in-ftx-fraud-must-forfeit-11-billion?utm_source=rss1.0mainlinkanon&utm_medium=feed


World's Biggest Banks Pledge Support For Nuclear Power

Fourteen of the world's biggest banks and financial institutions are pledging to increase their support for nuclear energy [non-paywalled link], a move that governments and the industry hope will unlock finance for a new wave of nuclear power plants. FT: At an event on Monday in New York with White House climate policy adviser John Podesta, institutions including Bank of America, Barclays, BNP Paribas, Citi, Morgan Stanley and Goldman Sachs will say they support a goal first set out at the COP28 climate negotiations last year to triple the world's nuclear energy capacity by 2050.

They will not spell out exactly what they would do, but nuclear experts said the public show of support was a long-awaited recognition that the sector had a critical role to play in the transition to low-carbon energy. The difficulty and high cost of financing nuclear projects has been an obstacle to new plants and contributed to a significant slowdown in western countries since a wave of reactors was built in the 1970s and 1980s.

https://hardware.slashdot.org/story/24/09/24/188243/worlds-biggest-banks-pledge-support-for-nuclear-power?utm_source=rss1.0moreanon&utm_medium=feed
 at Slashdot.

https://hardware.slashdot.org/story/24/09/24/188243/worlds-biggest-banks-pledge-support-for-nuclear-power?utm_source=rss1.0mainlinkanon&utm_medium=feed


Google To Update Street View Images Across Dozens of Countries, Deleted Blog Post Says

Google is getting ready to show off updated Street View imagery in nearly 80 countries. The Verge: In a now-removed blog post seen by The Verge, Google announced that the new images are coming to countries like Australia, Brazil, Denmark, Japan, the Philippines, Rwanda, Serbia, South Africa, and more. Google is also bringing Street View to a handful of countries where it's never been available, including Bosnia, Namibia, Lichtenstein, and Paraguay. The company said its more portable Street View camera, which launched in 2022, will help offer images of "even more places in the future."

Google Maps and Google Earth are getting sharper satellite imagery as well, thanks to the company's cloud-removal AI tool that takes out clouds, shadows, haze, and mist. This should result in "brighter, more vibrant" images, according to Google.

https://tech.slashdot.org/story/24/09/24/1415224/google-to-update-street-view-images-across-dozens-of-countries-deleted-blog-post-says?utm_source=rss1.0moreanon&utm_medium=feed
 at Slashdot.

https://tech.slashdot.org/story/24/09/24/1415224/google-to-update-street-view-images-across-dozens-of-countries-deleted-blog-post-says?utm_source=rss1.0mainlinkanon&utm_medium=feed


Tugboat Powered By Ammonia Sails For the First Time

A startup called Amogy has successfully converted a 67-year-old diesel tugboat to run on clean ammonia, marking a significant milestone in the transition to zero-emissions propulsion in the maritime industry. The Associated Press reports: Amogy's system uses ammonia to make hydrogen for a fuel cell, making the tug an electric-powered ship. The International Maritime Organization set a target for international shipping to reach net-zero greenhouse gas emissions by, or close to, 2050. Shipping needs to cut emissions rapidly and there are no solutions widely available today to fully decarbonize deep-sea shipping, according to the Global Maritime Forum, a nonprofit that works closely with the industry. There is a lot of interest in ammonia as an alternative fuel because the molecule doesn't contain carbon, said Jesse Fahnestock, who leads the forum's decarbonization work. Ammonia is widely used for fertilizer, so there is already infrastructure in place for handling and transporting it. Ton for ton, it can hold more energy than hydrogen, and it can be stored and distributed more easily.

The tugboat ran on green ammonia produced by renewable electricity. A 2,000-gallon tank fits in the old fuel tank space, for a 10-to 12-hour day at sea. It splits liquid ammonia into its constituents, hydrogen and nitrogen, then funnels the hydrogen into a fuel cell that generates electricity for the vessel without carbon emissions. The process does not burn ammonia like a combustion engine would, so it primarily produces nitrogen in its elemental form and water as emissions. The company says there are trace amounts of nitrogen oxides that it's working to completely eliminate.

Amogy first used ammonia to power a drone in 2021, then a tractor in 2022, a semi-truck in 2023, and now the tugboat to prove the technology. Woo said their system is designed to be used on vessels as small as the tugboat and as large as container ships, and could also make electricity on shore to replace diesel generators for data centers, mining and construction, or other heavy industries. The company has raised about $220 million. Amazon, an enterprise with immense needs for shipping, is among the investors. Nick Ellis, principal of Amazon's $2 billion Climate Pledge Fund, said the company is excited and impressed by what Amogy is doing. By investing, Amazon can show ship owners and builders it wants its goods delivered with zero emissions, he added.

https://news.slashdot.org/story/24/09/24/0359225/tugboat-powered-by-ammonia-sails-for-the-first-time?utm_source=rss1.0moreanon&utm_medium=feed
 at Slashdot.

https://news.slashdot.org/story/24/09/24/0359225/tugboat-powered-by-ammonia-sails-for-the-first-time?utm_source=rss1.0mainlinkanon&utm_medium=feed


$1 Billion Solar and Battery Storage Project Breaks Ground In Utah

rPlus Energies has broken ground on a $1 billion solar + battery storage project in east-central Utah. Electrek reports: The Green River Energy Center in Emery County, Utah, is a 400-megawatt (MW) solar and 400 MW/1,600-megawatt-hour battery storage project that will supply power to western electric utility PacifiCorp under a power purchase agreement. EliTe Solar is supplying solar panels, and Tesla is providing battery storage. Sundt Construction is the engineering, procurement, and construction contractor for the project. Securing over $1 billion in construction debt financing in July, the Green River project is expected to create around 500 jobs. Salt Lake City-based rPlus Energies gives the target completion date as 2026.

https://hardware.slashdot.org/story/24/09/23/2327225/1-billion-solar-and-battery-storage-project-breaks-ground-in-utah?utm_source=rss1.0moreanon&utm_medium=feed
 at Slashdot.

https://hardware.slashdot.org/story/24/09/23/2327225/1-billion-solar-and-battery-storage-project-breaks-ground-in-utah?utm_source=rss1.0mainlinkanon&utm_medium=feed


OpenAI CEO Sam Altman Anticipates Superintelligence In 'a Few Thousand Days'

In a rare blog post today, OpenAI CEO Sam Altman laid out his vision of the AI-powered future, which he refers to as "The Intelligence Age." Among the most notable claims, Altman said superintelligence might be achieved in "a few thousand days." VentureBeat reports: Specifically, Altman argues that "deep learning works," and can generalize across a range of domains and difficult problem sets based on its training data, allowing people to "solve hard problems," including "fixing the climate, establishing a space colony, and the discovery of all physics." As he puts it: "That's really it; humanity discovered an algorithm that could really, truly learn any distribution of data (or really, the underlying "rules" that produce any distribution of data). To a shocking degree of precision, the more compute and data available, the better it gets at helping people solve hard problems. I find that no matter how much time I spend thinking about this, I can never really internalize how consequential it is."

In a provocative statement that many AI industry participants and close observers have already seized upon in discussions on X, Altman also said that superintelligence -- AI that is "vastly smarter than humans," according to previous OpenAI statements -- may be achieved in "a few thousand days." "This may turn out to be the most consequential fact about all of history so far. It is possible that we will have superintelligence in a few thousand days (!); it may take longer, but I'm confident we'll get there." A thousand days is roughly 2.7 years, a time that is much sooner than the five years most experts give out.

https://slashdot.org/story/24/09/23/2321221/openai-ceo-sam-altman-anticipates-superintelligence-in-a-few-thousand-days?utm_source=rss1.0moreanon&utm_medium=feed
 at Slashdot.

https://slashdot.org/story/24/09/23/2321221/openai-ceo-sam-altman-anticipates-superintelligence-in-a-few-thousand-days?utm_source=rss1.0mainlinkanon&utm_medium=feed


Startups Are Going 'Fair Source' To Avoid Pitfalls of Open Source Licensing

An anonymous reader quotes a report from TechCrunch: With the perennial tensions between proprietary and open source software (OSS) unlikely to end anytime soon, a $3 billion startup is throwing its weight behind a new licensing paradigm -- one that's designed to bridge the open and proprietary worlds, replete with new definition, terminology, and governance model. Developer software company Sentry recently introduced a new license category dubbed "fair source." Sentry is an initial adopter, as are some half dozen others, including GitButler, a developer tooling company from one of GitHub's founders. The fair source concept is designed to help companies align themselves with the "open" software development sphere, without encroaching into existing licensing landscapes, be that open source, open core, or source-available, and while avoiding any negative associations that exist with "proprietary." However, fair source is also a response to the growing sense that open source isn't working out commercially.

"Open source isn't a business model -- open source is a distribution model, it's a software development model, primarily," Chad Whitacre, Sentry's head of open source, told TechCrunch. "And in fact, it places severe limits on what business models are available, because of the licensing terms." Sure, there are hugely successful open source projects, but they are generally components of larger proprietary products. Businesses that have flown the open source flag have mostly retreated to protect their hard work, moving either from fully permissive to a more restrictive "copyleft" license, as the likes of Element did last year and Grafana before it, or ditched open source altogether as HashiCorp did with Terraform. "Most of the world's software is still closed source," Whitacre added. "Kubernetes is open source, but Google Search is closed. React is open source, but Facebook Newsfeed is closed. With fair source, we're carving a space for companies to safely share not just these lower-level infrastructure components, but share access to their core product." Further reading: As Companies Try 'Open Source Rug Pull', Open Source Foundations Considered Helpful

https://news.slashdot.org/story/24/09/23/2126218/startups-are-going-fair-source-to-avoid-pitfalls-of-open-source-licensing?utm_source=rss1.0moreanon&utm_medium=feed
 at Slashdot.

https://news.slashdot.org/story/24/09/23/2126218/startups-are-going-fair-source-to-avoid-pitfalls-of-open-source-licensing?utm_source=rss1.0mainlinkanon&utm_medium=feed


11 Million Devices Infected With Botnet Malware Hosted In Google Play

Ars Technica's Dan Goodin reports: Five years ago, researchers made a grim discovery -- a legitimate Android app in the Google Play market that was surreptitiously made malicious by a library the developers used to earn advertising revenue. With that, the app was infected with code that caused 100 million infected devices to connect to attacker-controlled servers and download secret payloads. Now, history is repeating itself. Researchers from the same Moscow, Russia-based security firm reported Monday that they found two new apps, downloaded from Play 11 million times, that were infected with the same malware family. The researchers, from Kaspersky, believe a malicious software developer kit for integrating advertising capabilities is once again responsible. [...]

The researchers found Necro in two Google Play apps. One was Wuta Camera, an app with 10 million downloads to date. Wuta Camera versions 6.3.2.148 through 6.3.6.148 contained the malicious SDK that infects apps. The app has since been updated to remove the malicious component. A separate app with roughly 1 million downloads -- known as Max Browser -- was also infected. That app is no longer available in Google Play. The researchers also found Necro infecting a variety of Android apps available in alternative marketplaces. Those apps typically billed themselves as modified versions of legitimate apps such as Spotify, Minecraft, WhatsApp, Stumble Guys, Car Parking Multiplayer, and Melon Sandbox. People who are concerned they may be infected by Necro should check their devices for the presence of indicators of compromise listed at the end of this writeup.

https://it.slashdot.org/story/24/09/23/213203/11-million-devices-infected-with-botnet-malware-hosted-in-google-play?utm_source=rss1.0moreanon&utm_medium=feed
 at Slashdot.

https://it.slashdot.org/story/24/09/23/213203/11-million-devices-infected-with-botnet-malware-hosted-in-google-play?utm_source=rss1.0mainlinkanon&utm_medium=feed


Amazon, Tesla, Meta Considered Harmful To Democracy

Amazon, Meta, and Tesla were named by the International Trade Union Confederation (ITUC) as some of the worst corporate underminers of democracy . These companies were accused of union busting, monopolizing media and technology, violating human rights, contributing to climate change, and fostering political movements that threaten democratic institutions. The full list of "corporate underminers of democracy for 2024" is Amazon, Blackstone Group, ExxonMobil, Glencore, Meta, Tesla and the Vanguard Group. The Register reports: The International Trade Union Confederation (ITUC) today published a list of seven companies it said were "emblematic" of the ways large international corporations have begun tossing their weight around to influence global affairs. Those businesses, ITUC noted, violate trade union and alleged human rights, monopolize media and technology, exacerbate the climate catastrophe and try to privatize public services in a way that "protects and expands [their] own profits by undermining democracy." "These companies deploy complex lobbying operations to undermine popular will and disrupt existing or nascent global policy that could hold them accountable," ITUC wrote. The desire for greater corporate power, the Confederation added, invariably puts corporate interests in bed with anti-democratic political movements like the modern far-right. Right-wing politicians, ITUC noted, tend to lower taxes, undercut higher wages for workers, crack down on trade unions, and the like - all things sure to please the likes of corporations like Amazon, Tesla, and Meta as evidenced by plenty of prior reporting and research. For Amazon, the ITUC criticized the company for becoming "notorious for its union busting and low wages, monopoly in e-commerce, egregious carbon emissions through its AWS [datacenters], corporate tax evasion and lobbying."

Meta was accused of exploiting user data, undermining privacy laws, manipulating global information, and failing to regulate harmful content on its platforms. "Meta's algorithms can quite literally alter humanity's perceptions of reality," ITUC said. "Its revenue model exploits trillions of personalized data points to deliver highly effective advertising." Some have referred to the company as "a foreign state, populated by people without sovereignty, ruled by a leader with absolute power."

As for Tesla, it was condemned for poor labor practices, anti-union politics, unsafe working conditions, human rights violations, and environmental damage in its supply chain. "The world's most highly-valued automaker has quickly become known as one of its most belligerent employers. Tesla's rapid market success has been outpaced only by the descent of its corporate leaders into anti-democratic, anti-union politics."

https://news.slashdot.org/story/24/09/23/2054216/amazon-tesla-meta-considered-harmful-to-democracy?utm_source=rss1.0moreanon&utm_medium=feed
 at Slashdot.

https://news.slashdot.org/story/24/09/23/2054216/amazon-tesla-meta-considered-harmful-to-democracy?utm_source=rss1.0mainlinkanon&utm_medium=feed


Cloudflare's New Marketplace Will Let Websites Charge AI Bots For Scraping

An anonymous reader quotes a report from TechCrunch: Cloudflare announced plans on Monday to launch a marketplace in the next year where website owners can sell AI model providers access to scrape their site's content. The marketplace is the final step of Cloudflare CEO Matthew Prince's larger plan to give publishers greater control over how and when AI bots scrape their websites. "If you don't compensate creators one way or another, then they stop creating, and that's the bit which has to get solved," said Prince in an interview with TechCrunch.

As the first step in its new plan, on Monday, Cloudflare launched free observability tools for customers, called AI Audit. Website owners will get a dashboard to view analytics on why, when, and how often AI models are crawling their sites for information. Cloudflare will also let customers block AI bots from their sites with the click of a button. Website owners can block all web scrapers using AI Audit, or let certain web scrapers through if they have deals or find their scraping beneficial. A demo of AI Audit shared with TechCrunch showed how website owners can use the tool, which is able to see where each scraper that visits your site comes from, and offers selective windows to see how many times scrapers from OpenAI, Meta, Amazon, and other AI model providers are visiting your site. [...]

https://tech.slashdot.org/story/24/09/23/2038215/cloudflares-new-marketplace-will-let-websites-charge-ai-bots-for-scraping?utm_source=rss1.0moreanon&utm_medium=feed
 at Slashdot.

https://tech.slashdot.org/story/24/09/23/2038215/cloudflares-new-marketplace-will-let-websites-charge-ai-bots-for-scraping?utm_source=rss1.0mainlinkanon&utm_medium=feed


Microsoft Ends Development of Windows Server Update Services

joshuark shares a report: Microsoft has officially announced that Windows Server Update Services (WSUS) is now deprecated, but plans to maintain current functionality and continue publishing updates through the channel. This move isn't surprising, as Microsoft first listed WSUS as one of the "features removed or no longer developed starting with Windows Server 2025" on August 13. In June, the company also revealed that it would also soon deprecate WSUS driver synchronization.

While new features and development for WSUS will cease, Microsoft said today that it plans to continue supporting the service's existing functionality and updates, which will still be distributed, even after deprecation. "Specifically, this means that we are no longer investing in new capabilities, nor are we accepting new feature requests for WSUS," Microsoft's Nir Froimovici said on Friday. "However, we are preserving current functionality and will continue to publish updates through the WSUS channel. We will also support any content already published through the WSUS channel."

https://tech.slashdot.org/story/24/09/23/1957225/microsoft-ends-development-of-windows-server-update-services?utm_source=rss1.0moreanon&utm_medium=feed
 at Slashdot.

https://tech.slashdot.org/story/24/09/23/1957225/microsoft-ends-development-of-windows-server-update-services?utm_source=rss1.0mainlinkanon&utm_medium=feed


Some Kaspersky Customers Receive Surprise Forced-Update To New Antivirus Software

Customers of Kaspersky antivirus in the United States found out in the last few days that their cybersecurity software was automatically replaced with a new one called UltraAV, according to several customers. And while Kaspersky said earlier this month that its U.S. customers would be transitioned to UltraAV, many of its customers said they had no idea this was going to happen and that it would automatically be forced upon them. From a report: "Woke up to Kasperky [sic] completely gone from my system with Ultra AV and Ultra VPN freshly installed (not by me, just automatically while I slept)," a user on Reddit wrote. Others reported having the same experience in the same Reddit thread, as well as in other threads. A reseller, who until recently sold Kaspersky products prior to the recent sales ban, told TechCrunch that he was left "annoyed" by the move to automatically remove Kaspersky software and replace it with an entirely different antivirus. A former senior U.S. government cybersecurity official said that this was an example of the "huge risk" posed by the access granted by Kaspersky software. It's worth noting that, on the other hand, other customers did report receiving an email from Kaspersky about the transition to UltraAV.

https://tech.slashdot.org/story/24/09/23/1949250/some-kaspersky-customers-receive-surprise-forced-update-to-new-antivirus-software?utm_source=rss1.0moreanon&utm_medium=feed
 at Slashdot.

https://tech.slashdot.org/story/24/09/23/1949250/some-kaspersky-customers-receive-surprise-forced-update-to-new-antivirus-software?utm_source=rss1.0mainlinkanon&utm_medium=feed


Earth May Have Breached Seven of Nine Planetary Boundaries, Health Check Shows

Industrial civilisation is close to breaching a seventh planetary boundary, and may already have crossed it, according to scientists who have compiled the latest report on the state of the world's life-support systems. From a report: "Ocean acidification is approaching a critical threshold," particularly in higher-latitude regions, says the latest report on planetary boundaries. "The growing acidification poses an increasing threat to marine ecosystems." The report, from the Potsdam Institute for Climate Impact Research (PIK), builds on years of research showing there are nine systems and processes -- the planetary boundaries -- that contribute to the stability of the planet's life-support functions.

Thresholds beyond which they can no longer properly function have already been breached in six. Climate change, the introduction of novel entities, change in biosphere integrity and modification of biogeochemical flows are judged to be in high-risk zones, while planetary boundaries are also transgressed in land system change and freshwater change but to a lesser extent. All have worsened, according to the data. Stratospheric ozone depletion has remained stable, however, and there has been a slight improvement in atmospheric aerosol loading, the research says. At a briefing outlining the findings, Levke Caesar, a climate physicist at PIK and co-author of the report, said there were two reasons the levels of ocean acidification were concerning.

https://news.slashdot.org/story/24/09/23/1927231/earth-may-have-breached-seven-of-nine-planetary-boundaries-health-check-shows?utm_source=rss1.0moreanon&utm_medium=feed
 at Slashdot.

https://news.slashdot.org/story/24/09/23/1927231/earth-may-have-breached-seven-of-nine-planetary-boundaries-health-check-shows?utm_source=rss1.0mainlinkanon&utm_medium=feed


Microsoft Tightens Digital Defenses with Sweeping Security Overhaul

Microsoft unveiled detailed security reforms Monday, five months after CEO Satya Nadella pledged to prioritize cybersecurity following major breaches. The 25-page Secure Future Initiative report [PDF] outlines technical and governance changes addressing criticisms in an April 2024 Cyber Safety Review Board report that deemed Microsoft's security culture "inadequate."

Microsoft said it implemented significant security upgrades to its Entra ID and Microsoft Account systems, introducing Azure-managed hardware security modules for access token signing keys. The company has also purged 5.75 million inactive tenants to minimize potential attack vectors and adopted a new testing system with secure defaults to prevent legacy-related security issues. Concurrently, Microsoft has enhanced its network tracking capabilities, now monitoring over 99 percent of its physical network through a centralized inventory system, which aids in firmware compliance and logging.

Internal security measures have been tightened, with engineering teams facing stricter access controls. Personal access tokens are now limited to seven days, SSH access has been disabled for internal engineering repositories, and access to critical engineering systems has been restricted to fewer groups. Additionally, Microsoft has extended its audit log retention period to a minimum of two years, bolstering its ability to investigate and respond to potential security incidents.

https://it.slashdot.org/story/24/09/23/1841218/microsoft-tightens-digital-defenses-with-sweeping-security-overhaul?utm_source=rss1.0moreanon&utm_medium=feed
 at Slashdot.

https://it.slashdot.org/story/24/09/23/1841218/microsoft-tightens-digital-defenses-with-sweeping-security-overhaul?utm_source=rss1.0mainlinkanon&utm_medium=feed


WordPress Founder Calls WP Engine a 'Cancer To WordPress' and Urges Community To Switch Providers

Automattic CEO and WordPress co-creator Matt Mullenweg unleashed a scathing attack on a rival firm this week, calling WP Engine -- a managed WordPress hosting provider that has raised nearly $300 million in funding over its 14-year history -- a "cancer to WordPress." From a report: Mullenweg criticized the company -- which has been commercializing the open source WordPress project since 2010 -- for profiteering without giving much back, while also disabling key features that make WordPress such a powerful platform in the first place.

[...] But speaking last week at WordCamp US 2024, a WordPress-focused conference held in Portland, Oregon, Mullenweg pulled no punches in his criticism of WP Engine. Taking to the stage, Mullenweg read out a post he had just published to his personal blog, where he points to the distinct "five for the future" investment pledges made by Automattic and WP Engine to contribute resources to support the sustained growth of WordPress, with Automattic contributing 3,900 hours per week, an WP Engine contributing just 40 hours.

While he acknowledged that these figures are just a "proxy," and might not be perfectly accurate, Mullenweg said that this disparity in contributions is notable, as both Automattic and WP Engine "are roughly the same size, with revenue in the ballpark of half-a-billion [dollars]." [...] Mullenweg published a follow up blog post, where he calls WP Engine a "cancer" to WordPress. "It's important to remember that unchecked, cancer will spread," he wrote. "WP Engine is setting a poor standard that others may look at and think is ok to replicate."

https://tech.slashdot.org/story/24/09/23/1348226/wordpress-founder-calls-wp-engine-a-cancer-to-wordpress-and-urges-community-to-switch-providers?utm_source=rss1.0moreanon&utm_medium=feed
 at Slashdot.

https://tech.slashdot.org/story/24/09/23/1348226/wordpress-founder-calls-wp-engine-a-cancer-to-wordpress-and-urges-community-to-switch-providers?utm_source=rss1.0mainlinkanon&utm_medium=feed


'Forget ChatGPT: Why Researchers Now Run Small AIs On Their Laptops'

Nature published an introduction to running an LLM locally, starting with the example of a bioinformatician who's using AI to generate readable summaries for his database of immune-system protein structures. "But he doesn't use ChatGPT, or any other web-based LLM." He just runs the AI on his Mac...

Two more recent trends have blossomed. First, organizations are making 'open weights' versions of LLMs, in which the weights and biases used to train a model are publicly available, so that users can download and run them locally, if they have the computing power. Second, technology firms are making scaled-down versions that can be run on consumer hardware — and that rival the performance of older, larger models. Researchers might use such tools to save money, protect the confidentiality of patients or corporations, or ensure reproducibility... As computers get faster and models become more efficient, people will increasingly have AIs running on their laptops or mobile devices for all but the most intensive needs. Scientists will finally have AI assistants at their fingertips — but the actual algorithms, not just remote access to them.

The article's list of small open-weights models includes Meta's Llama, Google DeepMind's Gemma, Alibaba's Qwen, Apple's DCLM, Mistral's NeMo, and OLMo from the Allen Institute for AI. And then there's Microsoft:

Although the California tech firm OpenAI hasn't open-weighted its current GPT models, its partner Microsoft in Redmond, Washington, has been on a spree, releasing the small language models Phi-1, Phi-1.5 and Phi-2 in 2023, then four versions of Phi-3 and three versions of Phi-3.5 this year. The Phi-3 and Phi-3.5 models have between 3.8 billion and 14 billion active parameters, and two models (Phi-3-vision and Phi-3.5-vision) handle images1. By some benchmarks, even the smallest Phi model outperforms OpenAI's GPT-3.5 Turbo from 2023, rumoured to have 20 billion parameters... Microsoft used LLMs to write millions of short stories and textbooks in which one thing builds on another. The result of training on this text, says Sébastien Bubeck, Microsoft's vice-president for generative AI, is a model that fits on a mobile phone but has the power of the initial 2022 version of ChatGPT. "If you are able to craft a data set that is very rich in those reasoning tokens, then the signal will be much richer," he says...

Sharon Machlis, a former editor at the website InfoWorld, who lives in Framingham, Massachusetts, wrote a guide to using LLMs locally, covering a dozen options.
The bioinformatician shares another benefit: you don't have to worry about the company updating their models (leading to different outputs). "In most of science, you want things that are reproducible. And it's always a worry if you're not in control of the reproducibility of what you're generating."

And finally, the article reminds readers that "Researchers can build on these tools to create custom applications..."
Whichever approach you choose, local LLMs should soon be good enough for most applications, says Stephen Hood, who heads open-source AI at the tech firm Mozilla in San Francisco. "The rate of progress on those over the past year has been astounding," he says. As for what those applications might be, that's for users to decide. "Don't be afraid to get your hands dirty," Zakka says. "You might be pleasantly surprised by the results."

https://slashdot.org/story/24/09/23/0452250/forget-chatgpt-why-researchers-now-run-small-ais-on-their-laptops?utm_source=rss1.0moreanon&utm_medium=feed
 at Slashdot.

https://slashdot.org/story/24/09/23/0452250/forget-chatgpt-why-researchers-now-run-small-ais-on-their-laptops?utm_source=rss1.0mainlinkanon&utm_medium=feed