TikTok announced in a blog post today that 1 billion people use TikTok every month. From a report: That means that on this big rock in space that we call home, about one in seven-and-a-half people are regularly watching short-form videos of dancing, dangerous "milk crate challenges" and even actual educational content. For context, Facebook said that in June it had 2.9 billion monthly active users, up 7% year over year. But TikTok's growth is rapid -- this new user data marks a 45% increase in monthly active users since July 2020, when it had 689 million users. Plus, this July, TikTok became the first non-Facebook app to reach 3 billion global downloads, per app analytics firm SensorTower. The competition that TikTok poses to Western tech giants is palpable -- Instagram, owned by Facebook, has radically shifted its focus, declaring that it's no longer a photo-sharing app. Instagram is heavily promoting Reels, its TikTok clone, and even discussion forums like Reddit are enticed by the promise of short-form video feeds. Instagram even advised creators that if they recycle watermarked TikToks as posts on Reels, the content will be less discoverable.

When America's law enforcement investigators serve tech companies with subpoenas or search warrants,"the target of the investigation has no idea their data is being seized," the Washington Post pointed out this weekend.

It's becoming surprisingly common in the U.S. "And if investigators obtain a gag order, the records must be handed over without the person's knowledge or consent — depriving the person of an opportunity to challenge the seizure in court." Every year, Facebook, Google and other technology companies receive hundreds of thousands of orders from law enforcement agencies seeking data people stash online: private messages, photos, search histories, calendar items — a potentially rich trove for criminal investigators. Often, those requests are accompanied by secrecy orders, also known as nondisclosure or gag orders, that require the tech companies to keep their customers in the dark, potentially for years...

In the last six months of 2020, Facebook received 61,262 government requests for user data in the United States, said spokesman Andy Stone. Most — 69 percent — came with secrecy orders. Meanwhile, Microsoft has received between 2,400 and 3,500 secrecy orders from federal law enforcement each year since 2016 — or seven to 10 per day — according to congressional testimony by vice president of customer security and trust Tom Burt. Google and Apple declined to disclose the number of gag orders they've received. But in the first half of 2020, Google said U.S. law enforcement made 39,536 requests for information about 84,662 accounts — with many of the requests targeting multiple accounts. Apple said it received 11,363 requests...

Under the 1986 Electronic Communications Privacy Act, federal prosecutors are required to seek digital information from tech companies, not their customers. Since then, prosecutors have routinely used gag orders to prevent the companies from spilling the beans to suspects who might destroy evidence, go into hiding or threaten someone's life. But the practice has mushroomed over the past two decades, part of a broader surveillance ramp-up following the Sept. 11, 2001, terrorist attacks, lawyers said. As the orders have proliferated, privacy advocates and the tech companies themselves have become increasingly concerned. Some tech company officials have accused prosecutors of reflexively requesting gag orders for routine investigations, regardless of whether the cases actually require such secrecy. And an array of company officials and legal experts argue that the practice robs tech company customers of their constitutional protections against unreasonable search and seizure.

"Across all the rest of society, it's understood that government doesn't get to take your stuff, doesn't get to come in and into your house, doesn't get to break into your file folders or your lock box at the bank without a warrant. And you get to know about that warrant and you get to exercise your legal rights," Microsoft's Burt said in an interview. "Someone cannot exercise their Fourth Amendment rights when their data has been taken in secret."
U.S. lawmakers are considering changes, the article points out. One idea? Require tech companies "to preserve digital files that are the subject of court orders and permit customers to challenge the orders in court before the information is turned over to prosecutors."

Senator Ron Wyden of Oregon points out that's how wiretaps currently work — and is also drafting a measure that would finally require federal courts to publish statistics on the number of surveillance and secrecy orders they've issued.

America's Department of Defense "is taking input on its plan to build an advanced mobile nuclear microreactor prototype at the Idaho National Laboratory in eastern Idaho," reports the Associated Press: The department began a 45-day comment period on Friday with the release of a draft environmental impact study evaluating alternatives for building and operating the microreactor that could produce 1 to 5 megawatts of power. The department's energy needs are expected to increase, it said. "A safe, small, transportable nuclear reactor would address this growing demand with a resilient, carbon-free energy source that would not add to the DoD's fuel needs, while supporting mission-critical operations in remote and austere environments," the Defense Department said.

The draft environmental impact statement cites President Joe Biden's January 27 executive order prioritizing climate change considerations in national security as another reason for pursuing microreactors. The draft document said alternative energy sources such as wind and solar were problematic because they are limited by location, weather and available land area, and would require redundant power supplies. The department said it uses 30 terawatt-hours of electricity per year and more than 10 million gallons (37.9 million liters) of fuel per day. Powering bases using diesel generators strains operations and planning, the department said, and need is expected to grow during a transition to an electrical, non-tactical vehicle fleet. Thirty terawatt-hours is more energy than many small countries use in a year.

The department in the 314-page draft environmental impact statement said it wants to reduce reliance on local electric grids, which are highly vulnerable to prolonged outages from natural disasters, cyberattacks, domestic terrorism and failure from lack of maintenance. The department also said new technologies such as drones and radar systems increase energy demands...

The Defense Department said a final environmental impact statement and decision about how or whether to move forward is expected in early 2022. If approved, preparing testing sites at the Idaho National Lab and then building and testing of the microreactor would take about three years.

Slashdot reader Striek writes: VoIP.ms, a Canadian VoIP provider [also serving the US], has been under a sustained, and presumably massive DDoS attack which started on the September 16th, 2021. The attack has been disruptive enough to be covered by major media outlets, including Hacker News, ZDNet, Ars Technica, BleepingComputer, CTV News, and The Toronto Star.

They have so far refused to pay a ransom demand, which has grown from 1 bitcoin at the outset ($45,000 USD at that time), to 100 bitcoin now, or $45 million. Similar attacks have occurred recently on several UK based VOiP providers.

With DDoS attacks against VOiP infrastructure difficult to defend against — or at least more difficult than your bog-standard denial of service, this may be setting a worrying trend.
Bleeping Computer reported Monday that the attack was "severely disrupting the company's operation: As customers configured their VoIP equipment to connect to the company's domain name, the DDoS attack disrupted telephony services, preventing them from receiving or making phone calls. As DNS was no longer working, the company advised customers to modify their HOSTS file to point the domain at their IP address to bypass DNS resolution. However, this just led the threat actors to perform DDoS attacks directly at that IP address as well.

To mitigate the attacks, VoIP.ms moved their website and DNS servers to Cloudflare, and while they reported some success, the company's site and VoIP infrastructure still have issues due to the continued denial-of-service attack.
ZDNet has been following the story: In an update on Wednesday, VoIP.ms apologized to customers and confirmed it was still being targeted by what it described as a 'ransom DDoS attack' . VoIP.ms says it has over 80,000 customers in 125 countries.
And in addition, this afternoon the company's Twitter account announced that "Our main U.S. upstream carrier is currently experiencing major issues on their network affecting inbound and outbound calls and messaging to US numbers. We have already been in contact with their senior leadership team and they are on it along with their whole NOC."

"Harassment and abuse are all too common on the modern internet," writes the New York Times. "Yet it was supposed to be different in Germany." In 2017, the country enacted one of the world's toughest laws against online hate speech. It requires Facebook, Twitter and YouTube to remove illegal comments, pictures or videos within 24 hours of being notified about them or risk fines of up to 50 million euros, or $59 million. Supporters hailed it as a watershed moment for internet regulation and a model for other countries. But an influx of hate speech and harassment in the run-up to the German election, in which the country will choose a new leader to replace Angela Merkel, its longtime chancellor, has exposed some of the law's weaknesses...

Some critics of the law say it is too weak, with limited enforcement and oversight. They also maintain that many forms of abuse are deemed legal by the platforms, such as certain kinds of harassment of women and public officials. And when companies do remove illegal material, critics say, they often do not alert the authorities or share information about the posts, making prosecutions of the people publishing the material far more difficult. Another loophole, they say, is that smaller platforms like the messaging app Telegram, popular among far-right groups, are not subject to the law. Free-expression groups criticize the law on other grounds. They argue that the law should be abolished not only because it fails to protect victims of online abuse and harassment, but also because it sets a dangerous precedent for government censorship of the internet.

To address concerns that companies were not alerting the authorities to illegal posts, German policymakers this year passed amendments to the law. They require Facebook, Twitter and YouTube to turn over data to the police about accounts that post material that German law would consider illegal speech. The Justice Ministry was also given more powers to enforce the law... Facebook and Google have filed a legal challenge to block the new rules, arguing that providing the police with personal information about users violates their privacy.
An activist for the Electronic Frontier Foundation in Berlin tells the Times the law could encourage companies to remove offensive-but-legal speech. And Twitter shared a statement with additional concerns. "Threats, abusive content and harassment all have the potential to silence individuals. However, regulation and legislation such as this also has the potential to chill free speech by emboldening regimes around the world to legislate as a way to stifle dissent and legitimate speech."

Yet Germany's experience may ultimately influence policy across Europe, the Times points out, since German officials "are playing a key role in drafting one of the world's most anticipated new internet regulations, a European Union law called the Digital Services Act, which will require Facebook and other online platforms to do more to address the vitriol, misinformation and illicit content on their sites."

Google used its "huge financial muscle" to illegally hurt competitors, the Competition Commission of India found after an antitrust investigation. But now Reuters says Google is suing the commission — for leaking the results of that investigation to the press: "We cooperated fully and maintained confidentiality throughout the investigative process, and we hope and expect the same level of confidentiality from the institutions we engage with," Google's statement added...

India's antitrust authority ordered a probe in 2019, saying Google appeared to have leveraged its dominance to reduce device makers' ability to opt for alternate versions of its mobile operating system and force them to pre-install Google apps. Its 750-page report subsequently found the mandatory pre-installation of apps "amounts to imposition of unfair condition on the device manufacturers" in violation of India's competition law. The report, which has been seen by Reuters but which is not public, also found the company leveraged the position of its Play Store app store to protect its dominance.

Google Photos' Locked Folder feature, which lets you hide sensitive photos and videos from your main library and secure them in a passcode- or biometric-protected folder, is coming to all devices running Android 6 and above. The Verge reports: The feature was released exclusively on newer Pixel phones in June. Google hasn't provided an exact date for when the feature is releasing more widely, noting only that it's "rolling out soon." When it announced the feature onstage at Google I/O in May, Google gave the wholesome example of the feature being used by parents hiding photos of a newly purchased puppy from their children. But I think it's fair to say that most people are going to have very different photos stored in their Locked Folder. I don't know about you, but in all the times I've had to wrench my phone out of someone's hand to stop them scrolling through my photos, it's never been because of a puppy picture.

Paul Ratner writes via Interesting Engineering: Theoretical inventions known as the "UFO patents" have been inflaming worldwide curiosity. A product of the American engineer Dr. Salvatore Cezar Pais, the patents were filed during his work for the U.S. Navy and are so ambitious in their scope and imagination that they continue to draw interest despite any clear evidence that they are feasible. The patents include designs for a futuristic hybrid vehicle with a radical propulsion system that would work equally well in the air, underwater, and in space, as well as a compact fusion reactor, a gravitational wave generator, and even a "spacetime modification weapon." The technology involved could impact reality itself, claims its inventor, whose maverick audacity rivals that of Nikola Tesla.

How real are these ideas? While you can read the patents for yourself, it's evident that the tech necessary to actually create the devices described is beyond our current capabilities. Yet research into many of these fields has gone on for years, which may explain why the Navy expressed an interest. Another likely influence is the fact that the Chinese government seems to be working to develop similar technology. The fantastical inventions devised by Dr. Pais largely build upon an idea that he calls "The Pais Effect." In his patent write-ups and in an interview with The Drive, he described it as "the generation of extremely high electromagnetic energy fluxes (and hence high local energy densities) generated by controlled motion of electrically charged matter (from solid to plasma states) subjected to accelerated vibration and/or accelerated spin, via rapid acceleration transients." This effect amounts to the ability to spin electromagnetic fields to contain a fusion reaction. The electromagnetic energy fields would be so powerful that they could "engineer the fabric of our reality at the most fundamental level," writes Pais. In practical terms, this invention could lead to a veritable revolution in propulsion, quantum communications, and create an abundance of cheaply-produced energy. Certainly, an extraordinary claim that requires extraordinary evidence, as posits the Sagan standard.

Despite the well-founded unease at Dr. Pais's inventions, the Navy took them seriously enough to run experiments for three years and even found some of them "operable," although the extent of that alleged operability is under debate. In the patent documents, two Navy officials seemed to assert the operability of the inventions. Furthermore, in correspondence with The Drive's "War Zone," Timothy Boulay of NAWCAD, stated that Pais's High Energy Electromagnetic Field Generator was, in fact, tested from 2016 until 2019, at a cost of $508,000. The team working on the project consisted of at least 10 technicians and engineers and put in some 1,600 hours of work. But upon the conclusion of the testing, the Pais Effect "could not be proven," shared Boulay. What happened subsequently with the tested device and further investigations is not known at this point. There are indications in documents obtained by The Drive's WarZone through the Freedom of Information Act that the inventions could be moved to another research department in the Navy or the Air Force, or possibly even to NASA or DARPA, but whether that really happened is not clear. "One of the most attention-grabbing designs by Dr. Pais is the 2018 patent for a cone-shaped craft of unprecedented range and speed," writes Ratner. "Another futuristic patent with far-reaching ramifications is Pais' Plasma Compression Fusion Device. [...] Notes from researchers who worked on vetting Pais' ideas indicate that a possible outcome of the plasma fusion device and the high energy levels it may generate is the 'Spacetime Modification Weapon' (SMW). Research documents refer to it as 'a weapon that can make the Hydrogen bomb seem more like a firecracker, in comparison.'"

Pais also has a patent for an electromagnetic field generator, which could create "an impenetrable defensive shield to sea and land as well as space-based military and civilian assets." Another device conceived by Pais that could deflect asteroids is the high-frequency gravitational wave generator.

An anonymous reader quotes a report from The Guardian: For the past 10 years, Sonia Grego has been thinking about toilets -- and more specifically what we deposit into them. "We are laser-focused on the analysis of stool," says the Duke University research professor, with all the unselfconsciousness of someone used to talking about bodily functions. "We think there is an incredible untapped opportunity for health data. And this information is not tapped because of the universal aversion to having anything to do with your stool." As the co-founder of Coprata, Grego is working on a toilet that uses sensors and artificial intelligence to analyze waste; she hopes to have an early model for a pilot study ready within nine months. "The toilet that you have in your home has not functionally changed in its design since it was first introduced," she says, in the second half of the 19th century. There are, of course, now loos with genital-washing capabilities, or heated seats, but this is basic compared with what Grego is envisaging. "All other aspects of your life -- your electricity, your communication, even your doorbell -- have enhanced capabilities."

Smart toilet innovators believe the loo could become the ultimate health monitoring tool. Grego believes her product -- which analyses and tracks stool samples and sends the data to an app -- will provide "information related to cancer and many chronic diseases." For general consumers, it will provide peace of mind, she says, by establishing "a healthy baseline": "Having technology that tracks what is normal for an individual could provide an early warning that a checkup is needed." For people with specific conditions, such as inflammatory bowel disease, the device could provide helpful monitoring for doctors. "It's very difficult to know when to escalate or de-escalate treatment," she says. "Stool-based biomarkers can provide that information." At some point, she thinks, a smart toilet could make lifestyle suggestions -- it could tell you to eat more fibre or certain nutrients, for instance, or work out what kind of food triggered an uncomfortable gastric episode. "The science of nutrition is really moving in the direction of personalized nutrition," says Grego. "Our technology will be an enabler of this, because you have information of what you eat, but we can make seamless the obtaining of information of what comes out." Researchers at the Stanford School of Medicine have been working on technology that can analyze feces (including "stool dropping time") and track the velocity and color of urine, as well as test it. According to the Wall Street Journal, the researchers have partnered with Izen, a Korean toilet manufacturer that's developed a scanner that can recognize the physical characteristics of whoever is sitting on the toilet -- or, in the words of the researchers, "the distinctive features of their anoderm" (the skin of the anal canal). While many people are ready for the smart toilet era, Stanford's study of user acceptance found that the "least favored module is analprint."

The Guardian article continues: Is all this -- your analprint out in the world, the makeup of your bowel movements analyzed -- a privacy breach too far? "Can it be kept secure?" asks Eerke Boiten, a professor of cybersecurity at De Montfort University in Leicester. [...] Many people "wouldn't, for very good reasons, like cameras pointing up their bottoms," says Phil Booth, the coordinator of MedConfidential, which campaigns for the confidentiality of medical records. That said, under the guidance of a medical professional, "there are not necessarily inherent privacy risks" in using a smart toilet as a medical device, he says. However, it might get interesting if the data created by general consumer use was owned by a company: "You may trust that particular company, but every company is pretty much buyable by Google or Facebook or Amazon. Then, what I thought was something for my own health monitoring has become fodder to business models I really know nothing about."

Where does it end? Could the police or others involved in surveillance track you by analprint, via the public and home smart lavatories you visit? Might you be asked to provide a print at a police station? [...] "Once you start to measure something that is of the body, the privacy line is stepped over," says Booth. "If you don't measure what's going on with someone's bowel movements, the bowel movement is private." This is an alarming thought -- but, says Booth with a laugh, it is not as though governments will mandate smart toilets. He says there will always be people -- those into the "quantified self" movement -- who are happy to measure and track themselves. If smart loos are considered clinical devices collecting medical data, "then it's a straight medical breach risk -- not special to toilets, but because you've turned the toilet into a medical data-generating experience. Are they managing those risks correctly?"

Facebook announced a new project on Thursday that will bring broadband service to thousands of households in Virginia this fall, in partnership with a local ISP and utility company. The Verge reports: The project began with fiber networks Facebook was already building to connect its data centers in Virginia, Ohio, and North Carolina. With that fiber already laid, Facebook partnered with Appalachian Power and GigaBeam Networks to extend the networks to roughly 6,000 households in Grayson County, VA. The homes are projected to have high-speed broadband access by the end of this fall. "These are really complicated problems that we're trying to solve. If they weren't complicated, then we still wouldn't have 19 million people that were unserved or underserved," Michele Kohler, Facebook's network investments team manager, told The Verge in an interview Wednesday. "We're trying to figure out how can we play in the equation, with these complex partnerships, to figure out how we can help people get connected faster."

Kohler also said that Facebook is providing "engineering and technical resources" to the partnering companies. The proposed network would leverage a new law approved by the Virginia legislature last year that allows electric and communications companies to string fiber along existing poles and conduits. Still, the future of these networks is unclear as utility companies like Rappahannock Electric Cooperative have been sued by property owners for infringing on their property rights when they've sought to invoke the new provisions.

An anonymous reader shares a report: If you've ever tried searching on Google for one of those TikTok or Instagram videos all your friends are gushing about -- such as sea shanties or the Renegade dance -- you'll notice something. The videos don't show up. Google is trying to fix that -- but there's no guarantee its efforts will succeed. Google executives have been quietly negotiating with their counterparts at the video apps' parent companies, ByteDance for TikTok and Facebook for Instagram, to get the data it needs to index and rank videos, according to three people who were briefed about the discussions. Right now, the best results users typically see when they search are previews of videos from Google-owned YouTube, which at times hosts lower-quality copies or ripoffs of TikTok and Instagram videos. The talks show how Google is trying to keep its search engine relevant with more users as it faces new competition and regulatory threats.

The FCC has sent out the first checks from its Emergency Connectivity Fund, an effort to help close the "homework gap" at schools by covering the cost of computers and internet services. From a report: Thousands of school districts, in every state plus D.C., Guam and Puerto Rico, will split this first $1.2 billion distribution, and there's still lots more to come. The problem they are looking to mitigate is the large number of students who, in an age when studying, homework and now even classes are all done online, lack a device or adequate internet connection to participate. This exacerbates an existing inequality, for these students often lack access to other resources and end up falling behind through no fault of their own. The ECF was conceived to combat this, and funded earlier this year as part of the big pandemic recovery bill. It's a $7 billion program in total, but the money is being distributed over time as schools and libraries make their formal requests, saying they need to cover the cost of this many tablets, or wireless hotspots, or broadband connections. The FCC seems to be picking up the bill as long as the request is reasonable and the paperwork is in order.

Starting in 2030, California will require all light-duty autonomous vehicles that operate in the state to emit zero emissions. From a report: Signed into law by Governor Gavin Newsom on Thursday, SB 500 represents the latest effort by the state to limit the sale of new internal combustion vehicles with an eye towards reducing greenhouse emissions. In 2020, Newsom signed an executive order that effectively banned the sale of new gasoline and diesel-powered vehicles by 2035. That same year, the state's Air Resources Board mandated that all new trucks sold in California emit zero emissions by 2045. "We're grateful for California's leadership in ensuring this will be the industry standard," said Prashanthi Raman, head of global government affairs at Cruise, in a statement to Engadget. "The AV industry is primed to lead the way in reducing greenhouse gas emissions in cities, and it's why we've operated an all-electric, zero-emissions fleet from the start." Cruise backed SB 500 through its involvement with the Emission Zero Coalition, a group that also includes autonomous delivery startup Nuro.

A software outage temporarily affected the U.K. Border Force's automated entry gates, slowing arrivals at airports across the country. From a report: Hubs in London Heathrow and Manchester reported issues before the Home Office said the problem was resolved. "We're aware of a systems failure impacting the e-gates, which are staffed & operated by Border Force," Heathrow said in a tweet. "This issue is impacting a number of ports of entry." Travelers reported long lines at Heathrow, with documentary filmmaker Louis Theroux describing a "human logjam" at the nation's largest airport.

An anonymous reader quotes a report from Ars Technica: The Verge has spotted an apparently new warning message in the Windows 11 Setup app that explicitly warns users of the dangers of installing Windows 11 on unsupported hardware -- you may run into "compatibility issues," your PC "won't be entitled to receive updates," and that "damages to your PC due to lack of compatibility aren't covered under the manufacturer warranty." This is all stuff that we've heard from Microsoft before, but it's the first time that this policy has appeared during the Windows 11 setup process rather than in media reports. Once you click through this foreboding warning message, the Windows 11 installation is apparently allowed to proceed.

I've tried and failed to recreate this screen on multiple unsupported Windows 10 systems of different vintages, both with builds downloaded through the Insider program and installs directly from a manually downloaded Windows 11 ISO file. I also haven't seen any firsthand reports of it outside of the Verge report. This doesn't mean it isn't happening -- Microsoft is always rolling out different updates to different groups of people at different times -- just that I can only speculate as to when you will actually see this message and what it means. My guess is that it is eventually intended to replace another screen currently shown when you attempt a manual install of Windows on an unsupported system, one that totally blocks the upgrade if you don't meet Windows 11's processor, TPM, or Secure Boot requirements. The only way to get around that screen and proceed with installation for current builds of Windows 11 is to implement some registry edits that disable the system checks. This new screen would keep the checks in place while allowing people to perform the kind of manual, officially unsupported installs that the company has begrudgingly decided to allow.

The Salesforce CEO and owner of Time Magazine, Marc Benioff, sees a common thread for what ails America today: deception that is allowed to spread like wildfire on Facebook. "This digital revolution really kind of has the world in its grip. And in that grip, you can see the amount of mistrust and misinformation that is happening," Benioff told CNN. From a report: "Look at how it is affecting the world. You can talk about the political process. You can talk about climate. You can talk about the pandemic," Benioff said. "In each and every major topic, it gets connected back to the mistrust that is happening and especially the amount of it being seeded by the social networks. It must stop now."

"Some of these social media companies, especially Facebook, you can see that they don't really care that their platform is filled with all of this disinformation," Benioff said. The tech billionaire called for Congress to crack down on Facebook's disinformation problem. "I own Time and I am held accountable for what is produced on my platform," Benioff said, adding that CNN and other media outlets are also held accountable. "In regards to Facebook, they are not held accountable. So they do not have an incentive from the government. That has to change." Benioff urged Congress to review existing laws to try to stop the "level of deceit" happening on social networks.

According to multiple databases, researchers, and cybersecurity companies who spoke to MIT Technology Review, 2021 has had the highest number of zero-day exploits on record. "At least 66 zero-days have been found in use this year, according to databases such as the 0-day tracking project -- almost double the total for 2020, and more than in any other year on record," the report says. From the report: One contributing factor in the higher rate of reported zero-days is the rapid global proliferation of hacking tools. Powerful groups are all pouring heaps of cash into zero-days to use for themselves -- and they're reaping the rewards. At the top of the food chain are the government-sponsored hackers. China alone is suspected to be responsible for nine zero-days this year, says Jared Semrau, a director of vulnerability and exploitation at the American cybersecurity firm FireEye Mandiant. The US and its allies clearly possess some of the most sophisticated hacking capabilities, and there is rising talk of using those tools more aggressively.

Attackers are exploiting the same types of software vulnerabilities over and over again, because companies often miss the forest for the trees. And cybercriminals, too, have used zero-day attacks to make money in recent years, finding flaws in software that allow them to run valuable ransomware schemes. "Financially motivated actors are more sophisticated than ever," Semrau says. "One-third of the zero-days we've tracked recently can be traced directly back to financially motivated actors. So they're playing a significant role in this increase which I don't think many people are giving credit for."

While there may be an increasing number of people developing or buying zero-days, the record number reported isn't necessarily a bad thing. In fact, some experts say it might be mostly good news. No one we spoke to believes that the total number of zero-day attacks more than doubled in such a short period of time -- just the number that have been caught. That suggests defenders are becoming better at catching hackers in the act. You can look at the data, such as Google's zero-day spreadsheet, which tracks nearly a decade of significant hacks that were caught in the wild. One change the trend may reflect is that there's more money available for defense, not least from larger bug bounties and rewards put forward by tech companies for the discovery of new zero-day vulnerabilities. But there are also better tools. Defenders have clearly gone from being able to catch only relatively simple attacks to detecting more complex hacks, says Mark Dowd, founder of Azimuth Security. "I think this denotes an escalation in the ability to detect more sophisticated attacks," he says. Further reading: Emergency Software Patches Are on the Rise

A collection containing data about more than 700 million users, believed to have been scraped from LinkedIn, was leaked online this week after hackers previously tried to sell it earlier this year in June. From a report: The collection, obtained by The Record from a source, is currently being shared in private Telegram channels in the form of a torrent file containing approximately 187 GB of archived data. The Record analyzed files from this collection and found the data to be authentic, with data points such as: LinkedIn profile names, LinkedIn ID, LinkedIn profile URL, location information (town, city, country), and email addresses. While the vast majority of the data points contained in the leak are already public information and pose no threat to LinkedIn users, the leak also contains email addresses that are not normally viewable to the public on the official LinkedIn site.

Is the FAA licensing spaceports that are doomed to fail? From a report: The latest launch attempt out of Kodiak, Alaska's spaceport shows in vivid detail just how quickly things can go sideways. In the video, rocket maker Astra's 3.3 skids horizontally for hundreds of yards, then shoots some 20 miles upwards, listing off course. Ground crew terminates the flight, and the craft free falls back to Earth in pieces, landing in a fireball. None of Astra's six test flights from Kodiak's Pacific Spaceport Complex have made it into orbit, and five have exploded. But, as Jeff Bezos says, failure and innovation are inseparable twins.

Analysts expect the commercial space industry to be worth $1 trillion by 2040, and increasingly, small towns are angling to get in on the action. One such community is Camden County, Georgia, where a group of county commissioners is longing for their own spaceport -- and the economic growth and diversification they hope will come with it. There's one caveat: Spaceport Camden's sole proposed launch trajectory would, in an unprecedented move, cross two populated islands, as well as a federally protected marshland and wilderness, just a few miles from the toxic brownfield set to become the launch site.

To some residents, this seems like an astronomically bad idea. But failures -- even explosive ones -- don't faze Camden County: according to spaceport planners, Astra is a prime launch tenant candidate, and Alaska Aerospace Corporation, which runs Kodiak's spaceport, could become an operation partner. All they need to get this plan off the ground is an operation license from the Federal Aviation Administration. And to secure that, they aren't basing their proposal on rockets like the one that blew up in Alaska -- instead, they're using models of rockets that don't exist.

An anonymous reader quotes a report from NPR: It's neither a bird nor a plane, but a winged microchip as small as a grain of sand that can be carried by the wind as it monitors such things as pollution levels or the spread of airborne diseases. The tiny microfliers, whose development by engineers at Northwestern University was detailed in an article published by Nature this week, are being billed as the smallest-ever human-made flying structures.

The devices don't have a motor; engineers were instead inspired by the maple tree's free-falling propeller seeds -- technically known as samara fruit. The engineers optimized the aerodynamics of the microfliers so that "as these structures fall through the air, the interaction between the air and those wings cause a rotational motion that creates a very stable, slow falling velocity," said John A. Rogers, who led the development of the devices. "That allows these structures to interact for extended periods with ambient wind that really enhances the dispersal process," said the Northwestern professor of materials science and engineering, biomedical engineering and neurological surgery.

The wind would scatter the tiny microchips, which could sense their surrounding environments and collect information. The scientists say they could potentially be used to monitor for contamination, surveil populations or even track diseases. Their creators foresee microfliers becoming part of "large, distributed collections of miniaturized, wireless electronic devices." In other words, they could look like a swarm. "We think that we beat nature," Rogers said. "At least in the narrow sense that we have been able to build structures that fall with more stable trajectories and at slower terminal velocities than equivalent seeds that you would see from plants or trees."