Bernard Meyer, reporting for CyberNews: In a collaboration between CyberNews Sr. Information Security Researcher Mantas Sasnauskas and researchers James Clee and Roni Carta, suspicious backdoors have been discovered in a Chinese-made Jetstream router, sold exclusively at Walmart as their new line of "affordable" wifi routers. This backdoor would allow an attacker the ability to remotely control not only the routers, but also any devices connected to that network. CyberNews reached out to Walmart for comment and to understand whether they were aware of the Jetstream backdoor, and what they plan to do to protect their customers. After we sent information about the affected Jetstream device, a Walmart spokesperson informed CyberNews: "Thank you for bringing this to our attention. We are looking into the issue to learn more. The item in question is currently out of stock and we do not have plans to replenish it."

Besides the Walmart-exclusive Jetstream router, the cybersecurity research team also discovered that low-cost Wavlink routers, normally sold on Amazon or eBay, have similar backdoors. The Wavlink routers also contain a script that lists nearby wifi and has the capability to connect to those networks. We have also found evidence that these backdoors are being actively exploited, and there's been an attempt to add the devices to a Mirai botnet. Mirai is malware that infects devices connected to a network, turns them into remotely controlled bots as part of a botnet, and uses them in large-scale attacks. The most famous of these is the 2016 Dyn DNS cyberattack, which brought down major websites like Reddit, Netflix, CNN, GitHub, Twitter, Airbnb and more.

President-elect Joe Biden's top technology adviser helped craft California's landmark online privacy law and recently condemned a controversial federal statute that protects internet companies from liability, indicators of how the Biden administration may come down on two key tech policy issues. From a report: Bruce Reed, a former Biden chief of staff who is expected to take a major role in the new administration, helped negotiate with the tech industry and legislators on behalf of backers of a ballot initiative that led to the 2018 California Consumer Privacy Act. Privacy advocates see that law as a possible model for a national law. Reed also co-authored a chapter in a book published last month denouncing the federal law known as Section 230, which makes it impossible to sue internet companies over the content of user postings. Both Republicans and Democrats have called for reforming or abolishing 230, which critics say has allowed abuse to flourish on social media. Reed, a veteran political operative, was chief of staff for Biden from 2011 to 2013, when Biden was U.S. vice president. In that role, he succeeded Ron Klain, who was recently named incoming White House chief of staff. Reed then served as president of the Broad Foundation, a major Los Angeles philanthropic organization, and later as an adviser to Laurene Powell Jobs' Emerson Collective in Palo Alto, California.

Google is loosening control over the core of its Chrome browser, a move that helps Microsoft, Samsung and Brave build competitors while advancing the search giant's vision of the web. From a report: Over the past six months, Google welcomed a new outside developer into the leadership of its Chromium project, the software that powers the similarly named browser. The Alphabet subsidiary is also granting outsiders access to its previously proprietary software development system and allows outside features even when Google doesn't incorporate them into the flagship Chrome browser.

Chromium is open-source software, which means anyone can modify and use it. Even with open source projects, however, outsiders can have trouble convincing organizers to accept their changes and additions, making it harder to contribute and benefit. Google took pains to draw attention to the changes at the BlinkOn conference earlier this week. "It's really cool to see so many people and groups with different priorities coming together and finding solutions that not only meet their individual agendas but also advance the common goal of improving the web," said Danyao Wang, a Chrome engineer at Google.

Romello Goodman, a software engineer at The New York Times, writing at Increment: Like a sourdough starter passed through the hands of many bakers -- some novices, some experienced -- a codebase reflects how teammates communicate with one another. It's a snapshot of our thinking and our best attempts at codifying norms and assumptions. It's a conversation in which each person contributes and is in conversation with those who came before them. With each new feature or bug report, we understand our code better. We identify areas where new logic doesn't quite fit with existing logic. We're constantly in touch with our own past decisions and those of our coworkers. We're working together, trying to harmonize and match one another's thinking patterns and assumptions. We trust one another to make decisions for the good of the team and the organization. Every piece of new code adds to the culture and cultivates our shared understanding.

If code is sourdough, we have an opportunity to better appreciate the histories and context that have gone into it. In software, we tend to think of legacy code as something that should be thrown away or rewritten, often conflating a codebase's age with its health and viability. But code doesn't age in a vacuum. If sourdough can be passed down from person to person over decades, then so can code. The preservation of decisions and experience is tied to the preservation of our codebase. Even when the code itself is no longer being updated, documentation around the logic or the underlying platform and adjacent technologies can keep a codebase and its culture vibrant. You can then pass that culture on for another team to bake with. It might just taste better than you'd expect.

The Solomon Islands Government has defended its decision to place a temporary ban on Facebook, a move it says is aimed at tackling cyberbullying and online defamation. From a report: The ban, which has not yet come into effect, received an angry response online after it was announced last week. Communications officials are expected to meet with internet and telecommunications providers in Solomon Islands to discuss how they will block the world's largest social media network. Prime Minister Manasseh Sogavare told the nation's Parliament the ban was necessary in order to preserve national unity. "Cyberbullying on Facebook is widespread, people have been defamed by users who use fake names, and people's reputations that have been built up over the years [are destroyed] in a matter of minutes," he said. Mr Sogavare said the planned ban mainly targeted young people, but said it was aimed at protecting them from "vile abusive language" and not an attempt at silencing them.

In some of the most remote and impoverished corners of the world, where respiratory illnesses abound and trained medical professionals fear to tread, diagnosis is increasingly powered by artificial intelligence and the internet. From a report: In less than a minute, a new app on a phone or a computer can scan an X-ray for signs of tuberculosis, Covid-19 and 27 other conditions. TB, the most deadly infectious disease in the world, claimed nearly 1.4 million lives last year. The app, called qXR, is one of many A.I.-based tools that have emerged over the past few years for screening and diagnosing TB. The tools offer hope of flagging the disease early and cutting the cost of unnecessary lab tests. Used at large scale, they may also spot emerging clusters of disease.

"Among all of the applications of A.I., I think digitally interpreting an image using an algorithm instead of a human radiologist is probably furthest along," said Madhukar Pai, the director of the McGill International TB Center in Montreal. Artificial intelligence cannot replace clinicians, Dr. Pai and other experts cautioned. But the combination of A.I. and clinical expertise is proving to be powerful. "The machine plus clinician is better than the clinician, and it's also better than machine alone," said Dr. Eric Topol, the director of the Scripps Research Translational Institute in San Diego and the author of a book on the use of A.I. in medicine. In India, where roughly one-quarter of the world's TB cases occur, an app that can flag the disease in remote locations is urgently needed.

This week Purism began shipping its mass-produced Librem 5 phone to customers, according to announcement from the company: The Librem 5 is a one-of-a-kind general-purpose computer in a phone form-factor that Purism has designed and built from scratch following a successful crowdfunding campaign that raised over $2.2 million. Both the hardware and software design is focused on respecting the end user's freedom and giving them control over their privacy and security.

The Librem 5 doesn't run Android nor iOS but instead runs the same PureOS operating system as Purism's laptops and mini PC.

The Librem 5 has unique hardware features including a user-removable cellular modem, WiFi card, and battery. Like with Librem laptops, the Librem 5 also features external hardware kill switches that cut power to the cellular modem, WiFi/Bluetooth, and front and back cameras and microphone so that the user can control when these devices are in use. All hardware switches can also be triggered together to enable "lockdown mode" which also disables the GPS, accelerometer and all other sensors...

Another unique feature of the Librem 5 is convergence: the ability to connect the Librem 5 to a monitor or laptop dock and use it as a desktop computer running the same full-sized desktop applications as on Librem laptops. When in a phone form-factor, applications behave much like "responsive websites" and change their appearance for the smaller screen. This allows you to use the Librem 5 as a phone, a desktop, or a laptop with the same applications and same files.
Their announcement notes their work on software making desktop applications "adaptive" to phone form factors, adding "This suite of software has now become the most popular software stack to use on other handheld Linux hardware." And they close with an appreciative comment from Purism's founder and CEO Todd Weaver:

"Shipping the Librem 5 has been an immense multi-year developmental effort. It is the culmination of people's desire to see an alternative to Android and iOS and fund it, coupled with dedication from a team of experts addressing hardware, kernel, operating system, and applications that has turned a lofty near-impossible goal into reality. We have built a strong foundation and with the continued support of customers, the community, and developers, we will continue to deliver revolutionary products like the Librem 5 running PureOS."

InfoWorld reports: Firefox users can expect improved JavaScript performance in the Firefox 83 browser, with the Warp update to the SpiderMonkey JavaScript engine enabled by default.

Also called WarpBuilder, Warp improves responsiveness and memory usage and speeds up page loads by making changes to JiT (just-in-time) compilers... Warp has been shown to be faster than Ion, SpiderMonkey's previous optimizing JiT, including a 20 percent improvement on Google Docs load time. Other JavaScript-intensive websites such as Netflix and Reddit also have shown improvement...

Warp has replaced the front end — the MIR building phase — of the IonMonkey JiT... Mozilla also will continue to incrementally optimize the back end of the IonMonkey JiT, as Mozilla believes there is still room for improvement for JavaScript-intensive workloads.

Slashdot reader Charlotte Web quote The Street: Tesla CEO Elon Musk says that he has "fully" recovered from his bout with a mild fever or cold about a week after he took to Twitter to say he tested positive for coronavirus... [T]his week, Musk took a more reliable PCR test that he said showed "unequivocal" evidence that he had Covid...

On Wednesday, Morgan Stanley raised Tesla to overweight for the first time in more than three years, predicting that the electric carmaker is on the verge of a "profound model shift" from selling cars to generating high-margin software and services revenue. "To only value Tesla on car sales alone ignores the multiple businesses embedded within the company," Adam Jones said in a research note to clients as he upgraded the shares from equal-weight and raised his price target by 50% to $540 from $360, suggesting 22% additional upside for the stock.
The analyst believes Tesla's electric vehicle business is Tesla's "entry ticket" for "unlocking much larger" potential markets, according to an earlier article in The Street: To better gauge Tesla's future earnings potential, Jones said his team was now including software/connected vehicle services revenue in their earnings and valuation forecasts. With the total number of Tesla's out in the world expected to reach 2.1 million next year, "a more in-depth understanding of the revenue streams derived from each car is warranted right now," he wrote.

Rudra Saraswat is the creator of the Ubuntu Unity distro (which uses the Unity interface in place of Ubuntu's GNOME shell).

But this week they released Ubuntu Web Remix, "a privacy-focused, open source alternative to Google Chrome OS/Chromium OS" using Firefox instead of Google Chrome/Chromium. Liliputing reports: If the name didn't give it away, this operating system is based on Ubuntu, but it's designed to offer a Chrome OS-like experience thanks to a simplified user interface and a set of pre-installed apps including the Firefox web browser, some web apps from /e/, and Anbox, a tool that allows you to run Android apps in Linux...

You don't get the long battery life, cloud backup, and many other features that make Chromebooks different from other laptops (especially other cheap laptops). But if you're looking for a simple, web-centric operating system that isn't made by a corporate giant? Then I guess it's nice to have the option.
Rudra Saraswat writes: An easy web-app (wapp) format has been created to package web-apps for the desktop. You can now create your own web apps using web technologies, package them for the desktop and install them easily.

An experimental wapp store can be found at store.ubuntuweb.co, for distributing web apps. Developers and packagers can do pull requests at gitlab.com/ubuntu-web/ubuntu-web.gitlab.io to contribute wapps.

"Fraudsters redirected email and web traffic destined for several cryptocurrency trading platforms over the past week," reports security researcher Brian Krebs: The attacks were facilitated by scams targeting employees at GoDaddy, the world's largest domain name registrar, KrebsOnSecurity has learned...

This latest campaign appears to have begun on or around Nov. 13, with an attack on cryptocurrency trading platform liquid.com. "A domain hosting provider 'GoDaddy' that manages one of our core domain names incorrectly transferred control of the account and domain to a malicious actor," Liquid CEO Kayamori said in a blog post. "This gave the actor the ability to change DNS records and in turn, take control of a number of internal email accounts. In due course, the malicious actor was able to partially compromise our infrastructure, and gain access to document storage."

In the early morning hours of Nov. 18 Central European Time (CET), cyptocurrency mining service NiceHash disclosed that some of the settings for its domain registration records at GoDaddy were changed without authorization, briefly redirecting email and web traffic for the site. NiceHash froze all customer funds for roughly 24 hours until it was able to verify that its domain settings had been changed back to their original settings. "At this moment in time, it looks like no emails, passwords, or any personal data were accessed, but we do suggest resetting your password and activate 2FA security," the company wrote in a blog post. NiceHash founder Matjaz Skorjanc said the unauthorized changes were made from an Internet address at GoDaddy, and that the attackers tried to use their access to its incoming NiceHash emails to perform password resets on various third-party services, including Slack and Github. But he said GoDaddy was impossible to reach at the time because it was undergoing a widespread system outage in which phone and email systems were unresponsive. "We detected this almost immediately [and] started to mitigate [the] attack," Skorjanc said in an email to this author. "Luckily, we fought them off well and they did not gain access to any important service. Nothing was stolen...."

[S]everal other cryptocurrency platforms also may have been targeted by the same group, including Bibox.com, Celcius.network, and Wirex.app. None of these companies responded to requests for comment.

In response to questions from KrebsOnSecurity, GoDaddy acknowledged that "a small number" of customer domain names had been modified after a "limited" number of GoDaddy employees fell for a social engineering scam.

"In a historic test, a U.S. Navy guided missile destroyer shot down an intercontinental ballistic missile (ICBM) warhead aimed at a patch of ocean off the Hawaiian Islands," reports Popular Mechanics: Once the missile launched, a network of sensors picked it up. The data was then handed off to the guided missile destroyer USS John Finn, which launched a SM-3 Block IIA interceptor. Just as the ICBM released a [simulated] nuclear warhead, the SM-3 released an Exoatmospheric Kill Vehicle (EKV) designed to smash itself into the incoming warhead. Infrared cameras recorded a visible explosion as the EKV took out the simulated nuclear warhead.

Most types of ballistic missiles are basically small payload space rockets designed to boost nuclear warheads into low-Earth orbit. Once in space, the warhead coasts through orbit at several thousand miles per hour — the so-called midcourse phase when the warhead is midway between its launch point and target. The warhead then de-orbits into a trajectory that sends it plunging toward its target.

Meanwhile, space-based infrared sensors pick up the hot launch plume of the ballistic missile. A launch alert is passed on to ground-based long range radars, which search the skies for the incoming threat. As the missile falls away and the warhead continues on to its target, missile defense radars track the target, plot its trajectory, and alert any "shooters" in the flight path capable of shooting down the warhead. The shooter then launches an interceptor, and the EKV steers itself into the warhead path...
The article includes video of the test, and concludes that the ability to shoot down missiles is "terrible news for China" — while adding this "could very well cause Beijing to increase its nuclear arsenal."

According to a facebook post from the police department of Corvallis, Oregon, a Tesla Model 3 crashed at over 100mph, causing batteries from the Tesla to enter two different residences by breaking through the windows, one landing on a person's lap and the second landing on a bed, catching the bedding on fire. "A tire was ripped from the car during the collision and struck the second story siding of a nearby apartment complex with such force that it ruptured the water pipes within the wall, destroying the bathroom to the apartment and flooding the downstairs portion of the apartment as well," adds ExtremeTech. From the report: Tesla goes to some trouble to make certain that the battery cells in its vehicles don't go flying in the event of a collision. But the nature of this impact was obviously sufficient to break whatever solution the manufacturer has developed for dealing with the problem. Previous teardowns of the Model 3 battery pack have shown that the cells are sealed in place with high-strength epoxy.

With that said, there does appear to be a unique problem for BEVs in a situation like this. According to a follow-up post, the Model 3 battery cells can remain hot to the touch and might cause burns for up to 24 hours following involuntary dispersal. That kind of hazard -- specifically, the length of time you might be at risk from harm due to leftover detritus -- seems a potentially significant issue in certain situations. Tesla's epoxy solution shows it has considered the problem, but there may be reason to revisit things. It is unclear if individual cells remain at significant risk for secondary ignition after being separated from the main battery for any length of time or if the majority of fire risk is in the immediate period post-impact. The driver, incidentally, survived, which seems to say something good about Tesla's crash survival measures, at the least. The vehicle, needless to say, did not.

New submitter LeeLynx shares a report from The Register: A new group called the "Inclusive Naming Initiative" has revealed its existence and mission "to help companies and projects remove all harmful and unclear language of any kind and replace it with an agreed-upon set of neutral terms." Akamai, Cisco, the Cloud Native Computing Foundation, IBM, the Linux Foundation, Red Hat, and VMware are all participants. The group has already offered a Word replacement list that suggests alternatives to the terms whitelist, blacklist, slave, and master. There's also a framework for evaluating harmful language that offers guidance on how to make changes.

Red Hat's post announcing its participation in the Initiative links to a dashboard listing all instances of terms it wants changed and reports over 330,000 uses of "Master" and 105,000 uses of "Slave," plus tens of thousands and whitelists and blacklists. Changing them all will be a big job, wrote Red Hat's senior veep and CTO Chris Wright. "On a technical level, change has to be made in hundreds of discrete communities, representing thousands of different projects across as many code repositories," Wright wrote. "Care has to be taken to prevent application or API breakage, maintain backward compatibility, and communicate the changes to users and customers." The Initiative nonetheless hopes to move quickly, with its roadmap calling for best practices to be defined during Q1 2021, case studies to be available in Q3 2021 and a certification program delivered in Q4 2021.

The Internet Archive is now emulating Flash animations, games and toys in our software collection. Jason Scott writes in a blog post: Utilizing an in-development Flash emulator called Ruffle, we have added Flash support to the Internet Archive's Emularity system, letting a subset of Flash items play in the browser as if you had a Flash plugin installed. While Ruffle's compatibility with Flash is less than 100%, it will play a very large portion of historical Flash animation in the browser, at both a smooth and accurate rate.

We have a showcase of the hand-picked best or representative Flash items in this collection. If you want to try your best at combing through a collection of over 1,000 flash items uploaded so far, here is the link. You will not need to have a flash plugin installed, and the system works in all browsers that support Webassembly. For many people: See you later! Enjoy the Flash stuff!

Global internet companies Facebook, Google and Twitter and others have banded together and threatened to leave Pakistan after the South Asian nation granted blanket powers to local regulators to censor digital content. From a report: Earlier this week, Pakistan Prime Minister Imran Khan granted the Pakistan Telecommunication Authority the power to remove and block digital content that pose "harms, intimidates or excites disaffection" toward the government or in other ways hurt the "integrity, security, and defence of Pakistan." Through a group called the Asia Internet Coalition (AIC), the tech firms said that they were "alarmed" by the scope of Pakistan's new law targeting internet firms." In addition to Facebook, Google, and Twitter, AIC represents Apple, Amazon, LinkedIn, SAP, Expedia Group, Yahoo, Airbnb, Grab, Rakuten, Booking.com, Line, and Cloudflare.

If the message sounds familiar, it's because this is not the first time these tech giants have publicly expressed their concerns over the new law, which was proposed by Khan's ministry in February this year. After the Pakistani government made the proposal earlier this year, the group had threatened to leave, a move that made the nation retreat and promise an extensive and broad-based consultation process with civil society and tech companies. That consultation never happened, AIC said in a statement on Thursday, reiterating that its members will be unable to operate in the country with this law in place.

Tom Warren, writing for The Verge: The PC revolution started off life 35 years ago this week. Microsoft launched its first version of Windows on November 20th, 1985, to succeed MS-DOS. It was a huge milestone that paved the way for the modern versions of Windows we use today. While Windows 10 doesn't look anything like Windows 1.0, it still has many of its original fundamentals like scroll bars, drop-down menus, icons, dialog boxes, and apps like Notepad and MS paint.

An anonymous reader shares a report: Last year, electric scooters were booming in big cities across the United States and other countries as urbanites embraced a relatively novel way of getting around town. The rentable, battery-boosted rides also brought a rising number of pedestrian-involved crashes as some riders illegally zipped down sidewalks and darted around traffic before the craze was interrupted by the pandemic. Downtowns became ghost towns when businesses told workers to stay home, and e-scooter business slowed, dropping as much as 70 percent. As people reemerge from shutdowns, wary of congested trains and buses, the micromobility industry may enjoy a post-pandemic renaissance, analysts say. People are buying more of the two-wheelers in some markets. China-based Niu saw sales rise sales 6.3 percent internationally as cities such as Boston, New York and Minneapolis expanded bike lanes to encourage social distancing, setting the framework for a potential e-scooter comeback.

By the time the novel coronavirus is in the rearview mirror, riders could be encountering a new type of e-scooter, one that picks up safety tools from modern cars. Last week, micromobility companies Luna and Voi Technology came together to kick off a test fleet of e-scooters with pedestrian detection. The test scooters are deployed in Northampton, England. Luna, a Dublin-based start-up, developed the system of cameras and sensors that it says will enable the scooters to learn and respond to their environments. Voi, a Swedish e-scooter manufacturer, integrated Luna's computer vision system into 50 of its e-scooters. [...] The immediate goal for Voi and Luna is to have the devices detect people and objects in a scooter's path, even if the rider doesn't see them. The idea is to make scooter users and pedestrians feel safe as they navigate busy streets, which is the most significant issue plaguing cities with legalized shared e-scooters, according to Fredrik Hjelm, CEO of Voi.

YouTube, Facebook and Twitter have said they will join forces with fact-checkers, governments and researchers to try to come up with a new way of tackling misinformation. From a report: Vaccine misinformation has been rife on Facebook, Twitter and YouTube, with many questioning their efficacy. At the same time, countries are preparing to roll out coronavirus vaccines in a bid to end the pandemic. It is unclear how the initiative will improve the fight against fake news. Fact-checking charity Full Fact will co-ordinate the collaboration. Taking part in the effort alongside Facebook, Google-owned YouTube and Twitter are the UK's Department for Digital, Culture, Media and Sport; the Reuters Institute for the Study of Journalism; Africa Check; Canada's Privacy Council Office; and five other international fact-checking organisations. With funding from Facebook, an initial framework will launch in January, setting out new standards for tackling misinformation, as well as a set of aims on the best way to respond to such information.

Apple has slammed Facebook and other internet giants for their ad-targeting practices in response to a letter questioning a decision by the iPhone maker to delay a new privacy feature. From a report: The Cupertino, California-based technology company criticized Facebook's approach to advertising and user tracking, according to a written reply sent to several human rights and privacy organizations, including the Electronic Frontier Foundation and Human Rights Watch: "By contrast, Facebook and others have a very different approach to targeting. Not only do they allow the grouping of users into smaller segments, they use detailed data about online browsing activity to target ads. Facebook executives have made clear their intent is to collect as much data as possible across both first and third party products to develop and monetize detailed profiles of their users, and this disregard for user privacy continues to expand to include more of their products."

Apple's letter, reviewed by Bloomberg News, defended the company's decision to delay an iPhone feature that requires users to give explicit permission before letting apps track them for advertising purposes. The enhancement was added as part of the company's iOS 14 operating system in September, but a requirement that all apps use it was delayed until early 2021 after several developers, including Facebook, said the change would hurt their businesses. The human rights and privacy organizations criticized the delay in a letter earlier this year to Apple.