Medicine

NYC Will Require Vaccines For Entry To Restaurants and Gyms; Requirement Can Be Met With An App (theverge.com) 492

Mayor Bill de Blasio announced today that New York City will become the first major U.S. city to require proof of vaccination to enter all restaurants, fitness centers and indoor entertainment venues. "If you're unvaccinated, unfortunately, you will not be able to participate in many things," de Blasio said. "If you want to participate in our society fully, you've got to get vaccinated." As The Verge reports, "New Yorkers can meet those requirements by carrying their vaccination card or scanning and storing it in one of two authorized mobile apps." From the report: The spread of the highly contagious Delta variant is being cited as a reason to increase restrictions without returning to a full lockdown or other measures. The program is scheduled to launch on August 13th, with enforcement slated to start on September 13th. It doesn't introduce any new documentation; the name is a reference to it serving as a "key" to the city's recovery.

Workers and patrons can confirm their vaccination status (at least one dose administered) in one of three ways: Vaccination card; NYC COVID Safe exposure notification app (iOS, Android); or NYS Excelsior Pass app.

Android

Google Will Kill Off Very Old Versions of Android Next Month (arstechnica.com) 47

An anonymous reader quotes a report from Ars Technica: Google has started emailing users of very old Android devices to tell them it's time to say goodbye. Starting September 27, devices running Android 2.3.7 and lower will no longer be able to log in to Google services, effectively killing a big portion of the on-rails Android experience. As Google puts it in an official community post, "If you sign in to your device after September 27, you may get username or password errors when you try to use Google products and services like Gmail, YouTube, and Maps." Android is one of the most cloud-based operating systems ever. Especially in older versions, many included apps and services were tied to your Google login, and if that stops working, a large chunk of your phone is bricked. While Android can update many core components without shipping a full system update today, Android 2.3.7 Gingerbread, released around 10 years ago, was not so modular.

The individual Google apps started to be updatable through the Android Market/Play Store, but signing in to Google was still a system-level service and is frozen in time. Any Google services wanting to allow sign-ins from those versions would have to conform to 2011-era security standards, which means turning off two-factor authentication and enabling a special "allow less-secure access" setting in your Google account. Really, these old Android versions have to die eventually because they're just too insecure. Google shows active user base breakdowns for Android versions in Android Studio, and Gingerbread has such a low device count that it doesn't even make the list. It's less than 0.2 percent of active devices, behind 14 other versions of Android. Users of these old devices could still sideload a third-party app store and find replacements for all the Google apps, but if you're a technical user and can't get a new device, there's a good chance you could load a whole new operating system with an aftermarket Android ROM. After September 27, the oldest version of Android you'll be able to sign in to is Android 3.0 Honeycomb, which is only for tablets.

Transportation

Proposed Federal Standard Would Require Cars To 'Prevent or Limit Operation' By Impaired Drivers (theverge.com) 185

On Sunday, a bipartisan group of Senators published draft text of a massive new bipartisan infrastructure bill, proposing more than a trillion dollars in spending and a vast array of far-reaching provisions. But a little-noticed section in the bill could have significant implications in the fight against drunk driving, eventually mandating a new in-car safety technology to actively prevent Americans from driving while impaired. The Verge reports: Introduced under the heading "Advanced Impaired Driving Technology," the provision would require the Department of Transportation to set a new standard for detecting and preventing impaired driving. The bill calls on the secretary of transportation to release a standard within three years, with the requirement taking effect for new cars three years after that. The specific provisions of the standard are vague, but it would require cars to "passively monitor the performance of a driver of a motor vehicle to accurately identify whether that driver may be impaired" and "prevent or limit motor vehicle operation" if impairment is detected.

The specific means of creating that system are still undetermined, but advocates say much of the technology is already available. Driver monitoring systems, which track a driver's face or eyelids to ensure they are alert and actively piloting the vehicle, are already offered in some models by Lexus, BMW, and Mercedes Benz. Systems like lane detection could also be used to detect impairment, creating an alert if the driver is consistently veering outside their lane. "Twenty years ago, this technology didn't exist," says Jason Levine of the Center for Auto Safety. "[But] we have the technology available now. We can install tech in vehicles that helps to monitor whether someone is impaired and stops that person from hurting themselves or others."

Crucially, the new standard wouldn't be limited to drunk drivers. Because the systems measure impairment directly, they would be just as effective at detecting impairment from prescription drugs, emotional distress, or simple distraction. A longer-term effort would also seek to mandate passive alcohol monitoring systems, like those currently being developed by Volvo. While the provisions are aimed at creating a new mandatory requirement for automakers, such a requirement is still a long way off. Negotiations around the infrastructure bill are still in flux, and the provision could still be removed or altered by lawmakers. Even if it passes into law, the Department of Transportation will have wide leeway in how and when to implement the requirement and could easily delay it beyond the schedule set by Congress.

Apple

Apple's Touch ID-enabled Keyboard is Finally Available on Its Own (techcrunch.com) 61

Three-and-half months after launching the Magic Keyboard with Touch ID, Apple is finally breaking it out from its iMac bundle. The accessory is now available as a standalone through Apple Stores and the company's site. From a report: There are two versions: the standard and a longer model with a numeric keypad (pretty much what the company offers with all of its Magic Keyboards), running $149 and $179, respectively. There's also a $99 version that keeps the new rounded, compact design, but drops the Touch ID in favor of a key that locks the system. But where's the fun in that? All of the models have keys devoted to Spotlight, Dictation, Do Not Disturb and Emoji.
Facebook

Social Media Giants Failing To Remove Most Antisemitic Posts (axios.com) 140

Five social media giants failed to remove 84% of antisemitic posts in May and June -- and Facebook performed the worst despite announcing new rules to tackle the problem, a new report finds. Axios: The Center for Countering Digital Hatred (CCDH) notes in its study that it reported 714 posts containing "anti-Jewish hatred" to Facebook, Twitter, Instagram, Youtube and TikTok -- which were collectively viewed 7.3 million times. These "clearly violated" company policies, according to the CCDH. "As a result of their failure to enforce their own rules, social media platforms like Facebook have become safe places to spread racism and propaganda against Jews," states the report, titled "Failure to Act."

Facebook removed 14 out of 129 posts reported to it (10.9%); Twitter removed 15 of 137 reports (11%); TikTok took down 22 of 119 posts reported (18.5%); Instagram acted in 52 of 277 of cases (18.8%) and YouTube pulled 11 of the 52 posts it was alerted to (21.2%). "Extremist anti-Jewish hate is not acted on: platforms failed to act on 80% of posts containing Holocaust denial, 74% of posts alleging the blood libel, 70% of racist caricatures of Jewish people and 70% of neo-Nazi posts," per a statement from the CCDH, a nongovernmental organization based in the U.S. and United Kingdom.

Facebook

Facebook Researchers Hope To Bring Together Two Foes: Encryption and Ads 53

Facebook is bulking up a team of artificial intelligence researchers, including a key hire from Microsoft, to study ways of analyzing encrypted data without decrypting it, the company confirmed to the Information. From the report: The research could allow Facebook to target ads based on encrypted messages on its WhatsApp messenger, or to encrypt the data it collects on billions of users without hurting its ad-targeting capabilities, outside experts say. Facebook is one of several technology giants, including cloud computing providers Microsoft, Amazon and Google, now researching an emerging field known as homomorphic encryption. Researchers hope the technology will allow companies to analyze personal information, including medical records and financial data, while keeping the information encrypted and protected from cybersecurity threats or, in Facebook's case, leaks to advertisers or other parties.
Facebook

Facebook Users Are Buying Oculus VR Headsets To Get Customer Service Prioritization (npr.org) 82

Some Facebook users are so desperate to retrieve their hacked accounts that they're buying Oculus VR headsets to get prioritized by customer service. NPR reports: When Marsala got hacked, she tried dialing Facebook's headquarters in Silicon Valley. But that number yields a recording that says, "Unfortunately we do not offer phone support at this time." Instead, Facebook tells users to report hacked accounts through its website. The site instructs them to upload a copy of a driver's license or passport to prove their identities. But the people NPR spoke with said they had trouble with every step of this automated process and wish Facebook would offer a way to reach a real person. "I sent these forms in morning, noon and night multiple times a day," Marsala said. "Nobody got back to me, not once."
[...]
Brandon Sherman of Nevada City, Calif., followed a tip he found on Reddit to get his hacked account back. "I ultimately broke down and bought a $300 Oculus Quest 2," he said. Oculus is a virtual reality company owned by Facebook but with its own customer support system. Sherman contacted Oculus with his headset's serial number and heard back right away. He plans to return the unopened device, and while he's glad the strategy worked, he doesn't think it's fair. "The only way you can get any customer service is if you prove that you've actually purchased something from them," he said.

When McNamara, the Facebook user in Canada, first heard about the Oculus trick, she thought it was a joke. But she said, "Once I started thinking about it, all my memories, I really realized that I wanted to do whatever possible to get it back." So she, too, ordered an expensive gadget she never planned to use and returned it as soon as she got back into her Facebook account. (A warning to anyone thinking about trying this -- other Reddit users have said they tried contacting Oculus support but were unable to get their Facebook accounts restored. Also, last week Facebook said it was temporarily halting sales of the Oculus Quest 2, which retails starting at $299, because its foam lining caused skin irritation for some customers.)

Power

In the US, Life Cycle Emissions For EVs Are Already 60-68% Lower Than Gasoline, Study Finds (arstechnica.com) 288

An anonymous reader quotes a report from Ars Technica: Today in the US market, a medium-sized battery EV already has 60-68 percent lower lifetime carbon emissions than a comparable car with an internal combustion engine. And the gap is only going to increase as we use more renewable electricity. That finding comes from a white paper (PDF) published by Georg Bieker at the International Council on Clean Transportation. The comprehensive study compares the lifetime carbon emissions, both today and in 2030, of midsized vehicles in Europe, the US, China, and India, across a wide range of powertrain types, including gasoline, diesel, hybrid EVs (HEVs), plug-in hybrid EVs (PHEVs), battery EVs (BEVs), and fuel cell EVs (FCEVs).

The study takes into account the carbon emissions that result from the various fuels (fossil fuels, biofuels, electricity, hydrogen, and e-fuels), as well as the emissions that result from manufacturing and then recycling or disposing of vehicles and their various components. Bieker has also factored in real-world fuel or energy consumption -- something that is especially important when it comes to PHEVs, according to the report. Finally, the study accounts for the fact that energy production should become less carbon-intensive over time, based on stated government objectives.
The life cycle emissions of battery EVs in Europe today at 66-69 percent lower than a comparable gasoline-powered car. China is at 37-45 percent fewer emissions for BEVs, and India shows 19-34 percent.

As for fuel cell EVs (FCEVs), they "are only abut 26-40 percent less carbon-intensive than a comparable gasoline vehicle," notes Ars. "But if hydrogen was produced using renewable energy rather than steam reformation of natural gas, that number would jump to 76-80 percent -- even better than a BEV's numbers."
AI

Pentagon Believes Its Precognitive AI Can Predict Events 'Days In Advance' (engadget.com) 93

The Drive reports that US Northern Command recently completed a string of tests for Global Information Dominance Experiments (GIDE), a combination of AI, cloud computing and sensors that could give the Pentagon the ability to predict events "days in advance," according to Command leader General Glen VanHerck. Engadget reports: The machine learning-based system observes changes in raw, real-time data that hint at possible trouble. If satellite imagery shows signs that a rival nation's submarine is preparing to leave port, for instance, the AI could flag that mobilization knowing the vessel will likely leave soon. Military analysts can take hours or even days to comb through this information -- GIDE technology could send an alert within "seconds," VanHerck said.

The most recent dry run, GIDE 3, was the most expansive yet. It saw all 11 US commands and the broader Defense Department use a mix of military and civilian sensors to address scenarios where "contested logistics" (such as communications in the Panama Canal) might pose a problem. The technology involved wasn't strictly new, the General said, but the military "stitched everything together." The platform could be put into real-world use relatively soon. VanHerck believed the military was "ready to field" the software, and could validate it at the next Globally Integrated Exercise in spring 2022.

The Internet

The Push For a 'PBS For the Internet' (axios.com) 169

An anonymous reader quotes a report from Axios: The concept of a new media ecosystem that's non-profit, publicly funded and tech-infused is drawing interest in policy circles as a way to shift the power dynamics in today's information wars. Revamping the structure and role of public media could be part of the solution to shoring up local media, decentralizing the distribution of quality news, and constraining Big Tech platforms' amplification of harmful or false information.

Congress in 1967 authorized federal operating money to broadcast stations through a new agency, the Corporation for Public Broadcasting, and what is now PBS launched down-the-middle national news programming and successful kids shows like "Mr. Rogers' Neighborhood" and "Sesame Street." NPR was born in 1971. Despite dust-ups over political interference of national programming and funding, hundreds of local community broadcast stations primarily received grants directly to choose which national programs to support.

A new policy paper from the German Marshall Fund proposes a full revamp of the CPB to fund not just broadcast stations, but a wide range of digital platforms and potential content producers including independent journalists, local governments, nonprofits and educational institutions. The idea is to increase the diversity of local civic information, leaning on anchor institutions like libraries and colleges that communities trust. Beyond content, the plan calls for open protocol standards and APIs to let consumers mix and match the content they want from a wide variety of sources, rather than being at the mercy of Facebook, Twitter or YouTube algorithms. Data would be another crucial component. In order to operate, entities in the ecosystem would have to commit to basic data ethics and rules about how personal information is used.

Businesses

Amazon Will Pay You $10 in Credit for Your Palm Print Biometrics (techcrunch.com) 96

How much is your palm print worth? If you ask Amazon, it's about $10 in promotional credit if you enroll your palm prints in its checkout-free stores and link it to your Amazon account. From a report: Last year, Amazon introduced its new biometric palm print scanners, Amazon One, so customers can pay for goods in some stores by waving their palm prints over one of these scanners. By February, the company expanded its palm scanners to other Amazon grocery, book and 4-star stores across Seattle.

Amazon has since expanded its biometric scanning technology to its stores across the U.S., including New York, New Jersey, Maryland, and Texas. The retail and cloud giant says its palm scanning hardware "captures the minute characteristics of your palm -- both surface-area details like lines and ridges as well as subcutaneous features such as vein patterns -- to create your palm signature," which is then stored in the cloud and used to confirm your identity when youâ(TM)re in one of its stores.

Google

How Google Quietly Funds Europe's Leading Tech Policy Institutes (newstatesman.com) 14

Google has provided tens of millions of pounds of funding to academics investigating issues closely related to its business model. From a report: A recent scientific paper proposed that, like Big Tobacco in the Seventies, Big Tech thrives on creating uncertainty around the impacts of its products and business model. One of the ways it does this is by cultivating pockets of friendly academics who can be relied on to echo Big Tech talking points, giving them added gravitas in the eyes of lawmakers. Google highlighted working with favourable academics as a key aim in its strategy, leaked in October 2020, for lobbying the EU's Digital Markets Act -- sweeping legislation that could seriously undermine tech giants' market dominance if it goes through.

Now, a New Statesman investigation can reveal that over the last five years, six leading academic institutes in the EU have taken tens of millions of pounds of funding from Google, Facebook, Amazon and Microsoft to research issues linked to the tech firms' business models, from privacy and data protection to AI ethics and competition in digital markets. While this funding tends to come with guarantees of academic independence, this creates an ethical quandary where the subject of research is also often the primary funder of it. The New Statesman has also found evidence of an inconsistent approach to transparency, with some senior academics failing to disclose their industry funding. Other academics have warned that the growing dependence on funding from the industry raises questions about how tech firms influence the debate around the ethics of the markets they have created.

Windows

Microsoft's Windows 365 Cloud PC Service Will Range From $20 To $162 Per User Per Month (zdnet.com) 102

When Microsoft unveiled its Windows 365 Cloud PC desktop-as-a-service product last month, officials said they'd release pricing on the day the service became generally available, August 2. As promised, the company has published pricing, and it ranges from $20 per user per month for the lowest end SKU, to $162 per user per month for the most expensive one. From a report: Windows 365 is available in two editions: Windows 365 Business and Windows 365 Enterprise. The Windows 365 Business SKUs are capped at 300 users per organization. The $20 per user per month Business price is for a single virtual core, 2 GB of RAM and 64 GB of storage -- and requires the Windows Hybrid Benefit. (Hybrid Benefits are Microsoft's Bring-Your-Own license model, which allows customers to apply existing (or new) licenses toward the cost of a product.) Without the Hybrid Benefit discount, that same SKU is $24 per user per month.

At the high end, the Business SKU with eight virtual cores, 32 GB of RAM and 512 GB of storage costs $162 per user per month --- or $158 per user per month with the Windows Hybrid Benefit. The Enterprise SKUs for Windows 365 are priced similarly. A single virtual core, 2 GB of RAM and 64 GV of storage will go for $20 per user per month. At the high end, the 8 virtual core, 32 GB of RAM, 512 GB of storage SKU will go for $158 per user per month.

HP

Tale of Fake Hewlett-Packard Gear Spurs Arrest in China, Lawsuit (bloomberg.com) 45

An anonymous reader shares a report: When three Chinese nationals were jailed in Beijing almost a decade ago and accused of selling fake Hewlett-Packard networking gear, it looked like an example of U.S. companies getting what they'd long demanded: aggressive protection of intellectual property in the world's most populous nation. A drawn-out court case heading to trial in Massachusetts paints a much muddier picture. The three, exonerated in China, accuse the former Silicon Valley icon of setting them up. They argue that it was H-P units that conspired to sell counterfeit gear, and then pinned the blame on them. H-P disputes the claims, and is asking a U.S. federal judge to dismiss the lawsuit, saying the story was concocted by Integrated Communications & Technologies Inc., the Massachusetts-based company that employed the three Chinese nationals, to cover up its own criminal behavior. U.S. District Judge Leo T. Sorokin may rule on the dismissal request at any time. If he lets the case continue, a trial is scheduled for February.

Western companies have been calling on China for years to combat counterfeiting and take action against those that steal their intellectual property. One of the triggers for former U.S. President Donald Trump's trade war was the technology industry's lobbying of the American government to help protect their IP. A loss for either side in the lawsuit would tarnish its reputation in the world's largest market for computers by marking them as an organization that fraudulently sold counterfeit goods. The Office of the U.S. Trade Representative identified China as the "primary source" of counterfeit goods in a 2020 report. With Hong Kong, the document details, China accounts for 92% of the value of fake goods seized by U.S. Customs and Border Protection in 2019. In this case, the networking gear was made by an affiliate of H-P's in China, exported to India on lease, then sold back into the Chinese market.

Google

Google Will Abandon Qualcomm and Build Its Own Smartphone Processors This Year (cnbc.com) 57

Google announced Monday it will build its own smartphone processor, called Google Tensor, that will power its new Pixel 6 and Pixel 6 Pro phones this fall. From a report: It's another example of a company building its own chips to create what it felt wasn't possible with those already on the market. In this case, Google is ditching Qualcomm. The move follows Apple, which is using its own processors in its new computers instead of Intel chips. And like Apple, Google is using an Arm-based architecture. Arm processors are lower power and are used across the industry for mobile devices, from phones to tablets and laptops.

Google Tensor will power new flagship phones that are expected to launch in October. (Google will reveal more details about those phones closer to launch.) That, too, is a strategy shift for Google, which in recent years has focused on affordability in its Pixel devices instead of offering high-end phones. And it shows that Google is again trying to compete directly in the flagship space against Apple and Samsung. The name Google Tensor is a nod to the name of Google's Tensor Processing Unit the company uses for cloud computing. It's a full system on a chip, or SoC, that the company says will offer big improvements to photo and video processing on phones, along with features like voice-to-speech and translation. And it includes a dedicated processor that runs artificial intelligence applications, in addition to a CPU, GPU and image signal processor. It will allow the phone to process more information on the device instead of having to send data to the cloud.
Further reading: Google's New Pixel Phones Features a Processor Designed In-House.
Technology

Major Ethereum Upgrade Set To Alter Supply, Fix Transaction Fees (reuters.com) 66

Ethereum, the second-largest blockchain network, is about to undergo a technical adjustment that will significantly alter the way transactions are processed, as well as reduce the supply of the ether token and sharply boost its price. The scheduled coding revamp will go live on Aug. 4. From a report: The upgrade known as Ethereum Improvement Proposal (EIP) 1559 is similar, analysts said, to a bitcoin "halving" event in which periodic adjustments reduced the supply of bitcoin. Each halving helped propel bitcoin's price to higher records. While bitcoin is the preferred store of value in the digital ecosystem, Ethereum has emerged as the leading financial infrastructure, settling over $12 billion of daily transactions, according to a Grayscale report released in February this year.

Andrew Keys, managing partner at DARMA Capital, said ether's current price has yet to factor in the looming software upgrade. He estimates that the expected software adjustment next week, coupled with another upgrade in the first quarter of 2022, should "easily quintuple the price of ether" by next year. On Thursday, ether was up 0.6% at $2,312. EIP-1559 is a software upgrade that fundamentally changes the way transactions are processed on Ethereum by providing clear pricing on transaction fees in ether paid to miners to validate transactions and "burning" a small amount of those tokens. The burned tokens will be permanently taken out of circulation. In token burning, miners would typically send the tokens to specialized addresses that have unobtainable private keys. Without access to a private key, no one can use the tokens, putting them outside the circulating supply. By reducing the number of tokens, the currencies that remain in circulation become rarer and more valuable.

Social Networks

To Fight Vaccine Misinformation, US Recruits an 'Influencer Army' (nytimes.com) 314

The New York Times tells the story of 17-year-old Ellie Zeiler, a TikTok creator with over 10 million followers, who received an email in June from Village Marketing, an influencer marketing agency.

"It said it was reaching out on behalf of another party: the White House." Would Ms. Zeiler, a high school senior who usually posts short fashion and lifestyle videos, be willing, the agency wondered, to participate in a White House-backed campaign encouraging her audience to get vaccinated against the coronavirus...? Ms. Zeiler quickly agreed, joining a broad, personality-driven campaign to confront an increasingly urgent challenge in the fight against the pandemic: vaccinating the youthful masses, who have the lowest inoculation rates of any eligible age group in the United States...

To reach these young people, the White House has enlisted an eclectic army of more than 50 Twitch streamers, YouTubers, TikTokers and the 18-year-old pop star Olivia Rodrigo, all of them with enormous online audiences. State and local governments have begun similar campaigns, in some cases paying "local micro influencers" — those with 5,000 to 100,000 followers — up to $1,000 a month to promote Covid-19 vaccines to their fans. The efforts are in part a counterattack against a rising tide of vaccine misinformation that has flooded the internet, where anti-vaccine activists can be so vociferous that some young creators say they have chosen to remain silent on vaccines to avoid a politicized backlash...

State and local governments have taken the same approach, though on a smaller scale and sometimes with financial incentives. In February, Colorado awarded a contract worth up to $16.4 million to the Denver-based Idea Marketing, which includes a program to pay creators in the state $400 to $1,000 a month to promote the vaccines... Posts by creators in the campaign carry a disclosure that reads "paid partnership with Colorado Dept. of Public Health and Environment...." Other places, including New Jersey, Oklahoma City County and Guildford County, N.C., as well as cities like San Jose, Calif., have worked with the digital marketing agency XOMAD, which identifies local influencers who can help broadcast public health information about the vaccines.

In another article, the Times notes that articles blaming Bill Gates for the pandemic appeared on two local news sites (one in Atlanta, and one in Phoenix) that "along with dozens of radio and television stations, and podcasts aimed at local audiences...have also become powerful conduits for anti-vaccine messaging, researchers said."
The Courts

Zoom Agrees to $85M Settlement in Possible Class Action Over Data-Sharing, Zoombombing (engadget.com) 15

Zoom has agreed to pay $85 million — and to bolster its security practices — to settle a lawsuit that had claimed Zoom violated users' privacy rights by sharing their personal data with Facebook, Google and LinkedIn, and by failing to stop Zoombombing.

Engadget reports: The preliminary settlement also requires tougher security measures, such as warning about participants with third-party apps and offering special privacy-oriented training to Zoom staff.

Judge Lucy Koh said the company was largely protected against zoombombing claims thanks to the Communications Decency Act's Section 230 safeguards against liability for users' actions.

The settlement could also lead to payouts if the lawsuit achieves a proposed class action status, but don't expect a windfall. Subscribers would receive a refund of either 15 percent or $25, whichever was larger, while everyone else would receive as much as $15. Lawyers intended to collect up to $21.25 million in legal costs.

The Internet

Russia's 'Nonsensical, Impossible Quest' to Create Its Own Domestic Internet (slate.com) 61

"It was pretty strange when Russia decided to announce last week that it had successfully run tests between June 15 and July 15 to show it could disconnect itself from the internet," writes an associate professor of cybersecurity policy at Tufts Fletcher School of Law and Diplomacy. The tests seem to have gone largely unnoticed both in and outside of Russia, indicating that whatever entailed did not involve Russia actually disconnecting from the global internet... since that would be impossible to hide. Instead, the tests — and, most of all, the announcement about their success — seem to be intended as some kind of signal that Russia is no longer dependent on the rest of the world for its internet access. But it's not at all clear what that would even mean since Russia is clearly still dependent on people and companies in other countries for access to the online content and services they create and host — just as we all are...

For the past two years, ever since implementing its "sovereign internet law" in 2019, Russia has been talking about establishing its own domestic internet that does not rely on any infrastructure or resources located outside the country. Presumably, the tests completed this summer are related to that goal of being able to operate a local internet within Russia that does not rely on the global Domain Name System to map websites to specific IP addresses. This is not actually a particularly ambitious goal — any country could operate its own domestic internet with its own local addressing system if it wanted to do so instead of connecting to the larger global internet... The Center for Applied Internet Data Analysis at the University of California San Diego maintains an Internet Outage Detection and Analysis tool that combines three data sets to identify internet outages around the world... The data sets for Russia from June 15 through July 15, the period of the supposed disconnection tests, shows few indications of any actual disconnection other than a period around July 5 when unsolicited traffic from Russia appears to have dropped off.

Whatever Russia did this summer, it did not physically disconnect from the global internet. It doesn't even appear to have virtually disconnected from the global internet in any meaningful sense. Perhaps it shifted some of its critical infrastructure systems to rely more on domestic service providers and resources. Perhaps it created more local copies of the addressing system used to navigate the internet and tested its ability to rely on those. Perhaps it tested its ability to route online traffic within the country through certain chokepoints for purposes of better surveillance and monitoring. None of those are activities that would be immediately visible from outside the country and all of them would be in line with Russia's stated goals of relying less on internet infrastructure outside its borders and strengthening its ability to monitor online activity.

But the goal of being completely independent of the rest of the world's internet infrastructure while still being able to access the global internet is a nonsensical and impossible one. Russia cannot both disconnect from the internet and still be able to use all of the online services and access all of the websites hosted and maintained by people in other parts of the world, as appears to have been the case during the monthlong period of testing... Being able to disconnect your country from the internet is not all that difficult — and certainly nothing to brag about. But announcing that you've successfully disconnected from the internet when it's patently clear that you haven't suggests both profound technical incompetence and a deep-seated uncertainty about what a domestic Russian internet would actually mean.

Communications

Chinese Hackers Used Mesh of Home Routers To Disguise Attacks (therecord.media) 25

An anonymous reader quotes The Record: A Chinese cyber-espionage group known as APT31 (or Zirconium) has been seen hijacking home routers to form a proxy mesh around its server infrastructure in order to relay and disguise the origins of their attacks.

In a security alert, the French National Cybersecurity Agency, also known as ANSSI (Agence Nationale de la Sécurité des Systèmes d'Information), published a list of 161 IP addresses that have been hijacked by APT31 in recent attacks against French organizations. French officials said that APT31's proxy botnet was used to perform both reconnaissance operations against their targets, but also to carry out the attacks themselves. The attacks started at the beginning of 2021 and are still ongoing...

The Record understands that APT31 used proxy meshes made of home routers as a way to scan the internet and then launch and disguise its attacks against Exchange email servers earlier this year; however, the technique was also used for other operations as well.

Slashdot Top Deals