"YouTube is facing growing criticism for allowing election misinformation after it decided not to remove or individually fact-check videos that spread unfounded conspiracy theories alleging voter fraud," reports NBC News: While all internet platforms are struggling to contain the volume of misinformation since voting ended last week — and all have been criticized to some degree by researchers for their handling of the situation — YouTube has staked out a position that is less aggressive than its social media competitors, most notably Facebook and Twitter.

YouTube said before the election that it wouldn't allow videos that encourage "interference in the democratic process," but now, as state officials are working to certify vote tallies, the company said it wants to give users room for "discussion of election results," even when that discussion is based on debunked information. Somewhere in between those two policies it has decided to leave up videos challenging Joe Biden's election, and some have received millions of views.

"Is YouTube unable to contend with this material, meaning they lack resources? Or is it a lack of will?" asked Sarah Roberts, co-director of UCLA's Center for Critical Internet Inquiry and an associate professor of information studies. "I think one of those is probably more damning than the other, but they both have the same outcome of allowing propaganda material masquerading as news being distributed on their platform at a critical juncture for the American political cycle," Roberts said...

"There's a good chance YouTube's handling of this goes in the first sentence of every story about how social networks handled the 2020 election for the next several years," Casey Newton, a journalist who writes the technology newsletter Platformer, said in a tweet.

A Slashdot reader shared this report from the Register: Google on Thursday was sued for allegedly stealing Android users' cellular data allowances though unapproved, undisclosed transmissions to the web giant's servers...

The complaint contends that Google is using Android users' limited cellular data allowances without permission to transmit information about those individuals that's unrelated to their use of Google services... What concerns the plaintiffs is data sent to Google's servers that isn't the result of deliberate interaction with a mobile device — we're talking passive or background data transfers via cell network, here. "Google designed and implemented its Android operating system and apps to extract and transmit large volumes of information between Plaintiffs' cellular devices and Google using Plaintiffs' cellular data allowances," the complaint claims...

Android users have to accept four agreements to participate in the Google ecosystem: Terms of Service; the Privacy Policy; the Managed Google Play Agreement; and the Google Play Terms of Service. None of these, the court filing contends, disclose that Google spends users' cellular data allowances for these background transfers. To support the allegations, the plaintiff's counsel tested a new Samsung Galaxy S7 phone running Android, with a signed-in Google Account and default setting, and found that when left idle, without a Wi-Fi connection, the phone "sent and received 8.88 MB/day of data, with 94 per cent of those communications occurring between Google and the device." The device, stationary, with all apps closed, transferred data to Google about 16 times an hour, or about 389 times in 24 hours. Assuming even half of that data is outgoing, Google would receive about 4.4MB per day or 130MB per month in this manner per device subject to the same test conditions...

An iPhone with Apple's Safari browser open in the background transmits only about a tenth of that amount to Apple, according to the complaint... Vanderbilt University Professor Douglas C. Schmidt performed a similar study in 2018 — except that the Chrome browser was open — and found that Android devices made 900 passive transfers in 24 hours...

The complaint charges that Google conducts these undisclosed data transfers for further its advertising business, sending "tokens" that identify users for targeted advertising and preload ads that generate revenue even if they're never displayed.

"Ubuntu developers have fixed a series of vulnerabilities that made it easy for standard users to gain coveted root privileges," reports Ars Technica: "This blog post is about an astonishingly straightforward way to escalate privileges on Ubuntu," Kevin Backhouse, a researcher at GitHub, wrote in a post published on Tuesday. "With a few simple commands in the terminal, and a few mouse clicks, a standard user can create an administrator account for themselves."

The first series of commands triggered a denial-of-service bug in a daemon called accountsservice, which as its name suggests is used to manage user accounts on the computer... With the help of a few extra commands, Backhouse was able to set a timer that gave him just enough time to log out of the account before accountsservice crashed. When done correctly, Ubuntu would restart and open a window that allowed the user to create a new account that — you guessed it — had root privileges...

The second bug involved in the hack resided in the GNOME display manager, which among other things manages user sessions and the login screen. The display manager, which is often abbreviated as gdm3, also triggers the initial setup of the OS when it detects no users currently exist. "How does gdm3 check how many users there are on the system?" Backhouse asked rhetorically. "You probably already guessed it: by asking accounts-daemon! So what happens if accounts-daemon is unresponsive....?"

The vulnerabilities could be triggered only when someone had physical access to, and a valid account on, a vulnerable machine. It worked only on desktop versions of Ubuntu.
"This bug is now tracked as CVE-2020-16125 and rated with a high severity score of 7.2 out of 10. It affects Ubuntu 20.10, Ubuntu 20.04, and Ubuntu 18.04..." reports Bleeping Computer.

They add that the GitHub security research who discovered the bugs "reported them to Ubuntu and GNOME maintainers on October 17, and fixes are available in the latest code."

"The rising popularity of alternative social media app Parler is raising concerns over the spread of misinformation and potential for radicalizing users on a platform that's taken a hands-off approach to regulating content," reports The Hill's reporter on technology policy: The app has been boosted by conservatives, surging since Election Day, as Republicans amp up allegations of anti-conservative bias from social media giants like Twitter and Facebook that have clamped down on pro-Trump election misinformation. Experts warn that a total lack of content moderation could prove harmful beyond creating political echo chambers and further spreading conspiracy theories. "Anytime you take a laissez faire approach to moderation — you say, 'anything goes' right up until actual threats of real world violence — that creates a huge space for some really problematic things to happen," said Bret Schafer, a fellow focusing on disinformation at the Alliance for Securing Democracy....

For those who have abandoned Twitter and Facebook in favor of Parler, it could create a new dynamic on the mainstream social media platforms. "The idea that these people are leaving those platforms and no longer trying to red pill individuals to see their conspiracy theories on large platforms like Facebook and Twitter, I think that's a good thing," said Jason Blazakis, director of the Center on Terrorism, Extremism, and Counterterrorism at the Middlebury Institute. He added that the shift to Parler could mean fewer people on Facebook and Twitter are "exposed to these ideas," and "migrating to more obscure platforms" may ultimately result in a smaller audience for misinformation....

Unchecked content also risks exploitation of misinformation by foreign actors, much like it did on U.S. social media platforms in 2016, said Saif Shahin, an assistant professor at American University's School of Communications. But he said Parler's success underscores that misinformation in the U.S. is now fundamentally a domestic problem.

"We have people in this country divided so sharply along partisan lines that they actively are seeking what we consider to be disinformation, but what they consider just one type of information," Shahin said. "It is a domestic problem, a social problem, within American society."
Long-time Slashdot reader shilly also shared a thread on Twitter from entrepreneur/activist Dave Troy (currently a TedX organizer) raising questions about Parler's funding. [UPDATE: The Wall Street Journal has now reported that Parler's backers include Robert Mercer and his daughter, "who have not disclosed their involvement," and who previously funded Cambridge Analytica.]

Troy also asserted that "a preliminary analysis of the first several thousand accounts on Parler shows that it is the usual Russia-aligned operatives that we in this space have tracked for years. This is a large-scale op aligned with Russian interests."

Within hours Russia's state-controlled media outlet "Russia Today" had published an article calling Troy an "unhinged conspiracy theorist."

Uber is reportedly in talks to sell its $7.25 billion self-driving car unit, Uber Advanced Technologies Group, to competing autonomous vehicle technology startup Aurora Innovation. TechCrunch reports: Aurora Innovation, the startup founded by three veterans of the autonomous vehicle industry who led programs at Google, Tesla and Uber, is in negotiations to buy Uber ATG. Terms of the deal are still unknown, but sources say the two companies have been in talks since October and it is far along in the process. The talks could falter. But if successful, they have the potential to triple Aurora's headcount and allow Uber to unload an expensive long-term play that has sustained several controversies in its short life.

In a Wall Street Journal article comparing Apple's HomePod Mini against the competition, a Google spokesperson hinted that the company is working on integrating its Chromecast streaming devices and Nest Audio speakers. The Verge reports: Being able to combine a streaming platform with a smart phone speaker makes a lot of sense for these companies. After all, customers already have all the hardware in their living room -- why not repurpose those speakers to improve the sound of your Netflix movies? Plus, there's the added bonus of inciting customers to stay within a company's ecosystem. You're more likely to buy a HomePod mini if it works with the Apple TV you already have. The ability to link smart speakers to streaming boxes is also something that both Apple and Amazon already offer.

Google's plans are extremely vague for now -- The Wall Street Journal makes no mention of which devices the company is looking to link together, when the feature will arrive, or what sort of use cases it's looking to achieve. But with Google increasingly looking to push users toward its smart home devices, making them all work better together just makes good sense.

The number of broadband "power users" -- people who use 1TB or more per month -- has doubled over the past year, ensuring that ISPs will be able to make more money from data caps. Ars Technica reports: In Q3 2020, 8.8 percent of broadband subscribers used at least 1TB per month, up from 4.2 percent in Q3 2019, according to a study released yesterday by OpenVault. OpenVault is a vendor that sells a data-usage tracking platform to cable, fiber, and wireless ISPs and has 150 operators as customers worldwide. The 8.8- and 4.2-percent figures refer to US customers only, an OpenVault spokesperson told Ars. More customers exceeding their data caps will result in more overage charges paid to ISPs that impose monthly data caps. Higher usage can also boost ISP revenue because people using more data tend to subscribe to higher-speed packages.

The number of "extreme power users," those who use at least 2TB per month, was up to about 1 percent of broadband customers in OpenVault's Q3 2020 data. That's nearly a three-fold increase since Q3 2019 when it was 0.36 percent. OpenVault said the average US broadband household uses 384GB a month, up from 275GB a year ago. The median figures were 229GB, up from 174GB a year ago. Usage increases happen every year, but OpenVault said this year's boost was fueled partly by the pandemic. "While bandwidth usage is remaining relatively flat quarter over quarter, it is not retreating to pre-pandemic levels, indicating that COVID-19-driven usage growth has established a new normal pattern for bandwidth usage," OpenVault said. European usage also went up during the pandemic but remained below US levels, with an average of 225GB and median of 156GB in Q3 2020.

General Motors said on Friday it was recalling 68,677 electric cars worldwide that pose a fire risk after five reported fires and two minor injuries. Reuters reports: The recall is for 2017-2019 model-year Chevrolet Bolt EVs with high voltage batteries produced at LG Chem's Ochang, Korea facility. The National Highway Traffic Safety Administration (NHTSA) last month opened a preliminary investigation into the Bolt EVs after reports of three Bolts catching fire under the rear seat while parked and unattended.

GM said the vehicles pose a fire risk when charged to full, or nearly full capacity. GM said it has developed software that will limit vehicle charging to 90% of full capacity to mitigate the risk while GM works to determine the appropriate final repair. NHTSA said in a consumer alert on Friday that Bolt owners âoeshould park their cars outside and away from homes until their vehicles have been repaired, due to a new recall for the risk of fire.â The recall includes 50,932 U.S. Bolt vehicles.

An anonymous reader quotes a report from The New York Times: Shekinah and Orlandria Lennon were sitting at their kitchen table this fall, taking online classes, when video of their teachers and fellow students suddenly froze on their laptop screens. The wireless antenna on the roof had stopped working, and it could not be fixed. Desperate for a solution, their mother called five broadband companies, trying to get connections for their home in Orrum, N.C., a rural community of fewer than 100 people with no grocery store or traffic lights. All the companies gave the same answer: Service is not available in your area. The response is the same across broad stretches of Robeson County, N.C., a swath of small towns and rural places like Orrum dotted among soybean fields and hog farms on the South Carolina border. About 20,000 of the county's homes, or 43 percent of all households, have no internet connection.

The technology gap has prompted teachers to upload lessons on flash drives and send them home to dozens of students every other week. Some children spend school nights crashing at more-connected relatives' homes so they can get online for classes the next day. [...] Millions of American students are grappling with the same challenges, learning remotely without adequate home internet service. Even as school districts like the one in Robeson County have scrambled to provide students with laptops, many who live in low-income and rural communities continue to have difficulty logging on. "About 15 million K-12 students lived in households without adequate online connectivity in 2018," the report notes, citing a study of federal data by Common Sense Media, an education nonprofit group that tracks children's media use.

"[T]he pandemic turned the lack of internet connectivity into a nationwide emergency: Suddenly, millions of schoolchildren were cut off from digital learning, unable to maintain virtual 'attendance' and marooned socially from their classmates."

Yesterday, Apple released the latest version of macOS: macOS Big Sur (also known as macOS 11.0) and the rollout was anything but smooth. Many users have complained about Apple services such as iMessage, or even Apple Pay, not working for them. Personally, my 5K iMac (2013), which isn't even compatible with Big Sur, ground to a halt yesterday, as I was unable to open up Google Chrome or any of my Adobe Creative Cloud apps. Even navigating my system preferences was painfully slow.

According to developer Jeff Johnson, the reason apps were failing to launch was because a process called "trustd" failed to attempt to connect to Apple's Online Certificate Status Protocol website (oscp.apple.com). "[D]enying the connection between "trustd" and oscp.apple.com fixes the issue, as does disabling a Mac's connection to the internet," notes Apple Insider. Slashdot reader shanen shares their experience: The story is about different problems, so I'll just start with my own anecdote. The 12GB download was amazingly slow. I'm being charitable and willing to attribute that to high demand. Eventually it did finish. The installation process didn't seem to be too bad. Then I did something with the Mac and it immediately wanted another upgrade. Turned out to be a double upgrade of two slightly different versions of some tools, but another (slow) GB bites the dust. Meanwhile, it decided to do that double-upgrade again? One of those two must have succeeded, because the third attempt failed with the appropriate notice that it had succeeded.

Bottom line? Not reassuring, but it seems to be okay now. I should have made a note about what triggered the extra GB, but I don't think I did anything unusual that should have required an OS-level extension of the system. Ergo, whatever was going on, I think it belonged in the original 12 GB download... Disclaimer needed: I just had an extremely negative interaction with Apple about the battery swelling problem in the course of attempting to consider whether or not I should upgrade my old MacBook Pro. It started on the Apple website, which was amazingly unhelpful even after it dangled a trade-in offer of some kind. Then it continued with a long phone call to a very kind and friendly person who seemed to know not so much, though he eventually led me to the search that revealed "Optimized Battery Charging" as an option that my old Mac cannot use. By the way, new iPhones apparently have it, too. So right now I think Apple finally figured out how to stop the battery swelling, but I am still screwed. I regard the Mac as a sunk cost, and the second rule of sunk cost is to NOT throw good money after bad. The first rule is that no one wants to talk about their mistakes, eh?

So did your upgrade to Big Sur go better than mine? I really hope so. Why share the misery? We have plenty of that with "He whose name need not be mentioned" anymore.

Researchers at Google claim to have developed a machine learning model that can separate a sound source from noisy, single-channel audio based on only a short sample of the target source. In a paper [PDF], they say their SoundFilter system can be tuned to filter arbitrary sound sources, even those it hasn't seen during training. From a report: The researchers believe a noise-eliminating system like SoundFilter could be used to create a range of useful technologies. For instance, Google drew on audio from thousands of its own meetings and YouTube videos to train the noise-canceling algorithm in Google Meet. Meanwhile, a team of Carnegie Mellon researchers created a "sound-action-vision" corpus to anticipate where objects will move when subjected to physical force. SoundFilter treats the task of sound separation as a one-shot learning problem. The model receives as input the audio mixture to be filtered and a single short example of the kind of sound to be filtered out. Once trained, SoundFilter is expected to extract this kind of sound from the mixture if present.

Volkswagen has raised its planned investment on digital and electric vehicle technologies to 73 billion euros ($86 billion) over the next five years as it seeks to hold onto its crown as the world's largest carmaker in a new green era. From a report: Under a plan presented on Friday, Volkswagen said it would allocate nearly half its investment budget of 150 billion euros on e-mobility, hybrid cars, a seamless, software-based vehicle operating system and self-driving technologies. In last year's plan, the German car and truck maker, which owns brands including VW, Audi, Porsche, Seat and Skoda, had earmarked 60 billion euros for electric and self-driving vehicles out of the 150 billion budget. A global clampdown on emissions, partly triggered by VW's diesel pollution scandal in 2015, has forced carmakers to accelerate the development of low-emission technology, even for their low-margin mainstream models.

theodp writes: What if we could build a better world through code?", begins the just-released teaser video for Microsoft's 2020 Hour of Code: A Minecraft Tale of Two Villages . "Help us bring two villages together through the power of code! [...] You will experience empathy and compassion for your neighbor while embracing the diversity that makes us all uniquely special." Intended for ages 7-and-up, the accompanying Educator Guide suggests opening the 45-minute coding lesson (using Blocks or Python) with a 10-minute discussion of unconscious and conscious bias, including "prejudice based on race, ethnicity, age, gender, gender identity, physical ability, religion, and body weight." The Guide also suggests how teachers might explain to students the harm biases can cause: "Both conscious and unconscious biases can cause us to behave negatively or discriminate against people. When we stereotype people based on their gender, ethnicity, sexual orientation, or some other characteristic, it can be detrimental to us and our community. On a larger and extreme scale, bias can lead to oppression, genocide, and even slavery." The Guide notes that this year's Hour of Code lesson adheres to five Social Justice Standards. The use of Minecraft, Microsoft Education suggests, will help keep students developing and applying social and emotional skills during the pandemic.

Alphabet CEO Sundar Pichai has apologised to Europe's industry chief Thierry Breton over a leaked internal document proposing ways to counter the EU's tough new rules for technology companies. From a report: Pichai and Breton exchanged views in a video-conference call late on Thursday, the third this year, according to a statement from the European Commission. "The Internet cannot remain a 'Wild West': we need clear and transparent rules, a predictable environment and balanced rights and obligations," Breton told Pichai. The call came after a Google internal document outlined a 60-day strategy to counter the European Union's push for the new rules by getting U.S. allies to push back against Breton. The call was initiated by Google before the document was leaked. Breton brought up the leaked document and showed it to Pichai during the call and said that there was no need to use old century tactics and to play one unit at the Commission against another, a person familiar with the call said.

An anonymous reader quotes a report from Reuters: Facebook Chief Executive Mark Zuckerberg told an all-staff meeting on Thursday that former Trump White House adviser Steve Bannon had not violated enough of the company's policies to justify his suspension when he urged beheading two senior U.S. officials, according to a recording heard by Reuters. Zuckerberg acknowledged criticism of Facebook by President-elect Joe Biden but said the company shared some of the Biden team's same concerns about social media. He urged employees not to jump to conclusions about how the new administration might approach regulation of social media companies.

Bannon suggested in a video posted on Nov. 5 that FBI Director Christopher Wray and government infectious diseases expert Anthony Fauci should be beheaded, saying they had been disloyal to U.S. President Donald Trump, who last week lost his re-election bid to Biden. Facebook removed the video but left up Bannon's page, which has about 175,000 followers. Twitter banned Bannon last week over the same content. "We have specific rules around how many times you need to violate certain policies before we will deactivate your account completely," Zuckerberg said. "While the offenses here, I think, came close to crossing that line, they clearly did not cross the line." Facebook spokesman Andy Stone said the company would take further action against Bannon's page "if there are additional violations." Last Friday, independent activist network Avaaz alerted Facebook to a network of misinformation pages that Steve Bannon was involved with.

"We're a small team run with small donations," Quran told Gizmodo. "If we can spot this stuff, a multi-billion dollar company with tens of thousands of employees focused on the election and disinformation most certainly can. We are tired of doing their job for them." Quran added that Avaaz has been alerting Facebook to its problems all year. "If 2016 was an accident," Quran added, "2020 has been negligence."

VICE has highlighted six reasons why Google Maps is the creepiest app on your phone. An anonymous reader shares an excerpt from the report: 1. Google Maps Wants Your Search History: Google's "Web & App Activity" settings describe how the company collects data, such as user location, to create a faster and "more personalized" experience. In plain English, this means that every single place you've looked up in the app -- whether it's a strip club, a kebab shop or your moped-riding drug dealer's location -- is saved and integrated into Google's search engine algorithm for a period of 18 months. Google knows you probably find this creepy. That's why the company uses so-called "dark patterns" -- user interfaces crafted to coax us into choosing options we might not otherwise, for example by highlighting an option with certain fonts or brighter colors.

2. Google Maps Limits Its Features If You Don't Share Your Search History: If you open your Google Maps app, you'll see a circle in the top right corner that signifies you're logged in with your Google account. That's not necessary, and you can simply log out. Of course, the log out button is slightly hidden, but can be found like this: click on the circle > Settings > scroll down > Log out of Google Maps. Unfortunately, Google Maps won't let you save frequently visited places if you're not logged into your Google account. If you choose not to log in, when you click on the search bar you get a "Tired of typing?" button, suggesting you sign in, and coaxing you towards more data collection.

3. Google Maps Can Snitch On You: Another problematic feature is the "Google Maps Timeline," which "shows an estimate of places you may have been and routes you may have taken based on your Location History." With this feature, you can look at your personal travel routes on Google Maps, including the means of transport you probably used, such as a car or a bike. The obvious downside is that your every move is known to Google, and to anyone with access to your account. And that's not just hackers -- Google may also share data with government agencies such as the police. [...] If your "Location History" is on, your phone "saves where you go with your devices, even when you aren't using a specific Google service," as is explained in more detail on this page. This feature is useful if you lose your phone, but also turns it into a bonafide tracking device.

4. Google Maps Wants to Know Your Habits: Google Maps often asks users to share a quick public rating. "How was Berlin Burger? Help others know what to expect," suggests the app after you've picked up your dinner. This feels like a casual, lighthearted question and relies on the positive feeling we get when we help others. But all this info is collected in your Google profile, making it easier for someone to figure out if you're visiting a place briefly and occasionally (like on holiday) or if you live nearby.

5. Google Maps Doesn't Like It When You're Offline: Remember GPS navigation? It might have been clunky and slow, but it's a good reminder that you don't need to be connected to the internet to be directed. In fact, other apps offer offline navigation. On Google, you can download maps, but offline navigation is only available for cars. It seems fairly unlikely the tech giant can't figure out how to direct pedestrians and cyclists without internet.

6. Google Makes It Seem Like This Is All for Your Own Good: "Providing useful, meaningful experiences is at the core of what Google does," the company says on its website, adding that knowing your location is important for this reason. They say they use this data for all kinds of useful things, like "security" and "language settings" -- and, of course, selling ads. Google also sells advertisers the possibility to evaluate how well their campaigns reached their target (that's you!) and how often people visited their physical shops "in an anonymized and aggregated manner". But only if you opt in (or you forget to opt out).

Facebook's ban on political ads, which was initially projected to last just one week, is being extended for at least another month. The decision is aimed at limiting the misinformation that's spreading rampantly over its platform in the wake of the U.S. election. The Guardian reports: "We are keeping the ad pause and other temporary election protection measures in place as that result moves towards certification next month," said Rob Leathern, director of product management at Facebook. "We are keeping the ad pause and other temporary election protection measures in place as that result moves towards certification next month," said Rob Leathern, director of product management at Facebook. "We know that people are disappointed that we can't immediately enable ads for runoff elections in Georgia and elsewhere," Leathern added. "It's taken years to build the infrastructure that supports the Facebook Ad Library and ensure that political ads are transparent. We do not have the technical ability in the short term to enable political ads by state or by advertiser, and we are also committed to giving political advertisers equal access to our tools and services."

With political adverts banned across the US, neither Democrats nor Republicans can take advantage of Facebook in their campaigns in Georgia, where both Senate seats are up for grabs on 5 January in a pair of runoff elections. According to Facebook's own research, the ban is likely to hurt Democrats slightly more, as the company says advertising on its site provides, on average, a proportional advantage to challengers against incumbents. Google is also continuing its political advertising ban, though it hasn't given a definite end date to the suspension.

An anonymous reader quotes a report from Ars Technica : In 2008, researcher Dan Kaminsky revealed one of the more severe Internet security threats ever: a weakness in the domain name system that made it possible for attackers to send users en masse to imposter sites instead of the real ones belonging to Google, Bank of America, or anyone else. With industrywide coordination, thousands of DNS providers around the world installed a fix that averted this doomsday scenario. Now, Kaminsky's DNS cache poisoning attack is back. Researchers on Wednesday presented a new technique that can once again cause DNS resolvers to return maliciously spoofed IP addresses instead of the site that rightfully corresponds to a domain name.

On Wednesday, researchers from Tsinghua University and the University of California, Riverside presented a technique that, once again, makes cache poisoning feasible. Their method exploits a side channel that identifies the port number used in a lookup request. Once the attackers know the number, they once again stand a high chance of successfully guessing the transaction ID. The side channel in this case is the rate limit for ICMP, the abbreviation for the Internet Control Message Protocol. To conserve bandwidth and computing resources, servers will respond to only a set number of requests from other servers. After that, servers will provide no response at all. Until recently, Linux always set this limit to 1,000 per second. To exploit this side channel, the new spoofing technique floods a DNS resolver with a high number of responses that are spoofed so they appear to come from the name server of the domain they want to impersonate. Each response is sent over a different port.

When an attacker sends a response over the wrong port, the server will send a response that the port is unreachable, which drains the global rate limit by one. When the attacker sends a request over the right port, the server will give no response at all, which doesn't change the rate limit counter. If the attacker probes 1,000 different ports with spoofed responses in one second and all of them are closed, the entire rate limit will be drained completely. If, on the other hand, one out of the 1,000 ports is open, then the limit will be drained to 999. Subsequently, the attacker can use its own non-spoofed IP address to measure the remaining rate limit. And if the server responds with one ICMP message, the attacker knows one of the previously probed 1,000 ports must be open and can further narrow down to the exact port number. Linux kernel developers responded by introducing a change that causes the rate limit to randomly fluctuate between 500 and 2,000 per second, preventing the new technique from working. Cloudflare also introduced a fix where its DNS service will fall back to TCP, "which is much more difficult to spoof," reports Ars.

The researchers' press release is available here.

Samsung LSI today announced the new Exynos 1080 SoC (system on chip), a successor to last year's Exynos 980. This year's 1080 is seemingly positioned a little above the 980 in terms of performance as we're seeing some quite notable gains in features compared to the 980. From a report: It's to be remembered that this is a "premium" SoC, meaning it's not a flagship SoC, but it's also not quite a mid-range SoC, fitting itself in-between those two categories, a niche which has become quite popular over the last 1-2 years. The new SoC is defined by having a new 1+3+4 CPU configuration, as reasonably large GPU, and full 5G connectivity integrated, and is the first publicly announced SoC to be manufactured on Samsung's new 5LPE process node. On the CPU side of things, this is the first time we've seen Samsung adopt a 1+3+4 CPU configuration, now adopting the Cortex-A78 architecture on the part of the performance cores. One core is clocked at 2.8GHz while the three others are running at 2.6GHz. Qualcomm had first introduced such a setup and it seems it's become quite popular as it gives the benefit of both performance and power efficiency. The four big cores are accompanied by four Cortex-A55 cores at 2.0GHz.

Apple on Thursday released the latest version of macOS: macOS Big Sur (also known as macOS 11.0), which is available to download now -- assuming you have a compatible Mac. From a report: Big Sur is one of the biggest updates to Apple's laptop and desktop software in years, featuring a top-to-bottom redesign of the interface, icons, and menu bar, a new control center UI borrowed from iOS, widgets (also borrowed from iOS), and a variety of other improvements (see here for the full list). It's such a big change that Apple is actually moving on from the OS X / OS 10 branding that it's been using for Macs for almost 20 years. Apple's also adding some new privacy-focused features, including better tracking information in Safari and new privacy data in the Mac App Store for any apps you download. ArsTechnica has published a comprehensive review of the new operating system. An excerpt from their conclusion: The Good
The bright, fresh visual style mostly looks pretty good.
The Control Center (and other changes to the upper-right section of the Menu Bar) are genuinely useful additions.
The Messages app finally catches up to its iOS/iPadOS counterpart, thanks to Catalyst.
The APFS version of Time Machine seems like an improvement, though we'll need to wait to see what its long-term reliability is like.
Aside from the old AFP file-sharing protocol and the Network Utility, Big Sur doesn't remove too many things or add many new security settings that will break apps. There may be some visual issues, but my experience has actually been that Apple breaks a lot fewer apps moving from Catalina to Big Sur than it did moving from Mojave to Catalina.

The Bad
A general reduction in contrast makes it harder to discern the difference between many buttons and controls at a glance.
If you want to fix any of these contrast issues in the Accessibility settings, it should be possible to increase contrast or reduce transparency in certain places without making it an all-or-nothing setting. Some of the new buttons and icons are nice. Some of them are less nice.
Big Sur on Apple Silicon Macs will give up the ability to run Windows in a virtual machine or on a separate partition, though Intel Macs can still do both things.

The Ugly
As usual, Apple is just a year or two more aggressive about dropping support for old Macs than I think they really need to be.