Foreign Disinformation Is Hitting the US Election From All Directions
An anonymous reader quotes a report from Wired: As November 5 draws closer, the Microsoft Threat Analysis Center (MTAC) warned on Wednesday that malicious foreign influence operations launched by Russia, China, and Iran against the US presidential election are continuing to evolve and should not be ignored even though they have come to feel inevitable. In the group's fifth report, researchers emphasize the range of ongoing activities (source may be paywalled; alternative source) as well as the inevitability that attackers will work to stoke doubts about the integrity of the election in its aftermath.
In spite of escalating conflict in the Middle East, Microsoft says that Iran has been able to keep up its operations targeting the US election, particularly targeting the Trump campaign and attempting to foment anti-Israel sentiment. Russian actors, meanwhile, have been focused on targeting the Harris campaign with character attacks and AI-generated content, including deepfakes. And China has shifted its focus in recent weeks, researchers say, to target down-ballot Republican candidates as well as sitting members of Congress who promote policies adversarial to China or in conflict with its interests.
Crucially, MTAC says it is all but certain that these actors will attempt to stoke division and mistrust in vote security on Election Day and in its immediate aftermath. "As MTAC observed during the 2020 presidential cycle, foreign adversaries will amplify claims of election rigging, voter fraud, or other election integrity issues to sow chaos among the US electorate and undermine international confidence in US political stability," the researchers wrote in their report. As the 2024 campaign season enters its final phase, the researchers say that they expect to see AI-generated media continuing to show up in new campaigns, particularly because content can spread so rapidly in the charged period immediately around Election Day. The report also notes that Microsoft has detected Iranian actors probing election-related websites and media outlets, "suggesting preparations for more direct influence operations as Election Day nears." "History has shown that the ability of foreign actors to rapidly distribute deceptive content can significantly impact public perception and electoral outcomes," wrote MTAC general manager Clint Watts. "With a particular focus on the 48 hours before and after Election Day, voters, government institutions, candidates and parties must remain vigilant to deceptive and suspicious activity online."
<a href="http://twitter.com/home?status=Foreign+Disinformation+Is+Hitting+the+US+Election+From+All+Directions%3A+https%3A%2F%2Fpolitics.slashdot.org%2Fstory%2F24%2F10%2F23%2F2234246%2F%3Futm_source%3Dtwitter%26utm_medium%3Dtwitter" rel="nofollow"><img src="https://a.fsdn.com/sd/twitter_icon_large.png"></a>
<a href="http://www.facebook.com/sharer.php?u=https%3A%2F%2Fpolitics.slashdot.org%2Fstory%2F24%2F10%2F23%2F2234246%2Fforeign-disinformation-is-hitting-the-us-election-from-all-directions%3Futm_source%3Dslashdot%26utm_medium%3Dfacebook" rel="nofollow"><img src="https://a.fsdn.com/sd/facebook_icon_large.png"></a>https://politics.slashdot.org/story/24/10/23/2234246/foreign-disinformation-is-hitting-the-us-election-from-all-directions?utm_source=rss1.0moreanon&utm_medium=feed
at Slashdot.
https://politics.slashdot.org/story/24/10/23/2234246/foreign-disinformation-is-hitting-the-us-election-from-all-directions?utm_source=rss1.0mainlinkanon&utm_medium=feed
Physicist Reveals Why You Should Run in The Rain
Theoretical Physicist Jacques Treiner, from the University of Paris Cite, explains why you should run in the rain: ... Let p represent the number of drops per unit volume, and let a denote their vertical velocity. We'll denote Sh as the horizontal surface area of the individual (e.g., the head and shoulders) and Sv as the vertical surface area (e.g., the body). When you're standing still, the rain only falls on the horizontal surface, Sh. This is the amount of water you'll receive on these areas. Even if the rain falls vertically, from the perspective of a walker moving at speed v, it appears to fall obliquely, with the angle of the drops' trajectory depending on your speed. During a time period T, a raindrop travels a distance of aT. Therefore, all raindrops within a shorter distance will reach the surface: these are the drops inside a cylinder with a base of Sh and a height of aT, which gives:
p.Sh.a.T.
As we have seen, as we move forward, the drops appear to be animated by an oblique velocity that results from the composition of velocity a and velocity v. The number of drops reaching Sh remains unchanged, since velocity v is horizontal and therefore parallel to Sh. However, the number of drops reaching surface Sv -- which was previously zero when the walker was stationary -- has now increased. This is equal to the number of drops contained within a horizontal cylinder with a base area of Sv and a length of v.T. This length represents the horizontal distance the drops travel during this time interval. In total, the walker receives a number of drops given by the expression:
p.(Sh.a + Sv.v). T
Now we need to take into account the time interval during which the walker is exposed to the rain. If you're covering a distance d at constant speed v, the time you spend walking is d/v. Plugging this into the equation, the total amount of water you encounter is:
p.(Sh.a + Sv.v). d/v = p.(Sh.a/v + Sv). d
This equation proves that the faster you move, the less water hits your head and shoulders, but the amount of water hitting the vertical part of your body remains constant. To stay drier, it's best to move quickly and lean forward. However, you'll have to increase your speed to offset the exposed surface area caused by leaning.
<a href="http://twitter.com/home?status=Physicist+Reveals+Why+You+Should+Run+in+The+Rain%3A+https%3A%2F%2Fscience.slashdot.org%2Fstory%2F24%2F10%2F23%2F0150203%2F%3Futm_source%3Dtwitter%26utm_medium%3Dtwitter" rel="nofollow"><img src="https://a.fsdn.com/sd/twitter_icon_large.png"></a>
<a href="http://www.facebook.com/sharer.php?u=https%3A%2F%2Fscience.slashdot.org%2Fstory%2F24%2F10%2F23%2F0150203%2Fphysicist-reveals-why-you-should-run-in-the-rain%3Futm_source%3Dslashdot%26utm_medium%3Dfacebook" rel="nofollow"><img src="https://a.fsdn.com/sd/facebook_icon_large.png"></a>https://science.slashdot.org/story/24/10/23/0150203/physicist-reveals-why-you-should-run-in-the-rain?utm_source=rss1.0moreanon&utm_medium=feed
at Slashdot.
https://science.slashdot.org/story/24/10/23/0150203/physicist-reveals-why-you-should-run-in-the-rain?utm_source=rss1.0mainlinkanon&utm_medium=feed
'Electric Plastic' Could Unleash Next-Gen Implants and Wearable Tech
An anonymous reader quotes a report from Science Magazine: Imagine a thin wristband that monitors your steps and heartbeat like an Apple Watch. Or clothing that keeps you cool with built-in air conditioning. Or even a flexible implant that could help your heart better than a bulky pacemaker. That's the promise of a new, electrically active material researchers have created by combining short chains of amino acids called peptides with snippets of a polymer plastic. This "electric plastic," reported this month in Nature, can store energy or record information, opening the door to self-powered wearables, real-time neural interfaces, and medical implants that merge with bodies better than current tech. [...]
Samuel Stupp, a materials scientist at Northwestern University, and his colleagues thought they could improve on polyvinylidene fluoride's (PVDF) properties. The team connected peptides with small PVDF segments, which naturally assembled into long, flexible ribbons. The molecules then coalesced into bundles and aligned to form an electro-active material. "Remarkably," Stupp says, "the self-assembly process is triggered by adding water." The new material overcomes PVDF's limitations. It requires 100 times less voltage to switch polarization compared with other ferroelectric materials, making it ideal for low-power applications. And it retains its ferroelectric properties at temperatures of 110C -- about 40C higher than other PVDF materials.
Stupp's new material can store energy or information by electrically switching the polarity of each ribbon. And because the peptide on the end of each ribbon can be connected to proteins on neurons or other cells, the molecules can record the signals from the brain, heart, or other organs -- or electrically stimulate them. By using low-power techniques like ultrasound to "charge" the molecules, the material could be used to stimulate neurons as a treatment for chronic paralysis, Stupp says. Study co-author Yang Yang, an electrical power engineer at Northwestern, notes that PVDF is biocompatible, making the material a promising candidate for soft implants that could be wirelessly controlled from outside the body. Stupp's team has conducted small-scale evaluations of molecules, but scaling up will require placing water-suspended structures onto devices without altering them -- a challenge noted by chemist Frank Leibfarth. Even with this hurdle, "This advance has enabled a number of attractive properties compared to other organic polymers," he says.
Stupp added: "This paper has a much broader concept than just vinylidene fluoride. There probably are other possibilities ... that don't have fluorine."
<a href="http://twitter.com/home?status='Electric+Plastic'+Could+Unleash+Next-Gen+Implants+and+Wearable+Tech%3A+https%3A%2F%2Fscience.slashdot.org%2Fstory%2F24%2F10%2F23%2F0029218%2F%3Futm_source%3Dtwitter%26utm_medium%3Dtwitter" rel="nofollow"><img src="https://a.fsdn.com/sd/twitter_icon_large.png"></a>
<a href="http://www.facebook.com/sharer.php?u=https%3A%2F%2Fscience.slashdot.org%2Fstory%2F24%2F10%2F23%2F0029218%2Felectric-plastic-could-unleash-next-gen-implants-and-wearable-tech%3Futm_source%3Dslashdot%26utm_medium%3Dfacebook" rel="nofollow"><img src="https://a.fsdn.com/sd/facebook_icon_large.png"></a>https://science.slashdot.org/story/24/10/23/0029218/electric-plastic-could-unleash-next-gen-implants-and-wearable-tech?utm_source=rss1.0moreanon&utm_medium=feed
at Slashdot.
https://science.slashdot.org/story/24/10/23/0029218/electric-plastic-could-unleash-next-gen-implants-and-wearable-tech?utm_source=rss1.0mainlinkanon&utm_medium=feed
Lawsuit Argues Warrantless Use of Flock Surveillance Cameras Is Unconstitutional
A civil liberties group has filed a lawsuit in Virginia arguing that the widespread use of Flock's automated license plate readers violates the Fourth Amendment's protections against warrantless searches. 404 Media reports: "The City of Norfolk, Virginia, has installed a network of cameras that make it functionally impossible for people to drive anywhere without having their movements tracked, photographed, and stored in an AI-assisted database that enables the warrantless surveillance of their every move. This civil rights lawsuit seeks to end this dragnet surveillance program," the lawsuit notes (PDF). "In Norfolk, no one can escape the government's 172 unblinking eyes," it continues, referring to the 172 Flock cameras currently operational in Norfolk. The Fourth Amendment protects against unreasonable searches and seizures and has been ruled in many cases to protect against warrantless government surveillance, and the lawsuit specifically says Norfolk's installation violates that. [...]
The lawsuit in Norfolk is being filed by the Institute for Justice, a civil liberties organization that has filed a series of privacy and government overreach lawsuits over the last few years. Two Virginia residents, Lee Schmidt and Crystal Arrington, are listed as plaintiffs in the case. Schmidt is a Navy veteran who alleges in the lawsuit that the cops can easily infer where he is going based on Flock data. "Just outside his neighborhood, there are four Flock Cameras. Lee drives by these cameras (and others he sees around town) nearly every day, and the Norfolk Police Department [NPD] can use the information they record to build a picture of his daily habits and routines," the lawsuit reads. "If the Flock Cameras record Lee going straight through the intersection outside his neighborhood, for example, the NPD can infer that he is going to his daughter's school. If the cameras capture him turning right, the NPD can infer that he is going to the shooting range. If the cameras capture him turning left, the NPD can infer that he is going to the grocery store. The Flock Cameras capture the start of nearly every trip Lee makes in his car, so he effectively cannot leave his neighborhood without the NPD knowing about it." Arrington is a healthcare worker who makes home visits to clients in Norfolk. The lawsuit alleges that it would be trivial for the government to identify her clients. "Fourth Amendment case law overwhelmingly shows that license plate readers do not constitute a warrantless search because they take photos of cars in public and cannot continuously track the movements of any individual," a Flock spokesperson said. "Appellate and federal district courts in at least fourteen states have upheld the use of evidence from license plate readers as Constitutional without requiring a warrant, as well as the 9th and 11th circuits. Since the Bell case, four judges in Virginia have ruled the opposite way -- that ALPR evidence is admissible in court without a warrant."
<a href="http://twitter.com/home?status=Lawsuit+Argues+Warrantless+Use+of+Flock+Surveillance+Cameras+Is+Unconstitutional%3A+https%3A%2F%2Fyro.slashdot.org%2Fstory%2F24%2F10%2F22%2F2342258%2F%3Futm_source%3Dtwitter%26utm_medium%3Dtwitter" rel="nofollow"><img src="https://a.fsdn.com/sd/twitter_icon_large.png"></a>
<a href="http://www.facebook.com/sharer.php?u=https%3A%2F%2Fyro.slashdot.org%2Fstory%2F24%2F10%2F22%2F2342258%2Flawsuit-argues-warrantless-use-of-flock-surveillance-cameras-is-unconstitutional%3Futm_source%3Dslashdot%26utm_medium%3Dfacebook" rel="nofollow"><img src="https://a.fsdn.com/sd/facebook_icon_large.png"></a>https://yro.slashdot.org/story/24/10/22/2342258/lawsuit-argues-warrantless-use-of-flock-surveillance-cameras-is-unconstitutional?utm_source=rss1.0moreanon&utm_medium=feed
at Slashdot.
https://yro.slashdot.org/story/24/10/22/2342258/lawsuit-argues-warrantless-use-of-flock-surveillance-cameras-is-unconstitutional?utm_source=rss1.0mainlinkanon&utm_medium=feed
Can We Turn Off AI Tools From Google, Microsoft, Apple, and Meta? Sometimes...
"Who asked for any of this in the first place?" wonders a New York Times consumer-tech writer. (Alternate URL here.) "Judging from the feedback I get from readers, lots of people outside the tech industry remain uninterested in AI — and are increasingly frustrated with how difficult it has become to ignore."
The companies rely on user activity to train and improve their AI systems, so they are testing this tech inside products we use every day. Typing a question such as "Is Jay-Z left-handed?" in Google will produce an AI-generated summary of the answer on top of the search results. And whenever you use the search tool inside Instagram, you may now be interacting with Meta's chatbot, Meta AI. In addition, when Apple's suite of AI tools, Apple Intelligence, arrives on iPhones and other Apple products through software updates this month, the tech will appear inside the buttons we use to edit text and photos.
The proliferation of AI in consumer technology has significant implications for our data privacy, because companies are interested in stitching together and analyzing our digital activities, including details inside our photos, messages and web searches, to improve AI systems. For users, the tools can simply be an annoyance when they don't work well. "There's a genuine distrust in this stuff, but other than that, it's a design problem," said Thorin Klosowski, a privacy and security analyst at the Electronic Frontier Foundation, a digital rights nonprofit, and a former editor at Wirecutter, the reviews site owned by The New York Times. "It's just ugly and in the way."
It helps to know how to opt out. After I contacted Microsoft, Meta, Apple and Google, they offered steps to turn off their AI tools or data collection, where possible. I'll walk you through the steps.
The article suggests logged-in Google users can toggle settings at myactivity.google.com. (Some browsers also have extensions that force Google's search results to stop inserting an AI summary at the top.) And you can also tell Edge to remove Copilot from its sidebar at edge://settings.
But "There is no way for users to turn off Meta AI, Meta said. Only in regions with stronger data protection laws, including the EU and Britain, can people deny Meta access to their personal information to build and train Meta's AI."
On Instagram, for instance, people living in those places can click on "settings," then "about" and "privacy policy," which will lead to opt-out instructions. Everyone else, including users in the United States, can visit the Help Center on Facebook to ask Meta only to delete data used by third parties to develop its AI.
By comparison, when Apple releases new AI services this month, users will have to opt in, according to the article. "If you change your mind and no longer want to use Apple Intelligence, you can go back into the settings and toggle the Apple Intelligence switch off, which makes the tools go away."
<a href="http://twitter.com/home?status=Can+We+Turn+Off+AI+Tools+From+Google%2C+Microsoft%2C+Apple%2C+and+Meta%3F++Sometimes...%3A+https%3A%2F%2Fapple.slashdot.org%2Fstory%2F24%2F10%2F20%2F2023223%2F%3Futm_source%3Dtwitter%26utm_medium%3Dtwitter" rel="nofollow"><img src="https://a.fsdn.com/sd/twitter_icon_large.png"></a>
<a href="http://www.facebook.com/sharer.php?u=https%3A%2F%2Fapple.slashdot.org%2Fstory%2F24%2F10%2F20%2F2023223%2Fcan-we-turn-off-ai-tools-from-google-microsoft-apple-and-meta-sometimes%3Futm_source%3Dslashdot%26utm_medium%3Dfacebook" rel="nofollow"><img src="https://a.fsdn.com/sd/facebook_icon_large.png"></a>https://apple.slashdot.org/story/24/10/20/2023223/can-we-turn-off-ai-tools-from-google-microsoft-apple-and-meta-sometimes?utm_source=rss1.0moreanon&utm_medium=feed
at Slashdot.
https://apple.slashdot.org/story/24/10/20/2023223/can-we-turn-off-ai-tools-from-google-microsoft-apple-and-meta-sometimes?utm_source=rss1.0mainlinkanon&utm_medium=feed
How WatchTowr Explored the Complexity of Vulnerability in a Secure Firewall Appliance
Cybersecurity startup Watchtowr "was founded by hacker-turned-entrepreneur Benjamin Harris," according to a recent press release touting their Fortune 500 customers and $29 million investments from venture capital firms. ("If there's a way to compromise your organization, watchTowr will find it," Harris says in the announcement.)
This week they shared their own research on a Fortinet FortiGate SSLVPN appliance vulnerability (discovered in February by Gwendal Guégniaud of the Fortinet Product Security team — presumably in a static analysis for format string vulnerabilities). "It affected (before patching) all currently-maintained branches, and recently was highlighted by CISA as being exploited-in-the-wild... It's a Format String vulnerability [that] quickly leads to Remote Code Execution via one of many well-studied mechanisms, which we won't reproduce here..."
"Tl;dr SSLVPN appliances are still sUpEr sEcurE," their post begains — but the details are interesting. When trying to test an exploit, Watchtowr discovered instead that FortiGate always closed the connection early, thanks to an exploit mitigation in glibc "intended to hinder clean exploitation of exactly this vulnerability class." Watchtowr hoped to "use this to very easily check if a device is patched — we can simply send a %n, and if the connection aborts, the device is vulnerable. If the connection does not abort, then we know the device has been patched... " But then they discovered "Fortinet added some kind of certificate validation logic in the 7.4 series, meaning that we can't even connect to it (let alone send our payload) without being explicitly permitted by a device administrator."
We also checked the 7.0 branch, and here we found things even more interesting, as an unpatched instance would allow us to connect with a self-signed certificate, while a patched machine requires a certificate signed by a configured CA. We did some reversing and determined that the certificate must be explicitly configured by the administrator of the device, which limits exploitation of these machines to the managing FortiManager instance (which already has superuser permissions on the device) or the other component of a high-availability pair. It is not sufficient to present a certificate signed by a public CA, for example...
Fortinet's advice here is simply to update, which is always sound advice, but doesn't really communicate the nuance of this vulnerability... Assuming an organisation is unable to apply the supplied workaround, the urgency of upgrade is largely dictated by the willingness of the target to accept a self-signed certificate. Targets that will do so are open to attack by any host that can access them, while those devices that require a certificate signed by a trusted root are rendered unexploitable in all but the narrowest of cases (because the TLS/SSL ecosystem is just so solid, as we recently demonstrated)...
While it's always a good idea to update to the latest version, the life of a sysadmin is filled with cost-to-benefit analysis, juggling the needs of users with their best interests.... [I]t is somewhat troubling when third parties need to reverse patches to uncover such details.
Thanks to Slashdot reader Mirnotoriety for sharing the article.
<a href="http://twitter.com/home?status=How+WatchTowr+Explored+the+Complexity+of+Vulnerability+in+a+Secure+Firewall+Appliance%3A+https%3A%2F%2Fit.slashdot.org%2Fstory%2F24%2F10%2F20%2F1955241%2F%3Futm_source%3Dtwitter%26utm_medium%3Dtwitter" rel="nofollow"><img src="https://a.fsdn.com/sd/twitter_icon_large.png"></a>
<a href="http://www.facebook.com/sharer.php?u=https%3A%2F%2Fit.slashdot.org%2Fstory%2F24%2F10%2F20%2F1955241%2Fhow-watchtowr-explored-the-complexity-of-vulnerability-in-a-secure-firewall-appliance%3Futm_source%3Dslashdot%26utm_medium%3Dfacebook" rel="nofollow"><img src="https://a.fsdn.com/sd/facebook_icon_large.png"></a>https://it.slashdot.org/story/24/10/20/1955241/how-watchtowr-explored-the-complexity-of-vulnerability-in-a-secure-firewall-appliance?utm_source=rss1.0moreanon&utm_medium=feed
at Slashdot.
https://it.slashdot.org/story/24/10/20/1955241/how-watchtowr-explored-the-complexity-of-vulnerability-in-a-secure-firewall-appliance?utm_source=rss1.0mainlinkanon&utm_medium=feed
NASA's Artemis Mission To Moon Unveils New Spacesuit Designed By Prada
For the first time in 50 years, humans will walk on the moon again. Currently planned for as soon as 2026, the Artemis III mission "will be one of the most complex undertakings of engineering and human ingenuity in the history of deep space exploration..." writes NASA. "Two crew members will descend to the surface and spend approximately a week near the South Pole of the Moon conducting new science before returning to lunar orbit..."
And they'll be wearing Prada, according to a Space News report from Milan:
At a briefing at the International Astronautical Congress here October 16, Axiom and Prada revealed details about the Axiom Extravehicular Mobility Unit (AxEMU) suit that Axiom is creating for use by NASA on lunar landing missions starting with Artemis 3... Axiom emphasized the advanced capabilities in the suit, particularly when compared to the suits worn by the Apollo astronauts on moonwalks more than a half-century ago [including greater redundancy and healthy monitoring systems not available in Apollo-era suits]...
The unveiling came just over a year after Axiom announced it was working with luxury goods company Prada, an unconventional partnership intended to leverage Prada's expertise in materials and design... [Axiom's executive VP of extravehicular activity Russell Ralston] said Axiom has leveraged Prada's expertise in fabrics and garment design in helping create the outer layer of the suit, which reflects sunlight and keeps dust from getting into interior layers... "If you look across all the different technologies that are needed within the suit, the uniqueness of those technologies and their application, the supply chain has tended to be pretty unstable," he said. "So, one of the things that Prada has really helped us with is bringing stability to that base, especially on the fabric side...."
Not surprisingly, Prada also contributed to the appearance of the suit. "One of the things that was important to us was the appeal of the suit, the look of the suit," Ralston said. "Something that Prada brought to the table was helping with the general aesthetic of the suit." One design aspect that brought the two companies together was a prominent red stripe on the suit. Ralston noted that was a nod to a NASA tradition where the mission commander's suit would have that red stripe to distinguish them from another spacewalker...
While the current focus of the suit is for walking on the moon, Ralston said the suit can be easily adapted for applications in low Earth orbit, such as spacewalks from the International Space Station or Axiom's future commercial space station.
The article adds that 30 people worked on the suit (full- or part-time). "These suits will give the astronauts increased range of motion and flexibility to explore more of the landscape than on previous lunar missions," according to NASA.
With "the ability to send high quality images and video to the ground with advanced communication technology, they will be sharing a unique new human experience with the world."
Thanks to long-time Slashdot reader schwit1 for sharing the news.
<a href="http://twitter.com/home?status=NASA's+Artemis+Mission+To+Moon+Unveils+New+Spacesuit+Designed+By+Prada%3A+https%3A%2F%2Fscience.slashdot.org%2Fstory%2F24%2F10%2F19%2F1656219%2F%3Futm_source%3Dtwitter%26utm_medium%3Dtwitter" rel="nofollow"><img src="https://a.fsdn.com/sd/twitter_icon_large.png"></a>
<a href="http://www.facebook.com/sharer.php?u=https%3A%2F%2Fscience.slashdot.org%2Fstory%2F24%2F10%2F19%2F1656219%2Fnasas-artemis-mission-to-moon-unveils-new-spacesuit-designed-by-prada%3Futm_source%3Dslashdot%26utm_medium%3Dfacebook" rel="nofollow"><img src="https://a.fsdn.com/sd/facebook_icon_large.png"></a>https://science.slashdot.org/story/24/10/19/1656219/nasas-artemis-mission-to-moon-unveils-new-spacesuit-designed-by-prada?utm_source=rss1.0moreanon&utm_medium=feed
at Slashdot.
https://science.slashdot.org/story/24/10/19/1656219/nasas-artemis-mission-to-moon-unveils-new-spacesuit-designed-by-prada?utm_source=rss1.0mainlinkanon&utm_medium=feed
After Second Power Outage, 10 Million Cubans Endure Saturday Afternoon Blackout
The Miami Herald reports:
Cuba's electrical grid shut down again early Saturday, leaving the island without electricity after authorities tried but failed to restore power following an earlier nationwide blackout on Friday. The island's Electric Union reported a second "total outage" at 6:15 a.m., just hours after officials reported they had restored power in a few "microsystems" all over the island... The country has been going through its worst economic crisis since the fall of the Soviet Union, and the government lacks money to buy oil in the international market to meet domestic demand.
Cubans irked by the daily blackouts defied the country's Draconian laws punishing criticism of the government and left several comments in official news outlets calling for government officials to resign. The second outage will likely exacerbate public frustration as food begins to spoil because of the lack of refrigeration.
Two hours ago, Reuters reported that Cuba's government "said on Saturday it had made some progress in gradually re-establishing electrical service across the island, including to hospitals and parts of the capital Havana..."
"Most of Cuba's 10 million people, however, remained without electricity on Saturday afternoon."
Traffic lights were dark at intersections throughout Havana, and most commerce was halted...
Cuban officials have said even if the immediate grid collapse is resolved, the electricity crisis will continue. Cuba produces little of its own crude oil, and fuel deliveries to the island have dropped significantly this year, as Venezuela, Russia and Mexico, once important suppliers, have reduced their exports to Cuba.
Mexico experienced a historic drop in production, according to the New York Times, while Venezuela is selling its oil to foreign companies to ease its own economic crisis:
The experts had warned for years: Cuba's power grid was on the verge of collapse, relying on plants nearly a half-century old and importing fuel that the cash strapped Communist government could barely afford... Cuban economists and foreign analysts blamed the crisis on several factors: the government's failure to tackle the island's aging infrastructure; the decline in fuel supplies from Venezuela, Mexico and Russia; and a lack of capital investment in badly needed renewable systems, such as wind and solar.
Jorge Piñon, a Cuban-born energy expert at the University of Texas at Austin, highlighted that Cuba's electricity grid relies on eight very large power plants that are close to 50 years old. "They have not received any operational maintenance much less capital maintenance in the last 12 to 15 years," he said, adding that they have a lifetime of only 25-30 years. "So, number one, it's a structural problem, they are breaking down all the time and that has a domino effect," he said. Compounding the problems, Cuba burns crude oil as a fuel for its plants. Experts said Cuba's own crude oil production is very heavy in sulfur and metals that can impair the thermoelectric combustion process. "So they have to be constantly repairing them, and they're repairing them with Band-Aids," said Mr. Piñon...
"If they can't turn these plants back on there is a concern that this could turn into another mass exodus," said Ricardo Herrero, the director of the Cuba Study Group in Washington. "They are really short on options," he added.
<a href="http://twitter.com/home?status=After+Second+Power+Outage%2C+10+Million+Cubans+Endure+Saturday+Afternoon+Blackout%3A+https%3A%2F%2Fhardware.slashdot.org%2Fstory%2F24%2F10%2F19%2F2253239%2F%3Futm_source%3Dtwitter%26utm_medium%3Dtwitter" rel="nofollow"><img src="https://a.fsdn.com/sd/twitter_icon_large.png"></a>
<a href="http://www.facebook.com/sharer.php?u=https%3A%2F%2Fhardware.slashdot.org%2Fstory%2F24%2F10%2F19%2F2253239%2Fafter-second-power-outage-10-million-cubans-endure-saturday-afternoon-blackout%3Futm_source%3Dslashdot%26utm_medium%3Dfacebook" rel="nofollow"><img src="https://a.fsdn.com/sd/facebook_icon_large.png"></a>https://hardware.slashdot.org/story/24/10/19/2253239/after-second-power-outage-10-million-cubans-endure-saturday-afternoon-blackout?utm_source=rss1.0moreanon&utm_medium=feed
at Slashdot.
https://hardware.slashdot.org/story/24/10/19/2253239/after-second-power-outage-10-million-cubans-endure-saturday-afternoon-blackout?utm_source=rss1.0mainlinkanon&utm_medium=feed
Debunking Hype: China Hasn't Broken Military Encryption with Quantum
An anonymous reader shared this report from Forbes:
Recent headlines have proclaimed that Chinese scientists have hacked "military-grade encryption" using quantum computers, sparking concern and speculation about the future of cybersecurity. The claims, largely stemming from a recent South China Morning Post article about a Chinese academic paper published in May, was picked up by many more serious publications.
However, a closer examination reveals that while Chinese researchers have made incremental advances in quantum computing, the news reports are a huge overstatement. "Factoring a 50-bit number using a hybrid quantum-classical approach is a far cry from breaking 'military-grade encryption'," said Dr. Erik Garcell, Head of Technical Marketing at Classiq, a quantum algorithm design company. While advancements have indeed been made, the progress represents incremental steps rather than a paradigm-shifting breakthrough that renders current cryptographic systems obsolete. "This kind of overstatement does more harm than good," Dr. Garcell said. "Misrepresenting current capabilities as 'breaking military-grade encryption' is not just inaccurate — it's potentially damaging to the field's credibility...."
In fact, the Chinese paper in question, titled Quantum Annealing Public Key Cryptographic Attack Algorithm Based on D-Wave Advantage, does not mention military-grade encryption, which typically involves algorithms like the Advanced Encryption Standard (AES). Instead, the paper is about attacking RSA encryption (RSA stands for Rivest-Shamir-Adleman, named after its creators)... While factoring a 50-bit integer is an impressive technical achievement, it's important to note that RSA encryption commonly uses key sizes of 2048 bits or higher. The difficulty of factoring increases exponentially with the size of the number, meaning that the gap between 50-bit and 2048-bit integers is astronomically large.
Moreover, the methods used involve a hybrid approach that combines quantum annealing with classical computation. This means that the quantum annealer handles part of the problem, but significant processing is still performed by classical algorithms. The advances do not equate to a scalable method for breaking RSA encryption as it is used in practical applications today.
Duncan Jones, Head of Cybersecurity at Quantinuum, tells Forbes that if China had actually broken AES — they'd be keeping it secret (rather than publicizing it in newspapers).
<a href="http://twitter.com/home?status=Debunking+Hype%3A+China+Hasn't+Broken+Military+Encryption+with+Quantum%3A+https%3A%2F%2Fit.slashdot.org%2Fstory%2F24%2F10%2F19%2F1752205%2F%3Futm_source%3Dtwitter%26utm_medium%3Dtwitter" rel="nofollow"><img src="https://a.fsdn.com/sd/twitter_icon_large.png"></a>
<a href="http://www.facebook.com/sharer.php?u=https%3A%2F%2Fit.slashdot.org%2Fstory%2F24%2F10%2F19%2F1752205%2Fdebunking-hype-china-hasnt-broken-military-encryption-with-quantum%3Futm_source%3Dslashdot%26utm_medium%3Dfacebook" rel="nofollow"><img src="https://a.fsdn.com/sd/facebook_icon_large.png"></a>https://it.slashdot.org/story/24/10/19/1752205/debunking-hype-china-hasnt-broken-military-encryption-with-quantum?utm_source=rss1.0moreanon&utm_medium=feed
at Slashdot.
https://it.slashdot.org/story/24/10/19/1752205/debunking-hype-china-hasnt-broken-military-encryption-with-quantum?utm_source=rss1.0mainlinkanon&utm_medium=feed
Serious Infections Linked to Dementia Risk, Study Shows
"Getting sick feels bad in the moment," reports the Washington Post, "and may affect your brain in the longer term."
A new study published in Nature Aging adds to growing evidence that severe infections, including flu, herpes and respiratory tract infections, are linked to accelerated brain atrophy and increased risk of dementia years later. It also hints at the biological drivers that may contribute to neurodegenerative disease.
The current research is a "leap beyond previous studies that had already associated infection with susceptibility to Alzheimer's disease" and provides a "useful dataset," said Rudy Tanzi, a professor of neurology at Harvard Medical School and the director of the McCance Center for Brain Health at Massachusetts General Hospital. Other recent studies have found that the flu shot and the shingles vaccine reduce the risk of subsequent dementia in those who get them. Severe infections have also been linked to subsequent strokes and heart attacks.
"Big infection, big immune response — not good for the brain," said one of the study's co-authors (Keenan Walker, a tenure-track investigator and the director of the Multimodal Imaging of Neurodegenerative Disease Unit at the National Institute on Aging).
And the article also includes this quote from Kristen Funk, an assistant professor of biological sciences at the University of North Carolina at Charlotte (who studies neuroinflammation in neuroinfectious and neurodegenerative diseases). "They really found that there's a range of infections that are associated with this brain atrophy, associated with this cognitive decline."
In turn, most of these infections associated with brain atrophy seem to be risk factors for dementia, according to the researchers' analyses of the UK Biobank data of 495,896 subjects and a Finnish dataset of 273,132 subjects. They found that having a history of infections was associated with an increased risk for Alzheimer's disease years later. The increased risk was even higher for vascular dementia, which is the second-most-common dementia diagnosis after Alzheimer's disease and caused by restriction of blood to the brain...
More-minor infections are not cause for alarm since the data was drawn from patients who had a hospital record of their infections, indicating more-severe cases, experts say.
And speaking of infections, the Post also published an interesting guest column by Dr. Mikkael A. Sekeres, division chief for hematology and medicine professor at the University of Miami's cancer center:
A recent report from the American Association for Cancer Research attributed 13 percent of cancer cases worldwide to infections. Some estimates run as high as 20 percent, with particularly high rates of infection-related cancers in developing countries. Infectious agents linked to cancer include bacteria, such as Helicobacter pylori (H. pylori), and viruses, such as human papillomavirus (HPV), Epstein-Barr virus (EBV), and hepatitis B and C.
But keep in mind that an exceedingly small percentage of infected people develop cancer...
<a href="http://twitter.com/home?status=Serious+Infections+Linked+to+Dementia+Risk%2C+Study+Shows%3A+https%3A%2F%2Fscience.slashdot.org%2Fstory%2F24%2F10%2F19%2F0545239%2F%3Futm_source%3Dtwitter%26utm_medium%3Dtwitter" rel="nofollow"><img src="https://a.fsdn.com/sd/twitter_icon_large.png"></a>
<a href="http://www.facebook.com/sharer.php?u=https%3A%2F%2Fscience.slashdot.org%2Fstory%2F24%2F10%2F19%2F0545239%2Fserious-infections-linked-to-dementia-risk-study-shows%3Futm_source%3Dslashdot%26utm_medium%3Dfacebook" rel="nofollow"><img src="https://a.fsdn.com/sd/facebook_icon_large.png"></a>https://science.slashdot.org/story/24/10/19/0545239/serious-infections-linked-to-dementia-risk-study-shows?utm_source=rss1.0moreanon&utm_medium=feed
at Slashdot.
https://science.slashdot.org/story/24/10/19/0545239/serious-infections-linked-to-dementia-risk-study-shows?utm_source=rss1.0mainlinkanon&utm_medium=feed
West Virginia Town of Green Bank Has Become a Refuge For Electrosensitive People
An anonymous reader quotes a report from the Washington Post: Brandon Barrett arrived here two weeks ago, sick but hopeful, like dozens before him. Just a few years back, he could dead lift 660 pounds. After an injury while training to be a professional dirt-bike rider, he opened a motorcycle shop just north of Buffalo. When he wasn't working, he would cleanse his mind through rigorous meditation. In 2019, he began getting sick. And then sicker. Brain fog. Memory issues. Difficulty focusing. Depression. Anxiety. Fatigue. Brandon was pretty sure he knew why: the cell tower a quarter-mile behind his shop and all the electromagnetic radiation it produces, that cellphones produce, that WiFi routers produce, that Bluetooth produces, that the whole damn world produces. He thought about the invisible waves that zip through our airspace -- maybe they pollute our bodies, somehow? [...]
Then Brandon read about Green Bank, an unincorporated speck on the West Virginia map, hidden in the Allegheny Mountains, about a four-hour drive southwest of D.C. There are no cell towers there, by design. He read that other sick people had moved here and gotten better, that the area's electromagnetic quietude is protected by the federal government. Perhaps it could protect Brandon. It's quiet here so that scientists can listen to corners of the universe, billions of light-years away. In the 1950s, the federal government snatched up farmland to build the Green Bank Observatory. It's now home to the Robert C. Byrd Green Bank Radio Telescope, the largest steerable telescope in the world at 7,600 metric tons and a height of 485 feet. Its 2.3-acre dish can study quasars and pulsars, map asteroids and planets, and search for evidence of extraterrestrial life.
The observatory's machines are so sensitive that terrestrial radio waves would interfere with their astronomical exploration, like a shout (a bunch of WiFi signals) drowning out a whisper (signals from the clouds of hydrogen hanging out between galaxies). So in 1958, the Federal Communications Commission created the National Radio Quiet Zone, a 13,000-square-mile area encompassing wedges of both Virginia and West Virginia, where radio transmissions are restricted to varying degrees. At its center is a 10-mile zone around the observatory where WiFi, cellphones and cordless phones -- among many other types of wave-emitting equipment -- are outlawed. Wired internet is okay, as are televisions -- though you must have a cable or satellite provider. It's not a place out of 100 years ago. More like 30. If you want to make plans to meet someone, you make them in person. Some people move here to work at the observatory. Others come because they feel like they have to. These are the 'electrosensitives,' as they often refer to themselves. They are ill, and Green Bank is their Lourdes. The electrosensitives guess that they number at least 75 in Pocahontas County, which has a population of roughly 7,500. Literary Hub, the BBC, Slate, and the Washingtonian have non-paywalled articles about Green Bank and the "wi-fi refugees" that shelter there.
<a href="http://twitter.com/home?status=West+Virginia+Town+of+Green+Bank+Has+Become+a+Refuge+For+Electrosensitive+People%3A+https%3A%2F%2Fmobile.slashdot.org%2Fstory%2F24%2F10%2F18%2F2342223%2F%3Futm_source%3Dtwitter%26utm_medium%3Dtwitter" rel="nofollow"><img src="https://a.fsdn.com/sd/twitter_icon_large.png"></a>
<a href="http://www.facebook.com/sharer.php?u=https%3A%2F%2Fmobile.slashdot.org%2Fstory%2F24%2F10%2F18%2F2342223%2Fwest-virginia-town-of-green-bank-has-become-a-refuge-for-electrosensitive-people%3Futm_source%3Dslashdot%26utm_medium%3Dfacebook" rel="nofollow"><img src="https://a.fsdn.com/sd/facebook_icon_large.png"></a>https://mobile.slashdot.org/story/24/10/18/2342223/west-virginia-town-of-green-bank-has-become-a-refuge-for-electrosensitive-people?utm_source=rss1.0moreanon&utm_medium=feed
at Slashdot.
https://mobile.slashdot.org/story/24/10/18/2342223/west-virginia-town-of-green-bank-has-become-a-refuge-for-electrosensitive-people?utm_source=rss1.0mainlinkanon&utm_medium=feed
Spotify Criticized For Letting Fake Albums Appear On Real Artist Pages
An anonymous reader quotes a report from Ars Technica: This fall, thousands of fake albums were added to Spotify, with some appearing on real artist pages, where they're positioned to lure unsuspecting listeners into streaming by posing as new releases from favorite bands. An Ars reader flagged the issue after finding a fake album on the Spotify page of an UK psych rock band called Gong. The Gong fan knew that the band had begun touring again after a surprise new release last year, but the "latest release" listed by Spotify wasn't that album. Instead, at the top of Gong's page was a fake self-titled album supposedly released in 2024.
The real fan detected the fake instantly, and not just because the generic electronic music sounded nothing like Gong's experimental sounds. The album's cover also gave the scheme away, using a generic font and neon stock image that invoked none of the trippy imagery that characterized Gong's typical album covers. Ars confirmed with Gong member Dave Sturt that the self-titled item was an obvious fake on Monday. At that time, Sturt said the band was working to get the junk album removed from its page, but as of Tuesday morning, that album remained online, along with hundreds of other albums uploaded by a fake label that former Spotify data "alchemist" Glenn McDonald flagged in a social media post that Spotify seemingly ignored.
On his site, McDonald gathered the junk album data by label, noting that Beat Street Music, which has no web presence but released the fake Gong album, uploaded 240 junk albums on Friday alone. Similarly, Ancient Lake Records uploaded 471 albums on Friday. And Gupta Music added 483 just a few days prior, along with 600 junk albums from Future Jazz Records uploaded between September 30 and October 8. These junk albums don't appear to be specifically targeting popular artists, McDonald told Ars. Rather, generic music is uploaded under a wide range of one-word artist names. However, by using that tactic, some of these fake albums appeared on real artist pages, such as Gong, experimental rock band Swans, and English rock bands Asia and Yes. And that oversight is on Spotify, McDonald suggested. "We are aware of the issue, have relocated the content in question, and are considering our further options against the providing licensor," a Spotify spokesperson said. "When we identify or are alerted to attempts by bad actors to game the system, we take action that may include removing stream counts and withholding royalties. Spotify invests heavily in automated and manual reviews to prevent, detect, and mitigate the impact of bad actors attempting to collect unearned royalties."
<a href="http://twitter.com/home?status=Spotify+Criticized+For+Letting+Fake+Albums+Appear+On+Real+Artist+Pages%3A+https%3A%2F%2Fentertainment.slashdot.org%2Fstory%2F24%2F10%2F15%2F2047228%2F%3Futm_source%3Dtwitter%26utm_medium%3Dtwitter" rel="nofollow"><img src="https://a.fsdn.com/sd/twitter_icon_large.png"></a>
<a href="http://www.facebook.com/sharer.php?u=https%3A%2F%2Fentertainment.slashdot.org%2Fstory%2F24%2F10%2F15%2F2047228%2Fspotify-criticized-for-letting-fake-albums-appear-on-real-artist-pages%3Futm_source%3Dslashdot%26utm_medium%3Dfacebook" rel="nofollow"><img src="https://a.fsdn.com/sd/facebook_icon_large.png"></a>https://entertainment.slashdot.org/story/24/10/15/2047228/spotify-criticized-for-letting-fake-albums-appear-on-real-artist-pages?utm_source=rss1.0moreanon&utm_medium=feed
at Slashdot.
https://entertainment.slashdot.org/story/24/10/15/2047228/spotify-criticized-for-letting-fake-albums-appear-on-real-artist-pages?utm_source=rss1.0mainlinkanon&utm_medium=feed
Why OpenAI Is at War With an Obscure Idea Man
In a David vs. Goliath legal battle, AI powerhouse OpenAI is squaring off against a little-known entrepreneur who claims he conceived the company's name and mission months before its star-studded launch. Guy Ravine, a self-taught programmer with a history of near-misses in tech, registered the domain open.ai in March 2015. He envisioned a collaborative platform to develop artificial general intelligence (AGI) for the benefit of humanity. By year's end, Ravine had pitched his "Open AI" concept to industry luminaries and filed for a trademark. Then, in December 2015, Sam Altman and Greg Brockman announced the creation of OpenAI, backed by a promised billion dollars from Elon Musk and others.
The similarity was uncanny -- a non-profit aimed at developing AGI for the public good. "What the f---?" Ravine recalls thinking. He claims his idea was stolen, while OpenAI dismisses him as an opportunistic "troll" and a "fraud." The ensuing legal battle has consumed Ravine's life, Bloomberg Businessweek covers in great detail, and has raised thorny questions about idea ownership in Silicon Valley. It also casts a shadow over OpenAI's origin story as the company, now valued at $157 billion, shifts from its non-profit roots to a for-profit juggernaut. "It's humanity's asset," Ravine insists. "It's not his [Altman's] asset." For now, a judge has barred Ravine from using "Open AI" while the suit proceeds, but the inventor has vowed to fight on against what he calls "the most feared law firm in the world." An amusing excerpt from the story: But Ravine had poked the bear, and as he packed up his house on Aug. 11, 2023, he opened an email from a lawyer at the firm Quinn Emanuel Urquhart & Sullivan LLP, informing him that OpenAI was suing him in federal court over the domain and trademark. "I'm like, what the f---?" Ravine recalls. Altman, he says, "could have had it for free" -- or at least for the cost of a donation. "Instead, he decided to donate millions of dollars to literally the most feared law firm in the world, to sue me."
Again and again in our conversations, he returns to that phrase: "the most feared law firm in the world." Finally, I ask him how he knows this. He turns his laptop toward me and pulls up the email. The signature reads "Quinn Emanuel Urquhart & Sullivan LLP: Most Feared Law Firm in the World."
<a href="http://twitter.com/home?status=Why+OpenAI+Is+at+War+With+an+Obscure+Idea+Man%3A+https%3A%2F%2Fslashdot.org%2Fstory%2F24%2F10%2F15%2F1314227%2F%3Futm_source%3Dtwitter%26utm_medium%3Dtwitter" rel="nofollow"><img src="https://a.fsdn.com/sd/twitter_icon_large.png"></a>
<a href="http://www.facebook.com/sharer.php?u=https%3A%2F%2Fslashdot.org%2Fstory%2F24%2F10%2F15%2F1314227%2Fwhy-openai-is-at-war-with-an-obscure-idea-man%3Futm_source%3Dslashdot%26utm_medium%3Dfacebook" rel="nofollow"><img src="https://a.fsdn.com/sd/facebook_icon_large.png"></a>https://slashdot.org/story/24/10/15/1314227/why-openai-is-at-war-with-an-obscure-idea-man?utm_source=rss1.0moreanon&utm_medium=feed
at Slashdot.
https://slashdot.org/story/24/10/15/1314227/why-openai-is-at-war-with-an-obscure-idea-man?utm_source=rss1.0mainlinkanon&utm_medium=feed
Human Sense of Smell Is Faster Than Previously Thought, New Study Suggests
A new study reveals that the human sense of smell is far more sensitive than previously thought, capable of distinguishing odors and their sequences within just 60 milliseconds. CNN reports: In a single sniff, the human sense of smell can distinguish odors within a fraction of a second, working at a level of sensitivity that is "on par" with how our brains perceive color, "refuting the widely held belief that olfaction is our slow sense," a new study finds. Humans also can discern between various sequences of odors -- distinguishing a sequence of "A" before "B" from sequence "B" before "A" -- when the interval between odorant A and odorant B is merely 60 milliseconds, according to the study, published Monday in the journal Nature Human Behavior. [...]
The new findings challenge previous research in which the timing it took to discriminate between odor sequences was around 1,200 milliseconds, Dr. Dmitry Rinberg, a professor in the Department of Neuroscience and Physiology at NYU Langone Health in New York, wrote in an editorial accompanying the study in Nature Human Behavior. "The timing of individual notes in music is essential for conveying meaning and beauty in a melody, and the human ear is very sensitive to this. However, temporal sensitivity is not limited to hearing: our sense of smell can also perceive small temporal changes in odor presentations," he wrote. "Similar to how timing affects the perception of notes in a melody, the timing of individual components in a complex odor mixture that reaches the nose may be crucial for our perception of the olfactory world."
The ability to tell apart odors within a single sniff might be an important way in which animals detect both what a smell is and where it might be in space, said Dr. Sandeep Robert Datta, a professor in the Department of Neurobiology at Harvard Medical School, who was not involved in the new study. "The demonstration that humans can tell apart smells as they change within a sniff is a powerful demonstration that timing is important for smell across species, and therefore is a general principle underlying olfactory function. In addition, this study sheds important light on the mysterious mechanisms that support human odor perception," Datta wrote in an email. "The study of human olfaction has historically lagged that of vision and hearing, because as humans we think of ourselves as visual creatures that largely use speech to communicate," he said, adding that the new study helps "fill a critical gap in our understanding of how we as humans smell."
<a href="http://twitter.com/home?status=Human+Sense+of+Smell+Is+Faster+Than+Previously+Thought%2C+New+Study+Suggests%3A+https%3A%2F%2Fscience.slashdot.org%2Fstory%2F24%2F10%2F15%2F0020207%2F%3Futm_source%3Dtwitter%26utm_medium%3Dtwitter" rel="nofollow"><img src="https://a.fsdn.com/sd/twitter_icon_large.png"></a>
<a href="http://www.facebook.com/sharer.php?u=https%3A%2F%2Fscience.slashdot.org%2Fstory%2F24%2F10%2F15%2F0020207%2Fhuman-sense-of-smell-is-faster-than-previously-thought-new-study-suggests%3Futm_source%3Dslashdot%26utm_medium%3Dfacebook" rel="nofollow"><img src="https://a.fsdn.com/sd/facebook_icon_large.png"></a>https://science.slashdot.org/story/24/10/15/0020207/human-sense-of-smell-is-faster-than-previously-thought-new-study-suggests?utm_source=rss1.0moreanon&utm_medium=feed
at Slashdot.
https://science.slashdot.org/story/24/10/15/0020207/human-sense-of-smell-is-faster-than-previously-thought-new-study-suggests?utm_source=rss1.0mainlinkanon&utm_medium=feed
'Open Source Royalty and Mad Kings'
WordPress.org has seized control of WP Engine's Advanced Custom Fields plugin, renaming it "Secure Custom Fields" and removing commercial elements, according to WordPress co-founder Matt Mullenweg. The move, justified by alleged security concerns and linked to ongoing litigation between WP Engine and Automattic, marks an unprecedented forcible takeover in the WordPress ecosystem.
David Heinemeier Hansson, creator of Ruby on Rails and co-founder and chief technology officer of Basecamp-maker 37signals, opines on the situation: For a dispute that started with a claim of "trademark confusion", there's an incredible irony in the fact that Automattic is now hijacking users looking for ACF onto their own plugin. And providing as rational for this unprecedented breach of open source norms that ACF needs maintenance, and since WPE is no longer able to provide that (given that they were blocked!), Automattic has to step in to do so. I mean, what?!
Imagine this happening on npm? Imagine Meta getting into a legal dispute with Microsoft (the owners of GitHub, who in turn own npm), and Microsoft responding by directing GitHub to ban all Meta employees from accessing their repositories. And then Microsoft just takes over the official React repository, pointing it to their own Super React fork. This is the kind of crazy we're talking about.
Weaponizing open source code registries is something we simply cannot allow to form precedence. They must remain neutral territory. Little Switzerlands in a world of constant commercial skirmishes.
And that's really the main reason I care to comment on this whole sordid ordeal. If this fight was just one between two billion-dollar companies, as Automattic and WPE both are, I would not have cared to wade in. But the principles at stake extend far beyond the two of them.
Using an open source project like WordPress as leverage in this contract dispute, and weaponizing its plugin registry, is an endangerment of an open source peace that has reigned decades, with peace-time dividends for all. Not since the SCO-Linux nonsense of the early 2000s have we faced such a potential explosion in fear, doubt, and uncertainty in the open source realm on basic matters everyone thought they could take for granted.
<a href="http://twitter.com/home?status='Open+Source+Royalty+and+Mad+Kings'%3A+https%3A%2F%2Fnews.slashdot.org%2Fstory%2F24%2F10%2F14%2F1526251%2F%3Futm_source%3Dtwitter%26utm_medium%3Dtwitter" rel="nofollow"><img src="https://a.fsdn.com/sd/twitter_icon_large.png"></a>
<a href="http://www.facebook.com/sharer.php?u=https%3A%2F%2Fnews.slashdot.org%2Fstory%2F24%2F10%2F14%2F1526251%2Fopen-source-royalty-and-mad-kings%3Futm_source%3Dslashdot%26utm_medium%3Dfacebook" rel="nofollow"><img src="https://a.fsdn.com/sd/facebook_icon_large.png"></a>https://news.slashdot.org/story/24/10/14/1526251/open-source-royalty-and-mad-kings?utm_source=rss1.0moreanon&utm_medium=feed
at Slashdot.
https://news.slashdot.org/story/24/10/14/1526251/open-source-royalty-and-mad-kings?utm_source=rss1.0mainlinkanon&utm_medium=feed
AI Threats 'Complete BS' Says Meta Senior Research, Who Thinks AI is Dumber Than a Cat
Meta senior research Yann LeCun (also a professor at New York University) told the Wall Street Journal that worries about AI threatening humanity are "complete B.S."
When a departing OpenAI researcher in May talked up the need to learn how to control ultra-intelligent AI, LeCun pounced. "It seems to me that before 'urgently figuring out how to control AI systems much smarter than us' we need to have the beginning of a hint of a design for a system smarter than a house cat," he replied on X. He likes the cat metaphor. Felines, after all, have a mental model of the physical world, persistent memory, some reasoning ability and a capacity for planning, he says. None of these qualities are present in today's "frontier" AIs, including those made by Meta itself.
LeCun shared a Turing Award with Geoffrey Hinton and Hoshua Bengio (who hopes LeCun is right, but adds "I don't think we should leave it to the competition between companies and the profit motive alone to protect the public and democracy. That is why I think we need governments involved.")
But LeCun still believes AI is a very powerful tool — even as Meta joins the quest for artificial general intelligence:
Throughout our interview, he cites many examples of how AI has become enormously important at Meta, and has driven its scale and revenue to the point that it's now valued at around $1.5 trillion. AI is integral to everything from real-time translation to content moderation at Meta, which in addition to its Fundamental AI Research team, known as FAIR, has a product-focused AI group called GenAI that is pursuing ever-better versions of its large language models. "The impact on Meta has been really enormous," he says.
At the same time, he is convinced that today's AIs aren't, in any meaningful sense, intelligent — and that many others in the field, especially at AI startups, are ready to extrapolate its recent development in ways that he finds ridiculous... OpenAI's Sam Altman last month said we could have Artificial General Intelligence within "a few thousand days...." But creating an AI this capable could easily take decades, [LeCun] says — and today's dominant approach won't get us there.... His bet is that research on AIs that work in a fundamentally different way will set us on a path to human-level intelligence. These hypothetical future AIs could take many forms, but work being done at FAIR to digest video from the real world is among the projects that currently excite LeCun. The idea is to create models that learn in a way that's analogous to how a baby animal does, by building a world model from the visual information it takes in.
In contrast, today's AI models "are really just predicting the next word in a text, he says... And because of their enormous memory capacity, they can seem to be reasoning, when in fact they're merely regurgitating information they've already been trained on."
<a href="http://twitter.com/home?status=AI+Threats+'Complete+BS'+Says+Meta+Senior+Research%2C++Who+Thinks+AI+is+Dumber+Than+a+Cat%3A+https%3A%2F%2Ftech.slashdot.org%2Fstory%2F24%2F10%2F13%2F2220258%2F%3Futm_source%3Dtwitter%26utm_medium%3Dtwitter" rel="nofollow"><img src="https://a.fsdn.com/sd/twitter_icon_large.png"></a>
<a href="http://www.facebook.com/sharer.php?u=https%3A%2F%2Ftech.slashdot.org%2Fstory%2F24%2F10%2F13%2F2220258%2Fai-threats-complete-bs-says-meta-senior-research-who-thinks-ai-is-dumber-than-a-cat%3Futm_source%3Dslashdot%26utm_medium%3Dfacebook" rel="nofollow"><img src="https://a.fsdn.com/sd/facebook_icon_large.png"></a>https://tech.slashdot.org/story/24/10/13/2220258/ai-threats-complete-bs-says-meta-senior-research-who-thinks-ai-is-dumber-than-a-cat?utm_source=rss1.0moreanon&utm_medium=feed
at Slashdot.
https://tech.slashdot.org/story/24/10/13/2220258/ai-threats-complete-bs-says-meta-senior-research-who-thinks-ai-is-dumber-than-a-cat?utm_source=rss1.0mainlinkanon&utm_medium=feed
Were America's Electric Car Subsidies Worth the Money?
America's electric vehicle subsidies brought a 2-to-1 return on investment, according to a paper by the National Bureau of Economic Research. "That includes environmental benefits, but mostly reflects a shift of profits to the United States," reports the New York Times. "Before the climate law, tax credits were mainly used to buy foreign-made cars."
"What the [subsidy legislation] did was swing the pendulum the other way, and heavily subsidized American carmakers," said Felix Tintelnot, an associate professor of economics at Duke University who was a co-author of the paper. Those benefits were undermined, however, by a loophole allowing dealers to apply the subsidy to leases of foreign-made electric vehicles. The provision sends profits to non-American companies, and since those foreign-made vehicles are on average heavier and less efficient, they impose more environmental and road-safety costs. Also, the researchers estimated that for every additional electric vehicle the new tax credits put on the road, about three other electric vehicle buyers would have made the purchases even without a $7,500 credit. That dilutes the effectiveness of the subsidies, which are forecast to cost as much as $390 billion through 2031.
The chief economist at Cox Automotive (which provided some of the data) tells the Times that "we could do better", but adds that the subsidies were "worth the money invested". But of course, that depends partly on how benefits were calculated:
[U]ing the Environmental Protection Agency's "social cost of carbon" metric, they calculated the dollar cost of each model's lifetime carbon emissions from both manufacturing and driving. On average, emissions by gas-powered vehicles impose 57% greater costs than electric vehicles. The study then calculated harms from air pollution other than greenhouse gases — smog, for example. That's where electric vehicles start to perform relatively poorly, since generating the electricity for them still creates pollution. Those harms will probably fade as more wind and solar energy comes online, but they are significant. Finally, the authors added the road deaths associated with heavier cars. Batteries are heavy, so electric vehicles — especially the largest — are likelier to kill people in crashes.
Totaling these costs and then subtracting fiscal benefits through gas taxes and electricity bills, electric vehicles impose $16,003 in net harms, the authors said, while gas vehicles impose $19,239. But the range is wide, with the largest electric vehicles far outpacing many internal combustion cars.
By this methodology, a large electric pickup like the Rivian imposes three times the harms of a Prius, according to one of the study's co-authors (a Stanford professor of global environmental). And yet "we are subsidizing the Rivian and not the Prius..."
<a href="http://twitter.com/home?status=Were+America's+Electric+Car+Subsidies+Worth+the+Money%3F%3A+https%3A%2F%2Fhardware.slashdot.org%2Fstory%2F24%2F10%2F14%2F0020245%2F%3Futm_source%3Dtwitter%26utm_medium%3Dtwitter" rel="nofollow"><img src="https://a.fsdn.com/sd/twitter_icon_large.png"></a>
<a href="http://www.facebook.com/sharer.php?u=https%3A%2F%2Fhardware.slashdot.org%2Fstory%2F24%2F10%2F14%2F0020245%2Fwere-americas-electric-car-subsidies-worth-the-money%3Futm_source%3Dslashdot%26utm_medium%3Dfacebook" rel="nofollow"><img src="https://a.fsdn.com/sd/facebook_icon_large.png"></a>https://hardware.slashdot.org/story/24/10/14/0020245/were-americas-electric-car-subsidies-worth-the-money?utm_source=rss1.0moreanon&utm_medium=feed
at Slashdot.
https://hardware.slashdot.org/story/24/10/14/0020245/were-americas-electric-car-subsidies-worth-the-money?utm_source=rss1.0mainlinkanon&utm_medium=feed
Can the UK Increase Green Energy with 'Zonal Energy Pricing'?
To avoid overloading local electric grids, Britain's most productive windfarm "is paid to turn off," reports the Guardian — and across the industry these so-called "constraint payments" amount to billions every year.
"Government officials are hoping to correct the clear inefficiencies in the market by overhauling the market itself."
Greg Jackson, the founder of Octopus Energy, told the Guardian: "It's grotesque that energy costs are rising again this winter, whilst we literally pay windfarms these extortionate prices not to generate. Locational pricing would instead mean that local people got cheap power when it's windy. Scotland would have the cheapest power in Europe, instead of among the most expensive, and every region would be cheaper than today. Companies would invest in infrastructure where we need it — not where they get the highest subsidies."
The changes could catalyse an economic osmosis of high energy users — such as datacentres and factories — into areas of the country with low energy prices, creating new job opportunities beyond the south-east. It could also spur the development of new energy projects — particularly rooftop solar — across buildings in urban areas where energy demand is high. This rebalancing of the energy market could save the UK nearly £49bn in accumulated network costs by 2040, according to a study commissioned by the energy regulator from FTI Consulting.
But others fear the changes could come at a deeper cost to Britain's climate goals — and bill payers too. The clean energy companies preparing to spend billions on building new wind and solar farms are concerned that a redrawing of the market boundaries could radically change the economics of new renewable energy projects — which would ultimately raise the costs, which would be passed on to consumers, or see the projects scrapped altogether... With stiff competition in the international markets for investment in clean energy, Renewable UK [the industry's trade group] fears that companies and their investors will simply choose to build new clean energy projects elsewhere.
"The debate has driven deep rifts across the industry," the article concludes, "between modernisers who believe the new price signals would give rise to a new, rational market and those who fear the changes risk unravelling Britain's low-carbon agenda...
"The government is expected to make a decision on how to proceed in the coming months, but the fierce debate between warring factions of the energy industry is likely to continue for far longer."
Thanks to long-time Slashdot reader AmiMoJo for sharing the news.
<a href="http://twitter.com/home?status=Can+the+UK+Increase+Green+Energy+with+'Zonal+Energy+Pricing'%3F%3A+https%3A%2F%2Fnews.slashdot.org%2Fstory%2F24%2F10%2F13%2F2323235%2F%3Futm_source%3Dtwitter%26utm_medium%3Dtwitter" rel="nofollow"><img src="https://a.fsdn.com/sd/twitter_icon_large.png"></a>
<a href="http://www.facebook.com/sharer.php?u=https%3A%2F%2Fnews.slashdot.org%2Fstory%2F24%2F10%2F13%2F2323235%2Fcan-the-uk-increase-green-energy-with-zonal-energy-pricing%3Futm_source%3Dslashdot%26utm_medium%3Dfacebook" rel="nofollow"><img src="https://a.fsdn.com/sd/facebook_icon_large.png"></a>https://news.slashdot.org/story/24/10/13/2323235/can-the-uk-increase-green-energy-with-zonal-energy-pricing?utm_source=rss1.0moreanon&utm_medium=feed
at Slashdot.
https://news.slashdot.org/story/24/10/13/2323235/can-the-uk-increase-green-energy-with-zonal-energy-pricing?utm_source=rss1.0mainlinkanon&utm_medium=feed
Oddbean new post about login | logout
Notes by Slashdot (RSS Feed) | export
How WatchTowr Explored the Complexity of Vulnerability in a Secure Firewall Appliance Cybersecurity startup Watchtowr "was founded by hacker-turned-entrepreneur Benjamin Harris," according to a recent press release touting their Fortune 500 customers and $29 million investments from venture capital firms. ("If there's a way to compromise your organization, watchTowr will find it," Harris says in the announcement.) This week they shared their own research on a Fortinet FortiGate SSLVPN appliance vulnerability (discovered in February by Gwendal Guégniaud of the Fortinet Product Security team — presumably in a static analysis for format string vulnerabilities). "It affected (before patching) all currently-maintained branches, and recently was highlighted by CISA as being exploited-in-the-wild... It's a Format String vulnerability [that] quickly leads to Remote Code Execution via one of many well-studied mechanisms, which we won't reproduce here..." "Tl;dr SSLVPN appliances are still sUpEr sEcurE," their post begains — but the details are interesting. When trying to test an exploit, Watchtowr discovered instead that FortiGate always closed the connection early, thanks to an exploit mitigation in glibc "intended to hinder clean exploitation of exactly this vulnerability class." Watchtowr hoped to "use this to very easily check if a device is patched — we can simply send a %n, and if the connection aborts, the device is vulnerable. If the connection does not abort, then we know the device has been patched... " But then they discovered "Fortinet added some kind of certificate validation logic in the 7.4 series, meaning that we can't even connect to it (let alone send our payload) without being explicitly permitted by a device administrator." We also checked the 7.0 branch, and here we found things even more interesting, as an unpatched instance would allow us to connect with a self-signed certificate, while a patched machine requires a certificate signed by a configured CA. We did some reversing and determined that the certificate must be explicitly configured by the administrator of the device, which limits exploitation of these machines to the managing FortiManager instance (which already has superuser permissions on the device) or the other component of a high-availability pair. It is not sufficient to present a certificate signed by a public CA, for example... Fortinet's advice here is simply to update, which is always sound advice, but doesn't really communicate the nuance of this vulnerability... Assuming an organisation is unable to apply the supplied workaround, the urgency of upgrade is largely dictated by the willingness of the target to accept a self-signed certificate. Targets that will do so are open to attack by any host that can access them, while those devices that require a certificate signed by a trusted root are rendered unexploitable in all but the narrowest of cases (because the TLS/SSL ecosystem is just so solid, as we recently demonstrated)... While it's always a good idea to update to the latest version, the life of a sysadmin is filled with cost-to-benefit analysis, juggling the needs of users with their best interests.... [I]t is somewhat troubling when third parties need to reverse patches to uncover such details. Thanks to Slashdot reader Mirnotoriety for sharing the article. <a href="http://twitter.com/home?status=How+WatchTowr+Explored+the+Complexity+of+Vulnerability+in+a+Secure+Firewall+Appliance%3A+https%3A%2F%2Fit.slashdot.org%2Fstory%2F24%2F10%2F20%2F1955241%2F%3Futm_source%3Dtwitter%26utm_medium%3Dtwitter" rel="nofollow"><img src="https://a.fsdn.com/sd/twitter_icon_large.png"></a> <a href="http://www.facebook.com/sharer.php?u=https%3A%2F%2Fit.slashdot.org%2Fstory%2F24%2F10%2F20%2F1955241%2Fhow-watchtowr-explored-the-complexity-of-vulnerability-in-a-secure-firewall-appliance%3Futm_source%3Dslashdot%26utm_medium%3Dfacebook" rel="nofollow"><img src="https://a.fsdn.com/sd/facebook_icon_large.png"></a> https://it.slashdot.org/story/24/10/20/1955241/how-watchtowr-explored-the-complexity-of-vulnerability-in-a-secure-firewall-appliance?utm_source=rss1.0moreanon&utm_medium=feed at Slashdot. https://it.slashdot.org/story/24/10/20/1955241/how-watchtowr-explored-the-complexity-of-vulnerability-in-a-secure-firewall-appliance?utm_source=rss1.0mainlinkanon&utm_medium=feed