Google

Google Turns AlphaFold Loose On the Entire Human Genome (arstechnica.com) 20

An anonymous reader quotes a report from Ars Technica: Just one week after Google's DeepMind AI group finally described its biology efforts in detail, the company is releasing a paper that explains how it analyzed nearly every protein encoded in the human genome and predicted its likely three-dimensional structure -- a structure that can be critical for understanding disease and designing treatments. In the very near future, all of these structures will be released under a Creative Commons license via the European Bioinformatics Institute, which already hosts a major database of protein structures. In a press conference associated with the paper's release, DeepMind's Demis Hassabis made clear that the company isn't stopping there. In addition to the work described in the paper, the company will release structural predictions for the genomes of 20 major research organisms, from yeast to fruit flies to mice. In total, the database launch will include roughly 350,000 protein structures.
[...]
At some point in the near future (possibly by the time you read this), all this data will be available on a dedicated website hosted by the European Bioinformatics Institute, a European Union-funded organization that describes itself in part as follows: "We make the world's public biological data freely available to the scientific community via a range of services and tools." The AlphaFold data will be no exception; once the above link is live, anyone can use it to download information on the human protein of their choice. Or, as mentioned above, the mouse, yeast, or fruit fly version. The 20 organisms that will see their data released are also just a start. DeepMind's Demis Hassabis said that over the next few months, the team will target every gene sequence available in DNA databases. By the time this work is done, over 100 million proteins should have predicted structures. Hassabis wrapped up his part of the announcement by saying, "We think this is the most significant contribution AI has made to science to date." It would be difficult to argue otherwise.
Further reading: Google details its protein-folding software, academics offer an alternative (Ars Technica)
Power

Mercedes-Benz To Go All-Electric By 2030 (nbcnews.com) 94

Mercedes-Benz maker Daimler plans to invest more than 40 billion euros, or $47 billion, between 2022 and 2030 to develop battery-electric vehicles, and be ready for an all-electric car market by 2030. NBC News reports: Outlining its strategy for an electric future, the German luxury carmaker said on Thursday it would, with partners, build eight battery plants as it ramps up EV production, and that from 2025 all new vehicle platforms would only make electric cars. "We really want to go for it ... and be dominantly, if not all electric, by the end of the decade," Chief Executive Ola Kallenius told Reuters, adding that spending on traditional combustion-engine technology would be "close to zero" by 2025. However, Daimler stopped short of giving a hard deadline for ending sales of fossil-fuel cars.

Daimler said that as of 2025, it expects electric and hybrid electric cars to make up 50 percent of sales, earlier than its previous forecast that this would happen by 2030. The carmaker will unveil three electric platforms -- one to cover its range of passenger cars and SUVs, one for vans and one for high-performance vehicles -- that will be launched in 2025. Four of its new battery plants will be in Europe and one in the United States. Daimler said it would announce new European partners for its battery production plans soon.

Bug

MITRE Updates List of Top 25 Most Dangerous Software Bugs (bleepingcomputer.com) 16

An anonymous reader quotes a report from BleepingComputer: MITRE has shared this year's top 25 list of most common and dangerous weaknesses plaguing software throughout the previous two years. MITRE developed the top 25 list using Common Vulnerabilities and Exposures (CVE) data from 2019 and 2020 obtained from the National Vulnerability Database (NVD) (roughly 27,000 CVEs). "A scoring formula is used to calculate a ranked order of weaknesses that combines the frequency that a CWE is the root cause of a vulnerability with the projected severity of its exploitation," MITRE explained. "This approach provides an objective look at what vulnerabilities are currently seen in the real world, creates a foundation of analytical rigor built on publicly reported vulnerabilities instead of subjective surveys and opinions, and makes the process easily repeatable."

MITRE's 2021 top 25 bugs are dangerous because they are usually easy to discover, have a high impact, and are prevalent in software released during the last two years. They can also be abused by attackers to potentially take complete control of vulnerable systems, steal targets' sensitive data, or trigger a denial-of-service (DoS) following successful exploitation. The list [here] provides insight to the community at large into the most critical and current software security weaknesses.

Social Networks

Democratic Bill Would Suspend Section 230 Protections When Social Networks Boost Anti-vax Conspiracies (techcrunch.com) 282

Two Democratic senators introduced a bill Thursday that would strip away the liability shield that social media platforms hold dear when those companies are found to have boosted anti-vaccine conspiracies and other kinds of health misinformation. From a report: The Health Misinformation Act, introduced by Senators Amy Klobuchar (D-MN) and Ben Ray Lujan (D-NM), would create a new carve-out in Section 230 of the Communications Decency Act to hold platforms liable for algorithmically-promoted health misinformation and conspiracies. Platforms rely on Section 230 to protect them from legal liability for the vast amount of user-created content they host.

"For far too long, online platforms have not done enough to protect the health of Americans," Klobuchar said. "These are some of the biggest, richest companies in the world and they must do more to prevent the spread of deadly vaccine misinformation." The bill would specifically alter Section 230's language to revoke liability protections in the case of "health misinformation that is created or developed through the interactive computer service" if that misinformation is amplified through an algorithm. The proposed exception would only kick in during a declared national public health crisis, like the advent of Covid-19, and wouldn't apply in normal times.

Technology

India Considering Phased Roll Out of Central Bank Digital Currency (techcrunch.com) 31

India's central bank is considering launching a digital currency, according to a top executive, giving a clear indication of its intentions for the first time after previously stating that it was studying the idea. From a report: T Rabi Sankar, the deputy governor of Reserve Bank of India, said at a conference today that the central bank is considering introducing the nation's digital currency in a "phased" manner while legal changes are made to the South Asian nation's foreign-exchange rules and IT laws. The digital currency, which will be backed by sovereign, will lower the economy's reliance on cash, enable cheaper and smoother international settlements, and protect people from the volatility of privacy cryptocurrencies, he said. "Every idea has to wait for its time, and the time for CBDC [central bank digital currency] is near. We have carefully evaluated the risks," he told an audience at a conference held by think-tank Vidhi Centre for Legal Policy.
Google

Google Pushed a One-Character Typo To Production, Bricking Chrome OS Devices (arstechnica.com) 75

Google says it has fixed a major Chrome OS bug that locked users out of their devices. Google's bulletin says that Chrome OS version 91.0.4472.165, which was briefly available this week, renders users unable to log in to their devices, essentially bricking them. From a report: Chrome OS automatically downloads updates and switches to the new version after a reboot, so users who reboot their devices are suddenly locked out them. The go-to advice while this broken update is out there is to not reboot. The bulletin says that a new build, version 91.0.4472.167, is rolling out now to fix the issue, but it could take a "few days" to hit everyone. Users affected by the bad update can either wait for the device to update again or "powerwash" their device -- meaning wipe all the local data -- to get logged in. Chrome OS is primarily cloud-based, so if you're not doing something advanced like running Linux apps, this solution presents less of an inconvenience than it would on other operating systems. Still, some users are complaining about lost data.
Communications

Toronto-area Woman Wants Freedom Mobile To Stop Assigning Her Phone Number To Other People (www.cbc.ca) 53

New submitter Goatbot writes: Another day another telco failure. Freedom Mobile repeatedly reassigned a customer's phone number. From the report: A Toronto-area woman says Freedom Mobile is still assigning her cell number to other people, even though she took the number with her when she moved to a new provider last year. Tsahai Carter, 22, made the switch last August. Since then, she says, on three separate occasions she's received phone calls and text messages intended for other people who'd been assigned the same number by Freedom Mobile. Carter, who lives north of Toronto in Markham, Ont., has also fielded phone calls from frustrated customers, wondering why someone else is getting their calls and messages. "They're getting mad at me for taking over their phone number, when really I had nothing to do with it," said Carter. "So it's a bit stressful." This isn't the first time Freedom Mobile customers have complained about a mix-up in phone numbers. In 2019, CBC reported on another customer who'd been given a number by Freedom Mobile that was still in use by someone else: a man who'd ported the number with him when he moved from Freedom to Fido.
Google

Google is Starting To Tell You How It Found Search Results (reuters.com) 24

Alphabet's Google will now show its search engine users more information about why it found the results they are shown, the company said on Thursday. From a report: It said people googling queries will now be able to click into details such as how their result matched certain search terms, in order to better decide if the information is relevant.
The Internet

Banks, Brokerages, PSN, the Steam Store, and More Are Down in Massive Internet Outage (theverge.com) 62

Many websites -- including banking pages, brokerages, and gaming services -- have been affected by what looks to be a major internet outage. From a report: As website owners and companies that run services that provide the backbone of the web scramble to solve the issue, consumers have been left unable to access services like Ally Bank, Fidelity, Sony's PlayStation Network, Airbnb, and more. Several airline sites are also having issues: Delta, British Airways, and Southwest's sites are all having major issues. At the moment, it's unclear what's causing the outage, though DownDetector reports that both AWS and Akamai, a pair of content delivery networks that host much of the internet, are both experiencing issues. Akamai's status page reports that the company is currently investigating an issue with its DNS service. Cloudflare's CEO has chimed in to say that its service isn't to blame.
Social Networks

How TikTok Sees Inside Your Brain (axios.com) 37

A new video investigation by the Wall Street Journal finds the key to TikTok's success in how the short-video sharing app monitors viewing times. From a report: TikTok is known for the fiendishly effective way that it selects streams of videos tailored to each user's taste. The algorithm behind this personalization is the company's prize asset -- and, like those that power Google and Facebook, it's a secret. WSJ created a batch of individualized dummy accounts to throw at TikTok and test how it homed in on each fake persona's traits. TikTok responds most sensitively to a single signal -- how long a user lingers over a video. It starts by showing new users very popular items, and sees which catch their eyes.
Printer

16-Year-Old HP Printer-Driver Bug Impacts Millions of Windows Machines (threatpost.com) 106

An anonymous reader quotes a report from Threatpost: Researchers have released technical details on a high-severity privilege-escalation flaw in HP printer drivers (also used by Samsung and Xerox), which impacts hundreds of millions of Windows machines. If exploited, cyberattackers could bypass security products; install programs; view, change, encrypt or delete data; or create new accounts with more extensive user rights. The bug (CVE-2021-3438) has lurked in systems for 16 years, researchers at SentinelOne said, but was only uncovered this year. It carries an 8.8 out of 10 rating on the CVSS scale, making it high-severity.

According to researchers, the vulnerability exists in a function inside the driver that accepts data sent from User Mode via Input/Output Control (IOCTL); it does so without validating the size parameter. As the name suggests, IOCTL is a system call for device-specific input/output operations. "This function copies a string from the user input using 'strncpy' with a size parameter that is controlled by the user," according to SentinelOne's analysis, released on Tuesday. "Essentially, this allows attackers to overrun the buffer used by the driver." Thus, unprivileged users can elevate themselves into a SYSTEM account, allowing them to run code in kernel mode, since the vulnerable driver is locally available to anyone, according to the firm.

The printer-based attack vector is perfect for cybercriminals, according to SentinelOne, since printer drivers are essentially ubiquitous on Windows machines and are automatically loaded on every startup. "Thus, in effect, this driver gets installed and loaded without even asking or notifying the user," explained the researchers. "Whether you are configuring the printer to work wirelessly or via a USB cable, this driver gets loaded. In addition, it will be loaded by Windows on every boot. This makes the driver a perfect candidate to target since it will always be loaded on the machine even if there is no printer connected."
Affected models and associated patches can be found here and here.

"While HP is releasing a patch (a fixed driver), it should be noted that the certificate has not yet been revoked at the time of writing," according to SentinelOne. "This is not considered best practice since the vulnerable driver can still be used in bring-your-own-vulnerable-driver (BYOVD) attacks." Some Windows machines may already have the vulnerable driver without even running a dedicated installation file, since it comes with Microsoft Windows via Windows Update.
Social Networks

Clubhouse Is Now Out of Beta and Open To Everyone (techcrunch.com) 31

Clubhouse announced Wednesday that it would end its waitlist and invite system, opening up to everyone. TechCrunch reports: Clubhouse is also introducing a real logo that will look familiar -- it's basically a slightly altered version of the waving emoji the company already used. Clubhouse will still hold onto its app portraits, introducing a new featured icon from the Atlanta music scene to ring in the changes. "The invite system has been an important part of our early history," Clubhouse founders Paul Davison and Rohan Seth wrote in a blog announcement. They note that adding users in waves and integrating new users into the app's community through Town Halls and orientation sessions helped Clubhouse grow at a healthy rate without breaking, "but we've always wanted Clubhouse to be open."

According to new data SensorTower provided to TechCrunch, Clubhouse hit its high point in February at 9.6 million global downloads, up from 2.4 million the month prior. After that, things settled down a bit before perking back up in May when TikTok went live on Android through the Google Play Store. Since May, new Android users have accounted for the lion's share of the app's downloads. In June, Clubhouse was installed 7.7 million times across both iOS and Android -- an impressive number that's definitely in conflict with the perception that the app might not have staying power.

Clubhouse's success is a double-edged sword. The app's meteoric rise came as a surprise to the team, as meteoric rises often do. The social app is still a wild success by normal metrics in a landscape completely dominated by a handful of large, entrenched platforms, but it can be tricky to maintain healthy momentum after such high highs. Opening up the app to everybody should certainly help.

Government

FTC Formally Adopts Right To Repair Platform (vice.com) 39

An anonymous reader quotes a report from Motherboard: The Federal Trade Commission unanimously voted Wednesday to pursue policies that will make it easier for people to repair their own things. In a vote of 5-0 during a Commission Meeting, the FTC agreed to adopt a policy paper outlining how it planned to enforce rules that keep manufacturers from restricting aftermarket repair. It plans to enforce existing warranty law, coordinate with state and local lawmakers to ensure open markets, and investigate the current repair monopolies for violations of antitrust law. The move comes just weeks after President Joe Biden signed an executive order directing the commission to create right-to-repair rules.

The FTC policy paper outlined a five-pronged approach to the problem. First, it's asking for comments and complaints from the public about bad experiences it's had with repair issues and violated warranty. It's long been illegal under federal law for companies to void warranties based on aftermarket repairs. The problem is that those laws often aren't enforced, though the FTC did take some action on manufacturers who put warranty-void-if-removed stickers on their devices after Motherboard reported on the problem several years ago. "While current law does not provide for civil penalties or redress, the Commission will consider filing suit against violators of the Magnuson-Moss Warranty Act to seek appropriate injunctive relief," the policy paper said.

Next, the FTC said it will look over current repair restrictions for violations of existing antitrust and anti-competition laws. "Finally, the Commission will bring an interdisciplinary approach to this issue, using resources and expertise from throughout the agency to combat unlawful repair restrictions," the policy paper said. "The FTC will also closely coordinate with state law enforcement and policymakers to ensure compliance and to update existing law and regulation to advance the goal of open repair markets."
"Manufacturers, be warned: It's time to clean up your act and let people fix their stuff," Nathan Proctor, U.S. PIRG Right to Repair Senior Campaign Director, told Motherboard in an email. "With unanimous support from commissioners, there's a new sheriff in town. The FTC is ready to act to stop many of the schemes used to undermine repair, while support is increasing for new legislation to further crack down."
Google

Google Maps Will Help You Avoid Crowded Mass Transit in Way More Cities (theverge.com) 40

Google is expanding the number of cities where Maps offers information about public transport crowding. The number of cities covered is increasing from around 200 today, to "over 10,000 transit agencies in 100 countries," the company says. As well as crowdedness, Google says Maps is also being updated to offer more information about past travel. From a report: Google Maps' crowdedness information originally launched pre-pandemic in 2019, but over the past year social distancing has made it more important than ever. Crowdedness information is generated from a mixture of historical location data, as well as self-reporting from Maps users on individual trains. Google says it anonymizes the location history data used. As well as expanding the crowdedness predictions to more cities, Google is also making them more granular in New York and Sydney. In these cities users will see how crowded individual train carriages are instead of just general crowding on the transit line. The feature works using data provided by transit agencies themselves, and Google says it plans to expand the capability to more cities soon.
Transportation

Intel's Mobileye Begins Testing Autonomous Vehicles In New York City (theverge.com) 32

Mobileye, the company that specializes in chips for vision-based autonomous vehicles, is now testing its AVs in New York City -- a difficult and rare move given the state's restrictions around such testing. The Verge reports: The announcement was made by Amnon Shashua, president and CEO of the Intel-owned company, at an event in the city on Tuesday. Shashua said the company is currently testing two autonomous vehicles in New York City, but plans to increase that number to seven "in the next few months." New York City has some of the most dangerous, congested, and poorly managed streets in the world. They are also chock-full of construction workers, pedestrians, bicyclists, and double- and sometimes even triple-parked cars. In theory, this would make it very difficult for an autonomous vehicle to navigate, given that AVs typically rely on good weather, clear signage, and less aggressive driving from other road users for safe operation. But Shashua said this was part of the challenge in deciding where to test Mobileye's vehicles.

"I think for a human it's very, very challenging to drive in New York City," Shashua said, "not to mention for a robotic car." While other states have become hot beds for AV testing, New York has been a bit of a ghost town. Part of the reason could be the state's strict rules, which include mandating that safety drivers keep their hands on the wheel at all times and requiring state police escort at all times to be paid for by the testing company. A spokesperson for Mobileye says the company has obtained a permit from the state to test its vehicles on public roads and is currently the only AV testing permit holder in the state. The spokesperson also said that police escorts were no longer required.

China

China Unveils 'Fastest Ground Vehicle In the World' (usatoday.com) 146

China has unveiled its new maglev train that's being touted as the fastest ground vehicle in the world with a maximum speed of 372 mph (600 kph). USA Today reports: The train uses electro-magnetic force, making it "float" so there is no contact between the rail and the body, Reuters reported. The debut of the super fast train could cut down time for people traveling from Beijing to Shanghai to only 2.5 hours. That's a distance of 754 miles and currently a 4.5-hour train ride on one of China's bullet trains. China's newest train is expected to be ready for commercial use within the next decade.
Privacy

Venmo Drops the Global Social Feed That Could Make Your Payments Visible To Strangers (theverge.com) 19

Venmo announced it's removing its global social feed on Tuesday, the payment appâ(TM)s notorious feature that allows strangers to potentially view payments you make and receive on Venmo. From a report: Now Venmo's social elements will be limited to your actual friends on the app in the "friends feed" without you having to toggle any features in the app. The company buried the change in a blog post detailing an update to the Venmo app. [...] Until recently, Venmo also offered users no control over who saw their friends list within the app, which is potentially incriminating in an entirely separate way from seeing the content of a transaction. After Buzzfeed News discovered President Biden's Venmo account and the accounts of people in his inner circle via the friends list, the company added additional privacy controls for the visibility of your Venmo contacts.
Communications

FCC Investigating Whether Cuban Government Is Jamming HAM Radio (vice.com) 60

HAM radio operators in Florida have said that Cuba is jamming radio frequencies that prevent them from communicating with operators in the country since anti-government protests began last week. Now, the Federal Communications Commission says it has started an investigation into the issue. From a report: "Too many people around the world are fighting uphill battles to be able to use technology to expand economic opportunity, express themselves, and organize without fear of reprisal," an FCC Spokesperson told Motherboard. "The FCC is committed to supporting the free flow of information and ensuring that the internet remains open for everyone. We are assessing these reports in conjunction with our field agents and communicating with the Department of State as this issue develops." The Cuban government has notoriously controlled communications on the island; until recently there was little internet connectivity in the country and during the protests the government has taken steps to shut down the internet. Cuban exiles living in Florida and other parts of the country often use HAM radio to talk to the mainland.
Government

Biden To Name Google Foe Jonathan Kanter as DOJ Antitrust Chief (bloomberglaw.com) 25

President Joe Biden plans to nominate Jonathan Kanter as head of the Justice Department's antitrust division, Bloomberg Law reported Tuesday, citing a person familiar with the matter, the latest sign that the administration is preparing a broad crackdown on large technology companies. From the report: Kanter, who left one of the country's biggest law firms last year to start his own firm, is a long-time foe of Alphabet's Google, representing companies that have pushed antitrust enforcers to sue the search giant.
Privacy

DuckDuckGo Launches New Email Protection Service To Remove Trackers (theverge.com) 45

DuckDuckGo is launching a new email privacy service meant to stop ad companies from spying on your inbox. From a report: The company's new Email Protection feature gives users a free "@duck.com" email address, which will forward emails to your regular inbox after analyzing their contents for trackers and stripping any away. DuckDuckGo is also extending this feature with unique, disposable forwarding addresses, which can be generated easily in DuckDuckGo's mobile browser or through desktop browser extensions.

The personal DuckDuckGo email is meant to be given out to friends and contacts you know, while the disposable addresses are better served when signing up for free trials, newsletters, or anywhere you suspect might sell your email address. If the email address is compromised, you can easily deactivate it. These tools are similar to anti-tracking features implemented by Apple in iOS 14 and iOS 15, but DuckDuckGo's approach integrates into iOS, Android, and all major web browsers. DuckDuckGo will also make it easier to spin up disposable email addresses on the fly, for newsletters or anywhere you might share your email.

Slashdot Top Deals