An anonymous reader quotes a report from Ars Technica: Tesla is known to be working on designing new battery modules that also work as structural elements, but the California automaker is fashioning those structural modules out of traditional cylindrical cells. There's a more elegant approach to the idea, though, and a group at Chalmers University of Technology in Sweden led by professor Leif Asp has just made a bit of a breakthrough in that regard, making each component of the battery out of materials that work structurally as well as electrically. The structural battery combines a carbon-fiber anode and a lithium-iron phosphate-coated aluminum foil cathode, which are separated by a glass fiber separator in a structural battery electrolyte matrix material. The anode does triple duty, hosting the lithium ions, conducting electrons, and reinforcing everything at the same time. The electrolyte and cathode similarly support structural loads and do their jobs in moving ions.

The researchers tested a couple different types of glass fiber -- both resulting in cells with a nominal voltage of 2.8 V -- and achieved better results in terms of battery performance with thinner, plain weave. The cells using this construction had a specific capacity of 8.55 Ah/kg, an energy density of 23.6 Wh/kg (at 0.05 C), a specific power of 9.56 W/kg (at 3 C), and a thickness of 0.27 mm. To put at least one of those numbers in context, the 4680 cells that Tesla is moving to have an energy density of 380 Wh/kg. However, that energy density figure for the cylindrical cells does not include the mass of the structural matrix that surrounds them (when used as structural panels). Speaking of structural loads, the greatest stiffness was also achieved with plain glass fiber weave, at 25.5 GPa. Again, to put that number into context, it's roughly similar to glass fiber-reinforced plastic, whereas carbon fiber-reinforced plastic will be around 10 times greater, depending on whether it's resin transfer molding or woven sheets pre-impregnated with resin (known as pre-preg). Professor Asp's group is now working to see if swapping the cathode's aluminum foil for carbon fiber will increase both stiffness (which it should) and electrical performance. The group is also testing even thinner separators. He hopes to reach 75 Wh/kg and 75 GPa, which would result in a cell that is slightly stiffer than aluminum (GPa: 68) but obviously much lighter.

A robot armed with virus-killing ultraviolet light is being tested on Swiss airplanes, yet another idea aiming to restore passenger confidence and spare the travel industry more pandemic pain. Reuters reports: UVeya, a Swiss start-up, is conducting the trials of the robots with Dubai-based airport services company Dnata inside Embraer jets from Helvetic Airways, a charter airline owned by Swiss billionaire Martin Ebner. Aircraft makers still must certify the devices and are studying the impact their UV light may have on interior upholstery, which could fade after many disinfections, UVeya co-founder Jodoc Elmiger said. Still, he's hopeful robot cleaners could reduce people's fear of flying, even as COVID-19 circulates.

Elmiger's team has built three prototypes so far, one of which he demonstrated inside a Helvetic jet at the Zurich Airport, where traffic plunged 75% last year. The robot's lights, mounted on a crucifix-shaped frame, cast everything in a soft-blue glow as it slowly moved up the Embraer's aisle. One robot can disinfect a single-aisled plane in 13 minutes, start to finish, though larger planes take longer. Dnata executives hope airplane makers will sign off on the robots -- Elmiger estimates they'll sell for $15,930 or so -- as governments require new measures to ensure air travelers don't get sick.

Taiwan Semiconductor Manufacturing Co. (TSMC) is asking clients to accept higher prices as it ramps up investment to deal with a "structural and fundamental increase" in chip demand. Nikkei Asia reports: C.C. Wei, TSMC's CEO, told clients in a letter seen by Nikkei Asia that the world's biggest contract chipmaker plans to invest $100 billion over the three years through 2023 in advanced semiconductor technologies, according to the letter. TSMC this year announced record high capital expenditure of up to $28 billion for this year alone. "We are seeing a structural and fundamental increase in underlying demand driven by key long-term growth megatrends including 5G and high-performance computing," Wei said in the letter. The Covid-19 pandemic has also transformed the global economy, changing how people work, learn and live, the CEO added.

Wei told clients that TSMC will also "suspend wafer price reductions starting December 31" this year, for four quarters. "We believe that this modest action is the least disruptive option to supply chains so that TSMC can deliver our mission of providing leading semiconductor technologies and manufacturing capability to you in a sustainable manner," Wei said. "The increased capacity will improve supply certainty and help protect complex global supply chains that rely on semiconductors," he said. "We ask for your patience as we expedite the building of new fabs and capacity."

Amtrak released a proposed map Wednesday of an expanded U.S. rail system that could be built with funding from President Biden's infrastructure plan. Axios reports: The expanded rail system -- funded with the $80 billion Biden's infrastructure plan allocates to rail specifically -- would "create jobs, improve the quality of life, reduce carbon emissions and generate economic growth," Amtrak said in a statement. The envisioned train network would create up to 30+ new routes in 15 more states, connecting 160 more communities and serving 20 million more passengers, according to Amtrak. The company also says the expanded map would lower carbon emissions, claiming that traveling on Amtrak is "up to 83% more energy efficient than driving and up to 73% more energy efficient than flying."

Google today announced a series of policy updates for apps distributed through the Play Store. The most impactful sees Google limit most developers from seeing which Android apps are installed on your device. From a report: As part of its ongoing work to restrict the use of high risk/sensitive permissions, Google is limiting what apps can use the QUERY_ALL_PACKAGES permission that "gives visibility into the inventory of installed apps on a given device." This applies to apps that target API 30+ on devices running Android 11 and newer. Enforcement was originally meant to occur earlier, but delayed in light of COVID-19.

The Supreme Court has unanimously decided that Facebook text message alerts don't violate laws against unwanted auto-dialed calls. The court ruled that a lower court defined illegal "robocalls" too broadly and that the term should only apply to systems that generate lists of numbers and call them indiscriminately, not a system that simply stores numbers and automatically calls them. From a report: The lawsuit involves text messages that notify Facebook users of an attempted login. Its plaintiff, Noah Duguid, sued after receiving unwanted, erroneous notifications despite not having a Facebook account. Duguid argued that Facebook was violating the 1991 Telephone Consumer Protection Act (TCPA). An appeals court agreed, but the Supreme Court interpreted the law's definitions differently. Closely parsing the TCPA's grammar, the court concluded that an illegal auto-dialing system "must use a random or sequential number generator," and this definition "excludes equipment like Facebook's login notification system, which does not use such technology."

Myanmar's military rulers have ordered internet service providers to shut down wireless broadband services until further notice, Reuters reported Thursday, citing sources. From the report: The instruction to halt wireless broadband services was relayed to employees of one provider in an email seen by Reuters, which did not state a reason for the order. It also said the current mobile internet shutdown would continue and by law it had to comply with the directive.

An anonymous reader quotes a report from Engadget: Verizon will shut down its 3G services on December 31st, 2022, VP of network engineering Mike Haberman announced today. According to Haberman, less than 1 percent of Verizon customers still access the 3G network, with 99 percent on 4G LTE or 5G. Verizon has roughly 94 million customers, so by the company's own math, as many as 940,000 people are still using Verizon's 3G network.

"Customers who still have a 3G device will continue to be strongly encouraged to make a change now," Haberman wrote. "As we move closer to the shut-off date customers still accessing the 3G network may experience a degradation or complete loss of service, and our service centers will only be able to offer extremely limited troubleshooting help on these older devices." Verizon has been teasing a shut-off of its 3G CDMA services for years. [...] The delay to 2022 is final — there will be no more extensions, Haberman said. He noted that this will be "months after our competitors have shut off their networks completely."

One of the many promises made in President Biden's $2 trillion infrastructure plan is to deliver "future proof" broadband to every home in American within eight years. It sets aside $100 billion to accomplish this feat. Motherboard reports: While specifics are murky, a new fact sheet on the proposal states the plan won't just involve throwing more subsidies at America's deep-pocketed incumbents, an American pastime studies show historically hasn't delivered on the promise of faster, better broadband. Instead, the Biden administration says it plans to "prioritize support" for broadband networks owned, operated, or run in concert with local governments. Frustrated by limited competition and substandard service, some 750 U.S. communities have built local broadband networks that studies have shown are faster and less expensive than traditional options.

"President Biden's plan will promote price transparency and competition among internet providers, including by lifting barriers that prevent municipally-owned or affiliated providers and rural electric co-ops from competing on an even playing field with private providers, and requiring internet providers to clearly disclose the prices they charge," the plan states. The problem: neither the Biden FCC nor broader administration can do much about such state-level restrictions. Previous efforts by the Obama FCC to eliminate state barriers to community broadband were shot down in court. Still, clear support for such efforts is a course change from the GOP, which has repeatedly tried to ban community broadband entirely.

The Verge spoke with several Facebook video creators, all of whom say the company shorted them on cash and ignored their requests for help. From the report: The creators had no reason to initially question the amount they were paid since Facebook's estimated revenue tool almost always mirrored their actual payouts. Usually, they'd be short only a couple hundred dollars. But after their revenue seemed off two months in a row, the creators say they looked into the issue. All three say the problems began in January, around the time Facebook transitioned to its new Pages experience and made updates to how creators can monetize. [...] [T]hese creators say Facebook only cares about advertisers, leaving them with no one to turn to when their payments are unexpectedly short. They reached out for help, but the company gave them no feedback on what could be wrong.

After The Verge reached out for comment, however, Facebook said it "resolved a technical issue that prevented a small number of video creators on Facebook from receiving their full in-stream ads payouts." "We're notifying these partners that they'll receive those remaining in-stream payments during the April payout cycle, and we apologize for any inconvenience," a spokesperson said in an emailed statement. It's good news for the creators getting a rebate but still an alarming precedent -- holding thousands of dollars back for months with little explanation or guarantee the same problem won't pop up again in the future.

According to Bloomberg, Google has settled one of the first legal complaints filed by a new union, promising not to silence workers who talk about their pay. From the report: "WE WILL NOT tell you that you cannot discuss policies with other employees," states the notice to staff, signed by an attorney for Google and parent Alphabet Inc. and being posted at a Google data center in South Carolina. "WE WILL NOT discipline you because you exercise your right to discuss wage rates, bonuses, hours and working conditions with other employees."

The settlement ends a National Labor Relations Board complaint filed by the Alphabet Workers Union in February alleging that management at the data center forbid workers from discussing their pay and also suspended a data technician, Shannon Wait, because she wrote a pro-union post on Facebook. Wait was reinstated earlier this year, although she left soon after. [...] The Alphabet Workers Union filed its complaint against units of Google staffing vendor Adecco Group AG, which employed workers including Wait, and also against Alphabet, which it deemed a "joint employer" -- a company with sufficient control over a group of workers to be legally liable for their treatment. The settlement also requires the companies to remove any reference to Wait's suspension from her file.

Hitachi said on Wednesday it will buy U.S. software company GlobalLogic for $9.6 billion, including repayment of debt, as the Japanese industrial conglomerate pivots from electronics hardware to digital services. From a report: The deal is the biggest Japanese outbound acquisition of a U.S. hi-tech company on record, according to Refinitiv data. The acquisition is part of Hitachi's ongoing business portfolio overhaul, which includes the $7 billion acquisition of ABB's power grid business last year and a series of divestitures of its domestic hardware subsidiaries. Hitachi's stock tumbled 7% on the Tokyo Stock Exchange, its sharpest daily fall in more than a year, on the news.

Volkswagen is staying Volkswagen. From a report: Volkswagen's U.S. subsidiary said Tuesday the company would rebrand itself as Voltswagen of America to promote its electric car strategy, but a spokesman for the parent company in Germany later said the move was a joke. The name change, which immediately lit up social media and online news sites, was originally intended as an early April Fools' Day stunt to get people talking about VW's ambitious electric car strategy as the company rolls out its first all-electric sport-utility vehicle, the ID. 4, in U.S. dealerships, the spokesman said. The problem for VW is that everyone took it seriously, creating confusion about the company's intentions and moving the shares, putting VW's communications team on the defensive. "We didn't mean to mislead anyone," a Volkswagen spokesman in Wolfsburg told The Wall Street Journal. "The whole thing is just a marketing action to get people talking about the ID.4."

The spoof began late Monday, when VW communications in the U.S. published a draft of the press release on the company's website and then quickly took it down, according to VW officials in Germany. They left the document online long enough to grab the attention of journalists and VW fans, sparking a flood of online news and tweets. VW communications officials in the U.S. declined to comment at the time. VW's U.S. unit published the release in full again on Tuesday on the U.S. website, a move that suggested the name change was in fact real and would take effect as stated in the release in May. The press release quoted Scott Keogh as president and CEO of Voltswagen of America saying: "We might be changing out our K for a T, but what we aren't changing is this brand's commitment to making best-in-class vehicles for drivers and people everywhere." Back in Germany, a VW official told the Journal that the name change shouldn't be taken seriously. "There will be no name change," the official said. But after it became clear the joke's intended recipients were doing exactly that, officials in Germany scrambled to reach their colleagues at VW's U.S. headquarters in Herndon, Va., to pull the plug on the campaign, according to Wolfsburg officials.

An anonymous reader quotes a report from The Record by Recorded Future: Academic research published last week looked at the telemetry traffic sent by modern iOS and Android devices back to Apple and Google servers and found that Google collects around 20 times more telemetry data from Android devices than Apple from iOS. The research, conducted by Professor Douglas J. Leith from Trinity College at the University of Dublin, analyzed traffic originating from iOS and Android devices heading to Apple and Google servers at various stages of a phone's operation... [...] The study unearthed some uncomfortable results. For starters, Prof. Leith said that "both iOS and Google Android transmit telemetry, despite the user explicitly opting out of this [option]." Furthermore, "this data is sent even when a user is not logged in (indeed even if they have never logged in)," the researcher said.

But while the Irish researcher found that Apple tends to collect more information data types from an iOS device, it was Google that collected "a notably larger volume of handset data. During the first 10 minutes of startup the Pixel handset sends around 1MB of data is sent to Google compared with the iPhone sending around 42KB of data to Apple," Prof. Leith said. "When the handsets are sitting idle the Pixel sends roughly 1MB of data to Google every 12 hours compared with the iPhone sending 52KB to Apple i.e., Google collects around 20 times more handset data than Apple." In response to the findings, a Google spokesperson said: "This research outlines how smartphones work. Modern cars regularly send basic data about vehicle components, their safety status and service schedules to car manufacturers, and mobile phones work in very similar ways. This report details those communications, which help ensure that iOS or Android software is up to date, services are working as intended, and that the phone is secure and running efficiently." The Android maker also disputed the paper's methodology, which they claim under-counted iOS' telemetry volume by excluding certain types of traffic, which Google believes resulted in skewed results that found Android devices collecting 20 times more data than iOS.

Apple echoed its rival's response. "The report conflates a number of items in relation to different services and misunderstands how personal location data is protected," an Apple spokesperson told The Record. "Apple is not collecting data that can be associated with individuals without a user's knowledge or consent."

Additional information about the findings can be found here (PDF).

chicksdaddy shares a report from The Security Ledger: Independent security researchers analyzing the widely used open source component netmask have discovered security vulnerabilities that could leave more than a quarter million open source applications vulnerable to attack, according to a report released Monday, The Security Ledger reports. According to a report by the site Sick Codes, the flaws open applications that rely on netmask to a wide range of malicious attacks including Server Side Request Forgeries (SSRF) and Remote- and Local File Includes (RFI, LFI) that could enable attackers to ferry malicious code into a protected network, or siphon sensitive data out of one. Even worse, the flaws appear to stretch far beyond a single open source module, affecting a wide range of open source development languages, researchers say.

Netmask is a widely used package that allows developers to evaluate whether a IP address attempting to access an application was inside or outside of a given IPv4 range. Based on an IP address submitted to netmask, the module will return true or false about whether or not the submitted IP address is in the defined "block." According to the researcher using the handle "Sick Codes," the researchers discovered that netmask had a big blind spot. Specifically: it evaluates certain IP addresses incorrectly: improperly validating so-called "octal strings" rendering IPv4 addresses that contain certain octal strings as integers. For example, the IP4 address 0177.0.0.1 should be evaluated by netmask as the private IP address 127.0.0.1, as the octal string "0177" translates to the integer "127." However, netmask evaluates it as a public IPv4 address: 177.0.0.1, simply stripping off the leading zero and reading the remaining parts of the octal string as an integer.

The implications for modules that are using the vulnerable version of netmask are serious. According to Sick Codes, remote attackers can use SSRF attacks to upload malicious files from the public Internet without setting off alarms, because applications relying on netmask would treat a properly configured external IP address as an internal address. Similarly, attackers could also disguise remote IP addresses local addresses, enabling remote file inclusion (RFI) attacks that could permit web shells or malicious programs to be placed on target networks. But researchers say much more is to come. The problems identified in netmask are not unique to that module. Researchers have noted previously that textual representation of IPv4 addresses were never standardized, leading to disparities in how different but equivalent versions of IPv4 addresses (for example: octal strings) are rendered and interpreted by different applications and platforms.

A young child inadvertently sparked confusion over the weekend by posting an unintelligible tweet to the official account of US Strategic Command. The BBC reports: The agency is responsible for safeguarding America's nuclear weapons. Some social-media users feared the account may have been hacked. But it has since been revealed a young member of the account's social-media manager's family was responsible for posting the tweet, ";l;;gmlxzssaw," which was then deleted within minutes.

"Deliveroo is set to begin one of the largest IPOs on the London Stock Exchange in a decade," writes fermion. "It has reduced its valuation in response to customer complaints." CNBC reports: The Amazon-backed company announced Monday that it will now sell shares for 3.90 pounds ($5.40) to 4.10 pounds each instead of 3.90 pounds to 4.60 pounds each. As a result, Deliveroo's market cap will be between 7.6 billion pounds and 7.8 billion pounds, instead of between 7.6 billion pounds and 8.8 billion pounds.

Deliveroo said it's reacting to market conditions, which have taken a turn for the worse in the last week. Half of the tech IPOs in the U.S., and in Europe, the Middle East, and Africa, priced in the bottom third of their announced ranges last week. However, the new share price range announcement also comes amid an investor revolt. Several large investors said they plan to shun the Deliveroo IPO on April 7 over workers' rights and the company's share ownership structure, which gives CEO Will Shu over 50% of the voting rights.

Deliveroo rebuffs accusations it does not treat its riders properly and says that its platform gives them the flexibility to work when they want, as do rivals like Just Eat and UberEats. Deliveroo insisted that the share price reduction had nothing to do with the investor backlash and the union action, insisting it is purely down to market conditions. It pointed out that four out of six U.S. tech IPOs priced last week are below offer price. They added that Deliveroo has seen strong demand from investors worldwide but declined to specify which ones.

An anonymous reader shares a report from Decrypt about BitClout, an ambitious decentralized social network that tokenizes Twitter personalities. Here's an excerpt from the report: At first glance, BitClout looks and feels like primitive mashup of Twitter and Robinhood, including a stream of messages and buttons to like or share what other people post. Anyone can create a profile and begin participating in the network by providing a phone number. But BitClout has already created 15,000 profiles based on popular Twitter personalities, including ones for Elon Musk and influencers in the cryptocurrency world -- all without asking anyone's permission. Diamondhands [the man behind BitClout who asked for anonymity even though his real identity is well known] says BitClout created the profiles to prevent impostors from creating fake accounts and squatting on them.

Every BitClout account is also tied to a "coin" that rises and falls in value depending on how many people use it. Anyone can follow a given account -- as they would on Twitter or Instagram -- but the coin means they can also own an asset that is hypothetically tied to the person's public reputation. "What you get to do is monetize yourself," says Diamondhands. "All the positive things you put out in the world will cause people to like you and buy your coin. You can monetize pent up enthusiasm for you, and let fans ride the rocket ship with you." BitClout users who feel inclined to being bought and sold in this way can create a profile to earn a portion of the coins associated with their image. In the case of those Twitter personalities whom BitClout already added to the platform, they can claim their profile (and a portion of the coins associated with it) by tweeting that they have joined the network -- a requirement that conveniently provides free marketing for BitClout. [...] A tracking site called BitClout Pulse has already sprung up to track the value of more popular coins.

BitClout's unusual twist on social networking extends beyond adding people without their permission. The project also stands out for its technical operations, which rely on dozens of autonomous blockchain-based nodes scattered around the world -- a very different architecture than Facebook or Twitter, which rely on centralized servers to keep their networks running. Every message or transaction is recorded to BitClout's blockchain, which Diamondhands describes vaguely as custom-built software similar to Bitcoin's, but with greater capacity for social networking functions. He says BitClout's code is open source and the team will soon publish it. All of this, says Diamondhands, will eventually lead to brand-name organizations hosting BitClout nodes that will display feeds tailored to various interests. For instance, he says, ESPN could run a node that displays a feed heavily populated with sports figures, while Politico might do the same with a focus on political leaders. But Bitclout's node structure also means it will lack centralized moderation policies like those found on platforms like Twitter or Facebook. Yes, we're on BitClout: bitclout.com/u/slashdotorg

Duo, the authentication service Cisco acquired for $2.35 billion in 2018, today announced its plans to launch a passwordless authentication service that will allow users to log in to their Duo-protected services through security keys or platform biometrics like Apple's Face ID or Microsoft's Windows Hello. The infrastructure-agnostic service will go into public preview in the summer. From a report: "Cisco has strived to develop passwordless authentication that meets the needs of a diverse and evolving workforce and allows the broadest set of enterprises to securely progress towards a passwordless future, regardless of their IT stack," said Gee Rittenhouse, SVP and GM of Cisco's Security Business Group. "It's not an overstatement to say that passwordless authentication will have the most meaningful global impact on how users access data by making the easiest path the most secure." If you're using Duo or a similar product today, chances are that you are using both passwords and a second factor to log into your work applications. But users are notoriously bad about their password hygiene -- and to the despair of any IT department, they also keep forgetting them.

An anonymous reader quotes a report from Interesting Engineering: In a world-first, a team of researchers at the Georgia Institute of Technology has developed a small, 3D-printed rectifying antenna that can harvest electromagnetic energy from 5G signals and use it to power devices, in a way turning 5G networks into "a wireless power grid," according to a press release by the university. As explained in the Jan.12 issue of the journal Scientific Reports, the flexible Rotman lens-based rectifying antenna, in other words, rectenna, system can perform millimeter-wave harvesting in the 28-GHz band. Commonly used in radar surveillance systems to see multiple directions without moving the antenna system, the Rotman lens is especially important for beamforming networks. However, larger antennas, which unfortunately have a narrowing field of view, are needed to harvest enough power to supply devices, and this limits the usage.

The researchers solved this problem by using a system that has a wide angle of coverage. The Rotman lens provides 6 levels of view at the same time in a pattern shaped like a spider. By enabling this structure to map a set of selected radiation directions to an associated set of beam-ports, the lens is used as an intermediate component between the antennas and the rectifiers. This way, the electromagnetic energy collected by the antenna arrays from one direction is combined and fed into a single rectifier. This maximizes efficiency, enabling a system with both high gain and large beamwidth. The system achieved a 21-fold increase in harvested power compared with a referenced counterpart in demonstrations. It was also able to maintain identical angular coverage.