After Havana shut down online access for 72 hours, the battle is on to keep the country connected. From a report: Cubans used to joke about Napoleon Bonaparte chatting to Mikhail Gorbachev, George W Bush and Fidel Castro in the afterlife. "If I'd have had your prudence, I'd never have fought Waterloo," the French emperor tells the last Soviet leader. "If I'd have had your military might, I'd have won Waterloo," he tells the Texan. Turning last to Castro, the emperor says: "If I'd have had Granma [the Cuban Communist party daily], I'd have lost Waterloo but nobody would have known." The joke no longer does the rounds.

With millions of Cubans now online, the state's monopoly on mass communication has been deeply eroded. But after social media helped catalyse historic protests on the island last month, the government temporarily shut the internet down. Full connectivity returned 72 hours later, but the issue has become a hot potato in the US. Hundreds of Cuban-Americans marched against the regime in Washington last week, and politicians are trying to leverage political capital: Florida senator Marco Rubio has called for the US to beam balloon-supplied internet to the island nation, while Joe Biden said his administration is assessing whether it can increase Cuba's connectivity. Experts say it's unclear how internet access could be increased at scale if the host nation is unwilling to cooperate.

"I haven't seen anything other than pie in the sky," said Larry Press, professor of information systems at California State University. Past US government attempts to bolster connectivity in Cuba read like a John Le Carre novel. In 2009, Alan Gross, a subcontractor for the US Agency for International Development, was arrested for distributing satellite equipment. His work was funded thanks to a US law that explicitly calls for the overthrow of the Castro regime. (Gross was later released as part of the restoration of US-Cuban relations during Barack Obama's second term.) Attempts to smuggle satellite ground stations disguised as surf boards on to the island were similarly foiled.

Microsoft said this week it plans to run an experiment in its Edge web browser where it will intentionally disable an important performance and optimization feature in order to enable more advanced security upgrades in what the company is calling Edge Super Duper Secure Mode. From a report: Announced today by Johnathan Norman, Microsoft Edge Vulnerability Research Lead, the idea behind the new Super Duper Secure Mode is to disable support for JIT (Just-In-Time) inside V8, the Edge browser's JavaScript engine. JIT, while unknown to most end-users, plays a crucial role in all of today's web browsers. JIT works by taking JavaScript and compiling it to machine code ahead of time. If the browser needs the code, it gains a significant speed boost. If it doesn't, the code is discarded.

However, JIT support in V8 is complex. Norman said JIT-related security issues amounted to 45% of all V8 vulnerabilities in 2019. Furthermore, more than half of the "in the wild" Chrome exploits rely on JIT-related bugs. Norman said that recent tests carried out by the Edge team have shown that despite its pivotal role in speeding up browsers in the early and mid-2010s, JIT is not a crucial feature anymore to Edge's performance.

Verizon Communications is enlisting artificial intelligence models to help place thousands of 5G wireless transmitters for optimal performance. From a report: Later this year, the company will begin a multibillion-dollar rollout of midband spectrum, which expands coverage of its existing ultra wideband 5G wireless service. Maximizing coverage with the least number of transmitters is a priority, said Shankar Arumugavelu, senior vice president and global chief information officer of Verizon. "When we build out these networks, these are very capital-intensive," he said. "We have to make sure that we are being very judicious in terms of how we are investing our capital."

The models, designed by in-house data scientists and other employees, factor in a number of variables that can alter the strength of 5G signals, like buildings, bridges, terrain, the position of the transmitter, as well as other transmitters nearby. Verizon, along with rivals AT&T and T-Mobile, is racing to build out nationwide 5G service, a yearslong effort slowed by the lack of available airwaves for fast transmission and long signal ranges, and by the deployment of new network equipment, analysts have said.

Apple intends to install software on American iPhones to scan for child abuse imagery, Financial Times is reporting citing people briefed on the plans, raising alarm among security researchers who warn that it could open the door to surveillance of millions of people's personal devices. From the report: Apple detailed its proposed system -- known as "neuralMatch" -- to some US academics earlier this week, according to two security researchers briefed on the virtual meeting. The plans could be publicised more widely as soon as this week, they said. The automated system would proactively alert a team of human reviewers if it believes illegal imagery is detected, who would then contact law enforcement if the material can be verified. The scheme will initially roll out only in the US.

The proposals are Apple's attempt to find a compromise between its own promise to protect customers' privacy and ongoing demands from governments, law enforcement agencies and child safety campaigners for more assistance in criminal investigations, including terrorism and child pornography. [...] "This will break the dam -- governments will demand it from everyone," said Matthew Green, a security professor at Johns Hopkins University, who is believed to be the first researcher to post a tweet about the issue. Alec Muffett, a security researcher and privacy campaigner who formerly worked at Facebook and Deliveroo, said Apple's move was "tectonic" and a "huge and regressive step for individual privacy. Apple are walking back privacy to enable 1984," he said.

President Biden wants 50 percent of all new cars sold in the United States in 2030 to be all-electric, plug-in hybrid, or hydrogen-powered. From a report: In addition, his administration will propose new fuel economy and emissions standards that will more or less erase the Trump administration's rollback of the previous Obama-era rules covering cars made through 2025. Biden will also sign an executive order that tasks the Environmental Protection Agency (EPA) and National Highway Traffic Safety Administration (NHTSA) to develop aggressive long-term rules to support his 2030 target, ones that include medium- and heavy-duty vehicles as well. "When I say electric vehicles are the future, I'm not joking," read a tweet from the President on Wednesday night.

This planned shift away from internal combustion engines is not as aggressive as the approaches that have been proposed or set in motion around the world. The European Union has proposed a de-facto ban on sales of new gas-powered passenger vehicles by 2035, though France has pushed back on the phaseout of hybrids, which still use fossil fuels. The United Kingdom wants to stop selling new combustion engine vehicles by 2030. China wants all new cars sold in 2035 to be hybrids at the very least, but is aiming for 50 percent to be plug-in hybrid, battery electric, or hydrogen-powered.

The U.S. government is enlisting the help of tech companies, including Amazon, Microsoft and Google, to bolster the country's critical infrastructure defenses against cyber threats after a string of high-profile attacks. From a report: The Department of Homeland Security, on Thursday, is formally unveiling the initiative called the Joint Cyber Defense Collaborative. The effort will initially focus on combating ransomware and cyberattacks on cloud-computing providers, said Jen Easterly, director of the DHS's Cybersecurity and Infrastructure Security Agency. Ultimately, she said, it aims to improve defense planning and information sharing between government and the private sector.

"This will uniquely bring people together in peacetime, so that we can plan for how we're going to respond in wartime," she said in an interview. Ms. Easterly was sworn in as CISA's director last month. She was previously a counterterrorism official in the Obama White House, and the commander of the Army's first cyber operations unit at the National Security Agency, America's cyberspy agency. Over the past year, ransomware attacks have disrupted large parts of daily life in the U.S. They have diverted ambulances, caused long lines at gas stations in the southeast, and disrupted the production of hot dogs and other meat products.

An anonymous reader quotes a report from Wired: Well over 100 employees at Amazon Prime Air have lost their jobs and dozens of other roles are moving to other projects abroad as the company shutters part of its operation in the UK, WIRED understands. Insiders claim the future of the UK operation, which launched in 2016 to help pioneer Amazon's global drone delivery efforts, is now uncertain. Those working on the UK team in the last few years, who spoke on condition of anonymity, describe a project that was "collapsing inwards," "dysfunctional" and resembled "organized chaos," run by managers that were "detached from reality" in the years building up to the mass redundancies.

They told WIRED about increasing problems within Prime Air in recent years, including managers being appointed who knew so little about the project they couldn't answer basic work questions, an employee drinking beer at their desk in the morning and some staff being forced to train their replacements in Costa Rica. Amazon says it still has staff working for Prime Air in the UK, but has refused to confirm headcount. [...] An Amazon spokesperson says it will still have a Prime Air presence in the UK after the cuts, but refuses to disclose what type of work will take place. The spokesperson also refused to confirm, citing security reasons, if any of the test flights that once filled promotional videos will still take place in the UK. The spokesperson adds that the company has found positions in other parts of its business for some affected employees and that it will keep growing its presence in the region. The spokesperson did not confirm how many employees were offered other jobs internally.

A Spanish company has devised a system to extract drinking water from thin air to supply arid regions where people are in desperate need. Reuters reports: "The goal is to help people," said Enrique Veiga, the 82-year-old engineer who invented the machine during a harsh drought in southern Spain in the 1990s. "The goal is to get to places like refugee camps that don't have drinking water." The devices made by his company, Aquaer, are already delivering clean, safe water to communities in Namibia and a Lebanese refugee camp. "In the villages we visited in Namibia, they were astonished, they didn't understand, asking where the water came from," he said.

The machines use electricity to cool air until it condenses into water, harnessing the same effect that causes condensation in air-conditioning units. While other water generators based on similar technology require high ambient humidity and low temperatures to function effectively, Veiga's machines work in temperatures of up to 40 Celsius (104F) and can handle humidity of between 10% and 15%. A small machine can produce 50-75 liters a day, and be easily carried on a trolley, but bigger versions can produce up to 5,000 liters a day.

People will no longer be able to play the digital version of The New York Times daily crossword puzzle in third-party apps, according to an announcement made by the Times on Monday. The Verge reports: Starting August 10th, the crossword will be available digitally only via the NYT site or on its own crossword app. Downloadable PDFs, in addition to the physical newspaper, will still be available for people who want to print and play. Until now, crosswords were available in the Across Lite .puz file format, so anyone with a Times games subscription could download a puzzle and open it in the desktop or mobile app of their choice. The change applies not just to future puzzles but to the archive of puzzles that are currently in the .puz format.

Everdeen Mason, editorial director of games at the Times, said on Twitter that she made the decision to end .puz support in an effort to build something where editors can "edit and make games rather than adapt things for tools we can't control."

An anonymous reader quotes a report from It's FOSS, written by Ankush Das: Mozilla's Firefox is the only popular alternative to Chromium-based browsers. It has been the default choice for Linux users and privacy-conscious users across every platform. However, even with all benefits as one of the best web browsers around, it is losing its grip for the past few years. I came across a Reddit thread by u/nixcraft, which highlighted more details on the decline in the userbase of Firefox since 2018. And surprisingly, the original source for this information is Firefox's Public Data Report.

As per the official stats, the reported number of active (monthly) users was about 244 million at the end of 2018. And, it seems to have declined to 198 million at the end of Q2 2021. So, that makes it a whopping ~46 million decline in the userbase. Considering 2021 is the year when privacy-focused tools saw a big boost in their userbase, Mozilla's Firefox is looking at a constant decline. Especially when Firefox manages to introduce some industry-first privacy practices. Quite the irony, eh? Just for fun, here's a timeline of our stories reporting on Firefox's download milestones from the mid-2000s:

September 19, 2004: 1 Million Firefoxes in 4 Days
December 12, 2004: Firefox Reaches 10 Million Downloads
February 17, 2005: Firefox Breaks 25 Million Downloads
April 26, 2005: Firefox nears 50 Million Downloads
July 29, 2005: Firefox Downloads Reach 75 Million
October 19, 2005: Firefox Tops 100 Million Downloads
September 11, 2007: Firefox Hits 400 Million Downloads
July 3, 2008: Firefox Breaks 8 Million, Gets Into Guinness

Ron Amadeo writing via Ars Technica: Who remembers the sudden and dramatic death of Google+? Google's Facebook competitor and "social backbone" was effectively dead inside the company around 2014, but Google let the failed service hang around for years in maintenance mode while the company spun off standalone products. In 2018, The Wall Street Journal reported that Google+ had exposed the private data of "hundreds of thousands of users" for years, that Google knew about the problem, and that the company opted not to disclose the data leak for fear of regulatory scrutiny. In the wake of the report, Google was forced to acknowledge the data leak, and the company admitted that the "private" data of 500,000 accounts actually wasn't private. Since nobody worked on Google+ anymore, Google's "fix" for the bug was to close Google+ entirely. Then the lawsuits started.

Today's class-action lawsuit, Matt Matic and Zak Harris v. Google, was filed in October 2018 and blames Google's "lax approach to data security" for the bugs. The complaint added, "Worse, after discovery of this vulnerability in the Google+ platform, Defendants kept silent for at least seven months, making a calculated decision not to inform users that their Personal Information was compromised, further compromising the privacy of consumers' information and exposing them to risk of identity theft or worse." The case website with full details is at googleplusdatalitigation.com. The case was settled in June 2020, with Google agreeing to pay out $7.5 million. After losing about half of that money to legal and administrative fees, and with 1,720,029 people filling out the right forms by the October 2020 deadline, the payout for each person is a whopping $2.15.

An anonymous reader shares a report: It has been over three months since Click Studios, the Australian software house behind the enterprise password manager Passwordstate, warned its customers to "commence resetting all passwords." The company was hit by a supply chain attack that sought to steal the passwords from customer servers around the world. But customers tell TechCrunch that they are still without answers about the attack. Several customers say they were met with silence from Click Studios, while others were asked to sign strict secrecy agreements when they asked for assurances about the security of the software. One IT executive whose company was compromised by the attack said they felt "abandoned" by the software maker in the wake of the attack.

Passwordstate is a standalone web server that enterprise companies can use to store and share passwords and secrets for their organizations, like keys for cloud systems and databases that store sensitive customer data, or "break glass" accounts that grant emergency access to the network. Click Studios says it has 29,000 customers using Passwordstate, including banks, universities, consultants, tech companies, defense contractors and U.S. and Australian government agencies, according to public records seen by TechCrunch.

Facebook shut down accounts belonging to two academic researchers late Tuesday, cutting off their ability to study political ads and misinformation on the world's biggest social network. From a report: The company accused the academics of engaging in "unauthorized scraping" and compromising user privacy on the platform, claims that Facebook's many critics are slamming as a thin pretense for killing the transparency work. The company took action against Laura Edelson and Damon McCoy, two well-known researchers affiliated with NYU's Cybersecurity for Democracy project who have long sparred with the company.

The move cuts off their access to Facebook's Ad Library -- one of the company's only meaningful transparency efforts to date -- and data on popular posts from the social media monitoring service CrowdTangle. Facebook has a history with Edelson and McCoy. The company served the pair cease and desist letters just weeks before the 2020 election, calling on the team to disable an opt-in browser tool called Ad Observer and unpublish their findings. Ad Observer is a browser tool anyone can install that's designed to give researchers a rare glimpse into how Facebook targets the ads that have transformed it into a trillion-dollar company. "Over the last several years, we've used this access to uncover systemic flaws in the Facebook Ad Library, identify misinformation in political ads including many sowing distrust in our election system, and to study Facebook's apparent amplification of partisan misinformation," Edelson said on Twitter. "After years of abusing users' privacy, it's rich for Facebook to use it as an excuse to crack down on researchers exposing its problems. I've asked the FTC to confirm that this excuse is as bogus as it sounds," tweeted Sen. Ron Wyden (D-OR).

At the Black Hat security conference Wednesday, two security researchers have disclosed a security issue impacting hosted DNS service providers that can be abused to hijack the platform's nodes, intercept some of the incoming DNS traffic, and then map customers' internal networks. From a report: Discovered by Shir Tamari and Ami Luttwak from cloud security company Wiz, the vulnerability highlights the amount of sensitive information collected by managed DNS platforms and their attractiveness from a cyber-espionage and intelligence data collection standpoint.

Also known as DNS-as-a-Service providers, these companies effectively rent DNS servers to corporate entities. While it's not hard to run your own DNS name server, the benefit of using a service like AWS Route53 or the Google Cloud Platform is that companies can offload managing DNS server infrastructure to a third-party and take advantage of better uptime and top-notch security. Companies that sign up for a managed DNS provider typically have to onboard their internal domain names with the service provider. This typically means companies have to go to a backend portal and add their company.com and other domains to one of the provider's name servers (i.e., ns-1611.awsdns-09.co.uk). Once this is done, when a company employee wants to connect to an intranet app or an internet website, their computer will query the third-party DNS server for the IP address it needs to connect. What the Wiz team discovered was that several managed DNS providers did not blacklist their own DNS servers inside their backends.

An anonymous reader writes: Russia has put forward a draft convention to the United Nations ostensibly to fight cyber-crime. The proposal, titled "United Nations Convention on Countering the Use of Information and Communications Technologies for Criminal Purposes," calls for member states to develop domestic laws to punish a far broader set of offenses than current international rules recognize. Russia, the ransomware hotbed whose cyber-spies were blamed for attacking US and allied networks, did not join the 2001 Budapest Convention on Cybercrime because it allowed cross-border operations, which it considers a threat to national sovereignty. Russian media outlet Tass also said the 2001 rules are flawed because they only criminalize nine types of cyber offenses. The new draft convention from Russia, submitted last week, defines 23 cybercrimes for discussion.

Russia's proposed rule expansion, for example, calls for domestic laws to criminalize changing digital information without permission -- "the intentional unauthorized interference with digital information by damaging, deleting, altering, blocking, modifying it, or copying of digital information." The draft also directs members states to formulate domestic laws to disallow unsanctioned malware research -- "the intentional creation, including adaptation, use and distribution of malicious software intended for the unauthorized destruction, blocking, modification, copying, dissemination of digital information, or neutralization of its security features, except for lawful research." It would forbid "the creation and use of digital data to mislead the user," such as deep fakes -- "the intentional unlawful creation and use of digital data capable of being mistaken for data already known and trusted by a user that causes substantial harm."

Google has fired dozens of employees between 2018 and 2020 for abusing their access to the company's tools or data, with some workers potentially facing allegations of accessing Google user or employee data, according to an internal Google document obtained by Motherboard. From a report: The document provides concrete figures on an often delicate part of a tech giant's operations: investigations into how company's own employees leverage their position inside the company to steal, leak, or abuse data they may have access to. Insider abuse is a problem across the tech industry. Motherboard previously uncovered instances at Facebook, Snapchat, and MySpace, with employees in some cases using their access to stalk or otherwise spy on users.

The document says that Google terminated 36 employees in 2020 for security related issues. Eighty-six percent of all security-related allegations against employees included mishandling of confidential information, such as the transfer of internal-only information to outside parties. 10 percent of all allegations in 2020 concerned misuse of systems, which can include accessing user or employee data in violation of Google's own policies, helping others to access that data, or modifying or deleting user or employee data, according to the document. In 2019, that figure was 13 percent of all security allegations.

Microsoft launched its new cloud PC Windows 365 service earlier this week, and the company has already had to pause free trials due to demand. From a report: Windows 365 lets you rent a cloud PC -- with a variety of CPU, RAM, and storage options -- and then stream Windows 10 or Windows 11 via a web browser. The service reached max capacity after only a day of signups. "Following significant demand, we have reached capacity for Windows 365 trials," reads a statement from the Microsoft 365 Twitter account. "We have seen unbelievable response to Windows 365 and need to pause our free trial program while we provision additional capacity," explains Scott Manchester, director of Windows 365 program management.

An electrified highway is theoretically the most efficient way to eliminate truck emissions. But the political obstacles are daunting. From a report: Traton is among the backers of the so-called eHighway south of Frankfurt, a group that also includes Siemens and Autobahn GmbH, the government agency that oversees German highways. There are also short segments of electrified road in the states of Schleswig-Holstein and Baden-Wurttemberg. The technology has been tried in Sweden and, in 2017, on a one-mile stretch near the Port of Los Angeles.

So far the sections of highway equipped with overhead cable in Germany are short -- about three miles long in both directions near Frankfurt. Their purpose is to test how the system performs in everyday use by real trucking companies hauling real goods. By the end of the year more than 20 trucks will be using the systems in Germany. Enter Mr. Schmieder, who learned to drive a truck in the German army, and his employer, a trucking firm called Schanz Spedition in the small town of Ober-Ramstadt, in a hilly, thickly forested region about a 35-mile drive from Frankfurt.

If the eHighway is ever going to be rolled out on a large scale, it has to work for companies like Schanz, a family-owned firm managed by Christine Hemmel and Kerstin Seibert, sisters who are great-granddaughters of the founder. Their father, Hans Adam Schanz, though technically retired, was at the wheel of a forklift maneuvering pallets into the back of a truck recently as Mr. Schmieder climbed into the cab for his second run of the day hauling paint to a distribution center in Frankfurt.

Google Chrome will no longer show whether a site you are visiting is secure and only show when you visit an insecure website. Bleeping Computer reports: To further push web developers into only using HTTPS on their sites, Google introduced the protocol as a ranking factor. Those not hosting a secure site got a potentially minor hit in their Google search results rankings. It has appeared to have worked as according to the 'HTTPS encryption on the web' of Google's Transparency Report, over 90% of all browser connections in Google Chrome currently use an HTTPS connection.

Currently, when you visit a secure site, Google Chrome will display a little locked icon indicating that your communication with the site is encrypted, as shown below. As most website communication is now secure, Google is testing a new feature that removes the lock icon for secure sites. This feature is available to test in Chrome 93 Beta, and Chrome 94 Canary builds by enabling the 'Omnibox Updated connection security indicators' flag. With this feature enabled, Google Chrome will only display security indicators when the site is not secure. For businesses who wish to have continued HTTPS security indicators, Google has added an enterprise policy for Chrome 93 named 'LockIconInAddressBarEnabled' that can be used to enable the lock icon again on the address bar.

MojoKid writes: AMD is taking the wraps off of its latest integrated processors known as Ryzen 7 5700G and the Ryzen 5 5600G. As their branding suggests, these new products are based on the same excellent AMD Zen 3 core architecture, but with integrated graphics capabilities on board as well, hence the "G" designation. AMD is targeting more mainstream applications with these chips. The Ryzen 7 5700G is an 8-core/16-thread CPU with 4MB of L2 cache and 16MB of L3. Those CPU cores are mated to an 8 CU (Compute Unit) Radeon Vega graphics engine, and it has 24 lanes of PCIe Gen 3 connectivity. The 5700G's base CPU clock is 3.8GHz, with a maximum boost clock of 4.6GHz. The on-chip GPU can boost up to 2GHz, which is a massive uptick from the 1.4GHz of previous-gen 3000-series APUs.

The Ryzen 5 5600G takes things down a notch with 6 CPU cores (12 threads) and a smaller 3MB L2 cache while L3 cache size remains unchanged. The 5600G's iGPU is scaled down slightly as well with only 7 CUs. At 3.9GHz, the 5600G's base CPU clock is 100MHz higher than the 5700G's, but its max boost lands at 4.4GHz with a slightly lower GPU boost clock of 1.9GHz. In the benchmarks, the Ryzen 5 5600G and Ryzen 7 5700G both offer enough multi-threaded muscle for the vast majority of users, often besting similar Intel 11th Gen Core series chips, with highly competitive single-thread performance as well.