×
Television

TV Networks Want To Yank Nielsen Accreditation (variety.com) 6

The nation's big TV companies are calling for a new yardstick. From a report: A trade organization representing Disney, ViacomCBS, NBCUniversal, Fox Corp. and other media giants is calling for the organization that signs off on Nielsen's methodology for measuring TV viewership to yank accreditation, an aggressive maneuver in an era when media outlets and the advertisers who support them are scrambling to figure out how to count viewer eyeballs across an increasingly unwieldy array of new entertainment venues, digital behaviors and screens. The trade group, the VAB, on Wednesday sent a ten-page letter to the Media Rating Council urging the group to pull its backing of Nielsen's ratings, citing Nielsen's diminished ability to count viewership during the coronavirus pandemic. "Nielsen's COVID-period conduct as a ratings service violated at least five minimum standards," the VAB said in its letter, "with the damage done to their largest subscriber clients still creating material negative impact into July 2021."
The Internet

Banks, Brokerages, PSN, the Steam Store, and More Are Down in Massive Internet Outage (theverge.com) 23

Many websites -- including banking pages, brokerages, and gaming services -- have been affected by what looks to be a major internet outage. From a report: As website owners and companies that run services that provide the backbone of the web scramble to solve the issue, consumers have been left unable to access services like Ally Bank, Fidelity, Sony's PlayStation Network, Airbnb, and more. Several airline sites are also having issues: Delta, British Airways, and Southwest's sites are all having major issues. At the moment, it's unclear what's causing the outage, though DownDetector reports that both AWS and Akamai, a pair of content delivery networks that host much of the internet, are both experiencing issues. Akamai's status page reports that the company is currently investigating an issue with its DNS service. Cloudflare's CEO has chimed in to say that its service isn't to blame.
AI

AI Firm DeepMind Puts Database of the Building Blocks of Life Online (theguardian.com) 11

Last year the artificial intelligence group DeepMind cracked a mystery that has flummoxed scientists for decades: stripping bare the structure of proteins, the building blocks of life. Now, having amassed a database of nearly all human protein structures, the company is making the resource available online free for researchers to use. From a report: The key to understanding our basic biological machinery is its architecture. The chains of amino acids that comprise proteins twist and turn to make the most confounding of 3D shapes. It is this elaborate form that explains protein function; from enzymes that are crucial to metabolism to antibodies that fight infectious attacks. Despite years of onerous and expensive lab work that began in the 1950s, scientists have only decoded the structure of a fraction of human proteins.

DeepMind's AI program, AlphaFold, has predicted the structure of nearly all 20,000 proteins expressed by humans. In an independent benchmark test that compared predictions to known structures, the system was able to predict the shape of a protein to a good standard 95% of time. DeepMind, which has partnered with the European Molecular Biology Laboratory's European Bioinformatics Institute (EMBL-EBI), hopes the database will help researchers to analyse how life works at an atomic scale by unpacking the apparatus that drives some diseases, make strides in the field of personalised medicine, create more nutritious crops and develop "green enzymes" that can break down plastic.

Social Networks

How TikTok Sees Inside Your Brain (axios.com) 24

A new video investigation by the Wall Street Journal finds the key to TikTok's success in how the short-video sharing app monitors viewing times. From a report: TikTok is known for the fiendishly effective way that it selects streams of videos tailored to each user's taste. The algorithm behind this personalization is the company's prize asset -- and, like those that power Google and Facebook, it's a secret. WSJ created a batch of individualized dummy accounts to throw at TikTok and test how it homed in on each fake persona's traits. TikTok responds most sensitively to a single signal -- how long a user lingers over a video. It starts by showing new users very popular items, and sees which catch their eyes.
China

China Weighs Unprecedented Penalty for Didi After US IPO (bloomberg.com) 11

Chinese regulators are considering serious, perhaps unprecedented, penalties for Didi Global after its controversial initial public offering last month, Bloomberg News reported Thursday, citing people familiar with the matter. From a report: Regulators see the ride-hailing giant's decision to go public despite pushback from the Cyberspace Administration of China as a challenge to Beijing's authority, the people said, asking not to be named because the matter is private. Officials from the CAC, the Ministry of Public Security, the Ministry of State Security, the Ministry of Natural Resources, along with tax, transport and antitrust regulators, began an investigation on-site at the company's offices, the cyberspace watchdog said in a statement. Regulators are weighing a range of potential punishments, including a fine, suspension of certain operations or the introduction of a state-owned investor, the people said. Also possible is a forced delisting or withdrawal of Didiâ(TM)s U.S. shares, although itâ(TM)s unclear how such an option would play out.

Deliberations are at a preliminary phase and the outcomes are far from certain. Beijing is likely to impose harsher sanctions on Didi than on Alibaba Group Holding, which swallowed a record $2.8 billion fine after a months-long antitrust investigation and agreed to initiate measures to protect merchants and customers, the people said. "It's hard to guess what the penalty will be, but Iâ(TM)m sure it will be substantial," said Minxin Pei, a professor of government at Claremont McKenna College in California.

Privacy

Pegasus Spyware Seller: Blame Our Customers Not Us For Hacking (bbc.com) 81

The maker of powerful spy software allegedly used to hack the phones of innocent people says blaming the company is like "criticising a car manufacturer when a drunk driver crashes." From a report: NSO Group is facing international criticism, after reporters obtained a list of alleged potential targets for spyware, including activists, politicians and journalists. Investigations have begun as the list, of 50,000 phone numbers, contained a small number of hacked phones. Pegasus infects iPhones and Android devices, allowing operators to extract messages, photos and emails, record calls and secretly activate microphones and cameras. NSO Group has said the software is intended for use against criminals and terrorists and made available to only military, law enforcement and intelligence agencies from countries with good human-rights records. But a consortium of news organisations, led by French media outlet Forbidden Stories, has published dozens of stories based around the list, including allegations French President Emmanuel Macron's number was on it and may have been targeted.
Privacy

Judge Forces US Capitol Rioter To Unlock Laptop Seized By FBI (cnn.com) 249

An anonymous reader quotes a report from CNN: A federal judge forced a US Capitol rioter to unlock his laptop Wednesday after prosecutors argued that it likely contained footage of the January 6 insurrection from his helmet-worn camera. The judge granted the Justice Department's request to place Capitol riot defendant Guy Reffitt in front of his laptop so they could use facial recognition to unlock the device. The maneuver happened after the hearing ended and Reffitt's lawyer confirmed to CNN that the laptop was unlocked. Investigators seized the laptop and other devices earlier this year pursuant to a search warrant.

Reffitt has been in jail since his arrest in January. His case received national attention after his son spoke publicly about how Reffitt had threatened to kill family members if they turned him into the FBI. The case became an example of how former President Donald Trump's lies tore some families apart -- Reffitt's son and daughter testified against him in court or before the grand jury. He pleaded not guilty to five federal crimes, including bringing a handgun to the Capitol grounds during the insurrection and obstructing justice by allegedly threatening his family. The felony gun charge was added last month, and undercuts false claims from Trump and prominent Republican lawmakers that the rioters weren't armed and that they had "no guns whatsoever." The case raised intriguing constitutional questions about the right against self-incrimination, but Judge Dabney Friedrich agreed with prosecutors that the unlocking was within the law.
"As the court here noted, requiring a defendant to expose his face to unlock a computer can be lawful, and is not far removed from other procedures that are now routinely approved by courts, with proper justification: standing in a lineup, submitting a handwriting or voice exemplar, or submitting a blood or DNA sample," CNN senior legal analyst Elie Honig said in an email.

Honig said judges try to strike a balance "between respecting a defendant's privacy and other rights on the one hand, and enabling prosecutors to obtain potentially crucial evidence with minimal intrusion on the defendant's rights, on the other." The "potentially crucial evidence" here may include footage of the handgun that Reffitt brought to the Capitol or comments he made about his intentions that day.
Space

After Repair, Hubble Captures Images of 'Rarely Observed' Colliding Galaxies (cbsnews.com) 17

UnknowingFool shares a report from CBS News: After being down for a month due to a computer issue, Hubble was brought back up last week. NASA released images captured by Hubble over the weekend including a rare observance of two galaxies that are colliding. The other interesting image is that of a spiral galaxy with three arms, as most spiral galaxies have an even number of arms. "I'm thrilled to see that Hubble has its eye back on the universe, once again capturing the kind of images that have intrigued and inspired us for decades," NASA administrator Bill Nelson said in a statement. "This is a moment to celebrate the success of a team truly dedicated to the mission. Through their efforts, Hubble will continue its 32nd year of discovery, and we will continue to learn from the observatory's transformational vision."
Cloud

Drones Are Zapping Clouds With Electricity To Create Rain In UAE Project (usatoday.com) 38

turp182 shares a report from USA Today: [T]he UAE is now testing a new method that has drones fly into clouds to give them an electric shock to trigger rain production [...]. The project is getting renewed interest after the UAE's National Center of Meteorology recently published a series of videos on Instagram of heavy rain in parts of the country. Water gushed past trees, and cars drove on rain-soaked roads. The videos were accompanied by radar images of clouds tagged "#cloudseeding." The Independent reports recent rain is part of the drone cloud seeding project.

The UAE oversaw more than 200 cloud seeding operations in the first half of 2020, successfully creating excess rainfall, the National News reported. There have been successes in the U.S., as well as China, India, and Thailand. Long-term cloud seeding in the mountains of Nevada have increased snowpack by 10% or more each year, according to research published by the American Meteorological Society. A 10-year cloud seeding experiment in Wyoming resulted in 5-10% increases in snowpack, according to the State of Wyoming.
According to a researcher that worked on the drone initiative, "the aim of the UAE's project is to change the balance of electrical charge on the cloud droplets, causing water droplets to clump together and fall as rain when they are big enough."
Printer

16-Year-Old HP Printer-Driver Bug Impacts Millions of Windows Machines (threatpost.com) 93

An anonymous reader quotes a report from Threatpost: Researchers have released technical details on a high-severity privilege-escalation flaw in HP printer drivers (also used by Samsung and Xerox), which impacts hundreds of millions of Windows machines. If exploited, cyberattackers could bypass security products; install programs; view, change, encrypt or delete data; or create new accounts with more extensive user rights. The bug (CVE-2021-3438) has lurked in systems for 16 years, researchers at SentinelOne said, but was only uncovered this year. It carries an 8.8 out of 10 rating on the CVSS scale, making it high-severity.

According to researchers, the vulnerability exists in a function inside the driver that accepts data sent from User Mode via Input/Output Control (IOCTL); it does so without validating the size parameter. As the name suggests, IOCTL is a system call for device-specific input/output operations. "This function copies a string from the user input using 'strncpy' with a size parameter that is controlled by the user," according to SentinelOne's analysis, released on Tuesday. "Essentially, this allows attackers to overrun the buffer used by the driver." Thus, unprivileged users can elevate themselves into a SYSTEM account, allowing them to run code in kernel mode, since the vulnerable driver is locally available to anyone, according to the firm.

The printer-based attack vector is perfect for cybercriminals, according to SentinelOne, since printer drivers are essentially ubiquitous on Windows machines and are automatically loaded on every startup. "Thus, in effect, this driver gets installed and loaded without even asking or notifying the user," explained the researchers. "Whether you are configuring the printer to work wirelessly or via a USB cable, this driver gets loaded. In addition, it will be loaded by Windows on every boot. This makes the driver a perfect candidate to target since it will always be loaded on the machine even if there is no printer connected."
Affected models and associated patches can be found here and here.

"While HP is releasing a patch (a fixed driver), it should be noted that the certificate has not yet been revoked at the time of writing," according to SentinelOne. "This is not considered best practice since the vulnerable driver can still be used in bring-your-own-vulnerable-driver (BYOVD) attacks." Some Windows machines may already have the vulnerable driver without even running a dedicated installation file, since it comes with Microsoft Windows via Windows Update.
Government

'Nuclear Football' Safety Procedures To Be Reassessed (cnn.com) 245

quonset writes: Wherever the president goes, so goes the nuclear football, a 45 pound case which allows the president to to confirm his identity and authorize a nuclear strike. The Football also provides the commander in chief with a simplified menu of nuclear strike options -- allowing him to decide, for example, whether to destroy all of America's enemies in one fell swoop or to limit himself to obliterating only Moscow or Pyongyang or Beijing.

During the attempted insurrection on January 6th, video from inside the capitol showed the mob coming within 100 feet of then-Vice President Mike Pence and his military aide who was carrying a second nuclear football. Had they lost control of the case, no nuclear weapons could have been launched, but the highly classified information within the case could have been leaked, or sold, to nation states.

As a result, members of Congress asked the Pentagon to review procedures for handling and security of the nuclear football. The Department of Defense Inspector General will evaluate the policies and procedures around the Presidential Emergency Satchel, also known as the "nuclear football," in the event that it is "lost, stolen, or compromised," according to an announcement from the DoD IG's office. This would not be the first time procedures for the case have been reviewed. Jimmy Carter, who qualified as a nuclear sub commander, was aware that he would have only a few minutes to decide how to respond to a nuclear strike against the United States. Carter ordered that the war plans be drastically simplified. A former military aide to President Bill Clinton, Col. Buzz Patterson, would later describe the resulting pared-down set of choices as akin to a "Denny's breakfast menu." "It's like picking one out of Column A and two out of Column B," he told the History Channel.

Following Carter, an incident during the Reagan administration led to another review. In the chaos after the attempted assassination, the aide carrying the case was separated from Reagan and did not accompany him to the hospital. When Reagan was stripped of his clothes prior to going into surgery, the biscuit, a card every president is given, which, if needed, can personally identify the president, was found abandoned in a hospital plastic bag. Bill Clinton had his review moment when it was discovered he had lost his biscuit for months, and never told anyone.

Social Networks

Clubhouse Is Now Out of Beta and Open To Everyone (techcrunch.com) 30

Clubhouse announced Wednesday that it would end its waitlist and invite system, opening up to everyone. TechCrunch reports: Clubhouse is also introducing a real logo that will look familiar -- it's basically a slightly altered version of the waving emoji the company already used. Clubhouse will still hold onto its app portraits, introducing a new featured icon from the Atlanta music scene to ring in the changes. "The invite system has been an important part of our early history," Clubhouse founders Paul Davison and Rohan Seth wrote in a blog announcement. They note that adding users in waves and integrating new users into the app's community through Town Halls and orientation sessions helped Clubhouse grow at a healthy rate without breaking, "but we've always wanted Clubhouse to be open."

According to new data SensorTower provided to TechCrunch, Clubhouse hit its high point in February at 9.6 million global downloads, up from 2.4 million the month prior. After that, things settled down a bit before perking back up in May when TikTok went live on Android through the Google Play Store. Since May, new Android users have accounted for the lion's share of the app's downloads. In June, Clubhouse was installed 7.7 million times across both iOS and Android -- an impressive number that's definitely in conflict with the perception that the app might not have staying power.

Clubhouse's success is a double-edged sword. The app's meteoric rise came as a surprise to the team, as meteoric rises often do. The social app is still a wild success by normal metrics in a landscape completely dominated by a handful of large, entrenched platforms, but it can be tricky to maintain healthy momentum after such high highs. Opening up the app to everybody should certainly help.

The Almighty Buck

Steve Jobs' 1973 Job Application Once Again Up For Auction, In Physical and NFT Form (cnet.com) 18

A London-based entrepreneur is putting a 1973 job application filled out by Steve Jobs up for auction. "The form Jobs apparently filled out for an unspecified position at an unspecified company will be available to buy either as a purportedly authenticated physical good or in digital form, as a nonfungible token, or NFT," reports CNET. From the report: The job application's gone up for auction several times before, selling in 2017 for $18,750, in 2018 for $174,757, and just this last March for a reported $222,400. The auction's organizer, Olly Joshi, is hoping to sweeten the pot by taking bids for the physical and a new NFT version side by side. Bidding starts July 21. "The Steve Jobs hand-written 1973 job application auction aims to highlight the modern shift in perceived value -- the physical or the digital," he said in a statement. The auction will run for seven days, during which people seeking the physical version can bid through Joshi's website, which is being run off an auctioneering app called Snoofa. People hoping to snag the digital version can go to popular NFT marketplace Rarible.
Open Source

Audacity's New Owner Is In Another Fight With the Open Source Community (arstechnica.com) 34

An anonymous reader quotes a report from Ars Technica: Muse Group -- owner of the popular audio-editing app Audacity -- is in hot water with the open source community again. This time, the controversy isn't over Audacity -- it's about MuseScore, an open source application that allows musicians to create, share, and download musical scores (especially, but not only, in the form of sheet music). The MuseScore app itself is licensed GPLv3, which gives developers the right to fork its source and modify it. One such developer, Wenzheng Tang ("Xmader" on GitHub) went considerably further than modifying the app -- he also created separate apps designed to bypass MuseScore Pro subscription fees. After thoroughly reviewing the public comments made by both sides at GitHub, Ars spoke at length with Muse Group Head of Strategy Daniel Ray -- known on GitHub by the moniker "workedintheory" -- to get to the bottom of the controversy.

While Xmader did, in fact, fork MuseScore, that's not the root of the controversy. Xmader forked MuseScore in November 2020 and appears to have abandoned that fork entirely; it only has six commits total -- all trivial, and all made the same week that the fork was created. Xmader is also currently 21,710 commits behind the original MuseScore project repository. Muse Group's beef with Xmader comes from two other repositories, created specifically to bypass subscription fees. Those repositories are musescore-downloader (created November 2019) and musescore-dataset (created March 2020). Musescore-downloader describes itself succinctly: "download sheet music from musescore.com for free, no login or MuseScore Pro required." Musescore-dataset is nearly as straightforward: it declares itself "the unofficial dataset of all music sheets and users on musescore.com." In simpler terms: musescore-downloader lets you download things from musescore.com that you shouldn't be able to; musescore-dataset is those files themselves, already downloaded. For scores that are in the public domain or that users have uploaded under Creative Commons licenses, this isn't necessarily a problem. But many of the scores are only available by arrangement between the score owner and Muse Group itself -- and this has several important implications.

Just because you can access the score via the app or website doesn't mean you're free to access it anywhere, anyhow, or redistribute that score yourself. The distribution agreement between Muse Group and the rightsholder allows legitimate downloads, but only when using the site or app as intended. Those agreements do not give users carte blanche to bypass controls imposed on those downloads. Further, those downloads can often cost the distributor real money -- a free download of a score licensed to Muse Group by a commercial rightsholder (e.g., Disney) is generally not "free" to Muse Group itself. The site has to pay for the right to distribute that score -- in many cases, based on the number of downloads made. Bypassing those controls leaves Muse Group on the hook either for costs it has no way to monetize (e.g., by ads for free users) or for violating its own distribution agreements with rightsholders (by failing to properly track downloads).

Open Source

Amazon Promises Most Echo Speakers Will Support the Matter Smart Home Platform (theverge.com) 13

Today, Amaon said it will be upgrading almost every plug-in Echo smart speaker to support Matter, a cross-platform open-source standard coming later this year. This includes most Echo and Echo Dot speakers and every Echo Studio, Echo Show, Echo Plus, and Echo Flex. "In fact, the only Echo smart speakers that won't get upgraded to Matter are the first-gen Echo, first-gen Echo Dot and Echo Tap," reports The Verge. From the report: While the company doesn't provide a timeline for those upgrades, the general idea is that Matter will launch by late 2021, so it shouldn't be long until Amazon's newest and / or more popular devices receive the capability. A bigger question is whether any of them will work as Matter hubs. Google announced in May that in addition to upgrading its Nest devices to Matter, it would allow its devices that support the Thread protocol (like the Nest Wi-Fi, Nest Hub Max, and second-gen Nest Hub) to double as connection hubs for Matter, too, not simply as a voice assistant to control Matter gadgets. But while Amazon's Eero routers were early to adopt Thread, Amazon's Echo smart speakers were not.

Slashdot Top Deals