True 5G wireless data, with its ultrafast speeds and enhanced security protections, has been slow to roll out around the world. As the mobile technology proliferates -- combining expanded speed and bandwidth with low-latency connections -- one of its most touted features is starting to come in to focus. But the upgrade comes with its own raft of potential security exposures. From a report: A massive new population of 5G-capable devices, from smart-city sensors to agriculture robots and beyond, are gaining the ability to connect to the internet in places where Wi-Fi isn't practical or available. Individuals may even elect to trade their fiber-optic internet connection for a home 5G receiver. But the interfaces that carriers have set up to manage internet-of-things data are riddled with security vulnerabilities, according to research that will be presented on Wednesday at the Black Hat security conference in Las Vegas. And those vulnerabilities could dog the industry long-term. After years of examining potential security and privacy issues in mobile-data radio frequency standards, Technical University of Berlin researcher Altaf Shaik says he was curious to investigate the application programming interfaces (APIs) that carriers are offering to make IoT data accessible to developers.

These are the conduits that applications can use to pull, say, real-time bus-tracking data or information about stock in a warehouse. Such APIs are ubiquitous in web services, but Shaik points out that they haven't been widely used in core telecommunications offerings. Looking at the 5G IoT APIs of 10 mobile carriers around the world, Shaik and his colleague Shinjo Park found common, but serious API vulnerabilities in all of them, and some could be exploited to gain authorized access to data or even direct access to IoT devices on the network. "There's a big knowledge gap. This is the beginning of a new type of attack in telecom," Shaik told WIRED ahead of his presentation. "There's a whole platform where you get access to the APIs, there's documentation, everything, and it's called something like 'IoT service platform.' Every operator in every country is going to be selling them if they're not already, and there are virtual operators and subcontracts, too, so there will be a ton of companies offering this kind of platform."

Mark Cuban, the billionaire Dallas Mavericks owner and avid crypto enthusiast, is not sold on the metaverse. "The worst part is that people are buying real estate in these places. That's just the dumbest shit ever," he told the crypto-themed YouTube channel Altcoin Daily this past weekend. From a report: Cuban's comments come as the hype surrounding the metaverse -- a term that loosely describes an emerging virtual world where people can hang out, play, and shop -- seems to be cooling. Last November, Facebook changed its name to Meta, spurring a flurry of excitement about the potential of the metaverse, which fueled a land grab for digital plots in so-called metaverse platforms created by the likes of the Sandbox and Decentraland.

These platforms enable investors to buy land as an NFT, which can be developed with virtual buildings or experiences or resold on secondary markets like NFT exchange OpenSea. Companies like Warner Music Group, Atari, Samsung, and Adidas have all bought digital land -- a move that Cuban, based on his latest comments, appears unlikely to follow. Cuban also isn't buying the central claim of metaverse land speculators that scarcity will make these digital plots valuable. "It's not even as good as a URL or an ENS [Ethereum naming service], because there's unlimited volumes that you can create," he said during the YouTube interview. Despite being an investor in Yuga Labs, the owner of popular NFT collections Bored Ape Yacht Club and CryptoPunks, Cuban said he was not a fan of the company's land sale, which raised about $317 million for its metaverse platform Otherside in April. "I still thought it was dumb to do the real estate. That was great money for them, you know, but that wasn't based off a utility," he said.

Jared Mauch, the Michigan man who built a fiber-to-the-home Internet provider because he couldn't get good broadband service from AT&T or Comcast, is expanding with the help of $2.6 million in government money. From a report: When we wrote about Mauch in January 2021, he was providing service to about 30 rural homes including his own with his ISP, Washtenaw Fiber Properties. Mauch now has about 70 customers and will extend his network to nearly 600 more properties with money from the American Rescue Plan's Coronavirus State and Local Fiscal Recovery Funds, he told Ars in a phone interview in mid-July.

The US government allocated Washtenaw County $71 million for a variety of infrastructure projects, and the county devoted a portion to broadband. The county conducted a broadband study before the pandemic to identify unserved locations, Mauch said. When the federal government money became available, the county issued a request for proposals (RFP) seeking contractors to wire up addresses "that were known to be unserved or underserved based on the existing survey," he said. "They had this gap-filling RFP, and in my own wild stupidity or brilliance, I'm not sure which yet, I bid on the whole project [in my area] and managed to win through that competitive bidding process," he said. Mauch's ISP is one of four selected by Washtenaw County to wire up different areas.

Mauch's network currently has about 14 miles of fiber, and he'll build another 38 miles to complete the government-funded project, he said. In this sparsely populated rural area, "I have at least two homes where I have to build a half-mile to get to one house," Mauch said, noting that it will cost "over $30,000 for each of those homes to get served." The contract between Mauch and the county was signed in May 2022 and requires him to extend his network to an estimated 417 addresses in Freedom, Lima, Lodi, and Scio townships. Mauch lives in Scio, which is next to Ann Arbor. Although the contract just requires service to those 417 locations, Mauch explained that his new fiber routes would pass 596 potential customers. "I'm building past some addresses that are covered by other [grant] programs, but I'll very likely be the first mover in building in those areas," he said. Under the contract terms, Mauch will provide 100Mbps symmetrical Internet with unlimited data for $55 a month and 1Gbps with unlimited data for $79 a month.

DNSFilter, a Washington, D.C.-based provider of DNS-based web content filtering and threat protection, has announced it's acquiring Guardian, a privacy-protecting firewall for iOS. Financial terms of the deal were not disclosed. From a report: Guardian was founded in 2013 by Will Strafach, a security researcher and former iPhone jailbreaker who in 2017 discovered that AccuWeather was secretly sending precise location data to a third-party company without a user's permission. The company's "smart firewall" iPhone app blocks apps from sharing users' personal information with third-parties, such as IP addresses and location data, by funneling data through an encrypted virtual private network (VPN). The startup, which claims to have so far blocked more than 5 billion data trackers and 1 billion location trackers, recently joined forces with Brave to integrate its firewall and VPN functionality into its eponymous non-tracking browser.

According to Bloomberg, the Department of Justice is preparing to sue Google as soon as next month, "capping years of work to build a case that the Alphabet unit illegally dominates the digital advertising market." From the report: Lawyers with the DOJ's antitrust division are questioning publishers in another round of interviews to refresh facts and glean additional details for the complaint [...]. Some of the interviews have already taken place and others are scheduled in the coming weeks [...]. They build on previous interrogations conducted during an earlier stage of the long-running investigation [...].

An ad tech complaint, which Bloomberg had reported was in the works last year, would mark the DOJ's second case against Google following the government's 2020 lawsuit alleging the tech titan dominates the online search market in violation of antitrust laws. Still undecided is whether prosecutors will file the case in federal court in Washington, where the search case is pending, or in New York, where state attorneys general have their own antitrust case related to Google's ad tech business [...].

In addition to NVIDIA being busy working on transitioning to an open-source GPU kernel driver, yesterday they made a rare public open-source documentation contribution... NVIDIA quietly published 73k lines worth of header files to document the 3D classes for their Fermi through current-generation Ampere GPUs. Phoronix's Michael Larabel reports: To NVIDIA's Open-GPU-Docs portal they have posted the 73k lines worth of 3D class header files covering RTX 30 "Ampere" GPUs back through the decade-old GeForce 400/500 "Fermi" graphics processors. These header files define the classes used to program the 3D engine of the GPU, the texture header and texture sampler layout are documented, and other 3D-related programming bits. Having all of these header files will be useful to the open-source Nouveau driver developers to save on their reverse-engineering and guessing/uncertainty over certain bits.

NVIDIA's Open GPU Kernel Driver is for only GeForce RTX 20 "Turing" series and newer, so it's great seeing NVIDIA now posting this documentation going back to Fermi which is squarely to help the open-source community / Nouveau. [...] The timing of NVIDIA opening these 3D classes back to Fermi is interesting and potentially tied to SIGGRAPH 2022 happening this week. Those wanting to grab NVIDIA's latest open-source GPU documentation can find it via this GitHub repository.

Burger King has just emailed thousands of customers with a blank order email receipt. The Verge reports: The blank emails started appearing at around 12:15AM ET, leaving Burger King customers confused whether the company has been breached by a hungry hacker attempting a midnight feast, or if the emails are simply a giant whopper of a mistake. Twitter users were quick to turn to the social network in a state of confusion over the blank emails, with some even receiving two Burger King emails in an apparent double whopper of a mistake. The order emails are totally blank, and were sent by Burger King's main promotional marketing email address.

After this story was published, an email from "BK PR Team" responded to our request for more information, claiming the issue was "the result of an internal processing error." We have asked for a specific individual to attribute the information to.

An anonymous reader quotes a report from Ars Technica: Microsoft has published a knowledge base article acknowledging a problem with encryption acceleration in the newest versions of Windows that could result in data corruption. The company recommends installing the June 2022 security updates for Windows 11 and Windows Server 2022 "to prevent further damage," though there are no suggested solutions for anyone who has already lost data because of the bug.

The problems only affect relatively recent PCs and servers that support Vector Advanced Encryption Standard (VAES) instructions for accelerating cryptographic operations. Microsoft says affected systems use AES-XTS or AES-GCM instructions "on new hardware." Part of the AVX-512 instruction set, VAES instructions are supported by Intel's Ice Lake, Tiger Lake, Rocket Lake, and Alder Lake architectures -- these power some 10th-generation Core CPUs for laptops, as well as all 11th- and 12th-gen Core CPUs. AMD's upcoming Zen 4 architecture also supports VAES, though by the time these chips are released in the fall, the patches will have had plenty of time to proliferate. Microsoft says that the problem was caused when it added "new code paths" to support the updated encryption instructions in SymCrypt, Windows' cryptographic function library. These code paths were added in the initial release of Windows 11 and Windows Server 2022, so the problem shouldn't affect older versions like Windows 10 or Windows Server 2019.

The initial fix for the problem, provided in Windows' June 2022 security update package (Windows 11 build 22000.778), will prevent further damage at the cost of reduced performance, suggesting that the initial fix was to disable encryption acceleration on these processors entirely. Using Bitlocker-encrypted disks or the Transport Layer Security (TLS) protocol or accessing encrypted storage on servers will all be slower with the first patch installed, though installing the July 2022 security updates (Windows 11 build 22000.795) should restore performance to its previous level.

Ford Motor on Tuesday became the latest automaker to raise the price of electric vehicles when it significantly increased prices of its popular F-150 Lightning because of rising materials costs. From a report: The company began making the Lightning in April and had sold more than 4,400 through the end of July. Ford has taken reservations for more than 200,000, and the higher prices will go into effect for the 2023 model year. Ford said it was increasing the starting prices of the truck by $6,000 to $8,500 for newly ordered vehicles. After the increase, the truck will cost from $46,974 for a base model to $96,874 for a Platinum version with an extended-range battery pack.

The increases do not affect customers who have already placed orders and are waiting for their trucks. Reservations give customers a spot in line to place an order to buy a truck. Ford stopped taking orders because of strong demand but said it would resume doing so on Thursday, when the new prices go into effect. "We've announced pricing ahead of reopening order banks so our reservation holders can make an informed decision around ordering a Lightning," said Marin Gjaja, chief customer officer for Ford's electric vehicle division, known as Model e, in a statement.

Google is kicking off a new publicity campaign today to pressure Apple into adopting RCS, the cross-platform messaging protocol that's meant to be a successor to the aging SMS and MMS standards. From a report: The search giant has a new "Get The Message" website that lays out a familiar set of arguments for why Apple should support the standard, revolving around smoother messaging between iPhone and Android devices. Naturally, there's also a #GetTheMessage hashtag to really get those viral juices flowing. For most people, the problems Google describes are most familiar in the form of the green bubbles that signify messages to Android users in Apple's Messages app. While the iPhone app uses Apple's own iMessage service to send texts between iPhones (complete with modern features like encryption, support for group chats, and high-quality image and video transfers), they revert to old-fashioned SMS and MMS when texting an Android user. Not only are these messages shown in a color-clashing green bubble but also they break many of the modern messaging features people have come to rely on.

President Joe Biden on Tuesday signed a bipartisan bill that aims to strengthen U.S. competitiveness with China by investing billions of dollars in domestic semiconductor manufacturing and science research. From a report: "Today is a day for builders. Today America is delivering," Biden said at the signing ceremony outside the White House. He was joined by a crowd of hundreds, including tech executives, union presidents and political leaders from both parties. The bill, dubbed the Chips and Science Act, includes more than $52 billion for U.S. companies producing computer chips, as well as billions more in tax credits to encourage investment in semiconductor manufacturing. It also provides tens of billions of dollars to fund scientific research and development, and to spur the innovation and development of other U.S. tech. The Biden administration also contended that the legislation will "unlock hundreds of billions more" in private spending in the industry. The White House said Tuesday that multiple companies, "spurred" by the chips bill, have announced more than $44 billion in new semiconductor manufacturing investments.

Mobile app marketing company AppLovin on Tuesday made a $17.54 billion all-stock offer to buy online gaming business Unity Software. From a report: Palo Alto-based AppLovin said the deal would have an enterprise value of about $20 billion, an 18% premium on San Francisco-based Unity's Monday closing price. AppLovin said in a news release that its offer would create a company with a combined market cap of about $35 billion. The non-binding offer appears to be aimed at warding off potential damage to AppLovin's business by a plan Unity announced about a month ago to buy Israel-based app monetization company ironSource for $4.4 billion. A number of Unity shareholders and game developers have reportedly expressed dissatisfaction with the IronSource deal, which may help AppLovin win support for its offer. While Unity investors would hold 55% of shares in the combined company, AppLovin's would have 51% of the voting power. Unity chief John Riccitiello would be CEO under the proposal and AppLovin chief Adam Foroughi would be chief operating officer. A Unity spokesperson acknowledged the offer in a neutral statement the company issued on Tuesday morning, saying, "We have received the offer from AppLovin and our board will thoroughly evaluate it."

Several weeks after taking over Ukraine's southern port city of Kherson, Russian soldiers arrived at the offices of local internet service providers and ordered them to give up control of their networks. From a report: "They came to them and put guns to their head and just said, 'Do this,'" said Maxim Smelyanets, who owns an internet provider that operates in the area and is based in Kyiv. "They did that step by step for each company." Russian authorities then rerouted mobile and internet data from Kherson through Russian networks, government and industry officials said. They blocked access to Facebook, Instagram and Twitter, as well as to Ukrainian news websites and other sources of independent information. Then they shut off Ukrainian cellular networks, forcing Kherson's residents to use Russian mobile service providers instead.

What happened in Kherson is playing out in other parts of Russian-occupied Ukraine. After more than five months of war, Russia controls large sections of eastern and southern Ukraine. Bombings have leveled cities and villages; civilians have been detained, tortured and killed; and supplies of food and medicine are running low, according to witnesses interviewed by The New York Times and human rights groups. Ukrainians in those regions have access only to Russian state television and radio. To cap off that control, Russia has also begun occupying the cyberspace of parts of those areas. That has cleaved off Ukrainians in Russia-occupied Kherson, Melitopol and Mariupol from the rest of the country, limiting access to news about the war and communication with loved ones. In some territories, the internet and cellular networks have been shut down altogether.

An anonymous reader quotes a report from Ars Technica: If you watched ESPN2 during its stint last weekend as "ESPN8: The Ocho," you may have seen some odd, meme-friendly competitions, including corgi racing, precision paper airplane tossing, and slippery stair climbing. Or you might have seen "Excel Esports: All-Star Battle," a tournament in which an unexpected full-column Flash Fill is announced like a 50-yard Hail Mary. It's just the latest mainstream acknowledgment of Excel as a viable, if quirky, esport, complete with down-to-the-wire tension and surprising comebacks. [...]

Featured in this all-star battle was 2021 FMWC World Cup winner Diarmuid Early, an FMWC grandmaster from Ireland who claims 10,000 hours in Excel. (He would be Lambda if he were a function, he said.) The winner of the first championship in 2020, Joseph Lau (28,600 hours, Isological), also competed, along with six other highly ranked function warriors. Diarmuid took a commanding lead in the first slot-like task, racking up more points more quickly in a first round than anyone has in an FMWC competition. Others faced the kinds of challenges that regular users see in less combative Excel work. Polish competitor Gabriela Stroj told the hosts that "one stupid error" -- leaving a formula linked to the wrong sheet -- likely cost her hundreds of points. David Brown from the US said that his major problem was pasting from his 32-bit Windows-based Excel to the official online Excel answer sheets, which left his formulas treated as text.

The top four of the eight competitors moved on to round 2, simulating a yacht regatta in Excel. Diarmuid and third-ranked Andrew Ngai made it through. The two competed on creating a score-tracking mechanic for an entirely Excel-based retro-style 2D platformer, "Modelario." Ngai eked out the win, although with only 411 of a total 1,000 possible points. Ngai's reward for a more than two-hour cell-based marathon: a trip to Tucson, Arizona, for the FMWC finals. You can watch the full two-hour-and-48-minute all-star battle, which ESPN edited down to 30 minutes, here. You can also try the Excel tasks used in last weekend's battle yourself, as the organizers (the Financial Modeling World Cup) made all three of them available to download.

The ongoing worldwide semiconductor shortage will cause more than 100,000 vehicles to be cut from North American production schedules this week, Automotive News reported Sunday. Over 180,000 vehicles are expected to be dropped globally. CNET reports: The data, which comes from AutoForecast Solutions, says North American factories have been forced to cut nearly 1.06 million vehicles from production schedules this year due to the chip shortage. This puts North America as the most heavily impacted region so far. AFS' data shows nearly 3 million vehicles have been cut so far in 2022, and the agency expects that number to grow to more than 3.8 million by the end of the year. [...] The auto industry may not recover from the chip shortage until 2023 or beyond. Sam Fiorani, vice president of global vehicle forecasting at AFS, affirmed this reasoning earlier this year: "This is not a quickly solvable issue."

In two lawsuits (PDF) filed today in California, Google alleges that Sonos' latest voice-assistant technology violates seven patents related to Google Assistant. CNET reports: Google spokesperson Jose Castaneda said Sonos has "started an aggressive and misleading campaign against our products, at the expense of our shared customers." As a result, he said, the lawsuits have been filed to "defend our technology and challenge Sonos' clear, continued infringement of our patents." Sonos launched its own voice assistant in June, allowing customers to control their speakers using voice commands starting with the phrase "Hey Sonos."

Google said in the lawsuits that it has made its technologies available to users across the globe, "even providing its Google Assistant software to Sonos for many years." The suits also said Google has for years worked with Sonos engineers on the "implementation of voice recognition and voice-activated device controls in Sonos' products." Google requests an unspecified amount of monetary damages and an injunction blocking Sonos' alleged infringement. Last year, the International Trade Commission ruled that Google infringed on five patents owned by Sonos, forcing Google to change the way its smart speakers are set up and controlled.

"Google previously sued us all over the world and Sonos has prevailed in every decided case," Eddie Lazarus, Sonos' chief legal officer, told CNET, adding that the new lawsuits "are an intimidation tactic designed to retaliate against Sonos for speaking out against Google's monopolistic practices," which "will not succeed."

In preliminary second-quarter financial results announced today, Nvidia's year-over-year growth is "down from a previously forecasted $8.1 billion, a miss of $1.4 billion," reports Ars Technica. "Nvidia blamed this shortfall on weaker-than-expected demand for its gaming products, including its GeForce graphics processors." The full results won't arrive until the end of the month. From the report: Nvidia pointed to "a reduction in channel partner sales," meaning that partners like Evga, MSI, Asus, Zotac, Gigabyte, and others were selling fewer new GPUs than anticipated. This drop can be attributed partly to a crash in the value of mining-based cryptocurrencies like Bitcoin and Ethereum -- fewer miners are buying these cards, and miners looking to unload their GPUs on the secondhand market are also giving gamers a cheaper source for graphics cards. "As we expect the macroeconomic conditions affecting sell-through to continue, we took actions with our Gaming partners to adjust channel prices and inventory," said Nvidia CEO Jensen Huang. That means we may see further price drops for existing GeForce GPUs, which have already been dropping in price throughout the year. Some cards still haven't reverted to their originally advertised prices, but they're getting closer all the time.

In better news for Nvidia, the small overall increase in revenue [$6.7 billion] is driven almost exclusively by the company's data center business, including GPU-accelerated AI and machine learning applications and GPU acceleration for cloud-hosted virtual machines. Nvidia's data center revenue is projected to be up 61 percent from last year, from $2.37 billion to $3.81 billion. Nvidia will supposedly launch its next-generation RTX 4000 series GPUs later this year. Based on the new Lovelace architecture, these GPUs may appeal to some gamers who originally sat out the RTX 3000 series due to shortages and inflated prices and are now avoiding the GPUs because they know a replacement is around the corner.

Only days after being launched to the public, Meta Platforms' new AI chatbot has been claiming that Donald Trump won the 2020 US presidential election, and repeating anti-Semitic conspiracy theories. From a report: Chatbots -- artificial intelligence software that learns from interactions with the public -- have a history of taking reactionary turns. In 2016, Microsoft's Tay was taken offline within 48 hours after it started praising Adolf Hitler, amid other racist and misogynist comments it apparently picked up while interacting with Twitter users. Facebook parent company Meta released BlenderBot 3 on Friday to users in the US, who can provide feedback if they receive off-topic or unrealistic answers. A further feature of BlenderBot 3 is its ability to search the internet to talk about different topics.

The company encourages adults to interact with the chatbot with "natural conversations about topics of interest" to allow it to learn to conduct naturalistic discussions on a wide range of subjects. Conversations shared on various social media accounts ranged from the humorous to the offensive. BlenderBot 3 told one user its favorite musical was Andrew Lloyd Webber's "Cats," and described Meta CEO Mark Zuckerberg as "too creepy and manipulative" to a reporter from Insider. Other conversations showed the chatbot repeating conspiracy theories.

How some people tricked Google into getting their own knowledge panels and fooled Amazon-owned IMDb into believing they are top stars in dozens of movies. From a report: I was casually browsing IMDb when I landed on the page for an upcoming Ranbir Kapoor starrer movie "Animal." I saw the cast details and I found a face and a name I didn't recognize. Finding out about this guy led me to a whole new world of how so many young Indian men from small towns are gaming the system to manufacture their own fake online clout. So who is this guy? I had not heard of him before and he is named in the "Top cast" category for this movie, alongside Indian actor Ranbir Kapoor. According to his IMDb page, he has acting credits in some big-budget productions. I am beginning to suspect that this could be a case of IMDb vandalism. IMDb allows anyone to add and edit pages. They don't allow you to see the edit history of a page though like Wikipedia and evidently, the edits are not reviewed effectively either.

I googled this guy. Wow, so Google has a knowledge panel on him. There are also links to his music on various music platforms. Okay, so probably he is pretending to be an actor on IMDb but according to his google search results, he is actually a legit musician? Skimming through the search results, I found biographies written about him on a few websites of doubtful credibility. Like this one on a website called issuewire.com. I looked at his YouTube and other social media profiles and he doesn't have a lot of followers or any music content on there. I shazamed a couple of his songs and they're just copies of existing random music mashed together with some audio editing tool like Audacity. Possibly to avoid getting copyright notices. Hmm. I think I am now beginning to get a clearer picture of what's going on here.

He set up a profile on a bunch of different music streaming platforms. Uploaded remixed mash-up of existing songs using some audio editing software. Published biographies and profiles about himself on sites that do not verify submissions. Set up an IMDb page with fake credits. All this to trick google into believing he is a person of eminence. [...] I went back to his IMDb and checked the cast details of some of the movies he is part of. And I found a few dozen profiles with the exact same modus operandi.

In the near future, "Top Gun" may get a reboot. Roughly one year from now, fighter pilots will begin flying with helmets outfitted with visors that can augment reality and place digital replicas of enemy fighter jets in their field of vision. For the first time, pilots will get to fly in the air and practice maneuvering against imitations of highly advanced aircraft made by countries like China and Russia. From a report: It is also part of the U.S. military's investment of billions into virtual reality, artificial intelligence and algorithms to modernize the way it fights wars. The pilot training solution, created by military technology company Red6, will be rolled out to the Air Force first as part of its $70 million contract with the branch. Company and former military officials say the technology will be a safe, cheap and realistic way to ensure American pilots are prepared to battle the best fighter planes in the world.

"Better, faster, cheaper," said Daniel Robinson, founder and chief executive of Red6. "This is the way we'll train them in the future." The military wants new 'robot ships' to replace sailors during battle For decades, the way America trains its fighter pilots has changed little. Aviators from the Air Force and Navy often start their training flying on a Northrop T-38 jet, often using a similar syllabus to one that has been around since the 1960s. From there, they train on planes, such as F-22 or F-35 fighter jets, that they will fly during their career.