"First SolarWinds, now Kaseya. SaaS software heavily used by managed service providers (MSPs) has now been the target of two successful cyberattacks," writes Slashdot reader storagedude.

He shares a ChannelInsider article reporting the Kaseya ransomware attack compromised roughly 1,500 "downstream" businesses — and that now managed service providers "are reassessing their approaches to managing IT" after their own upstream vendors were breached: In many cases, rather than assuming the platforms that MSPs employ are secure, end customers will now require them to prove it via an audit of their software supply chains, says James Shank, Chief Architect of Community Services for Team Cymru, a provider of threat intelligence tools employed to conduct such audits. Shank, who also served on the Ransomware Task Force Committee set up by The Institute for Security and Technology, notes that MSPs should also assume attacks will only get worse before they get any better. "This is not the end or the middle," he says. "It's only the beginning."

Others, however, don't think there will be any widespread mandate to audit IT supply chains in the absence of any government requirement. Most organizations are simply not going to conduct or require extensive audits because of the time, effort, money and expertise required, says Mike Hamilton, chief information security officer (CISO) for Critical Insight, a provider of a managed detection and response platform.

"American companies are not going to do that unless someone holds their feet to the fire," he says.

The challenge that creates for MSPs and their customers is it may force them to continue to place too much trust in IT platforms provided to them by a vendor, says Chris Grove, technology evangelist for Nozomi Networks, a provider of security tools for monitoring networks. "These platforms are over-trusted," he says.

The decision many MSPs are specifically wrestling with is the degree to which they should continue to rely on IT service management (ITSM) platforms from an IT vendor that might be compromised by malware versus building and securing their own custom platform. The latter approach is not immune to malware but might be less of a target as cybercriminals increasingly focus their efforts on platforms that enable them to wreck greater downstream havoc. Alternatively, MSPs could switch to IT service management platforms provided by vendors that don't have enough market share to attract the attention of cybercriminals... Building an IT service management platform from scratch naturally requires a level of investment many MSPs lack the funding or expertise to make, notes Eldon Sprickerhoff, chief innovation officer for eSentire, a provider of a managed detection and response platform. "It's a difficult situation," he says.BR> The article points out that few small- to medium-sized businesses can afford their own internal IT security team.

Slashdot reader storagedude then suggests "on-premises installed and managed software could get another look as a result of the attacks," while vendors who can prove high levels of security "could gain a market advantage."

French designer Thierry Gaugain, known for his impressive yacht designs, including Apple co-founder Steve Jobs' 80-meter vessel Venus, is conceptualizing a $350 million luxury train "envisioned for one unique owner," says Gaugain. CNN reports: Described as a luxurious "palace on rails," the 400-meter long train will be made of 14 cars and glass so technologically advanced that it can switch from opaque to complete transparency. Gaugain feels that travel has become more focused on speed than the actual journey, and he sees the G Train as a mode of transportation where those on board can have just as much, if not more, fun on the way to their chosen destination. "Travel is not about speed," he says. "It's about taking the time, because time is the only treasure we have."

And it's not just the exterior of the train that can be transformed at the flick of a switch, passengers can also change "the interior ambiance of the train in whichever section they are." If they want to ensure the outdoor surroundings, they can switch to transparent mode, but if they want to create their own views, they can change the glass to opaque and create pretty much any view they want. "The train is a stage," explains Gaugain. "You can change the light, the season or the pace in order to change your relationship to time." He has yet to find a customer and admits he may need to find "someone as crazy" as himself to buy the train. It will likely be at a cost of around $350 million and the project will take at least two and a half years to build.

With space for around 18 overnight guests, the G Train is set to run at 160 kilometers per hour and will be adapted to run on railways across the Americas and Europe. The G Train can be split into two if those onboard decide they want to go off in different directions. Passengers enter via the welcome hall at the center of the train, which leads to its main residential area that includes the owner's accommodation and entertainment space, as well as an area for special guests, a social room, as well as Grand Salon that's specifically designed for receptions. Guests will also have access to a "secret" garden, while the wings of the train can be folded down to devise alfresco terraces, where parties can be held, or even onboard concerts.

For some reason, Samsung apps designed to control internet-connected washer and dryers require "bogus," "absurd," "unacceptable," "pesky," and "awful" permissions. Motherboard reports: On Wednesday, a Reddit user complained that their washing machine app, the Samsung Smart Washer, wouldn't work "unless I give it access to my contacts, location and camera." This is a common complaint. "When I launch the app, the damned thing wants all sort of permissions: location, phone calls, media, and ... contacts??? The app won't work without these permissions," another Reddit user grumbled last year, referring to another Samsung app -- called Smart Home -- that requires the same seemingly exaggerated permissions. "Why would the Samsung Smart Home app need access to my contacts?" The reviews for these two apps, both of which have more than a million installs according to their stats on the Google Play store, aren't very positive either. The Smart Washer App has an average of 2.1 stars, thanks to a slew of reviews that mention the unnecessary permissions.

These situations speak to two issues: Apps that demand permissions that they don't need, and "smart" and internet of things devices that make formerly simple tasks very complicated, and open up potential privacy and security concerns. [...] It's unclear why apps that are designed to let you set the type of washing cycle you want, or see how long it's gonna take for the dryer to be done, would need access to your phone's contacts. In an FAQ for another Samsung app, the company says it needs access to contacts "to check if you already have a Samsung account set up in your device. Knowing this information helps mySamsung to make the sign-in process seamless." The report recommends using a newer app called SmartThings App, "which has less invasive permission requirements compared to the older apps." The SmartThings app doesn't list any required permissions, indicating that "you can use the app without optional permissions, but some functions may be limited."

Taiwan's Foxconn said on Friday it was in talks with the U.S. state of Wisconsin about building electric vehicles there, part of the major Apple supplier's push to diversify income streams. Autoblog reports: Foxconn and electric car manufacturer Fisker Inc said in May that they had finalized a vehicle-assembly deal. They did not identify a location, but Fisker's CEO said Foxconn's Wisconsin site was a possibility. In a statement, Foxconn said it had begun discussions with Wisconsin. "Foxconn has engaged the Wisconsin Economic Development Corporation to discuss the company's plans for electric vehicle manufacturing. Foxconn is optimistic about our partnership with WEDC and looks forward to ongoing discussions," it added.

In April, Foxconn drastically scaled back a planned $10 billion factory in Wisconsin, confirming its retreat from a project that former U.S. President Donald Trump once called "the eighth wonder of the world" and was supposed to build cutting-edge flat-panel display screens. A month earlier, Foxconn's chairman said it may make EVs at the Wisconsin site, though could decide on Mexico, and would make a decision this year. Foxconn aims to provide components or services to 10% of the world's EVs by 2025 to 2027, posing a threat to established automakers by allowing technology companies a shortcut to competing in the vehicle market.

An anonymous reader quotes a report from Motherboard: You may have noticed recently that an Uber ride is more expensive than it used to be. As ride-hail companies Uber and Lyft hike prices to record heights during the COVID-19 pandemic, much commentary has settled on explaining this as a consequence of a "labor shortage" largely motivated by a lack of proper financial incentives. Drivers, the story goes, saw the new cash bonuses offered by companies to lure workers back as insufficient. Some, perhaps, decided they were not worth the risk of getting infected with COVID-19 or one of its budding variants, while other analyses suggested drivers were content with living on stimulus funds rather than money from driving. At the same time, the firms began curtailing subsidies that kept prices low enough to attract riders and work towards monopoly. Together, this has left us with a sudden and massive spike in ride-hail prices; Gridwise, a ride-hail driver assistance app, estimated that Uber has increased its prices by 79 percent since the second quarter of 2019.

While Uber and Lyft are reportedly thinking about offering new perks such as education, career, and expense programs, analysts admit these don't strike at core problems with the gig economy that were driving workers away before COVID-19 hit and are making it difficult to attract them now. In conversations with Motherboard, former and current ride-hail drivers pointed to a major factor for not returning: how horrible it is to work for Uber and Lyft. For some workers, this realization came long before the pandemic reared its head, and for others, the crisis hammered it home. Motherboard has changed some drivers' names or granted them anonymity out of their fear of retaliation. "If I kept driving, something was going to break," said Maurice, a former driver in New York who spent four years working for Uber and Lyft before the pandemic. "I already go nights without eating or sleeping. My back hurt, my joints hurt, my neck hurt, I felt like a donkey. Like a slave driving all the time."

"I've been driving for six years. Uber has taken at least 10,000 pounds in commission from me each year! They take 20 percent of my earnings, then offer me 200 pounds," Ramana Prai, a London-based Uber driver, told Motherboard. "I don't understand how they can take 60,000 pounds from me, then offer nothing when I'm in need. How can I provide for my partner and two kids with this? My employer has let me down."

"I woke up every day asking how long I could keep it up, I just didn't feel like a person," Yona, who worked for Lyft in California for the past six years until the pandemic, told Motherboard. "I got two kids, my mother, my sister, I couldn't see them. And I was doing all this for them but I could barely support them, barely supported myself."

"I was making even less than my sister and I was probably less safe too," Yona's sister, Destiny, told Motherboard. "She got out back in the spring, I hopped on and was coming back negative some days. I tried UberEats and DoorDash to see if that was any better, but stopped after a friend was almost robbed on a delivery. Okay, so the options are get covid or get robbed, then guess what: I'm doing none of them."

Motherboard argues that the degrading working conditions, as well as the poor pay, "are structurally necessary for ride-hail companies. They were necessary to attract and retain customers with artificially low prices, to burn through drivers at high rates that frustrate labor organizing, and bolster the narrative of gig work as temporary, transient, and convenient. It's no wonder, then, that drivers aren't coming back."

An anonymous reader shares a post: Google Chrome for Android has a feature that gives Google Search an unfair advantage over its competition. Sure, it's the default search engine and that's a huge hurdle to overcome for any competitor. However, Chrome also reserves a performance-boosting feature for Google Search exclusively. I recently poked around in the Chromium project source code; the open-source foundation for Google's Chrome web browser. The Chromium project is co-developed by Google, and other corporate and individual contributors. The project is managed and controlled by Google, however. I was looking for something else when I stumbled upon a feature called PreconnectToSearch. When enabled, the feature preemptively opens and maintains a connection to the default search engine.

The preconnection feature resolves the domain name, and negotiates and sets up a secure connection to the server. All these things take time and they must happen before the search engine can receive the users' search queries. Preempting these steps can save a dozen seconds on a slow network connection or half a second on a fast connection. This optimization can yield a nice performance boost for Google's customers. Assuming the connection only requires a trivial amount of processing power and network bandwidth, of course. Setting up the connection early can be wasteful or slow down the loading of other pages if the user isn't going to search the web. There's just one small catch: Chromium checks the default search engine setting, and only enables the feature when it's set to Google Search. This preferential treatment means no other search engine can compete with Google Search on the time it takes to load search results. Every competitor must wait until the user has started to type a search query before Chrome will establish a connection.

Microsoft is to give its non-executive staff a $1,500 bonus for their work during the pandemic. From a report: The company told the BBC it was a symbol of appreciation "during a uniquely challenging year." It added: "We are proud to recognise our employees with a one-time monetary gift." In the first quarter of 2021 Microsoft's profits rose 38% on the same period last year. The Verge reported that employees below vice-president level who joined no later than 31 March 2021 would receive the payment, including part-time workers. The big tech firms have done well during the pandemic and Microsoft is not the only firm to have made bonus payments to staff. In March 2020, Facebook gave employees a $1,000 bonus to help them with increased expenses caused by the pandemic, such as those associated with setting up a home office. Google made a similar $1,000 payment in May 2020. In December, Amazon gave front-line employees a $300 dollar bonus with part-time workers receiving $150.

Ministers back down after hundreds of government offices insist banishing fax would be impossible. From a report: Most bureaucrats might be expected to welcome the chance to be freed from the tyranny of the fax machine. But in Japan, government plans to send the must-have item of 1980s office equipment the way of telex have in effect been scrapped after they encountered resistance from "faxophile" officials. A cabinet body that promotes administrative reform said in June it had decided to abolish the use of fax machines "as a rule" by the end of the month and switch to emails at ministries and agencies in the Tokyo district of Kasumigaseki, Japan's bureaucratic nerve centre. The move would enable more people to work from home, it said, citing concerns that too many people were still going to the office during the coronavirus pandemic to send and receive faxes. Exceptions would be made for disaster response and interactions with the public and businesses that had traditionally depended on faxes. Instead of embracing the digital age, however, hundreds of government offices mounted a defence of the much-maligned machine, insisting that banishing them would be "impossible," according to the Hokkaido Shimbun newspaper.

The backlash has forced the government to abandon its mission to turn officialdom into a digital-only operation, the newspaper said on Wednesday. Members of the resistance said there were concerns over the security of sensitive information and "anxiety over the communication environment" if, as the government had requested, they switched exclusively to email. Japanese ministries and agencies use faxes when handling highly confidential information, including court procedures and police work, and the Hokkaido Shimbun said there were fears that exclusively online communication would result in security lapses. "Although many ministries and agencies may have stopped using fax machines, I can't say with pride that we managed to get rid of most of them," an official at the cabinet body told the newspaper.

The US Department of Commerce has sanctioned 14 Chinese tech companies over links to human rights abuses against Uyghur Muslims in Xinjiang, including one backed by a top Silicon Valley investment firm. From a report: DeepGlint, also known as Beijing Geling Shentong Information Technology Co., Ltd., is a facial recognition company with deep ties to Chinese police surveillance, and funding from US-based Sequoia Capital. Today the Commerce Department added it to its Entity List, which restricts US companies from doing business with listed firms without a special license. Sequoia did not immediately respond to a request for comment. DeepGlint co-founded a facial recognition lab in 2018 with Chinese authorities in Urumqi, the capital of Xinjiang, according to the South China Morning Post. It has also gained international bragging rights through the US National Institute of Standards and Technology's (NIST) Face Recognition Vendor Test. DeepGlint claimed top accuracy in the test as of January 2021, giving it a potent marketing tool in the security and surveillance industry. While DeepGlint has been accepted for a public offering on Shanghai's STAR stock exchange, the firm hasn't seen the commercial success of other AI startups in the country, explained Jeffrey Ding in his ChinAI newsletter last month. Since the firm is so heavily invested in government work, it has to follow slow government procurement cycles and is unlikely to score huge infrastructure projects, Ding writes.

President Biden is signing an executive order Friday urging federal agencies to more aggressively police conduct by Big Tech -- including to more closely review acquisitions that thwart competition. The action comes amid a growing backlash by lawmakers and regulators against massive Silicon Valley firms. From a report: Biden's order doesn't name the likes of Google, Facebook, Amazon or Apple but the White House says it addresses "areas in which dominant tech firms are undermining competition and reducing innovation," including M&A, data collection and the "right to repair" devices. The order, "Promoting Competition in the American Economy," isn't just aimed at Big Tech. The sweeping set of recommendations also includes provisions targeted at internet service providers -- including an official call to restore net neutrality rules repealed under Trump -- as well as healthcare, agriculture, transportation, and banking and consumer finance. All told, Biden's executive order includes 72 initiatives directed at more than a dozen federal agencies to "promptly tackle some of the most pressing competition problems across our economy," according to a White House press release.

Microsoft awarded $13.6 million to security researchers in the past 12 months, From a report: Microsoft said it awarded more than $13.6 million as monetary rewards to security researchers through its public bug bounty programs over the past 12 months. According to Microsoft:
The funds were awarded for 1,261 bugs reported by 341 security researchers across 17 bug bounty platforms between July 1, 2020 and June 30, 2021.

The highest awarded bounty was $200,000 for a vulnerability reported in Hyper-V, Microsoft's OS virtualization technology.
The average bounty was more than $10,000 per valid bug report across all programs.
Most bug reports came from researchers residing in China, the US, and Israel.
The company said it plans to announce the 2021 Most Valuable Security Researcher next month.
The sum awarded this year is identical to what Microsoft reported one year ago when the company said it awarded $13.7 million to 327 security researchers for 1,226 vulnerability reports across 15 bug bounty programs in the previous 12 months (July 1, 2019 to June 30, 2020).

Motherboard bought an FBI "Anom" phone that the agency secretly sells to criminals to monitor their communications. Joseph Cox reports: The sleek, black phone seems perfectly normal. Unlocking the Google Pixel 4a with a PIN code reveals some common apps: Tinder, Instagram, Facebook, Netflix, and even Candy Crush. But none of those apps work, and tapping their icons doesn't do anything. Resetting the phone and typing in another PIN opens up an entirely different section of the device, with a new background and new apps. Now in place of the old apps sit a clock, a calculator, and the device's settings. Clicking the calculator doesn't open a calculator -- it opens a login screen.

"Enter Anom ID" and a password, the screen reads. Hidden in the calculator is a concealed messaging app called Anom, which last month we learned was an FBI honeypot. On Anom, criminals believed they could communicate securely, with the app encrypting their messages. They were wrong: an international group of law enforcement agencies including the FBI were monitoring their messages and announced hundreds of arrests last month. International authorities have held press conferences to tout the operation's success, but have provided few details on how the phones actually functioned.

Motherboard has obtained and analyzed an Anom phone from a source who unknowingly bought one on a classified ads site. On that site, the phone was advertised as just a cheap Android device. But when the person received it, they realized it wasn't an ordinary phone, and after being contacted by Motherboard, found that it contained the secret Anom app. When booting up the phone, it displays a logo for an operating system called "ArcaneOS." Very little information is publicly available on ArcaneOS. It's this detail that has helped lead several people who have ended up with Anom phones to realize something was unusual about their device. Most posts online discussing the operating system appear to be written by people who have recently inadvertently bought an Anom device, and found it doesn't work like an ordinary phone. After the FBI announced the Anom operation, some Anom users have scrambled to get rid of their device, including selling it to unsuspecting people online. The person Motherboard obtained the phone from was in Australia, where authorities initially spread the Anom devices as a pilot before expanding into other countries.

An anonymous reader shares a report: In 2013, eight tech companies were accused of funneling their users' data to the U.S. National Security Agency under the so-called PRISM program, according to highly classified government documents leaked by NSA whistleblower Edward Snowden. Six months later, the tech companies formed a coalition under the name Reform Government Surveillance, which as the name would suggest was to lobby lawmakers for reforms to government surveillance laws. The idea was simple enough: to call on lawmakers to limit surveillance to targeted threats rather than conduct a dragnet collection of Americans' private data, provide greater oversight and allow companies to be more transparent about the kinds of secret orders for user data that they receive.

Apple, Facebook, Google, LinkedIn, Microsoft, Twitter, Yahoo and AOL were the founding members of Reform Government Surveillance, or RGS, and over the years added Amazon, Dropbox, Evernote, Snap and Zoom as members. But then sometime in June 2019, Evernote quietly disappeared from the RGS website without warning. What's even more strange is that nobody noticed for two years, not even Evernote. "We hadn't realized our logo had been removed from the Reform Government Surveillance website," said an Evernote spokesperson, when reached for comment by TechCrunch. "We are still members."

Volkswagen, Audi, Porsche, BMW, and Mercedes-Benz parent company Daimler spent years illegally colluding to slow the deployment of cleaner emissions technology, says the European Union, which is dishing out fines as a result. From a report: The EU's executive branch hit the Volkswagen Group (which owns Audi and Porsche) and BMW with a collective $1 billion fine on Thursday for their role in the scheme. Volkswagen Group must pay $595 million, while BMW will pay $442 million. Daimler, however, evaded a $861 million fine of its own because the automaker revealed the collusion to the regulators.

The scheme described by EU authorities is separate from the Volkswagen Group's massive Dieselgate scandal, in which the company installed software on its diesel vehicles that helped fool environmental regulators into believing they were compliant, when in reality, they were polluting far more than the legal limit. Dieselgate ultimately led to nearly $40 billion in fines, buybacks, and legal fees for the Volkswagen Group. Daimler also installed software on some of its diesel vehicles to cheat emissions tests and has paid billions of dollars in fines. BMW was careful to point out Thursday that, unlike the other companies it was caught colluding with, it had not cheated emissions testing.

A $150 million chip-making tool from a Dutch company has become a lever in the U.S.-Chinese struggle. It also shows how entrenched the global supply chain is. New York Times: President Biden and many lawmakers in Washington are worried these days about computer chips and China's ambitions with the foundational technology. But a massive machine sold by a Dutch company has emerged as a key lever for policymakers -- and illustrates how any country's hopes of building a completely self-sufficient supply chain in semiconductor technology are unrealistic. The machine is made by ASML Holding, based in Veldhoven. Its system uses a different kind of light to define ultrasmall circuitry on chips, packing more performance into the small slices of silicon. The tool, which took decades to develop and was introduced for high-volume manufacturing in 2017, costs more than $150 million. Shipping it to customers requires 40 shipping containers, 20 trucks and three Boeing 747s.

The complex machine is widely acknowledged as necessary for making the most advanced chips, an ability with geopolitical implications. The Trump administration successfully lobbied the Dutch government to block shipments of such a machine to China in 2019, and the Biden administration has shown no signs of reversing that stance. Manufacturers can't produce leading-edge chips without the system, and "it is only made by the Dutch firm ASML," said Will Hunt, a research analyst at Georgetown University's Center for Security and Emerging Technology, which has concluded that it would take China at least a decade to build its own similar equipment. "From China's perspective, that is a frustrating thing."

Google used anticompetitive practices in an attempt to "preemptively quash" Samsung's Galaxy Store, and prevent it from becoming a viable competitor to its own Play Store. From a report: That's according to an antitrust lawsuit filed by a coalition of three dozen state attorney general, which accuses Google of illegally attempting to control app distribution on Android. The suit also alleges Google paid off app developers to stop them circumventing its store. The allegations challenge one of Google's core defenses of its policies, which is that unlike Apple's iOS rules, Android allows both competing app stores and side-loading apps directly. The lawsuit is effectively claiming that this openness is a facade, because while customers technically have the choice of where to get their apps from, Google's business practices have prevented a viable app store competitor from emerging.

"Google felt deeply threatened when Samsung began to revamp its own app store, the Samsung Galaxy Store," the suit says, and describes Google's approach to the competing store as "a threat it needed to preemptively quash." The suit outlines a range of tactics Google allegedly used to prevent Samsung's store from becoming a viable competitor. It claims Google used revenue share agreements with Android phone manufacturers that "outright prohibited" pre-installing some other app stores, and that it made "a direct attempt to pay Samsung to abandon relationships with top developers and scale back competition through the Samsung Galaxy Store."

The computer code behind the massive ransomware attack by the Russian-speaking hacking ring REvil was written so that the malware avoids systems that primarily use Russian or related languages, according to a new report by a cybersecurity firm. NBC News reports: It's long been known that some malicious software includes this feature, but the report by Trustwave SpiderLabs, obtained exclusively by NBC News, appears to be the first to publicly identify it as an element of the latest attack, which is believed to be the largest ransomware campaign ever. "They don't want to annoy the local authorities, and they know they will be able to run their business much longer if they do it this way," said Ziv Mador, Trustwave SpiderLabs' vice president of security research.

Trustwave said the ransomware "avoids systems that have default languages from what was the USSR region. This includes Russian, Ukrainian, Belarusian, Tajik, Armenian, Azerbaijani, Georgian, Kazakh, Kyrgyz, Turkmen, Uzbek, Tatar, Romanian, Russian Moldova, Syriac, and Syriac Arabic." In May, cybersecurity expert Brian Krebs noted that ransomware by DarkSide, the Russia-based group that attacked Colonial Pipeline in May, "has a hard-coded do-not-install list of countries," including Russia and former Soviet satellites that mostly have favorable relations with the Kremlin. In general, criminal ransomware groups are allowed to operate with impunity inside Russia and other former Soviet states as long as they focus their attacks on the United States and the West, experts say. Krebs noted that in some cases, the mere installation of a Russian language virtual keyboard on a computer running Microsoft Windows will cause malware to bypass that machine.

A prenatal test taken by millions of pregnant women globally was developed by Chinese gene company BGI Group in collaboration with the Chinese military and is being used by the firm to collect genetic data, a Reuters review of publicly available documents found. From the report: The report is the first to reveal that the company collaborated with the People's Liberation Army (PLA) to develop and improve the test, taken in early pregnancy, as well as the scope of BGI's storage and analysis of the data. The United States sees BGI's efforts to collect and analyze human gene data as a national security threat. China's biggest genomics firm, BGI began marketing the test abroad in 2013. Branded NIFTY, it is among the world's top selling non-invasive prenatal tests (NIPT). These screen a sample of blood from a pregnant woman to detect abnormalities such as Down's syndrome in a developing fetus. So far more than 8 million women globally have taken BGI's prenatal tests, BGI has said. NIFTY is sold in at least 52 countries, including Britain, Europe, Canada, Australia, Thailand and India, but not the United States.

BGI uses leftover blood samples sent to its laboratory in Hong Kong and genetic data from the tests for population research, the company confirmed to Reuters. Reuters found the genetic data of over 500 women who took the test, including women in Europe and Asia, is also stored in the government-funded China National GeneBank in Shenzhen, which BGI runs. Reuters found no evidence BGI violated privacy agreements or regulations; the company said it obtains signed consent and destroys overseas samples and data after five years. "At no stage throughout the testing or research process does BGI have access to any identifiable personal data," the company said. However, the test's privacy policy says data collected can be shared when it is "directly relevant to national security or national defense security" in China. BGI said it "has never been asked to provide -- nor provided -- data from its NIFTY tests to Chinese authorities for national security or national defense purposes." "Non-invasive prenatal testing kits marketed by Chinese biotech firms serve an important medical function, but they can also provide another mechanism for the People's Republic of China and Chinese biotech companies to collect genetic and genomic data from around the globe," the U.S. National Counterintelligence and Security Center said.

China's foreign ministry said Reuters' findings reflected "groundless accusations and smears" of U.S. agencies.

The attorneys general of 36 states and Washington, D.C., sued Google "alleging that the company illegally abused its power over developers that distribute apps through the Google Play store on mobile devices," according to Bloomberg. From the report: State attorneys general are targeting the fees Google takes from developers for purchases and subscriptions inside apps. The complaint was filed by 36 states and the District of Columbia in San Francisco federal court Wednesday. The complaint marks a new attack by government officials in the U.S. against the search engine's business practices. The Justice Department and a group of states filed separate complaints over Google's search business last year, while another state coalition sued over Google's digital advertising business. The states are taking on Google even after a federal judge in Washington last week threw out their antitrust lawsuit against Facebook. That case accused Facebook of illegally crushing competition by buying Instagram and WhatsApp because it saw them as threats to its business. The judge said the states waited too long to challenge the acquisitions.

Popular benchmark site Geekbench has removed OnePlus 9 benchmarks from its charts due to allegations that the company designed Oxygen OS optimization tools in such a way that they could be viewed as cheating. Android Authority reports: Yesterday, AnandTech posted some information about "weird behavior" it spotted with the OnePlus 9 Pro. According to the team's research, Oxygen OS apparently limits the performance of some popular Android apps -- but none of those apps are benchmark suites. Geekbench, one of the more popular benchmarking sites, took these allegations seriously. After conducting its own investigation, Geekbench recently announced that it has removed all OnePlus 9 benchmarks from its charts. Geekbench, one of the more popular benchmarking sites, took these allegations seriously. After conducting its own investigation, Geekbench recently announced that it has removed all OnePlus 9 benchmarks from its charts. Geekbench called Oxygen OS's behavior a form of "benchmark manipulation." OnePlus has yet to issue a statement on the matter. In some of our own testing, we found that AnandTech's data is on the mark. We found that the OnePlus 9 series limits the performance of Google Chrome while older OnePlus phones do not. OnePlus issued a statement to Android Authority addressing the matter: "Our top priority is always delivering a great user experience with our products, based in part on acting quickly on important user feedback. Following the launch of the OnePlus 9 and 9 Pro in March, some users told us about some areas where we could improve the devices' battery life and heat management. As a result of this feedback, our R&D team has been working over the past few months to optimize the devices' performance when using many of the most popular apps, including Chrome, by matching the app's processor requirements with the most appropriate power. This has helped to provide a smooth experience while reducing power consumption. While this may impact the devices' performance in some benchmarking apps, our focus as always is to do what we can to improve the performance of the device for our users."

This is reminiscent of when the company was caught pushing the OnePlus 5's performance capabilities when the OS detected a benchmark app. This resulted in artificially inflated scores that users would not see during real-world usage.