An anonymous reader quotes a report from Ars Technica: Hackers backed by nation-states are exploiting critical vulnerabilities in the Pulse Secure VPN to bypass two-factor authentication protections and gain stealthy access to networks belonging to a raft of organizations in the US Defense industry and elsewhere, researchers said. At least one of the security flaws is a zero-day, meaning it was unknown to Pulse Secure developers and most of the research world when hackers began actively exploiting it, security firm Mandiant said in a blog post published Tuesday. Besides CVE-2021-22893, as the zero-day is tracked, multiple hacking groups -- at least one of which likely works on behalf of the Chinese government -- are also exploiting several Pulse Secure vulnerabilities fixed in 2019 and 2020.

Used alone or in concert, the security flaws allow the hackers to bypass both single-factor and multifactor authentication protecting the VPN devices. From there, the hackers can install malware that persists across software upgrades and maintain access through webshells, which are browser-based interfaces that allow hackers to remotely control infected devices. Multiple intrusions over the past six months have hit defense, government, and financial organizations around the world, Tuesday's post reported. Separately, the US Cybersecurity and Infrastructure Security Agency said that targets also include US government agencies, critical infrastructure entities, and other private sector organizations." Mandiant said that it has uncovered "limited evidence" that tied one of the hacker groups to the Chinese government. Dubbed UNC2630, this previously unknown team is one of at least two hacking groups known to be actively exploiting the vulnerabilities. Tuesday's blog post also referred to another previously unseen group that Mandiant is calling UNC2717. In March, the group used malware Mandiant identifies as RADIALPULSE, PULSEJUMP, and HARDPULSE against Pulse Secure systems at a European organization. Pulse Secure on Tuesday published an advisory instructing users how to mitigate the currently unpatched security bug.

Microsoft and video-game chat company Discord have ended takeover talks after Discord rejected a $12 billion bid, Bloomberg reported Tuesday, citing a people familiar with the matter. From the report: Discord is now focused on a potential public listing in the long term, the people said, asking not to be identified because the matter is private. Several other companies also tried to buy Discord in recent weeks, the people said. The identity of these companies couldn't immediately be learned. San Francisco-based Discord is best known for its free service that lets gamers communicate by video, voice and text. People stuck at home during the pandemic have increasingly used its technology for study groups, dance classes, book clubs and other virtual gatherings.

At today's Spring Loaded event, Apple unveiled a new version of the iPad Pro, equipped with the M1 chip that was first introduced on the company's Mac line. TechCrunch reports: The new chip sports an 8-core CPU, with performance up to 50% faster than the A12Z Bionic found on the previous generation. There's also an 8-core GPU, which it claims is up to 40% faster. The system can be decked out to up to 16 GB of RAM and 2 TB of storage. The device further blurs the line between the company's tablet and desktop offerings, as well as improved battery life now listed as "all day." The Pro also adds Thunderbolt support to the USB-C, which allows for a number of new features including external display support and wired transfers up to 40 Gbps.

As reported, the new tablet (12.9-inch only for now) features an improved display -- Liquid Retina XDR, according to Apple's marketing terms. Among other things that brings much improved high dynamic range. The display is powered by 10,000 micro-LED. That allows for a hugely improved contrast ratio and 1,000 nits of brightness, without hammering the battery life. The 11-inch version starts at $799 and the 12.9-inch, which adds the Liquid Retina display, starts at $1,099. Pre-orders on the tablets starts April 30 and the product is set to start shipping in the second half of May -- along with a number of other products introduced at today's show.

Facebook wants you to believe that the scraping of 533 million people's personal data from its platform, and the dumping of that data online by nefarious people, is something to be "normalised." The Register: A blundering Facebook public relations operative managed to send a journalist a copy of an internal document detailing the social network's strategy for containing the leaking of 533 million accounts -- and what the memo contained was infuriating though unsurprising. Belgian tech journalist Pieterjan van Leemputten asked the Mark Zuckerberg-owned company some questions about the theft and dumping online of account data earlier this month.

Miscreants had helped themselves to 70GB of names, phone numbers, dates of birth, email addresses, and more from people's Facebook profiles, thanks to a security weakness in the platform. Having stolen the data in 2019, crims bought and sold it among themselves before one shared it via a Tor-hidden site in early April, inviting anyone to come and help themselves to it all. Yet when van Leemputten asked Facebook's mouthpieces to respond, what he got in return was quite unexpected. As he told The Register: "Facebook accidentally sent me an internal email where they literally state that they will frame the recent 533 million data leak as a 'broad industry issue' and that they want to normalize this." The memo added, "To do this, the team is proposing a follow-up post in the next several weeks that talks more broadly about our anti-scraping work and provides more transparency around the amount of work we're doing in this area."

Now that Apple's lost item finder AirTag has officially been introduced, competitor Tile is going on record ahead of its testimony in front of Congress tomorrow about how it perceives Apple's latest product. In a statement, Tile CEO CJ Prober said today: "Our mission is to solve the everyday pain point of finding lost and misplaced things and we are flattered to see Apple, one of the most valuable companies in the world, enter and validate the category Tile pioneered. The reason so many people turn to Tile to locate their lost or misplaced items is because of the differentiated value we offer our consumers. In addition to providing an industry leading set of features via our app that works with iOS and Android devices, our service is seamlessly integrated with all major voice assistants, including Alexa and Google. And with form factors for every use case and many different styles at affordable prices, there is a Tile for everyone.

Tile has also successfully partnered with top brands like HP, Intel, Skullcandy and fitbit to enable our finding technology in mass market consumer categories like laptops, earbuds and wearables. With over 30 partners, we look forward to extending the benefits of Tile to millions of customers and enabling an experience that helps you keep track of all your important belongings. We welcome competition, as long as it is fair competition. Unfortunately, given Apple's well-documented history of using its platform advantage to unfairly limit competition for its products, we're skeptical. And given our prior history with Apple, we think it is entirely appropriate for Congress to take a closer look at Apple's business practices specific to its entry into this category. We welcome the opportunity to discuss these issues further in front of Congress tomorrow.

Apple has launched a Tile-like item tracker that will work with the company's software and services. From a report: Dubbed AirTag, the small circular tag will allow you to track items within Apple's "Find My" app on iOS. Much like Tile, Apple's AirTags will be useful for tracking items like keys or wallets, and you'll be provided with notifications when you're separated from your item. The AirTag itself is a small puck-like device that includes a built-in speaker, accelerometer, Bluetooth LE, and a user-replaceable battery. Apple says the tracker should last for a year of battery life, and you can use an NFC tap to activate a lost mode. AirTag will be available for $29 on April 30th, or $99 for a four-pack of the devices. Apple is also working with accessory makers to create luggage tag and keyring enclosures for the AirTag itself.

Magic Leap's next augmented realty headset is on track to be unveiled later this year. From a report: In an interview with Protocol published on Tuesday, CEO Peggy Johnson said the Magic Leap 2 will be released through an early adopter program at the end of this year and will be more generally available in early 2022. Johnson said the new headset, which is intended for enterprise customers, will be lighter and have an improved field of view over the Magic Leap One. "For frontline workers, the product has to be something comfortable that they can wear all day long," Johnson told Protocol. "So we've made the product half the size, about 20% lighter. But most importantly, we've doubled the field of view. That's a hard thing to do. The optics around that are complex, but we have a very talented engineering team." Past stories on Magic Leap: Magic Leap, Which Has Raised Over $2B, Lays off 1,000 Employees and Drops Consumer Business
Translation From VC-Backed PR Jargon To English of Magic Leap CEO Rony Abovitz's Statement That He's 'Stepping Down'

Amazon.com has opened a new hair salon in East London to showcase augmented reality and "point and learn" marketing technology that lets customers point their phones at a product to get more information. From a report: The 1,500 square-foot (139 square-meter) salon is set in London's Spitalfields neighborhood, the company said in a blog post on Tuesday. Customers will be able to try out new hair colors virtually and "capture their new look in a dedicated creative area," the company said. Visitors will also be able to order products in the salon via Amazon by scanning QR codes. In recent years, Amazon has started a range of brick-and-mortar formats, including cashierless convenience stores, a supermarket chain, book shops and stores selling a potpourri of bestselling items. The company often launches experiments, learns from them and then moves on -- sometimes folding the expertise into new projects or abandoning the idea entirely. With no current plans to open additional locations, Amazon may consider the salon as one of its signature tests. London is just beginning to ease Covid-19 lockdown restrictions, with salons reopening in England on April 12. Amazon salon customers will be offered free face masks and sanitizer, temperature checks and the venue will operate at a reduced capacity.

Dave Knott writes: Microsoft has announced Visual Studio 2022, the next major revision of their flagship development IDE. A public beta will be arriving this summer. The most significant change, which has long been rumored, is that the entire application suite will now be 64-bit. Other major changes include:

* Performance improvements in the core debugger
* Support for .NET 6, which can be used to build web, client and mobile apps by both Windows and Mac developers, as well as improved support for developing Azure apps
* An update UI meant to reduce complexity and which will add integration with Accessibility Insights. Microsoft plans to update the icons and add support for Cascadia Code, a new fixed-width font for better readability
* Support for C++ 20 tooling. language standardization and Intellisense
* Integration of text chat into the Live Share collaboration feature
* Additional support for Git and GitHub
* Improved code search

Rei writes: After a Tesla crash in The Woodlands killed two people last Saturday night, news reports were quick to jump to the conclusion that Autopilot (or even FSD) was being used and led to the strange crash, in which investigators reported nobody in the driver's seat, one victim buckled in in the front passenger seat, and the other buckled in behind them. On Twitter, however, Autopilot users were quick to question this account, noting that Autopilot can't be enabled on a road lacking lane lines; the speed and acceleration were far higher than Autopilot allows; and numerous other problems. Now Elon Musk has weighed in with the first official statement since the crash. Responding to a user questioning the reporting, Musk said: "Your research as a private individual is better than professionals @WSJ! Data logs recovered so far show Autopilot was not enabled & this car did not purchase FSD. Moreover, standard Autopilot would require lane lines to turn on, which this street did not have." What actually caused the crash and why nobody was found in the driver's seat remains unclear at this point; analysis of the logs and investigation of the crash site remains ongoing.

Researchers have developed a tool that can design complex DNA robots and nanodevices in minutes instead of days. Phys.Org reports: In a paper published today in the journal Nature Materials, researchers from The Ohio State University -- led by former engineering doctoral student Chao-Min Huang -- unveiled new software they call MagicDNA. The software helps researchers design ways to take tiny strands of DNA and combine them into complex structures with parts like rotors and hinges that can move and complete a variety of tasks, including drug delivery. One advantage is that it allows researchers to carry out the entire design truly in 3-D. Earlier design tools only allowed creation in 2-D, forcing researchers to map their creations into 3-D. That meant designers couldn't make their devices too complex.

The software also allows designers to build DNA structures "bottom up" or "top down." In "bottom up" design, researchers take individual strands of DNA and decide how to organize them into the structure they want, which allows fine control over local device structure and properties. But they can also take a "top down" approach where they decide how their overall device needs to be shaped geometrically and then automate how the DNA strands are put together. Combining the two allows for increasing complexity of the overall geometry while maintaining precise control over individual component properties. Another key element of the software is that it allows simulations of how designed DNA devices would move and operate in the real world.

Reddit unveiled its take on a Clubhouse-like social audio product on Monday, called Reddit Talk. The Verge reports: The company is billing Monday's announcement as a "sneak preview," since the feature isn't widely available yet. Moderators that want to try the feature out in their subreddit can add themselves to a waitlist for access. Based on Reddit's description and images shared by the company, Reddit Talk appears to look a lot like Clubhouse, Twitter Spaces, and other social audio products. Talks will "live" within subreddits, according to Reddit.

During the initial tests, only subreddit moderators will be able to initiate a Talk, and Talk hosts will have the ability to invite, mute, and remove speakers. While only mods can kick off Talks in the beginning, anyone on iOS and Android can listen to one. Moderation has been an issue for Clubhouse, so it's notable that Reddit is starting small and giving access only to moderators first. At some point in the future, mods will be able to bring on trusted community members as co-hosts. The company says it is "testing ways" for hosts to customize how Talks look with emojis and different background colors, and users will be able to change their avatar, too. Earlier today, Facebook also announced that the company is working on a Clubhouse clone.

An anonymous reader quotes a report from ZDNet: A small miracle happened at 3:31am ET on Monday morning. Ingenuity, a tiny NASA helicopter, became the first powered aircraft to fly on another planet, Mars. This engineering feat was done with Linux, open-source software, and a NASA-built program based on the Jet Propulsion Laboratory's (JPL) open-source F (pronounced F prime) framework. GitHub CEO Nat Friedman and his team and the JPL Ingenuity crew took a long hard look into the helicopter's code and found that "nearly 12,000 developers on GitHub contributed to Ingenuity's software via open source. And yet, much like the first image of a black hole, most of these developers are not even aware that they helped make the first Martian helicopter flight possible."

They'll know now. Friedman wrote: "Today, we want to make the invisible visible. So, we have worked with JPL to place a new Mars 2020 Helicopter Mission badge on the GitHub profile of every developer who contributed to the specific versions of any open-source projects and libraries used by Ingenuity." The developer list was created by JPL providing GitHub with a comprehensive list of every version of every open source project used by Ingenuity. GitHub could then identify all the contributors who made these projects and their dependencies. Some of those honored, such as Linux's creator Linus Torvalds, are famous developers. Many others labor in obscurity -- but now their work is being recognized. Timothy Canham, a JPL embedded flight software engineer, notes Ingenuity's program is powered by a Qualcomm Snapdragon 801 running at 2.2GHz, which is "far faster than the Mars Perseverance's rover processors," according to ZDNet. The reason this older chip was used is because it meets NASA's High-Performance Spaceflight Computing (HPSC) radiation standards.

Canham also says the flight control software on Ingenuity runs at 500Hz. The flight software "is used to control the flight hardware and read sensors 500 times per second in order to keep the helicopter stable." Canham added: "We literally ordered parts from SparkFun [Electronics]. This is commercial hardware, but we'll test it, and if it works well, we'll use it."

An anonymous reader quotes a report from 9to5Google: The latest addition coming to Microsoft Edge is "performance mode." Rolling out first to the Canary channel, "performance mode" in Microsoft Edge is designed to improve how the browser uses the resources available to it. In practice, Microsoft says the new mode will improve speed and responsiveness overall while "optimizing" the use of battery, CPU, and RAM. Apparently, the mode may adjust based on your browsing habits too. "Performance mode helps you optimize speed, responsiveness, memory, CPU and battery usage," says Microsoft. "Performance improvements might vary depending on your individual specifications and browser habits."

One specific change Microsoft notes is that the "Sleeping Tabs" feature in Edge will be locked to five minutes when performance mode is turned on. "Sleeping Tabs" essentially freezes a tab that's left open in the background, saving resources when it's not actively being used. Performance Mode is rolling out now in version 91.0.856.0, available in the Canary channel. The toggle is available in the "System" section of the settings menu.

Translation tools from Google and other companies could be contributing to significant misunderstanding of legal terms with conflicting meanings such as "enjoin," according to research due to be presented at an academic workshop on Monday. From a report: Google's translation software turns an English sentence about a court enjoining violence, or banning it, into one in the Indian language of Kannada that implies the court ordered violence, according to the new study. "Enjoin" can refer to either promoting or restraining an action. Mistranslations also arise with other contronyms, or words with contradictory meanings depending on context, including "all over," "eventual" and "garnish," the paper said.

Google said machine translation is "is still just a complement to specialized professional translation" and that it is "continually researching improvements, from better handling ambiguous language, to mitigating bias, to making large quality gains for under-resourced languages." The study's findings add to scrutiny of automated translations generated by artificial intelligence software. Researchers previously have found programs that learn translations by studying non-diverse text perpetuate historical gender biases, such as associating "doctor" with "he." The new paper raises concerns about a popular method companies use to broaden the vocabulary of their translation software. They translate foreign text into English and then back into the foreign language, aiming to teach the software to associate similar ways of saying the same phrase.

AmiMoJo writes: WordPress announced over the weekend that they plan on treating Google's new FLoC tracking technology as a security concern and hence block it by default on WordPress sites. For some time, browsers have begun to increasingly block third-party browser cookies used by advertisers for interest-based advertising. In response, Google introduced a new ad tracking technology called Federated Learning of Cohorts, or FLoC, that uses a web browser to anonymously place users into interest or behavioral buckets based on how they browse the web. After Google began testing FLoC this month in Google Chrome, there has been a consensus among privacy advocates that Google's FLoC implementation just replaces one privacy risk with another one.

"WordPress powers approximately 41% of the web -- and this community can help combat racism, sexism, anti-LGBTQ+ discrimination and discrimination against those with mental illness with four lines of code," says WordPress. WordPress states that this code is planned for WordPress 5.8, scheduled for release in July 2021. As FLoC is expected to roll out sooner, WordPress is considering back-porting this code to earlier versions to "amplify the impact" on current versions of the blogging platform. Further reading: Nobody is Flying To Join Google's FLoC.

Facebook CEO Mark Zuckerberg on Monday announced that the company is building audio features where users can engage in real-time conversations with others, similar to the app Clubhouse, which gained a lot of buzz in Silicon Valley circles earlier this year. From a report: Zuckerberg said Facebook plans to invest a lot in audio features and build them out over the coming years. "We think that audio is of course also going to be a first-class medium, and there are all these different products to be built across this whole spectrum," Zuckerberg told Casey Newton on Monday on the Sidechannel Discord server. The new feature is called Live Audio Rooms, and the company expects it will be available to everyone on the Facebook app and Messenger this summer, the company said in a blog post. The company will start to test Live Audio Rooms within groups on Facebook. "You already have these communities that are organized around interests, and allowing people to come together and have rooms where they can talk, I think it'll be a very useful thing," he said. The feature comes with little surprise.

Google shifted more than $75.4 billion in profits out of the Republic using the controversial "double-Irish" tax arrangement in 2019, the last year in which it used the loophole. From a report: The technology giant availed of the tax arrangement to move the money out of Google Ireland Holdings Unlimited Company via interim dividends and other payments. This company was incorporated in Ireland but tax domiciled in Bermuda at the time of the transfer.

The move allowed Google Ireland Holdings to escape corporation tax both in the Republic and in the United States where its ultimate parent, Alphabet, is headquartered. The holding company reported a $13 billion pretax profit for 2019, which was effectively tax-free, the accounts show. A year earlier, Google Ireland Holdings paid out dividends of 23 billion euros, having recorded turnover of $25.7 billion. Google has used the double Irish loophole to funnel billions in global profits through Ireland and on to Bermuda, effectively putting them beyond the reach of US tax authorities. Companies exploiting the double Irish put their intellectual property into an Irish-registered company that is controlled from a tax haven such as Bermuda.

"Jensen Huang, the CEO of Nvidia, the nation's most valuable semiconductor company, with a stock price of $645 a share and a market cap of $400 billion, is out to create the metaverse," writes Time magazine.

Huang defines it as "a virtual world that is a digital twin of ours." Huang credits author Neal Stephenson's Snow Crash, filled with collectives of shared 3-D spaces and virtually enhanced physical spaces that are extensions of the Internet, for conjuring the metaverse. This is already playing out with the massively popular online games like Fortnite and Minecraft, where users create richly imagined virtual worlds. Now the concept is being put to work by Nvidia and others.

Partnering with Nvidia, BMW is using a virtual digital twin of a factory in Regensburg, Germany, to virtually plan new workflows before deploying the changes in real time in their physical factory. The metaverse, says Huang, "is where we will create the future" and transform how the world's biggest industries operate...

Not to make any value judgments about the importance of video games, but do you find it ironic that a company that has its roots in entertainment is now providing vitally important computing power for drug discovery, basic research and reinventing manufacturing?

No, not at all. It's actually the opposite. We always started as a computing company. It just turned out that our first killer app was video games...

How important is the advent and the adaptation of digital twins for manufacturing, business and society at large?

In the future, the digital world or the virtual world will be thousands of times bigger than the physical world. There will be a new New York City. There'll be a new Shanghai. Every single factory and every single building will have a digital twin that will simulate and track the physical version of it. Always. By doing so, engineers and software programmers could simulate new software that will ultimately run in the physical version of the car, the physical version of the robot, the physical version of the airport, the physical version of the building. All of the software that's going to be running in these physical things will be simulated in the digital twin first, and then it will be downloaded into the physical version. And as a result, the product keeps getting better at an exponential rate.

The second thing is, you're going to be able to go in and out of the two worlds through wormholes. We'll go into the virtual world using virtual reality, and the objects in the virtual world, in the digital world, will come into the physical world, using augmented reality. So what's going to happen is pieces of the digital world will be temporarily, or even semipermanently, augmenting our physical world. It's ultimately about the fusion of the virtual world and the physical world.
See also this possibly related story, "Nvidia's newest AI model can transform single images into realistic 3D models."

"A true-crime podcast has been credited with providing valuable information in a missing person case from the 1990s after two men were arrested," reports Newsweek: Kristin Smart, 19, of Stockton, California, went missing in May 1996 after returning to her dorm at California Polytechnic State University campus in San Luis Obispo. The case received widespread attention from Chris Lambert's Your Own Backyard podcast dedicated to investigating Smart's disappearance, which he began in September 2019.

The last person who was thought to have seen Smart alive was Paul Flores, 44, who was also a freshman at the time, when he offered to walk Smart back to her dorm. Since Smart's disappearance, Flores has been a person of interest, suspect, and prime suspect. Now, District Attorney Dan Dow alleges that Flores killed her in his dorm room following an attempted rape. On Tuesday, April 13, Flores was arrested for her murder, and his father Ruben Flores, 80, was arrested as an accessory to murder for allegedly helping his son conceal Smart's body, which has never been found.

San Luis Obispo County Sheriff Ian Parkinson said that they arrested the father and son on Tuesday after a search at Ruben Flores' home using ground-penetrating radar and cadaver dogs last month resulted in new evidence linked to Smart's disappearance... Parkinson also credited the Your Own Backyard podcast with raising awareness of the case which resulted in "valuable information" after a key witness came forward.
The Associated Press calls it "the latest in a line of true-crime podcasts credited with producing results in court," noting investigations by the Up and Vanished podcast also "led a man to confess to killing a Georgia beauty queen."

And they list some of the "compelling clues" uncovered by the podcaster investigating Kristin Smart's disappearance: A former colleague of Paul Flores' mother, Susan Flores, told him Mrs. Flores came into work after Memorial Day weekend 1996 — when Smart went missing — saying she didn't sleep well because her husband had gotten a phone call in the middle of the night and left in his car. "The speculation has been all along that Paul called his dad in the middle of the night and his dad came up and helped him get rid of Kristin's body," Lambert said.

A tenant who lived for a year at Susan Flores' home told him she heard a watch alarm every morning at 4:20 a.m. Smart had worked as a lifeguard at 5 a.m. at the Cal Poly pool, so it's possible she set her watch to wake up at that early hour.