"Most users don't seem to realize the severity of the risks they're subjecting themselves to while using hotel Wi-Fi networks," writes Windows Report, noting that America's FBI "issued a Public Service Announcement concerning the risks of using hotel Wi-Fi networks while teleworking." Apparently, more and more U.S. hotels started advertising room reservations during the daytime for those who seek a distraction-free environment. This comes as a blessing for teleworkers who can't seem to focus on their work environment while at home. On the other hand...there are a few quite serious risks you may expose yourself to while using Wi-Fi networks in hotels:

- Traffic monitoring: Your network activity could be exposed to a malicious third-party

- Evil Twin attacks: Cloning the hotel network, misleading clients to connect to the fake one instead

- Man-In-The-Middle attacks: Intercepting and stealing sensitive information from one's device

- Compromising work" Facilitating cybercriminals to steal work credentials or other similar resources

- Digital identity theft

- Ransomware
Among other things, the FBI points out: Guests generally have minimal visibility into both the physical location of wireless access points within the hotel and the age of networking equipment. Old, outdated equipment is significantly more likely to possess vulnerabilities that criminal actors can exploit. Even if a hotel is using modern equipment, the guest has no way of knowing how frequently the hotel is updating the firmware of that equipment or whether the hotel has changed the equipment's default passwords. The hotel guest must take each of these factors into consideration when choosing whether to telework on a hotel network.
Or, as Slashdot reader SmartAboutThings puts it, "Using hotel Wi-Fi, in general, is not safe at all, and if you have no other choice, then you might as well give VPN services a try."

Or, just don't use the hotel's wifi (using your cellphone as a mobile hotspot instead).

"Google LLC is reportedly planning to relinquish direct control over its open-source Knative project to a five-seat steering committee that will have rules to prevent any single organization from having more than two seats," reports SiliconANGLE.

"The plan is designed to stymie criticism that Google is secretly planning to retain control over key open-source projects it has developed, according to a report today on the tech news website The Protocol." Knative is an open-source project first developed by Google that provides components for deploying, running and managing serverless, cloud-native applications on top of Kubernetes, a container management platform that was also built by Google and open-sourced in 2015... Google is planning to make some major changes to Knative's governance structure, according to the report. Seats on the committee will now be held by individuals rather than specific companies, and elections will be held later this year to select two new members. In addition, the report said, Google is considering eventually expanding the committee to seven members as a way to include representatives from Knative's user community.

The plan comes just a few months after Google angered some members of the open-source software community when it reneged on a promise to hand over control of another project, Istio, to the Cloud Native Computing Foundation, a Linux Foundation project that was founded in 2015 to help advance container technology. In July Google said that it instead of transferring Istio to the CNCF, it would create a neutral organization called Open Usage Commons to manage its trademark policies, while control would be maintained by the project's steering committee.

That decision upset many of Google's partners, most notably IBM Corp., which has also contributed greatly to the development of Istio.

An anonymous reader quotes a report from IEEE Spectrum: When technologists talk about the "Internet of Things" (IoT), they often gloss over the fact that all these interconnected things need batteries and electronics to carry out the job of collecting and processing data while they're communicating to one another. This job is made even more challenging when you consider that many of the objects we would like to connect are made from plastic and do not have electronics embedded into them. Now researchers at the University of Washington have devised a way of using 3D printed plastic to create objects that communicate with smartphone or other Wi-Fi devices without the need for batteries or electronics.

This research builds on previous work at the University of Washington dating back to 2014 in which another research team employed battery-less chips that transmit their bits by either reflecting or not reflecting a Wi-Fi router's signals. With this kind of backscattering, a device communicates by modulating its reflection of the Wi-Fi signal in the space. [...] In this latest research, the University of Washington team has been able to leverage this Wi-Fi backscatter technology to 3D geometry and create easy to print wireless devices using commodity 3D printers. To achieve this, the researchers have built non-electronic and printable analogues for each of these electronic components using plastic filaments and integrated them into a single computational design. The researchers are making their CAD models available to 3D printing enthusiasts so that they can create their own IoT objects. The designs include a battery-free slider that controls music volume, a button that automatically orders more cornflakes from an e-commerce website and a water sensor that sends an alarm to your phone when it detects a leak. The researchers "have leveraged mechanical motion to provide the power for their objects," reports Spectrum. "To ensure that the plastic objects can reflect Wi-Fi signals, the researchers employ composite plastic filament materials with conductive properties. These take the form of plastic with copper and graphene filings."

"Once the reflective material was created, the next challenge for the researchers was to communicate the collected data. The researchers ingeniously translated the 0 and 1 bits of traditional electronics by encoding these bits as 3D printed plastic gears. A 0 and 1 bit are encoded with the presence and absence of tooth on the gear, respectively. These gears reflect the WiFi signal differently depending on whether they are transmitting a 1 bit or a 0 bit."

An error in Facebook's automated system rejected a user's picture of onions for being "overtly sexual." The BBC reports: The Seed Company by EW Gaze, in St John's, Newfoundland, had wanted to post a seemingly innocent advert for Walla Walla onion seeds on Facebook. But to their surprise, it was rejected for being "overtly sexual." In a statement on Wednesday, the social media company apologized for the error made by its automated technology. It took store manager Jackson McLean a moment to realize what the issue was with the posting, he said. Then he figured out that "something about the round shapes" could be suggestive of breasts or buttocks.

He knew his customers would find the ad rejection funny, and posted the photo, along with the automated Facebook message warning "listings may not position products or services in a sexually suggestive manner," to the company page. Mr McLean said some clients have been posting images of potentially suggestive carrots and pumpkins in reply. He also appealed the decision to Facebook.

The Walla Walla onions, "an older onion variety," had recently brought back in stock by customer request, and are now selling fast due to their newfound notoriety, he said. "We've sold more in the last three days than in the last five years," said Mr McLean, adding they are also now listed under "sexy onions" on the company website.

schwit1 shares a report from The Evening Standard: Artificial Intelligence cameras are being used in London and other cities in the UK to monitor social distancing. The sensors were initially developed by Vivacity to track the flow of traffic, cyclists and pedestrians and monitor how roads are being used. But when the country went into lockdown in March, Vivacity added on an extra feature to the AI scanners so it could register the distance between pedestrians. This data is shared in a monthly report with the Government.

Vivacity Labs said they have more than 1,000 sensors installed across the UK, in cities including London, Manchester, Oxford, Cambridge and Nottingham. Chief Operating Officer at Vivacity Peter Mildon told BBC Radio Kent on Wednesday that the data is potentially "useful for informing policy decisions" regarding lockdown measures. He stressed that the cameras are not CCTV but that they operate as a data collating device rather than a camera that stores footage. "They are not recording any footage, they are not streaming any footage and no one is actually watching it," he said. Mr Mildon added: "We're creating a set of statistics on how behavior is changing in terms of how people are staying close together or apart. And it is that data that is then useful for informing policy decisions on whether there should be a two meter rule or a one meter plus rule or whether local lockdown measures are having the impact they are envisioned to."

According to The Wall Street Journal, AMD is in advanced talks to buy rival chip maker Xilinx Inc. for more than $30 billion. Slashdot reader Jerrry writes: "Looks like further consolidation in the chip industry is in order if this merger goes through..." CNBC reports: A deal, which could mark the latest big tie-up in the rapidly consolidating semiconductor industry, can come together as soon as next week, [The Wall Street Journal reported]. AMD has seen a higher usage of its products recently, driven in part by an overall surge in chip demand due to a global shift to work from home, and market-share gains from larger rival Intel.

San Jose, California-based Xilinx makes programmable chips used in data centers to speed up tasks such as artificial intelligence work and in 5G telecommunications base stations. The company's business suffered a setback last year when key customer Huawei Technologies Ltd was blacklisted by U.S. officials, preventing it from buying chips from U.S. companies. Government officials have since added other China-based companies, including some Xilinx customers, to the list.

Just a week after news broke that SpaceX was gifting Starlink internet service to Washington State's Emergency Management department, the state has revealed SpaceX's satellites are also benefitting the Native American Hoh Tribe. Teslarati reports: Now, with SpaceX's help and encouraged by the Washington State Military's successes, the Washington State Department of Commerce's Broadband Office has deployed Starlink terminals at the Hoh Tribe's Reserve in Forks, WA. Remote and rural, Hoh Tribe Vice Chairman Melvinjohn Ashue described trying to work with the reservation's existing communications infrastructure like "paddling up-river with a spoon" until Starlink's introduction.

Ashue was at least as effusive as [Washington State Military Department emergency telecommunications leader Richard Hall], frankly stating that "it seemed like out of nowhere, SpaceX came up and just catapulted [the Hoh Tribe] into the 21st century." They added: "Our youth are able to do education online and participate in videos. Telehealth is no longer going to be an issue, as well as telemental health. The Hoh Tribe is not alone. Many people in rural parts of [Washington] don't have high-speed internet connectivity, but we're changing that. We're helping create partnerships and find resources so every community in our state can access this critical bridge to jobs, education, healthcare and so much more."

An anonymous reader quotes a report from TechCrunch: China now has a tool that lets users access YouTube, Facebook, Twitter, Instagram, Google, and other internet services that have otherwise long been banned in the country. Called Tuber, the mobile browser recently debuted on China's third-party Android stores, with an iOS launch in the pipeline. The landing page of the app features a scrolling feed of YouTube videos, with tabs at the bottom that allow users to visit other mainstream Western internet services.

While some celebrate the app as an unprecedented "opening up" of the Chinese internet, others quickly noticed the browser comes with a veil of censorship. YouTube queries for politically sensitive keywords such as "Tiananmen" and "Xi Jinping" returned no results on the app, according to tests done by TechCrunch. Using the app also comes with liabilities. Registration requires a Chinese phone number, which is tied to a person's real identity. The platform could suspend users' accounts and share their data "with the relevant authorities" if they "actively watch or share" content that breaches the constitution, endangers national security and sovereignty, spreads rumors, disrupts social orders, or violates other local laws, according to the app's terms of service.

Airliners carry a variety of computer systems that could become vulnerable to hackers and U.S. regulators haven't imposed adequate counter measures, a government watchdog report concluded. From a report: The Federal Aviation Administration hasn't prioritized cyber risks, developed a cybersecurity training program or conducted testing of potentially vulnerable systems, the Government Accountability Office said in a report issued Friday. "Until FAA strengthens its oversight program, based on assessed risks, it may not be able to ensure it is providing sufficient oversight to guard against evolving cybersecurity risks facing avionics systems in commercial airplane," the GAO report said. Commercial aircraft carry increasingly sophisticated computer systems, including wireless networks, seat-back entertainment, position broadcasts and devices that automatically transmit data to the ground.

Covid-19 contact-tracing apps that rely on an API developed by Apple and Google and bluetooth technology cannot accurately measure the distance between users on public transport, a recently released study from Trinity College Dublin has found. From a report: The researchers of the study first tested the API on a group of volunteers who switched seats every fifteen minutes in a Dublin tram. They then ran the collected data through the detection rules of the Swiss, German, and Italian contact-tracing apps to see how often they correctly identified contact between users. Based on this, they found that the chance of an accurate detection was "similar to that of triggering notifications by randomly selecting from the participants in our experiments, regardless of proximity."

So, no better than random. This finding is the latest example of mounting skepticism among experts regarding the effectiveness of the technology underlying the apps which have been widely released -- but less widely used -- by governments across Europe and more recently the United States. Most contact-tracing apps in Europe and the United States use Apple and Google's exposure notification API, which in turn relies on in-built wireless Bluetooth technology to estimate the distance between two users and whether they've been in contact. What actually constitutes 'contact' is set by the developers of whichever app calls the API, but it's usually defined as being within 2 meters (~6.5 feet) of another user for at least 15 minutes. Once a user uploads a positive test result to a contact-tracing app, it notifies all contacted users and lets them know that they've been at risk of infection.

Microsoft is allowing some of its employees to work from home permanently. From a report: While the vast majority of Microsoft employees are still working from home during the ongoing pandemic, the software maker has unveiled "hybrid workplace" guidance internally to allow for far greater flexibility once US offices eventually reopen. The Verge has received Microsoft's internal guidance, and it outlines the company's flexible working plans for the future. Microsoft will now allow employees to work from home freely for less than 50 percent of their working week, or for managers to approve permanent remote work. Employees who opt for the permanent remote work option will give up their assigned office space, but still have options to use touchdown space available at Microsoft's offices. "The COVID-19 pandemic has challenged all of us to think, live, and work in new ways," says Kathleen Hogan, Microsoft's chief people officer, in a note to employees. "We will offer as much flexibility as possible to support individual workstyles, while balancing business needs, and ensuring we live our culture."

AmiMoJo writes: Yelp, the local search and review site, said it would post alerts on the pages of businesses where customers or employees have reported incidents of racism, the latest attempt by a U.S. company to introduce a tougher response system to confront discrimination after the police killing of George Floyd in May. The company, which offers a platform for users to rate places like restaurants, small businesses and popular tourist sites, said in a statement Thursday that it would use a "business accused of racist behavior" alert when there was "resounding evidence" that a business owner or employee had taken racist actions, including the use of racist slurs or symbols. This alert will always link to a news article from a "credible media outlet," Yelp said, without elaborating on which news organizations they considered to be credible or how it defined "resounding evidence." Yelp's announcement raised questions about how the company will enforce the initiative -- and how it will ensure that businesses were not falsely associated with racism or the target of defamatory reviews, which can significantly damage a business. Companies like Google and Facebook have also grappled with the difficult issues of moderating users on their online platforms.

Twitter, risking the ire of its best-known user, President Trump, said on Friday that it would turn off several of its routine features in an attempt to control the spread of misinformation in the final weeks before the presidential election. From a report: The first notable change, Twitter said, will essentially give users a timeout before they can hit the button to retweet a post from another account. A prompt will nudge them to add their own comment or context before sharing the original post. Twitter will also disable the system that suggests posts on the basis of someone's interests and the activity of accounts they follow. In their timelines, users will see only content from accounts they follow and ads. And if users try to share content that Twitter has flagged as false, a notice will warn them that they are about to share inaccurate information.

Google has removed this summer more than 240 Android apps from the official Play Store for showing out-of-context ads and breaking a newly introduced Google policy against this type of intrusive advertising. From a report: Out-of-context ads (also known as out-of-app ads) are mobile ads that are shown outside an app's normal container. They can appear as popups or as fullscreen ads. Out-of-context ads are banned on the Play Store since February this year, when Google banned more than 600 apps that were abusing this practice to spam their users with annoying ads. But despite the public crackdown and ban, other apps showing out-of-context ads have continued to be discovered -- such as in June this year. The latest of these discoveries come from ad fraud detection firm White Ops. In a blog post today, the company said it discovered a new cluster of more than 240+ Android apps bombarding their users with out-of-context ads -- but made to look like they originated from other, more legitimate applications.

Every toy, gadget and good you see on YouTube could soon be for sale online -- not on Amazon, but right on YouTube itself. From a report The world's largest video site recently started asking creators to use YouTube software to tag and track products featured in their clips. The data will then be linked to analytics and shopping tools from parent Google. The goal is to convert YouTube's bounty of videos into a vast catalog of items that viewers can peruse, click on and buy directly, according to people familiar with the situation. The company is also testing a new integration with Shopify for selling items through YouTube. A YouTube spokesperson confirmed the company is testing these features with a limited number of video channels. Creators will have control over the products that are displayed, the spokesperson said. The company described this as an experiment and declined to share more details. The moves have the potential to transform YouTube from an advertising giant into a new contender for e-commerce leaders such as Amazon and Alibaba.

Pakistan has banned popular short video app TikTok in the nation, citing circulation of videos that it deemed "immoral and indecent." From a report: The move comes months after the South Asian country raised serious concerns about the nature of some videos on ByteDance's app and the impact they posed on society. Pakistan Telecommunication Authority, the country's telecommunication authority, said in a statement Friday evening that despite the warnings and months-long time, TikTok "failed to comply with the instructions, therefore, directions were issued for blocking of TikTok application in the country." The authority had received a "number of complaints from different segments of the society" over the videos, it said.

An anonymous reader shares a report: The early days of the internet were full of predictions about access to information unleashing a wave of democratisation. More recently, views on the internet's impact have soured, as states use it to spy on dissidents and influence foreign elections. Opinions on this topic are abundant, but hard data are scarce. No one knows whether the Arab spring could have occurred without the internet, or whether Russia's online efforts to boost President Donald Trump's campaign had any effect. Nonetheless, scholars can sometimes find natural experiments to substitute for such counter-factual scenarios. A recently revised study by the economists Sergei Guriev, Nikita Melnikov and Ekaterina Zhuravskaya, which is now undergoing peer review, uses the growth of mobile broadband to reveal a link between internet access and scepticism of government. Most of the 4.1bn people now online got connected after 2010. To measure how new users' views changed as a result, the authors combined two datasets. First, for each year in 2007-18, they estimated the share of people in each of 2,232 regions (such as states or provinces), spread across 116 countries, that could access at least 3G-level mobile internet. Then they used surveys by Gallup, a pollster, to measure how faith in government, courts and elections changed during this period in each area.

In general, people's confidence in their leaders declined after getting 3G. However, the size of this effect varied. It was smaller in countries that allow a free press than in ones where traditional media are muzzled, and bigger in countries with unlimited web browsing than in ones that censor the internet. This implies that people are most likely to turn against their governments when they are exposed to online criticism that is not present offline. The decline was also larger in rural areas than in cities. A similar pattern emerged at the ballot box. Among 102 elections in 33 European countries, incumbent parties' vote-share fell by an average of 4.7 percentage points once 3G arrived. The biggest beneficiaries were parties classified as populist -- though this may simply have been because they happened to be in opposition when voters turned against parties in power, rather than because of their ideology.

An anonymous reader quotes a report from Ars Technica: For months, Apple's corporate network was at risk of hacks that could have stolen sensitive data from potentially millions of its customers and executed malicious code on their phones and computers, a security researcher said on Thursday. Sam Curry, a 20-year-old researcher who specializes in website security, said that, in total, he and his team found 55 vulnerabilities. He rated 11 of them critical because they allowed him to take control of core Apple infrastructure and from there steal private emails, iCloud data, and other private information.

Apple promptly fixed the vulnerabilities after Curry reported them over a three-month span, often within hours of his initial advisory. The company has so far processed about half of the vulnerabilities and committed to paying $288,500 for them. Once Apple processes the remainder, Curry said, the total payout might surpass $500,000. "If the issues were used by an attacker, Apple would've faced massive information disclosure and integrity loss," Curry said in an online chat a few hours after posting a 9,200-word writeup titled We Hacked Apple for 3 Months: Here's What We Found. "For instance, attackers would have access to the internal tools used for managing user information and additionally be able to change the systems around to work as the hackers intend." An Apple representative issued a statement that said: "At Apple, we vigilantly protect our networks and have dedicated teams of information security professionals that work to detect and respond to threats. As soon as the researchers alerted us to the issues they detail in their report, we immediately fixed the vulnerabilities and took steps to prevent future issues of this kind. Based on our logs, the researchers were the first to discover the vulnerabilities so we feel confident no user data was misused. We value our collaboration with security researchers to help keep our users safe and have credited the team for their assistance and will reward them from the Apple Security Bounty program."

As Facebook, Amazon, Apple and Google are being targeted by the House Judiciary Committee for abusing American antitrust law, one major company has managed to escape the glare: Microsoft. That's because they are now "the adult in the room in some ways on this issue," said Rep. Pramila Jayapal (D., Wash.), a Democratic member of the House Antitrust subcommittee, which has been diving into Big Tech's practices for the last 16 months. Yahoo Finance reports: Jayapal's Seattle district includes Amazon's headquarters and the company's practices, specifically how it uses data from third-party sellers, has been one of her major focuses. It's Congress's job to make sure "a company like Amazon can't just put a small business that produces diapers out of business by taking all of that market information that nobody else has access to, and using it to subsidize losses and push small companies out," Jayapal told Yahoo Finance.

She has also had a less-than-cordial relationship with Amazon CEO Jeff Bezos. During a Yahoo Finance interview this summer, Jayapal said she had never before met the billionaire. They did talk virtually in July when she grilled him during the hearings, but she said this week that communication since then has been sparse. "I've had an open door policy to speaking with Mr. Bezos and have invited him many times," she said. Though she has met with Amazon senior managers.

"The lesson here is self-regulation doesn't work," said Jayapal. She points to Microsoft as an example that Amazon should follow, of successfully working with the government. In 1998, Microsoft was the subject of Congressional antitrust inquiries and many wanted to break the company up. In the end, Bill Gates was able to avoid a breakup by promising to change his company's ways. The company had to "change its culture, change its lines of business," Jayapal said. The process of government involvement led to Microsoft creating a "platform for other small companies to thrive," she said. Jayapal also pointed to the Microsoft example as to why breaking up a company isn't always the best option. "Perhaps in retrospect, Amazon, after we've regulated them, after we've put through some of the recommendations that are in the report, we'll look back and say, "You know what? It's a good thing that that happened," she said.

Comcast has achieved a 10Gbps "technical milestone" that can deliver gigabit-plus download and upload speeds over existing cable wires, not fiber. ZDNet reports: Comcast has achieved a 10Gbps technical milestone by delivering 1.25Gbps upload and download speeds over a live production network using Network Function Virtualization (NFV) combined with the latest Data Over Cable Service Interface Specification (DOCSIS) hardware. This is being done with DOCSIS 4. With this cutting-edge cable internet technology, you can expect to see up to 10Gbps speeds downstream and up to 6Gbps upstream capacity over a hybrid fiber-coaxial (HFC) network. In its first real-world test, to a home in Jacksonville, Fla., technicians achieved its Gigabit plus speed using upon Comcast's Distributed Access Architecture (DAA). This is an edge-based computing model. This architecture has a suite of software-powered networking technologies, including digital fiber optics, "Remote PHY" digital nodes, and a cloud-based, virtualized cable modem termination system platform (vCMTS). The result? Comcast's team consistently measured speeds of 1.25Gbps upload and 1.2Gbps download over the connection.

According to a study by Dr. Raul Katz of Telecom Advisory Services, 10Gbps internet will generate at least $330 billion in total economic output and create more than 676,000 new jobs over the next seven years. It will do by enabling not just 8K video streams for everyone living in your home, but by enabling 5G access points, virtual reality applications, and telehealth. It's not just hardware that's making this possible. Comcast is a major open-source developer and user. As Comcast notes, "The trial was made possible not by a single technological innovation, but rather by a series of interrelated technologies that Comcast continues to test and deploy in its network, all powered by a DAA ecosystem. These include our increasingly virtualized, cloud-based network model." Comcast is working on the "10G" initiative along with NCTA, CableLabs, and SCTE, and other telecom and cable operators from around the world. In addition, Comcast and Charter Communications have worked closely to align on their approaches to 10Gbps and are driving technology standards and architectures to benefit everyone.