×
Communications

Portugal Effectively Bans Chinese Companies From 5G Network

Portugal has banned companies from 'high-risk' countries and jurisdictions from supplying equipment for its fifth-generation phone network, becoming the latest western nation to effectively block China's Huawei from its market. From a report: The country will prohibit the use of equipment in its 5G wireless network from suppliers based outside the European Union or from states that don't belong to the North Atlantic Treaty Organization or the Organization for Economic Co-operation and Development, according to a government statement posted online Thursday.
Facebook

Meta Offers To Limit Use of Ad Data To Address UK Competition Concerns 3

Britain's competition watchdog on Friday said social media giant Meta had offered to limit its use of other businesses' advertising data for its Facebook Marketplace service to address the regulator's competition concerns. From a report: The Competition and Markets Authority (CMA) said it was minded to accept the commitments, which include advertisers being able to opt out of allowing their data to be used to improve the Facebook Marketplace classified ads platform. CMA executive director of enforcement Michael Grenfell said: "Reducing the risk of Meta unfairly exploiting the data of businesses who advertise on its platform for its own competitive advantage could help many UK businesses who advertise there. We are now consulting on these commitments which we believe, at this stage, will address our concerns."
Security

A Popular Password Hashing Algorithm Starts Its Long Goodbye (wired.com) 7

An anonymous reader quotes a report from Wired: Bcrypt turns 25 this year, and Niels Provos, one of its coinventors, says that looking back, the algorithm has always had good energy, thanks to its open source availability and the technical characteristics that have fueled its longevity. Provos spoke to WIRED about a retrospective on the algorithm that he published this week in Usenix ;login:. Like so many digital workhorses, though, there are now more robust and secure alternatives to bcrypt, including the hashing algorithms known as scrypt and Argon2. Provos himself says that the quarter-century milestone is plenty for bcrypt and that he hopes it will lose popularity before celebrating another major birthday.

A version of bcrypt first shipped with the open source operating system OpenBSD 2.1 in June 1997. At the time, the United States still imposed stringent export limits on cryptography. But Provos, who grew up in Germany, worked on its development while he was still living and studying there. "One thing I found so surprising was how popular it became," he says. "I think in part it's probably because it was actually solving a problem that was real, but also because it was open source and not encumbered by any export restrictions. And then everybody ended up doing their own implementations in all these other languages. So these days, if you are faced with wanting to do password hashing, bcrypt is going to be available in every language that you could possibly operate in. But the other thing that I find interesting is that it's even still relevant 25 years later. That is just crazy."

Provos developed bcrypt with David Mazieres, a systems security professor at Stanford University who was studying at the Massachusetts Institute of Technology when he and Provos collaborated on bcrypt. The two met through the open source community and were working on OpenBSD. [...] Password security is always lagging, though, and both Provos and Mazieres expressed disbelief and disappointment that the state of passwords broadly has not evolved in decades. Even new schemes like passkeys are only just beginning to emerge. "Bcrypt should have been superseded already," Provos says. "It's surprising how much reliance we still have on passwords. If you had asked me 25 years ago, I would not have guessed that."

Power

Solar Power To Overtake Oil Production Investment For First Time (reuters.com) 63

According to the International Energy Agency (IEA), investment in clean energy is set to surpass spending on fossil fuels in 2023, with solar projects expected to outpace oil production for the first time. Reuters reports: Annual investment in renewable energy is up by nearly a quarter since 2021 compared to a 15% rise for fossil fuels, the Paris-based energy watchdog said in its World Energy Investment report. Around 90% of that clean energy spending comes from advanced economies and China, however, highlighting the global divide between rich and poor countries as fossil fuel investment is still double the levels needed to reach net-zero emissions by mid-century.

Around $2.8 trillion is set to be invested in energy worldwide in 2023, of which more than $1.7 trillion is expected to go to renewables, nuclear power, electric vehicles, and efficiency improvements. The rest, or around $1 trillion, will go to oil, gas and coal, demand for the last of which will reach an all-time high or six times the level needed in 2030 to reach net zero by 2050.

Current fossil fuel spending is significantly higher than what it should be to reach the goal of net zero by mid-century, the agency said. In 2023, solar power spending is due to hit more than $1 billion a day or $382 billion for the year, while investment in oil production will stand at $371 billion. Investment in new fossil fuel supply will rise by 6% in 2023 to $950 billion, the IEA added.

Medicine

Researchers Induce Hibernation In Non-Hibernating Species With Ultrasound (thedailybeast.com) 30

"Researchers have induced hibernation in a non-hibernating species (rats) with ultrasound, indicating the potential to do the same in humans with applications for medical trauma and spaceflight," writes longtime Slashdot reader Baron_Yam. The research has been published in the journal Nature Metabolism. From a report: "Ultrasound is the only available energy form that can noninvasively focus on any location within the brain with high precision and without ionizing radiation," Hong Chen, a medical ultrasound researcher at Washington University in St. Louis and co-author of the paper, told The Daily Beast in an email. "We were curious whether ultrasound could noninvasively turn on the switch to induce the torpor-like state"

Torpor is a state in which mammals reduce their metabolism and body temperature, and essentially slows down their entire system in order to conserve as much energy as possible. The authors write that the state is controlled by the central nervous system. So the idea goes that targeting the hypothalamus, which controls the nervous system, could potentially induce hibernation. It should be noted that while mice enter such a state during periods of extreme cold, rats do not. The team developed an ultrasound emitter and mounted them on the heads of mice. They then triggered 10-second pulses of ultrasound on the hypothalamus, which caused an immediate drop in the creatures' body temperature by an average of 6 degrees Fahrenheit, heart rate, and oxygen consumption. The team was also able to automate their device so it would blast the mices' brains with ultrasound whenever their body temperature rose, allowing them to safely maintain the torpor-like state for up to 24 hours. Within two hours after the experiment, the animals were able to fully recover.

The study's authors were also able to replicate the experiment in rats -- another creature that doesn't hibernate -- for up to 12 hours and found similar results. However, the rats' body temperature dropped by an average 2 to 4 degrees Fahrenheit instead of 6, which is partly due to the fact that they don't naturally hibernate. However, it does show that they can entire a torpor-like state with the right technique. Of course, further research is needed to determine whether it's effective on humans. Chen added that the team hopes to eventually move the technique to human trials. They might be able to prove that blasting ultrasound on the brain is a great way to get us to rest like the bears do.

Security

Unearthed: CosmicEnergy, Malware For Causing Kremlin-Style Power Disruptions (arstechnica.com) 34

An anonymous reader quotes a report from Ars Technica: Researchers have uncovered malware designed to disrupt electric power transmission and may have been used by the Russian government in training exercises for creating or responding to cyberattacks on electric grids. Known as CosmicEnergy, the malware has capabilities that are comparable to those found in malware known as Industroyer and Industroyer2, both of which have been widely attributed by researchers to Sandworm, the name of one of the Kremlin's most skilled and cutthroat hacking groups.

Researchers from Mandiant, the security firm that found CosmicEnergy, wrote: "COSMICENERGY is the latest example of specialized OT malware capable of causing cyber physical impacts, which are rarely discovered or disclosed. What makes COSMICENERGY unique is that based on our analysis, a contractor may have developed it as a red teaming tool for simulated power disruption exercises hosted by Rostelecom-Solar, a Russian cyber security company. Analysis into the malware and its functionality reveals that its capabilities are comparable to those employed in previous incidents and malware, such as INDUSTROYER and INDUSTROYER.V2, which were both malware variants deployed in the past to impact electricity transmission and distribution via IEC-104. The discovery of COSMICENERGY illustrates that the barriers to entry for developing offensive OT capabilities are lowering as actors leverage knowledge from prior attacks to develop new malware. Given that threat actors use red team tools and public exploitation frameworks for targeted threat activity in the wild, we believe COSMICENERGY poses a plausible threat to affected electric grid assets. OT asset owners leveraging IEC-104 compliant devices should take action to preempt potential in the wild deployment of COSMICENERGY."

Right now, the link is circumstantial and mainly limited to a comment found in the code suggesting it works with software designed for training exercises sponsored by the Kremlin. Consistent with the theory that CosmicEnergy is used in so-called Red Team exercises that simulate hostile hacks, the malware lacks the ability to burrow into a network to obtain environment information that would be necessary to execute an attack. The malware includes hardcoded information object addresses typically associated with power line switches or circuit breakers, but those mappings would have to be customized for a specific attack since they differ from manufacturer to manufacturer. "For this reason, the particular actions intended by the actor are unclear without further knowledge about the targeted assets," Mandiant researchers wrote.

Transportation

Tesla Model Y Is Now the World's Best-Selling Car, First EV To Do So (electrek.co) 105

The Tesla Model Y has become the world's best-selling car in the first quarter of 2023, according to industry analyst JATO Dynamics, making it the first time an electric vehicle (EV) has achieved this milestone. Electrek reports: The Model Y has dethroned the Toyota Corolla as the world's best-selling car in Q1 and looks like it may well maintain this position for the full year. JATO Dynamics analyst Felipe Munoz compiled the data for Motor1, showing that the Model Y had 267,200 sales in Q1, according to data from 53 markets and projections/estimates for the rest of the world. This put it ahead of the Corolla at 256,400 sales for the same period and significantly ahead of the other top-five cars, the Hilux, RAV4, and Camry, all from Toyota.

While we don't know if this placing will continue for the rest of the year, Model Y sales have been continually growing, whereas Corolla sales are trending slightly downward. One model is new and based on new technology, and the other is an old standard -- though the current iteration of both models came out in a similar time frame, 2018 for the Corolla and 2019 for Model Y. And given Tesla's massive price cuts this year on Model Y, this will surely make the car accessible to more people compared to 2022.

Indeed, Model Y sales are already growing compared to last year. In 2022, Tesla had two of the top ten cars in the world, with Model Y achieving 759k sales. That gives it an average quarterly run rate of 189k, and this year's Q1 number is a significant increase from that. If Model Y continues at this rate or sales continue to grow at all for the rest of this year, it will exit 2023 with over 1 million sales. The only other vehicle in the world to sell 1 million units last year was the Toyota Corolla, at 1.12 million. So it might be close at year's end, but we think it's likely that Model Y will maintain its position.
"The achievement is even more impressive given Model Y's pricing and availability," adds Electrek. "While the Model Y does have broad availability in the world's largest markets, the Corolla is available everywhere. And despite recent price cuts, the Model Y at ~$40k (after credits) is still significantly more expensive than a base-model Corolla at $21k."

In other EV news, Ford and Tesla announced a partnership that will allow Ford owners access to more than 12,000 Tesla Superchargers across the U.S. and Canada starting early next year. "And, Ford's next-generation of EVs -- expected by mid-decade -- will include Tesla's charging plug, allowing owners of Ford vehicles to charge at Tesla Superchargers without an adapter, making Ford among the first automakers to explicitly tie into the network," reports CNBC.
AI

JPMorgan Developing ChatGPT-Like AI Service For Investment Advice (cnbc.com) 16

JPMorgan Chase has applied to trademark a product called IndexGPT, indicating its development of a ChatGPT-like software service that uses artificial intelligence (AI) to select investments for customers. CNBC reports: IndexGPT will tap "cloud computing software using artificial intelligence" for "analyzing and selecting securities tailored to customer needs," according to the filing. [...] But JPMorgan may be the first financial incumbent aiming to release a GPT-like product directly to its customers, according to Washington D.C.-based trademark attorney Josh Gerben.

"This is a real indication they might have a potential product to launch in the near future," Gerben said. "Companies like JPMorgan don't just file trademarks for the fun of it," he said. The filing includes "a sworn statement from a corporate officer essentially saying, 'Yes, we plan on using this trademark.'" JPMorgan must launch IndexGPT within about three years of approval to secure the trademark, according to the lawyer. Trademarks typically take nearly a year to be approved, thanks to backlogs at the U.S. Patent and Trademark Office, he said. The applications are typically vaguely written to give companies the broadest possible protections, Gerben said.

But JPMorgan's filing does specify that IndexGPT uses the same flavor of A.I. popularized by ChatGPT; the bank plans to use A.I. powered by "Generative Pre-trained Transformer (GPT) models." "It's an A.I. program to select financial securities," Gerben said. "This sounds to me like they're trying to put my financial advisor out of business."

Supercomputing

IBM Wants To Build a 100,000-Qubit Quantum Computer (technologyreview.com) 23

IBM has announced its goal to build a 100,000-qubit quantum computing machine within the next 10 years in collaboration with the University of Tokyo and the University of Chicago. MIT Technology Review reports: Late last year, IBM took the record for the largest quantum computing system with a processor that contained 433 quantum bits, or qubits, the fundamental building blocks of quantum information processing. Now, the company has set its sights on a much bigger target: a 100,000-qubit machine that it aims to build within 10 years. IBM made the announcement on May 22 at the G7 summit in Hiroshima, Japan. The company will partner with the University of Tokyo and the University of Chicago in a $100 million dollar initiative to push quantum computing into the realm of full-scale operation, where the technology could potentially tackle pressing problems that no standard supercomputer can solve.

Or at least it can't solve them alone. The idea is that the 100,000 qubits will work alongside the best "classical" supercomputers to achieve new breakthroughs in drug discovery, fertilizer production, battery performance, and a host of other applications. "I call this quantum-centric supercomputing," IBM's VP of quantum, Jay Gambetta, told MIT Technology Review in an in-person interview in London last week. [...] IBM has already done proof-of-principle experiments (PDF) showing that integrated circuits based on "complementary metal oxide semiconductor" (CMOS) technology can be installed next to the cold qubits to control them with just tens of milliwatts. Beyond that, he admits, the technology required for quantum-centric supercomputing does not yet exist: that is why academic research is a vital part of the project.

The qubits will exist on a type of modular chip that is only just beginning to take shape in IBM labs. Modularity, essential when it will be impossible to put enough qubits on a single chip, requires interconnects that transfer quantum information between modules. IBM's "Kookaburra," a 1,386-qubit multichip processor with a quantum communication link, is under development and slated for release in 2025. Other necessary innovations are where the universities come in. Researchers at Tokyo and Chicago have already made significant strides in areas such as components and communication innovations that could be vital parts of the final product, Gambetta says. He thinks there will likely be many more industry-academic collaborations to come over the next decade. "We have to help the universities do what they do best," he says.

The Internet

Captcha Is Asking Users To Identify Objects That Don't Exist (vice.com) 54

An anonymous reader quotes a report from Motherboard: People trying to use Discord are being asked to identify an object that does not exist. The object in question is a "Yoko," which appears to be a kind of mix between a snail and a yoyo. Multiple people have reported seeing a prompt to identify a Yoko when asked to solve a simple captcha prompt while trying to use Discord. The picture of the Yoko, as well as the other images in the captcha, appear generated by AI. Another user complained on Twitter that they'd failed to pass a captcha to log into Discord when it asked him to identify images of a puzzle cube. Again, the pictures appeared to be AI generated.

Discord's captchas are run by a company called hCaptcha. "The technology that generates these prompts is proprietary to our third-party partner and Discord does not directly determine what is presented to users," Discord told Motherboard. "While most hCaptcha interactions do not result in a visual challenge, many variants are used at any given time," a spokesperson for hCaptcha told Motherboard. "This particular question was a brief test seen by a small number of people, but the sheer scale of hCaptcha (hundreds of millions of users) means that when even a few folks are surprised by a challenge this often produces some tweets."

The issue with hCaptcha's strange AI generated prompts highlights two issues with machine learning systems. The first is that the AI systems require an enormous amount of human input to not be terrible. Typically image labeling is outsourced to foreign workers who do it for pennies on the dollar. The other is the issue of data drift. The longer these machine learning systems run, the more input they require. Inevitably, they begin to use data they've generated to train themselves. Systems that train on themselves long enough become AI Hapsburgs, churning out requests to identify incomprehensible objects like "Yokos."

Intel

Intel Mulls Cutting Ties To 16 and 32-Bit Support (theregister.com) 148

Intel has proposed a potential simplification of the x86 architecture by creating a new x86S architecture that removes certain old features, such as 16-bit and some elements of 32-bit support. A technical note on Intel's developer blog proposes the change, with a 46-page white paper (PDF) providing more details. The Register reports: The result would be a family of processors which boot straight into x86-64 mode. That would mean bypassing the traditional series of transitions -- 16-bit real mode to 32-bit protected mode to 64-bit long mode; or 16-bit mode straight into 64-bit mode -- that chips are obliged to go through as the system starts up. [...] Some of the changes are quite dramatic, although the impact upon how most people use computers today would probably be invisible -- which is undoubtedly the idea.
Movies

MoviePass Is Back (theverge.com) 30

MoviePass is back thanks to MoviePass co-founder Stacy Spikes, who was fired from the company in 2018 for questioning the sustainability of its business model. "Under the company's new points-based system, you can pay $10 per month to watch one to three movies at any of the 4,000 participating theaters throughout the US," reports The Verge. From the report: In addition to the $10 / month Basic plan, MoviePass offers three more expensive subscription options: a $20 / month Standard plan for three to seven movies per month, a $30 / month Premium plan for five to 11 movies per month, and a $40 / month Pro for up to 30 movies per month. There's a separate, more expensive subscription for customers in Southern California and the New York metro area. The reason why each tier includes a range of movies you can watch has to do with the way MoviePass' new credits system works. Every tier offers a different number of credits that you can redeem on movies each month, with Basic having the least number of credits and the Pro plan having the most.

According to MoviePass, a film's credit value can fluctuate depending on a number of factors, including the time of day and day of the week you want to watch it. Based on tweets from customers who tested the service, credit costs have changed without warning and can vary significantly across showings. If you don't use up all your credits, MoviePass says it will roll them over to the next month, allowing you to have a maximum of two months' worth of unused credits in your account to use at a later date. Once you sign up for the service, you'll receive a MoviePass card within 10 to 15 business days that you'll need to use at supported theaters.
The sustainability of MoviePass started to crumble in 2017 when it began offering customers unlimited movie-watching for just $9.95 per month. The seemingly too-good-to-be-true pricing ultimately resulted in the company's bankruptcy two years later.

Additionally, the Securities and Exchange Commission (SEC) filed a lawsuit against MoviePass, alleging that the company had misled investors about the viability of its business model.
United States

Supreme Court Limits EPA's Authority Under the Clean Water Act (npr.org) 150

An anonymous reader quotes a report from NPR: The U.S. Supreme Court Court on Thursday significantly curtailed the power of the Environmental Protection Agency to regulate the nation's wetlands and waterways. It was the court's second decision in a year limiting the ability of the agency to enact anti-pollution regulations and combat climate change. The challenge to the regulations was brought by Michael and Chantell Sackett, who bought property to build their dream house about 500 feet away from Idaho's Scenic Priest Lake, a 19-mile stretch of clear water that is fed by mountain streams and bordered by state and national parkland. Three days after the Sacketts started excavating their property, the EPA stopped work on the project because the couple had failed to get a permit for disturbing the wetlands on their land. Now a conservative Supreme Court majority has used the Sackett's case to roll back longstanding rules adopted to carry out the 51-year-old Clean Water Act. While the nine justices agreed that the Sacketts should prevail, they divided 5-to-4 as to how far to go in limiting the EPA's authority.

Writing for the court majority (PDF), Justice Samuel Alito said that the navigable waters of the United States regulated by the EPA under the statute do not include many previously regulated wetlands. Rather, he said, the CWA extends to only streams, oceans, rivers and lakes, and those wetlands with a "continuous surface connection to those bodies." Justice Brett Kavanaugh, joined by the court's three liberal members, disputed Alito's reading of the statute, noting that since 1977 when the CWA was amended to include adjacent wetlands, eight consecutive presidential administrations, Republican and Democratic, have interpreted the law to cover wetlands that the court has now excluded. Kavanaugh said that by narrowing the act to cover only adjoining wetlands, the court's new test will have quote "significant repercussions for water quality and flood control throughout the United States." In addition to joining Kavanaugh's opinion, the court's liberals, signed on to a separate opinion by Justice Elena Kagan. Pointing to the air and water pollution cases, she accused the majority of appointing itself instead of Congress as the national policymaker on the environment.
President Biden, in a statement, called the decision "disappointing." It "upends the legal framework that has protected America's waters for decades," he said. "It also defies the science that confirms the critical role of wetlands in safeguarding our nation's streams, rivers, and lakes from chemicals and pollutants that harm the health and wellbeing of children, families, and communities."

"I don't think its an overstatement to say its catastrophic for the Clean Water act," said Jim Murphy of the National Wildlife Federation. Wetlands play an "enormous role in protecting the nation's water," he said. "They're really the kidneys of water systems and they're also the sponges. They absorb a lot of water on the landscape. So they're very important water features and they're very important to the quality of the water that we drink, swim, fish, boat and recreate in."
Technology

Paradigm Broadening Crypto-only Focus To Areas Including AI (theblock.co) 7

Crypto venture capital firm Paradigm, one of most established and active players in the space, is going beyond just blockchain and highlighting a focus on a broader array of "frontier tech" that includes artificial intelligence, two sources with knowledge of the matter told The Block. From a report: The change is subtlety visible on the firm's website, with the company now calling itself a "research-driven technology investment firm" as opposed to one that specifically invested in âoedisruptive crypto/Web3 companies and protocols.â The revision appears to have gone live around May 3, according to the Wayback Machine that's operated by the Internet Archive. A line that said "we believe crypto will define the next few decades" was removed from the home page, which now makes no mention of web3 or blockchains. One source who was not authorized to speak publicly said the change didn't mean the company was shying away from crypto but rather highlighting its reach into adjacent areas.
Businesses

Nvidia Short Sellers Lose $2.3 Billion in One Day as Stock Soars (bloomberg.com) 84

Traders betting against Nvidia suffered massive losses as the chipmaker's stock surged to a record high after it forecasts sales that far surpassed the average analyst estimate. From a report: Short sellers are facing $2.3 billion in paper losses on Thursday alone amid the tech giant's 27% intraday jump, data from S3 Partners LLC show. That's pushed mark-to-market losses for the contrarian traders to $8.1 billion in 2023 as Nvidia's price has more than doubled this year.

Slashdot Top Deals