Robotics

Leaked Documents Show How Amazon's Astro Robot Tracks Everything You Do (vice.com) 36

em1ly shares a report from Motherboard: Amazon's new robot called Astro is designed to track the behavior of everyone in your home to help it perform its surveillance and helper duties, according to leaked internal development documents and video recordings of Astro software development meetings obtained by Motherboard. The system's person recognition system is heavily flawed, according to two sources who worked on the project. The documents, which largely use Astro's internal codename "Vesta" for the device, give extensive insight into the robot's design, Amazon's philosophy, how the device tracks customer behavior as well as flow charts of how it determines who a "stranger" is and whether it should take any sort of "investigation activity" against them.

The meeting document spells out the process in a much blunter way than Amazon's cutesy marketing suggests. "[Astro] slowly and intelligently patrols the home when unfamiliar person are around, moving from scan point to scan point (the best location and pose in any given space to look around) looking and listening for unusual activity," one of the files reads. "Vesta moves to a predetermined scan point and pose to scan any given room, looking past and over obstacles in its way. Vesta completes one complete patrol when it completes scanning all the scan point on the floorplan." [...]

Developers who worked on Astro say the versions of the robot they worked on did not work well. "Astro is terrible and will almost certainly throw itself down a flight of stairs if presented the opportunity. The person detection is unreliable at best, making the in-home security proposition laughable," a source who worked on the project said. "The device feels fragile for something with an absurd cost. The mast has broken on several devices, locking itself in the extended or retracted position, and there's no way to ship it to Amazon when that happens." "They're also pushing it as an accessibility device but with the masts breaking and the possibility that at any given moment it'll commit suicide on a flight of stairs, it's, at best, absurdist nonsense and marketing and, at worst, potentially dangerous for anyone who'd actually rely on it for accessibility purposes," the source said.

Facebook

Facebook's Effort To Attract Preteens Goes Beyond Instagram Kids, Documents Show (wsj.com) 36

An anonymous reader quotes a report from The Wall Street Journal: Facebook has come under increasing fire in recent days for its effect on young users and its efforts to create products for them. Inside the company, teams of employees have for years been laying plans to attract preteens that go beyond what is publicly known, spurred by fear that Facebook could lose a new generation of users critical to its future. Internal Facebook documents reviewed by The Wall Street Journal show the company formed a team to study preteens, set a three-year goal to create more products for them and commissioned strategy papers about the long-term business opportunities presented by these potential users. In one presentation, it contemplated whether there might be a way to engage children during play dates. "Why do we care about tweens?" said one document from 2020. "They are a valuable but untapped audience."

The Facebook documents show that competition from rivals, in particular Snap Inc.'s Snapchat and TikTok, is a motivating factor behind its work. [...] Over the past five years, Facebook has made what it called "big bets" on designing products that would appeal to preteens across its services, according to a document from earlier this year. In more than a dozen studies over that period, the documents show, Facebook has tried to understand which products might resonate with children and "tweens" (ages 10 through 12), how these young people view competitors' apps and what concerns their parents. "With the ubiquity of tablets and phones, kids are getting on the internet as young as six years old. We can't ignore this and we have a responsibility to figure it out," said a 2018 document labeled confidential. "Imagine a Facebook experience designed for youth."

Earlier this year, a senior researcher at Facebook presented to colleagues a new approach to how the company should think about designing products for children. It provided a blueprint for how to introduce the company's products to younger children. Rather than offer just two types of products -- those for users 13 and older, and a messenger app for kids -- Facebook should tailor its features to six age brackets, said a slide titled "where we've been, and where we're going." The age brackets included: adults, late teens ages 16 to maturity, teens ages 13 to 15, tweens ages 10 to 12, children ages 5 to 9 and young kids ages zero to four. [...] "Our ultimate goal is messaging primacy with U.S. tweens, which may also lead to winning with teens," one of the documents said.
Yesterday, Facebook paused its plans to develop a version of Instagram for kids under 13 after facing pressure from lawmakers.
Windows

Microsoft Knew of Exchange Autodiscover Flaw Five Years Ago (theregister.com) 22

Thomas Claburn writes via The Register: Microsoft Exchange clients like Outlook have been supplying unprotected user credentials if you ask in a particular way since at least 2016. Though aware of this, Microsoft's advice continues to be that customers should communicate only with servers they trust. On August 10, 2016, Marco van Beek, managing director at UK-based IT consultancy Supporting Role, emailed the Microsoft Security Response Center to disclose an Autodiscover exploit that worked with multiple email clients, including Microsoft Outlook. "Basically, I have discovered that it is extremely easy to get access to Exchange (and therefore Active Directory) user passwords in plain text," he wrote. "It doesn't necessarily require any breach of corporate security, and at its most secure, is only as secure as file level access to the corporate website." His proof-of-concept exploit code, which affected Outlook (both Mac and PC), default email apps for Android and iOS, Apple Mail for Mac OS X, and others, consisted of 11 lines of PHP, though he insisted the exploit probably could have been reduced to three lines.

Microsoft acknowledged on August 11, 2016, that it had reproduced the issue in van Beek's report. Then on August 30, 2016, the Windows titan responded to van Beek by saying the report doesn't describe a genuine vulnerability: "Our security engineers and product team have reviewed this report and determined that it is not a security issue to be serviced as part of our monthly Patch Tuesday process. 'Never accept an SSL certificate without a matching host name' is already recommended for clients in the doc cited by your report: [link]. Before you send a request to a candidate, make sure it is trustworthy. Remember that you're sending the user's credentials, so it's important to make sure that you're only sharing them with a server you can trust. At a minimum, you should verify: That the endpoint is an HTTPS endpoint. Client applications should not authenticate or send data to a non-SSL endpoint. That the SSL certificate presented by the server is valid and from a trusted authority."

"This response casually forgets to consider that a hacked web server still retains a perfectly valid certificate -- it just happens to use that trusted tunnel to serve up problems," said van Beek. "Also, I have only found one Exchange client so far which actually checks the hostname against the certificate, which is Microsoft's own test tool." Van Beek said he thought it was incredible that Microsoft confirmed the behavior he reported within hours but does not consider it to be a problem. He suggested three mitigations: changing the order of operations so that DNS gets checked first; never accepting an SSL certificate without a matching host name; and reviewing why and when clients respond to authentication requests.
When asked if the company plans to take any steps to address credential exposure and whether it believes its guidance adequately addresses the problem, a Microsoft spokesperson said: "We are continuing to investigate the specific scenario shared by the researcher."
Microsoft

Microsoft Opens Its Windows Store Up To Third-party App Stores (theverge.com) 27

Microsoft is opening up its own app store in Windows even further today, inviting third-party app stores to integrate into the Microsoft Store. It's a significant change that will see both Amazon and Epic Games Store discoverable in the Microsoft Store in the coming months. From a report: "Just like any other app, third-party storefront apps will have a product detail page -- which can be found via search or by browsing -- so that users can easily find and install it with the same confidence as any other app in the Microsoft Store on Windows," explains Giorgio Sardo, general manager of the Microsoft Store. "Today, we are sharing that Amazon and Epic Games will bring their storefront apps to the Microsoft Store over the next few months, and we look forward to welcoming other stores as well in the future." The news comes months after Microsoft announced some major changes to the Microsoft Store. Not only is the store being overhauled for Windows 11 and eventually Windows 10, but Microsoft will also let developers keep 100 percent of the revenue from apps if they use alternative payment platforms. The only exception is that this doesn't apply to games.
IT

1Password Adds Its Own 'Hide My Email' Feature (theverge.com) 36

1Password is launching a new feature to let users create unique email aliases for logins, much like Apple's iCloud Plus Hide My Email function. From a report: 1Password is partnering with Fastmail to bring its masked email feature to the password manager, giving all users the option of hiding their email addresses from apps and services. "Your email address is your online identity," explains Bron Gondwana, CEO of Fastmail. "If your credentials are compromised in a data breach, having a randomly generated email address adds a second line of defense because it can't be associated with your primary email address, and therefore, your identity." This new masked email feature will be ideal for registering accounts for temporary purposes, like a free Wi-Fi network. But they can also be used to hide your personal email address from any app or service as the aliases don't expire unless a 1Password user manually deletes them.
Google

Google Tells Judges It's So Popular It's Bing's Top Search Term (bloomberg.com) 75

Google is so successful that it's the most searched for term on Microsoft's Bing search engine, the company's lawyer told a European Union court on Tuesday. From a report: "We have submitted evidence showing that the most common search query on Bing is by far Google," Alfonso Lamadrid, a lawyer for the Alphabet unit, said at the EU's General Court in Luxembourg. The tech giant has asked EU judges to overturn a record $5 billion fine and strike down a 2018 antitrust order that said Google unfairly pushed its search app on mobile phones running its Android software.
Power

UK Electric Car Inquiries Soar During Fuel Supply Crisis (theguardian.com) 210

Electric car inquiries are soaring as petrol stations in parts of the UK have started running out of fuel on Friday. The Guardian reports: While scenes of chaos play out at petrol stations across the country amid shortages, for many electric vehicle (EV) dealers the fuel crisis has led to an unexpected surge in inquiries and sales. EVA England, a non-profit representing new and prospective EV drivers, reports a rise in electric car inquiries and in interest at EV dealers, particularly in the last week. Along with existing factors such as the expansion of London's ultra-low emission zone, the fuel crisis has proved to be another trigger point, he said. "People were using it as 'this is the moment where I'm not going to put this off any longer,'" [said Martin Miller, owner of an electric car dealership in Guildford, Surrey].

The EV market is no longer the preserve of innovators and early adopters, he said, with the most popular models the Nissan Leaf, Volkswagen ID 3 and Jaguar I-Pace. Ben Strzalko, the owner of Electric Cars UK in Leyland, Lancashire, said that as a small business it would take a few months to feel the knock-on effect of the fuel crisis on sales. But every time there are problems with petrol or diesel, he said they acted as "one more tick for people making that transition to electric cars." Matt Cleevely, the owner of Cleevely Electric Vehicles in Cheltenham, Gloucestershire, which specialises in used EVs, had a surge of inquiries over the weekend and on Monday morning from customers citing the fuel crisis as a reason for switching to electric. He expects enthusiasm to continue rising, with petrol shortages adding "fuel to the fire."
Further reading: Europe's Energy Crisis Is About To Go Global As Gas Prices Soar (Bloomberg)
Communications

SpaceX Satellite Signals Used Like GPS To Pinpoint Location On Earth (gpsdaily.com) 27

schwit1 shares a report from GPS Daily: Engineering researchers have developed a method to use signals broadcast by Starlink internet service satellites to accurately locate a position here on Earth, much like GPS does. It is the first time the Starlink system has been harnessed by researchers outside SpaceX for navigation. The researchers used signals from six Starlink satellites to pinpoint a location on Earth within 8 meters of accuracy. The researchers did not need assistance from SpaceX to use the satellite signals, and they emphasized that they had no access to the actual data being sent through the satellites -- only to information related to the satellite's location and movement.

For this research, [Zak Kassas, director of the Center for Automated Vehicles Research with Multimodal Assured Navigation (CARMEN), a multi-institution transportation center housed at The Ohio State University] and his research team studied the Starlink system and analyzed signals being sent by the satellites. They developed an algorithm that could use the signals of multiple satellites to locate a position on Earth. Then, they set up an antenna on the campus of UCI and tried to use the network to pinpoint the antenna's location. Using Starlink, they identified the antenna's location within about 7.7 meters. GPS, by comparison, generally identifies a device's location within 0.3 and 5 meters. The team has used similar techniques with other low Earth orbit satellite constellations, but with less accuracy, pinpointing locations within about 23 meters, Kassas said. The team has also been working with the U.S. Air Force to pinpoint locations of high-altitude aircraft; they were able to come within 5 meters using land-based cellular signals, Kassas said.
The research paper has been published in the journal IEEE Xplore.
Transportation

Ford Recalls Mustang Mach-Es Over Risk of Glass Roof Flying Off (electrek.co) 52

Ford has issued a recall of 5,000 Mustang Mach-E electric SUVs in Canada over a risk of the glass roof and windshield potentially coming loose and falling off. Ironically, the automaker mocked Tesla for the same problem just a year ago. Electrek reports: The automaker just issued two recalls in Canada, and one of them is specifically about the risk of the glass roof coming off: "On certain vehicles, the glass panel of the panoramic sunroof may not be properly attached. Over time, the glass could become loose and separate from the vehicle."

Ford says that it affects 1,812 2021 Mustang Mach-E vehicles in Canada. On another 3,178 Mach-Es, Ford says that there's a similar problem that could result in the windshield coming off: "On certain vehicles, the windshield may not be properly attached. As a result, the glass can become loose and could separate from the vehicle in a crash." In both cases, Ford plans to notify the affected owners, check the roof and windshield, and reassemble them with more adhesive if needed. For now, it looks like the recalls are limited to Canadian Mach-Es, even though Ford produces all its electric SUVs at the same factory in Mexico.

Youtube

YouTube 'Valuable' For Teens' Mental Health, Says CEO (bloomberg.com) 57

YouTube Chief Executive Officer Susan Wojcicki said Google's video platform is beneficial to adolescents' mental health, amid growing concern that rival Instagram may be "toxic" for teenage girls. From a report: "We certainly do see for a lot of really tough issues that YouTube can be a really valuable resource," Wojcicki said in a Bloomberg Television interview. "So body positivity, mental health, we see a lot of creators actually talk about mental health and that, for a lot of kids, really it destigmatizes, and enables people to talk about what's happening and what's going on with them. So we do take it very seriously."
Displays

What It's Like To Spend 40-50 Hours In VR Every Week (immersed.team) 62

Technologist, physicist, and virtual reality professional Paul Tomlinson shares what it's like to spend 4,500+ hours "banging away at real work on virtual screens." Slashdot reader Keighvin shares an excerpt from his report, with the caption: "Portions of the 'metaverse' have leaked into 2021 from the future." Tomlinson writes: I float in space, surrounded on all sides by a grand view of the Milky Way Galaxy. A movie-theater-sized screen hangs before me, gently curved, everything at the perfect viewing distance. Eight different panes glitter with code, facets of a technological jewel granting views into the brain of a system responsible for moving tens of millions of dollars a day. A communications console canted like a drafting table at my fingertips holds a workshop of quick-fire exchanges with my colleagues, my meeting calendar, various API references, and camera feeds of the 'real' world. To my left, abutting the mammoth array of code, a two-story tall portrait display shows the specifications for the task at hand atop an ever-present Spotify playlist. I crank the tunes and get into my flow.

But this isn't an excerpt from some Ernest Cline novel -- this is my every-day experience. I'll spend 40-50 hours in Virtual Reality this week, like I did last week and every (work) week for the last 2 1/2 years. It's not just fun and games -- there are plenty of those, along with exercise, meditation, creativity, socializing, etc. -- but for this article, I'm only focusing on (and counting) the work. [...] It's not a stretch to say I'm in the top few percent of VR users on the planet; I've spent much time watching developments in the field and extrapolating future possibilities. I don't insist on my version of the future, but I hope what I've seen is worth sharing.
Keighvin asks: "How close are we to ditching screens? What would it take for you to work in VR or AR? What are the deal breakers?"
Education

Students Don't Know What Files And Folders Are, Professors Say (pcgamer.com) 186

University students in courses from engineering to physics are having to be taught what files and folders are, The Verge reports, because that's not how they've grown up using computers. Whenever they need a file, they just search for it. PCGamer summarizes the findings: "I tend to think an item lives in a particular folder. It lives in one place, and I have to go to that folder to find it," astrophysicist Catherine Garland said. "They see it like one bucket, and everything's in the bucket." Strange as it may seem to older generations of computer users who grew up maintaining an elaborate collection of nested subfolders, thanks to powerful search functions now being the default in operating systems, as well as the way phones and tablets obfuscate their file structure, and cloud storage, high school graduates don't see their hard drives the same way.

"Students have had these computers in my lab; they'll have a thousand files on their desktop completely unorganized," Peter Plavchan, an associate professor of physics and astronomy at George Mason University, told The Verge. "I'm kind of an obsessive organizer ... but they have no problem having 1,000 files in the same directory. And I think that is fundamentally because of a shift in how we access files." As The Verge points out, "The first internet search engines were used around 1990, but features like Windows Search and Spotlight on macOS are both products of the early 2000s [...] While many of today's professors grew up without search functions on their phones and computers, today's students increasingly don't remember a world without them."

This isn't necessarily a bad thing, or a reason to recoil in horror because how dare the youth of today do things differently, why the very idea. "When I was a student, I'm sure there was a professor that said, 'Oh my god, I don't understand how this person doesn't know how to solder a chip on a motherboard,'" Plavachan said. "This kind of generational issue has always been around." And Garland, the astrophysicist teaching an engineering course, has started using her PC's search function to find files in the same way her students do. "I'm like, huh ... I don't even need these subfolders," she said.

Google

Google, in Fight Against Record EU Fine, Slams Regulators for Ignoring Apple (reuters.com) 44

Alphabet unit Google on Monday blasted EU antitrust regulators for ignoring rival Apple as it launched a bid to get Europe's second-highest court to annul a record 4.34-billion euro ($5.1 billion) fine related to its Android operating system. From a report: Far from holding back rivals and harming users, Android has been a massive success story of competition at work, representatives of Google told a panel of five judges at the General Court at the start of a five-day hearing. The European Commission fined Google in 2018, saying that it had used Android since 2011 to thwart rivals and cement its dominance in general internet search. Regardless of how the court rules, Google, Apple, Amazon and Facebook will have to change their business models in the coming years to ensure a level playing field for rivals following tough new rules proposed by European Union antitrust chief Margrethe Vestager.

"The Commission shut its eyes to the real competitive dynamic in this industry, that between Apple and Android," Google's lawyer Meredith Pickford told the court. "By defining markets too narrowly and downplaying the potent constraint imposed by the highly powerful Apple, the Commission has mistakenly found Google to be dominant in mobile operating systems and app stores, when it was in fact a vigorous market disrupter," he said. Pickford said Android "is an exceptional success story of the power of competition in action."

Facebook

Facebook is Spending $50 Million To 'Responsibly' Build the Metaverse (theverge.com) 25

Facebook has announced a $50 million fund that it says will help it develop the metaverse more responsibly. From a report: It's officially called the XR Programs and Research Fund, and the company says it'll be invested into "programs and external research" over the course of two years. Facebook has previously funded academic research into the social impact of AR wearables and solicited VR hardware proposals. Facebook's announcement blog calls the metaverse the "next computing platform" and says that the company will be working with policymakers, researchers, and industry partners while building it. The announcement also gives us Facebook's definition of the sometimes nebulous word "metaverse." The company describes it as "virtual spaces where you can create and explore with other people" that you're not physically with, spread out over a variety of products and services.
Facebook

Facebook is Hitting the Brakes on Instagram for Kids (cnn.com) 38

Instagram is pressing pause on plans to develop a version of its service for kids under 13 after facing pressure from lawmakers to back down on the effort and new questions about the impact the photo-sharing service has on teen girls. From a report: "While we stand by the need to develop this experience, we've decided to pause this project," Adam Mosseri, head of Instagram, wrote in a blog post published Monday. "This will give us time to work with parents, experts, policymakers and regulators, to listen to their concerns, and to demonstrate the value and importance of this project for younger teens online today." The move comes just days before the US Senate was set to hold a hearing entitled "Protecting Kids Online: Facebook, Instagram, and Mental Health Harms" to discuss the pressure today's youth face on social media. That hearing comes after a Wall Street Journal investigation around what Facebook knows about how Instagram affects teen users, including their mental health. In the blog post Monday, Mosseri acknowledged that the Journal's reporting "has raised a lot of questions for people."
Social Networks

TikTok Reaches 1 Billion Monthly Active Users (techcrunch.com) 20

TikTok announced in a blog post today that 1 billion people use TikTok every month. From a report: That means that on this big rock in space that we call home, about one in seven-and-a-half people are regularly watching short-form videos of dancing, dangerous "milk crate challenges" and even actual educational content. For context, Facebook said that in June it had 2.9 billion monthly active users, up 7% year over year. But TikTok's growth is rapid -- this new user data marks a 45% increase in monthly active users since July 2020, when it had 689 million users. Plus, this July, TikTok became the first non-Facebook app to reach 3 billion global downloads, per app analytics firm SensorTower. The competition that TikTok poses to Western tech giants is palpable -- Instagram, owned by Facebook, has radically shifted its focus, declaring that it's no longer a photo-sharing app. Instagram is heavily promoting Reels, its TikTok clone, and even discussion forums like Reddit are enticed by the promise of short-form video feeds. Instagram even advised creators that if they recycle watermarked TikToks as posts on Reels, the content will be less discoverable.
Government

When the FBI Seizes Your Messages from Big Tech, You May Not Know for Years (msn.com) 91

When America's law enforcement investigators serve tech companies with subpoenas or search warrants,"the target of the investigation has no idea their data is being seized," the Washington Post pointed out this weekend.

It's becoming surprisingly common in the U.S. "And if investigators obtain a gag order, the records must be handed over without the person's knowledge or consent — depriving the person of an opportunity to challenge the seizure in court." Every year, Facebook, Google and other technology companies receive hundreds of thousands of orders from law enforcement agencies seeking data people stash online: private messages, photos, search histories, calendar items — a potentially rich trove for criminal investigators. Often, those requests are accompanied by secrecy orders, also known as nondisclosure or gag orders, that require the tech companies to keep their customers in the dark, potentially for years...

In the last six months of 2020, Facebook received 61,262 government requests for user data in the United States, said spokesman Andy Stone. Most — 69 percent — came with secrecy orders. Meanwhile, Microsoft has received between 2,400 and 3,500 secrecy orders from federal law enforcement each year since 2016 — or seven to 10 per day — according to congressional testimony by vice president of customer security and trust Tom Burt. Google and Apple declined to disclose the number of gag orders they've received. But in the first half of 2020, Google said U.S. law enforcement made 39,536 requests for information about 84,662 accounts — with many of the requests targeting multiple accounts. Apple said it received 11,363 requests...

Under the 1986 Electronic Communications Privacy Act, federal prosecutors are required to seek digital information from tech companies, not their customers. Since then, prosecutors have routinely used gag orders to prevent the companies from spilling the beans to suspects who might destroy evidence, go into hiding or threaten someone's life. But the practice has mushroomed over the past two decades, part of a broader surveillance ramp-up following the Sept. 11, 2001, terrorist attacks, lawyers said. As the orders have proliferated, privacy advocates and the tech companies themselves have become increasingly concerned. Some tech company officials have accused prosecutors of reflexively requesting gag orders for routine investigations, regardless of whether the cases actually require such secrecy. And an array of company officials and legal experts argue that the practice robs tech company customers of their constitutional protections against unreasonable search and seizure.

"Across all the rest of society, it's understood that government doesn't get to take your stuff, doesn't get to come in and into your house, doesn't get to break into your file folders or your lock box at the bank without a warrant. And you get to know about that warrant and you get to exercise your legal rights," Microsoft's Burt said in an interview. "Someone cannot exercise their Fourth Amendment rights when their data has been taken in secret."

U.S. lawmakers are considering changes, the article points out. One idea? Require tech companies "to preserve digital files that are the subject of court orders and permit customers to challenge the orders in court before the information is turned over to prosecutors."

Senator Ron Wyden of Oregon points out that's how wiretaps currently work — and is also drafting a measure that would finally require federal courts to publish statistics on the number of surveillance and secrecy orders they've issued.
Power

US Military Seeks Comments on Its Plan to Build a Small, Transportable Nuclear Reactor (apnews.com) 240

America's Department of Defense "is taking input on its plan to build an advanced mobile nuclear microreactor prototype at the Idaho National Laboratory in eastern Idaho," reports the Associated Press: The department began a 45-day comment period on Friday with the release of a draft environmental impact study evaluating alternatives for building and operating the microreactor that could produce 1 to 5 megawatts of power. The department's energy needs are expected to increase, it said. "A safe, small, transportable nuclear reactor would address this growing demand with a resilient, carbon-free energy source that would not add to the DoD's fuel needs, while supporting mission-critical operations in remote and austere environments," the Defense Department said.

The draft environmental impact statement cites President Joe Biden's January 27 executive order prioritizing climate change considerations in national security as another reason for pursuing microreactors. The draft document said alternative energy sources such as wind and solar were problematic because they are limited by location, weather and available land area, and would require redundant power supplies. The department said it uses 30 terawatt-hours of electricity per year and more than 10 million gallons (37.9 million liters) of fuel per day. Powering bases using diesel generators strains operations and planning, the department said, and need is expected to grow during a transition to an electrical, non-tactical vehicle fleet. Thirty terawatt-hours is more energy than many small countries use in a year.

The department in the 314-page draft environmental impact statement said it wants to reduce reliance on local electric grids, which are highly vulnerable to prolonged outages from natural disasters, cyberattacks, domestic terrorism and failure from lack of maintenance. The department also said new technologies such as drones and radar systems increase energy demands...

The Defense Department said a final environmental impact statement and decision about how or whether to move forward is expected in early 2022. If approved, preparing testing sites at the Idaho National Lab and then building and testing of the microreactor would take about three years.

The Internet

VoIP.ms Battles Week-Long Sustained DDoS-for-Ransom Attack (bleepingcomputer.com) 37

Slashdot reader Striek writes: VoIP.ms, a Canadian VoIP provider [also serving the US], has been under a sustained, and presumably massive DDoS attack which started on the September 16th, 2021. The attack has been disruptive enough to be covered by major media outlets, including Hacker News, ZDNet, Ars Technica, BleepingComputer, CTV News, and The Toronto Star.

They have so far refused to pay a ransom demand, which has grown from 1 bitcoin at the outset ($45,000 USD at that time), to 100 bitcoin now, or $45 million. Similar attacks have occurred recently on several UK based VOiP providers.

With DDoS attacks against VOiP infrastructure difficult to defend against — or at least more difficult than your bog-standard denial of service, this may be setting a worrying trend.

Bleeping Computer reported Monday that the attack was "severely disrupting the company's operation: As customers configured their VoIP equipment to connect to the company's domain name, the DDoS attack disrupted telephony services, preventing them from receiving or making phone calls. As DNS was no longer working, the company advised customers to modify their HOSTS file to point the domain at their IP address to bypass DNS resolution. However, this just led the threat actors to perform DDoS attacks directly at that IP address as well.

To mitigate the attacks, VoIP.ms moved their website and DNS servers to Cloudflare, and while they reported some success, the company's site and VoIP infrastructure still have issues due to the continued denial-of-service attack.

ZDNet has been following the story: In an update on Wednesday, VoIP.ms apologized to customers and confirmed it was still being targeted by what it described as a 'ransom DDoS attack' . VoIP.ms says it has over 80,000 customers in 125 countries.
And in addition, this afternoon the company's Twitter account announced that "Our main U.S. upstream carrier is currently experiencing major issues on their network affecting inbound and outbound calls and messaging to US numbers. We have already been in contact with their senior leadership team and they are on it along with their whole NOC."
EU

What Happened When Germany Tried to Fight Online Hate Speech? (msn.com) 236

"Harassment and abuse are all too common on the modern internet," writes the New York Times. "Yet it was supposed to be different in Germany." In 2017, the country enacted one of the world's toughest laws against online hate speech. It requires Facebook, Twitter and YouTube to remove illegal comments, pictures or videos within 24 hours of being notified about them or risk fines of up to 50 million euros, or $59 million. Supporters hailed it as a watershed moment for internet regulation and a model for other countries. But an influx of hate speech and harassment in the run-up to the German election, in which the country will choose a new leader to replace Angela Merkel, its longtime chancellor, has exposed some of the law's weaknesses...

Some critics of the law say it is too weak, with limited enforcement and oversight. They also maintain that many forms of abuse are deemed legal by the platforms, such as certain kinds of harassment of women and public officials. And when companies do remove illegal material, critics say, they often do not alert the authorities or share information about the posts, making prosecutions of the people publishing the material far more difficult. Another loophole, they say, is that smaller platforms like the messaging app Telegram, popular among far-right groups, are not subject to the law. Free-expression groups criticize the law on other grounds. They argue that the law should be abolished not only because it fails to protect victims of online abuse and harassment, but also because it sets a dangerous precedent for government censorship of the internet.

To address concerns that companies were not alerting the authorities to illegal posts, German policymakers this year passed amendments to the law. They require Facebook, Twitter and YouTube to turn over data to the police about accounts that post material that German law would consider illegal speech. The Justice Ministry was also given more powers to enforce the law... Facebook and Google have filed a legal challenge to block the new rules, arguing that providing the police with personal information about users violates their privacy.

An activist for the Electronic Frontier Foundation in Berlin tells the Times the law could encourage companies to remove offensive-but-legal speech. And Twitter shared a statement with additional concerns. "Threats, abusive content and harassment all have the potential to silence individuals. However, regulation and legislation such as this also has the potential to chill free speech by emboldening regimes around the world to legislate as a way to stifle dissent and legitimate speech."

Yet Germany's experience may ultimately influence policy across Europe, the Times points out, since German officials "are playing a key role in drafting one of the world's most anticipated new internet regulations, a European Union law called the Digital Services Act, which will require Facebook and other online platforms to do more to address the vitriol, misinformation and illicit content on their sites."

Slashdot Top Deals