"The U.S. military has gone on the offensive against ransomware groups," reports CNET, "as U.S. companies increasingly become targets of malware attacks, the nation's top cyber defender acknowledged on Saturday." Up until about nine months ago, reining in ransomware attacks was seen as the responsibility of law enforcement agencies, Gen. Paul M. Nakasone, the head of U.S. Cyber Command and director of the National Security Agency, told the New York Times. But attacks like the ones on Colonial Pipeline and JBS beef plants have been "impacting our critical infrastructure," Nakasone said, leading federal agencies to ramp up the gathering and sharing of intelligence on ransomware groups....

Nakasone didn't describe the action taken or identify the groups targeted, but said one of the goals is to "impose costs" for ransomware groups. "Before, during and since, with a number of elements of our government, we have taken actions and we have imposed costs," Nakasone said. "That's an important piece that we should always be mindful of."

"HTTP Archive is a community-run project that has been tracking how the web is built since 2010," explains its web site. "Using WebPageTest and Lighthouse under the hood, metadata about nearly 8.2 million websites are tested monthly and included in a public BigQuery database for analysis."

And now 113 people "have volunteered countless hours in the planning, research, writing and production phases of the 2021 Web Almanac," processing 39.5 terabytes of data from 8.2 million web sites (using July's data set).

Berlin-based web developer Stefan Judis calls it "a comprehensive report on the state of the web, backed by real data and trusted web experts...comprised of 24 chapters spanning aspects of page content, user experience, publishing, and distribution." But he's also tweeting out what he sees as some of its most interesting statistics. — The median webpage loads 70kb CSS...and the "top scoring site loaded over 60mb of CSS...

- There's also a new high score for the number of loaded external stylesheets: 2368...!

- We all ship a lot of JavaScript. It's 420kb+ per page at the 50th percentile. This is transferred bytes, so the amount of JavaScript is way higher after decompressing...

- [From a graph of JavaScript library/framework adoption]: 84% use jQuery and 8% are built with React...

- There's almost no adoption of WebAssembly. ["We got 3854 confirmed WebAssembly requests on desktop and 3173 on mobile. Those Wasm modules are used across 2724 domains on desktop and 2300 domains on mobile, which represents 0.06% and 0.04% of all domains on desktop and mobile correspondingly."]

- 16% of sites don't ship a robots.txt...

- In 2021 641 million emails, 428 million passwords and 149 million phone numbers were involved in data breaches.
And apparently while just 7% of the top 1,000 sites use a content-management system, 42% of all sampled sites are using one. (And 33.6% of those appear to be using WordPress.)

Long-time Slashdot reader mtaht writes: Comcast fully deployed bufferbloat fixes across their entire network over the past year, demonstrating 90% improvements in working latency and jitter — which is described in this article by by Comcast Vice President of Technology Policy & Standards. (The article's Cumulative Distribution Function chart is to die for...) But: did anybody notice? Did any other ISPs adopt AQM tech? How many of y'all out there are running smart queue management (sch_cake in linux) nowadays?
But wait — it gets even more interesting...

The Comcast official anticipates even less latency with the newest Wi-Fi 6E standard. (And for home users, the article links to a page recommending "a router whose manufacturer understands the principles of bufferbloat, and has updated the firmware to use one of the Smart Queue Management algorithms such as cake, fq_codel, PIE.")

But then the Comcast VP looks to the future, and where all of this is leading: Currently under discussion at the IETF in the Transport Area Working Group is a proposal for Low Latency, Low Loss Scalable Throughput. This potential approach to achieve very low latency may result in working latencies of roughly one millisecond (though perhaps 1-5 milliseconds initially). As the IETF sorts out the best technical path forward through experimentation and consensus-building (including debate of alternatives), in a few years we may see the beginning of a shift to sub-5 millisecond working latency. This seems likely to not only improve the quality of experience of existing applications but also create a network foundation on which entirely new classes of applications will be built.

While we can certainly think of usable augmented and virtual reality (AR and VR), these are applications we know about today. But what happens when the time to access resources on the Internet is the same, or close to the time to access local compute or storage resources? What if the core assumption that developers make about networks — that there is an unpredictable and variable delay — goes away? This is a central assumption embedded into the design of more or less all existing applications. So, if that assumption changes, then we can potentially rethink the design of many applications and all sorts of new applications will become possible. That is a big deal and exciting to think about the possibilities!

In a few years, when most people have 1 Gbps, 10 Gbps, or eventually 100 Gbps connections in their home, it is perhaps easy to imagine that connection speed is not the only key factor in your performance. We're perhaps entering an era where consistently low working latency will become the next big thing that differentiates various Internet access services and application services/platforms. Beyond that, factors likely exceptionally high uptime, proactive/adaptive security, dynamic privacy protection, and other new things will likely also play a role. But keep an eye on working latency — there's a lot of exciting things happening!

"Videos and GIFs of cute animals — usually cats — have gone viral online for almost as long as the internet has been around..." writes the New York Times.

"Now, it is becoming increasingly clear how widely the old-school internet trick is being used by people and organizations peddling false information online, misinformation researchers say." The posts with the animals do not directly spread false information. But they can draw a huge audience that can be redirected to a publication or site spreading false information about election fraud, unproven coronavirus cures and other baseless conspiracy theories entirely unrelated to the videos. Sometimes, following a feed of cute animals on Facebook unknowingly signs users up as subscribers to misleading posts from the same publisher. Melissa Ryan, chief executive of Card Strategies, a consulting firm that researches disinformation, said this kind of "engagement bait" helped misinformation actors generate clicks on their pages, which can make them more prominent in users' feeds in the future. That prominence can drive a broader audience to content with inaccurate or misleading information, she said.

"The strategy works because the platforms continue to reward engagement over everything else," Ms. Ryan said, "even when that engagement comes from" publications that also publish false or misleading content.

Criminals have been selling fake vaccine certificates online and may be able to fool an EU system designed to verify the certificates' validity, researchers warn. BankInfoSecurity reports: [A] report released last week, "COVID-19 Vaccination Certificates in the Dark Web," which has not yet been peer-reviewed, notes that some darknet markets continue to sell supposed vaccine certificates for use in multiple countries. Four researchers - Dimitrios Georgoulias, Jens Myrup Pedersen, Morten Falch, Emmanouil Vasilomanolakis - who are all part of the Cyber Security Group at Aalborg University in Copenhagen, Denmark, reviewed vaccination certificate offerings from 17 marketplaces and 10 vendor shops. The researchers found that at least one vendor appears to be selling digital certificates, registered in Italy, that are being read as valid by mobile COVID-19 certificate-checking apps developed by both France and Denmark.

The Aalborg University researchers, however, note that many darknet markets forbid any listing containing any items related to COVID-19. But others, they say, do allow both physical and digital vaccine certificates to be offered for sale, and in some cases also "yellow vaccination cards" or other vaccination record cards that can be used as proof of vaccination, albeit only inside the country in which they were supposedly issued. "The listings are heavily focused on European countries and the United States, but there are also listings from other continents and countries, such as Brazil, Canada, Mexico and Australia," as well as Russia, the researchers write. "The pricing differs greatly between the different listings, with the cheapest certificate starting at $39 and the highest price reaching almost $2,800, which included both a physical and a digital certificate, registered in the United Kingdom," they write. Most markets accept bitcoin and monero cryptocurrencies as payment, they add, while a smaller number also take such digital coins as ethereum, cardano, litecoin and zcash. [...] The Aalborg University researchers note that buying a fake digital certificate gives the seller ample opportunity to scam a buyer.

If these fake COVID-19 certificates can indeed pass for valid ones, then one unanswered question remains: How? Many of the sites claim to have access to the systems used to issue certificates, either by hacking into them remotely, or having insiders who work at a healthcare or other health organization, the researchers say. "In the specific case of a listing on the Russian marketplace Hydra, the description even mentioned the exact location and hospital that the system was accessed from," they say. Another possibility, however, is that criminals have somehow stolen one or more private keys for the European system, which were issued to participating health organizations. If so, it would be difficult to revoke these keys, the researchers say, since doing so would invalidate what might be a large quantity of legitimate certificates too.

Since at least 2017, a mysterious threat actor has run thousands of malicious servers in entry, middle, and exit positions of the Tor network in what a security researcher has described as an attempt to deanonymize Tor users. The Record reports: Tracked as KAX17, the threat actor ran at its peak more than 900 malicious servers part of the Tor network, which typically tends to hover around a daily total of up to 9,000-10,000. Some of these servers work as entry points (guards), others as middle relays, and others as exit points from the Tor network. Their role is to encrypt and anonymize user traffic as it enters and leaves the Tor network, creating a giant mesh of proxy servers that bounce connections between each other and provide the much-needed privacy that Tor users come for. Servers added to the Tor network typically must have contact information included in their setup, such as an email address, so Tor network administrators and law enforcement can contact server operators in the case of a misconfiguration or file an abuse report. However, despite this rule, servers with no contact information are often added to the Tor network, which is not strictly policed, mainly to ensure there's always a sufficiently large number of nodes to bounce and hide user traffic.

But a security researcher and Tor node operator going by Nusenu told The Record this week that it observed a pattern in some of these Tor relays with no contact information, which he first noticed in 2019 and has eventually traced back as far as 2017. Grouping these servers under the KAX17 umbrella, Nusenu says this threat actor has constantly added servers with no contact details to the Tor network in industrial quantities, operating servers in the realm of hundreds at any given point. The actor's servers are typically located in data centers spread all over the world and are typically configured as entry and middle points primarily, although KAX17 also operates a small number of exit points. Nusenu said this is strange as most threat actors operating malicious Tor relays tend to focus on running exit points, which allows them to modify the user's traffic.

KAX17's focus on Tor entry and middle relays led Nusenu to believe that the group, which he described as "non-amateur level and persistent," is trying to collect information on users connecting to the Tor network and attempting to map their routes inside it. In research published this week and shared with The Record, Nusenu said that at one point, there was a 16% chance that a Tor user would connect to the Tor network through one of KAX17's servers, a 35% chance they would pass through one of its middle relays, and up to 5% chance to exit through one. While all signs point to a nation-level and well-resourced threat actor who is behind this group, neither Nusenu nor the Tor Project wanted to speculate.

An anonymous reader quotes a report from NPR: New rules approved by the Consumer Financial Protection Bureau that took effect on Tuesday dictate how collection agencies can email and text people as well as message them on social media to seek repayment for unpaid debts. Kathleen L. Kraninger, the former CFPB director who oversaw the rule changes, said last year that they were a necessary update to the Fair Debt Collection Practices Act, which is more than four decades old. "We are finally leaving 1977 behind and developing a debt collection system that works for consumers and industry in the modern world," Kraninger said in a blog post.

Under the new rules, debt collectors who contact you on social media have to identify themselves as debt collectors but can attempt to join your network by sending you a friend request. Collectors must give you the option to opt out of being contacted online, and any messages they send have to be private -- collectors can't post on your page if it can be seen by your contacts or the public. Collection agencies can also email and text message debtors, but must still offer the ability to opt out. Industry officials praised the move as a welcome change to the outdated methods currently used by the collections industry. The new rules were devised during the Trump administration, when the bureau became more business-friendly than it had been in the past. The new rules also set a limit for the first time on how often debt collectors can call you. Agencies will be restricted to seven calls per week per account in collection.

For a measured perspective on how much quantum computing is actually advancing as a field, IEEE Spectrum spoke with John Martinis, a professor of physics at the University of California, Santa Barbara, and the former chief architect of Google's Sycamore. From a report: IEEE Spectrum: So it's been about two years since you unveiled results from Sycamore. In the last few weeks, we've seen announcements of a 127-qubit chip from IBM and a 256-qubit neutral atom quantum computer from QuEra. What kind of progress would you say has actually been made?
John Martinis: Well, clearly, everyone's working hard to build a quantum computer. And it's great that there are all these systems people are working on. There's real progress. But if you go back to one of the points of the quantum supremacy experiment -- and something I've been talking about for a few years now -- one of the key requirements is gate errors. I think gate errors are way more important than the number of qubits at this time. It's nice to show that you can make a lot of qubits, but if you don't make them well enough, it's less clear what the advance is. In the long run, if you want to do a complex quantum computation, say with error correction, you need way below 1% gate errors. So it's great that people are building larger systems, but it would be even more important to see data on how well the qubits are working. In this regard, I am impressed with the group in China who reproduced the quantum supremacy results, where they show that they can operate their system well with low errors.

Tesla boss Elon Musk said on Friday the electric-car maker's much-anticipated Cybertruck would come with a high- end four-motor variant. From a report: "Initial production will be 4 motor variant, with independent, ultra fast response torque control of each wheel," Musk said in a tweet. Calling the electric pick-up truck "insane technology bandwagon," Musk said the Cybertruck would have both front and rear-wheel steer that would "not just (turn) like a tank -- it can drive diagonally like a crab." The vehicle would compete with pickup trucks such as GMC's Hummer EV, Ford's F-150 Lightning and Rivian's R1T. Of those, R1T is driven by four individual motors powering all four wheels and GMC's Hummer can drive diagonally.

Microsoft is backtracking on changes it made to Windows 11 that made it more difficult to switch default browsers. From a report: A new test build of Windows 11 now allows users of Chrome, Firefox, and other browsers to set a default browser with a single button, which is a far simpler process. Rafael Rivera, developer of the excellent EarTrumpet Windows app, discovered the new Windows 11 changes earlier this week. Instead of having to change individual file extensions or protocol handlers for HTTP, HTTPS, .HTML, and .HTM, Windows 11 now offers a simple button that lets people switch default browsers in a similar way to Windows 10. Microsoft has confirmed the changes are intentional and are currently being tested. "In the Windows 11 Insider Preview Build 22509 released to the Dev Channel on Wednesday, we streamlined the ability for a Windows Insider to set the 'default browser' to apps that register for HTTP:, HTTPS:, .HTM, and .HTML," explains Aaron Woodman, vice president of Windows marketing, in a statement to The Verge. "Through the Windows Insider Program you will continue to see us try new things based on customer feedback and testing."

New technology promising to solve Ethereum's growing pains is gaining traction, increasing bets that some day most of the network's transactions might not actually take place on its own blockchain. From a report: For years slow speeds and high transaction fees have plagued the network underpinning the $550 billion cryptocurrency Ether -- home to the most popular blockchain applications. Its weaknesses have allowed new competitors such as Solana and Avalanche to gain ground. However, help from so-called Layer 2 technologies, or rollups, could be a solution. Digital ledgers like Ethereum are designed to slow down and become more expensive as their popularity increases. But these Layer 2 projects, many of which have only recently debuted, can effectively take transaction data off Ethereum, compress it and post it back onto the original chain for a fraction of the time and cost. So far the the user base is relatively small. But rapid growth is raising expectations that Ethereum will not only be able to ward off competition but that other blockchains might adopt similar scaling solutions. If the technology takes off, networks like Ethereum might only be directly used for very large transactions in the future, with the bulk of activity happening on Layer 2 networks.

An anonymous reader quotes a report from The Drive: U.S. Space Force's General David Thompson, the service's second in command, said last week that Russia and China are launching "reversible attacks," such as electronic warfare jamming, temporarily blinding optics with lasers, and cyber attacks, on U.S. satellites "every single day." He also disclosed that a small Russian satellite used to conduct an on-orbit anti-satellite weapon test back in 2019 had first gotten so close to an American one that there were concerns an actual attack was imminent.

Thompson, who is Vice Chief of Space Operations, disclosed these details to The Washington Post's Josh Rogin in an interview on the sidelines of the Halifax International Security Forum, which ran from Nov. 19 to 21 in Halifax, Nova Scotia, in Canada. The forum opened just four days after a Russian anti-satellite weapon test involving a ground-launched interceptor, which destroyed a defunct Soviet-era electronic intelligence satellite and created a cloud of debris that presents a risk to the International Space Station (ISS). That test drew widespread condemnation, including from the U.S. government, and prompted renewed discussion about potential future conflicts in space.

"The threats are really growing and expanding every single day. And it's really an evolution of activity that's been happening for a long time," Thompson, told Rogin. "We're really at a point now where there's a whole host of ways that our space systems can be threatened." "Right now, Space Force is dealing with what Thompson calls 'reversible attacks' on U.S. government satellites (meaning attacks that don't permanently damage the satellites) 'every single day,'" according to Rogin. "Both China and Russia are regularly attacking U.S. satellites with non-kinetic means, including lasers, radio frequency jammers, and cyber attacks, he said." [...] Thompson's assertion that these kinds of attacks are occurring with extreme frequency is new. It underscores the rapid development and fielding by Russia and China, among others, of a wide variety of anti-satellite capabilities, something the U.S. military has called increasing attention to in recent years. "The Chinese are actually well ahead [of Russia]," Thompson told Rogin. "They're fielding operational systems at an incredible rate." "Thompson could not confirm or deny whether any American satellites had actually been damaged in a Russian or Chinese attack," the report adds. "[H]e told Rogin that even if such a thing had occurred, that very fact would be classified."

He did, however, provide new details about the incident in 2019 where a small Russian satellite released a projectile in one on-orbit anti-satellite weapon test. According to The Drive, "Russia's satellite had first got in very close to a U.S. 'national security satellite' and that 'the U.S. government didn't know whether it was attacking or not.'"

"It maneuvered close, it maneuvered dangerously, it maneuvered threateningly so that they were coming close enough that there was a concern of collision," Thompson said. "So clearly, the Russians were sending us a message."

mrflash818 shares a report from PCMag: To avoid a lawsuit, Donald Trump's social media site is quietly acknowledging the computer code powering the platform comes from Mastodon. Trump's "Truth Social" site now features a dedicated section labeled "open source," which contains a Zip archive to Mastodon's source code. "Our goal is to support the open source community no matter what your political beliefs are. That's why the first place we go to find amazing software is the community and not 'Big Tech,'" the site adds. Truth Social created the section on Nov. 12, two weeks after social networking provider Mastodon threatened to sue Trump's platform for violating its open-source license.

Since Mastodon is an open-source software project, anyone can use it for free. But if you do, the software license demands the code and any ensuing modifications to your Mastodon-powered platform be made publicly available, allowing the entire Mastodon community to benefit. (This doesn't include publishing any user data or disclosing admin access, though.) [...] However, it appears the uploaded Zip archive is simply a barebones version of the existing Mastodon source code you can already find on GitHub. The archive itself is only a mere 30MB in size. Nevertheless, Rochko said the Zip archive might "become more interesting" once Truth Social finally launches.

According to Insider, Google is planning to launch its own in-house smartwatch in 2022. "Two employees said a spring launch was possible if the latest testing round is a success, however all sources stressed that details and timelines were subject to change depending on feedback from employees testing the device," reports Insider. From the report: The device, which is internally codenamed "Rohan," will showcase the latest version of Google's smartwatch software to customers and partners [...]. To date, Google has opted to create software for smartwatches built by partners such as Samsung, but has not made a device of its own. [...] Unlike the Apple Watch, Google's smartwatch is round and has no physical bezel, according to artistic renders viewed by Insider and employees who have seen it. Like Apple's device, it will capture health and fitness metrics.

The watch has sometimes been referred to internally as the "Pixel watch" or "Android watch," but executives have used a variety of names to refer to the project and it is unclear what branding Google will land on if and when it launches the device. [...] The Rohan watch has a heart-rate monitor and offers basic health-tracking features such as step counting. In its current form the watch will require daily charging, according to a feedback document seen by Insider. One employee testing the watch lamented the charging was slow. Like the Apple Watch, Google's wearable will also use proprietary watchbands. [...]

Google has removed The Pirate Bay and more than 100 related domains from its search results in the Netherlands. The search engine points to a local pirate site-blocking order that was forwarded by anti-piracy group BREIN. The order targets ISPs and doesn't name Google but the company chose to voluntarily comply. TorrentFreak reports: The reason for this broad removal is provided by Google itself. The search giant notes that the results were removed in response to a legal request. This 'request' came from local anti-piracy group BREIN and includes a copy of a Dutch site-blocking order. The order, issued in October last year, required Dutch ISPs Ziggo, KPN, and XS4ALL to block access to Pirate Bay mirrors and proxy sites. Google isn't listed as a party in this lawsuit, but a copy was sent to the search engine nonetheless. BREIN's request, at least the part that's available publicly, doesn't explain why it would apply to Google. However, BREIN informs us that it's not uncommon for Internet services to comply with orders that don't target them directly.

A few weeks ago, Dutch ISPs agreed to a covenant where they promise to comply with site-blocking orders that are targeted at other ISPs. While Google is not part of this agreement, in this case it chose to follow the court order. "In essence, this is the same situation as recently agreed in the Dutch government-supported covenant between right holders and internet access providers," BREIN director Tim Kuik informs TorrentFreak. "Dutch case law also shows that once there is a contested court order against one access provider, courts do grant the same order against others if they refuse to conform to it even though they are not named in it." The report notes that this is "the first time that Google has complied with a pirate site blocking order without being named." BREIN has gone on to submit the legal paperwork to block six additional pirate sites, including proxies and mirrors.

The White House will unveil a group of countries next week that have pledged to work together to curb exports of technology that can be used by bad actors and repressive governments to violate human rights, senior administration officials said on Thursday. Reuters reports: The announcement, which will be made as part of U.S. President Joe Biden's Summit for Democracy, is aimed at addressing "the misuse of certain dual-use technologies that can lead to human rights abuses" and ensuring "critical and emerging technologies work for and not against democratic societies," the officials told reporters in a briefing call. The officials declined to name the countries that would join the group or the technologies or users targeted by it, but said members would develop and adopt a "written nonbinding code of conduct or statement of principles intended to guide the application of human rights criteria to export licensing policy." The officials singled out China as an example of a nation that has misused technology to control its population.

Facebook's parent company, Meta, has worked with the U.K.-based nonprofit Revenge Porn Helpline to build a tool that lets people prevent their intimate images from being uploaded to Facebook, Instagram and other participating platforms without their consent. From a report: The tool, which builds on a pilot program Facebook started in Australia in 2017, launched Thursday. It allows people who are worried that their intimate photos or videos have been or could be shared online, for example by disgruntled ex-partners, to submit the images to a central, global website called StopNCII.org, which stands for "Stop Non-Consensual Intimate Images."

"It's a massive step forward," said Sophie Mortimer, the helpline's manager. "The key for me is about putting this control over content back into the hands of people directly affected by this issue so they are not just left at the whims of a perpetrator threatening to share it." Karuna Nain, Meta's director of global safety policy, said the company had shifted its approach to use an independent website to make it easier for other companies to use the system and to reduce the burden on the victims of image-based abuse to report content to "each and every platform." During the submission process, StopNCII.org gets consent and asks people to confirm that they are in an image. People can select material on their devices, including manipulated images, that depict them nude or nearly nude. The photos or the videos will then be converted into unique digital fingerprints known as "hashes," which will be passed on to participating companies, starting with Facebook and Instagram.

The Performance P650 won't beat a top-end Arm chip in a Samsung or Apple smartphone, but the startup believes its designs eventually could. From a report: It's really hard to get a new chip family to catch on when companies like Intel and Qualcomm ship their products by the millions, but SiFive has a faster new design it hopes will carve a niche. The startup on Thursday announced its Performance P650 design, which comes with a 50% speed boost over the P550 that arrived in June. SiFive is one of the most prominent members of RISC-V International, an alliance collectively developing a family of processors using the new RISC-V architecture. That competes against the x86 architecture from Intel and AMD that dominates in PCs and the Arm architecture used by Qualcomm, Samsung, Apple, MediaTek and others to power all smartphones. Unlike x86 and Arm, though, RISC-V is free to use. It's a fresh start its advocates believe will be more economical and efficient.

SiFive doesn't make chips. Instead, it licenses its designs to others that customize them for their own purposes, an approach that's served Arm well. With performance comparable to Arm's two-year-old midrange Cortex A77 design, the P650 won't be ejecting Qualcomm or other Arm designs out of smartphones any time soon. Customers can start evaluating the design in the first quarter of 2022, SiFive said. But if SiFive succeeds with its longer-term plans for better speed, battery life and cost, you could get a SiFive powered phone in a couple years. "By 2023, you're likely to see the first mobile phone with RISC-V," SiFive Chief Executive Patrick Little said in an October interview. "I think we have an excellent shot at the phone."

Tesla has launched a mini Cyberquad designed for the kiddos starting in 2-4 weeks if you order one right now from its website. From a report: The Tesla 'Cyberquad for Kids' is available to purchase on Tesla's site for $1,900 -- a steep price relative to your average Power Wheels, but the lowest-priced vehicle in Tesla's existing lineup by far. And the Cyberquad's materials are a cut above your average battery electric kid car, with a "full steel frame," along with cushioned seating and fully adjustable suspension. It may be the cheapest Tesla you can buy, but it's also the most limited when it comes to range: You'll get up to around 15 miles on a full charge, which takes five hours to wooer up, according to the company. It's also not going to break any land speed records, with a speedometer that tops out at 10 mph (which you can limit to a max of 5 mph for safety if desired). That's still plenty fast for a kid's ride-on vehicle, which is probably why Tesla labels this one as designed for kids at least 8 and up, with a max weight of 150 lbs.

Microsoft has never been a fan of Windows users downloading Chrome instead of using Edge, but the company has now stepped up its campaign to keep people using its built-in browser. From a report: Windows 10 and Windows 11 have both started displaying new prompts when people navigate to the Chrome download page, in an effort to discourage people from installing Google's rival browser. These new prompts, spotted by Neowin, include messages like:

"Microsoft Edge runs on the same technology as Chrome, with the added trust of Microsoft."
"That browser is so 2008! Do you know what's new? Microsoft Edge."
"'I hate saving money,' said no one ever. Microsoft Edge is the best browser for online shopping."