Firefox

Can Firefox Be Saved? (zdnet.com) 318

"Even with another infusion of cash from Google, you have to wonder just how long Firefox will survive as a viable, mainstream web browser," argues ZDNet contributing editor Steven J. Vaughan-Nichols: I've been using Mozilla's Firefox browser since it was still in beta. In 2004, for a while, it was my favorite web browser. Not because it was open-source, but because it was so much better and more secure than Internet Explorer. That was then. This is now. Firefox is in real danger of dying off...

Mozilla and Firefox still produced important work. You need to look no further than the JavaScript, Rust, and WebAssembly languages. They were also champions of security and privacy. Projects such as embracing DNS-over-HTTPS (DoH) and overall security improvements were great, but users didn't care. With the arrival of Google's Chrome browser, users turned from Firefox to Chrome as their favorite browser...

Firefox is on its way to irrelevance. Making matters even worse, Mozilla's just had its second round of layoffs... As technology writer Matthew MacDonald put it, "Mozilla "." Firefox's security and development teams have also been hard hit. This is bad. In January. Mitchell Baker, Mozilla Corporation CEO and Mozilla Foundation chairperson, said it let people go because of declining interest in Firefox, and thus reduced earnings, and that Mozilla was looking for more revenue from "sources outside of search" but "this did not happen." It still isn't happening. According to Mozilla's latest annual report, the majority of its revenue is still generated from global browser search partnerships. This includes the deal negotiated with Google in 2017... Baker assured onlookers that Mozilla would "ship new products faster and develop new revenue streams." These include its bookmarking app Pocket; its virtual rooms Hubs; and its $4.99-a-month Firefox VPN. Excuse me if I don't buy any of these new revenue sources....

Firefox will live on in one way or the other. It's open source after all. But Firefox as an important browser, or Mozilla as a significant open-source developer hub? No. I can't see it. Those days are done. Firefox is officially on my endangered species list.

Technology writer Matthew MacDonald ended his Medium essay on a more hopeful note. "If you have the skills and time, the best possible support is to join the Mozilla community and contribute to their code base."
United States

A Harrowing Story: Dropping an Atomic Bomb on Nagasaki (thebulletin.org) 279

Last Sunday marked the 75th anniversary of the world's second atomic bomb attack in 1945. Slashdot reader DanDrollette (who is also the deputy editor of The Bulletin of the Atomic Scientists) shares their article describing that eight-hour flight — with no radio communication — carrying a 9,000-pound nuclear weapon as "outside, monsoon winds, rain, and lightning lashed at them." In a nutshell: A typhoon was coming, the fuel pump failed, they had to switch planes, things were wired incorrectly, they missed their rendezvous, they couldn't see the primary target, they ran out of gas on the way home, and they had to crash-land. But the worst part was when the Fat Man atomic bomb started to arm itself and begin the countdown to detonation mid-flight, before they were even half-way to Nagasaki.
"One of them, bearing the newly minted title 'weaponeer,' grabbed the Bomb's blueprints and raced to figure out what was wrong..." the article explains, calling it a miracle that their mission ultimately succeeded. "It is a story of astonishing screw-ups that easily could have plunged the plane, the men, and the bomb into the Pacific Ocean...

"The military has been loathe to talk about it for reasons of national security and, perhaps, embarrassment."
Space

Leaked SpaceX Starlink Speedtests Reveal Download Speeds of 11 to 60Mbps (arstechnica.com) 84

Some leaked speedtests from beta users of SpaceX's Starlink satellite-broadband service "aren't showing the gigabit speeds SpaceX teased," writes Ars Technica, "but it's early." Long-time Slashdot reader AmiMoJo shared their report: Beta users of SpaceX's Starlink satellite-broadband service are getting download speeds ranging from 11Mbps to 60Mbps, according to tests conducted using Ookla's speedtest.net tool. Speed tests showed upload speeds ranging from 5Mbps to 18Mbps. The same tests, conducted over the past two weeks, showed latencies or ping rates ranging from 31ms to 94ms. This isn't a comprehensive study of Starlink speeds and latency, so it's not clear whether this is what Internet users should expect once Starlink satellites are fully deployed and the service reaches commercial availability....

Links to 11 anonymized speed tests by Starlink users were posted by a Reddit user yesterday... A new Reddit post listing more speed tests shows some Starlink users getting even lower latency of 21ms and 20ms.

Beta testers must sign non-disclosure agreements, so these speed tests might be one of the only glimpses we get of real-world performance during the trials. SpaceX has told the Federal Communications Commission that Starlink would eventually hit gigabit speeds, saying in its 2016 application to the FCC that "once fully optimized through the Final Deployment, the system will be able to provide high bandwidth (up to 1Gbps per user), low latency broadband services for consumers and businesses in the US and globally." SpaceX has launched about 600 satellites so far and has FCC permission to launch nearly 12,000.

While 60Mbps isn't a gigabit, it's on par with some of the lower cable speed tiers and is much higher than speeds offered by many DSL services in the rural areas where SpaceX is likely to see plenty of interest.

Security

A Simple Telephony Honeypot Received 1.5 Million Robocalls Across 11 Months (zdnet.com) 65

An anonymous reader shares a report: In an award-winning paper presented at the USENIX security conference this week, a team of academics from North Carolina State University presented a list of findings from operating a massive telephony honeypot for 11 months for the sole purpose of tracking, identifying, and analyzing the robocalling phenomenon in the US. NCSU researchers said they ran 66,606 telephone lines between March 2019 and January 2020, during which time they said to have received 1,481,201 unsolicited calls -- even if they never made their phone numbers public via any source.

The research team said they usually received an unsolicited call every 8.42 days, but most of the robocall traffic came in sudden surges they called "storms" that happened at regular intervals, suggesting that robocallers operated using a tactic of short-burst and well-organized campaigns. In total, the NCSU team said it tracked 650 storms over 11 months, with most storms being of the same size.

Communications

Charter Can Charge Online Video Sites for Network Connections, Court Rules (arstechnica.com) 113

Charter can charge Netflix and other online video streaming services for network interconnection despite a merger condition prohibiting the practice, a federal appeals court ruled today. From a report: The ruling [PDF] by the US Court of Appeals for the District of Columbia Circuit overturns two merger conditions that the Obama administration imposed on Charter when it bought Time Warner Cable and Bright House Networks in 2016. The FCC under Chairman Ajit Pai did not defend the merits of the merger conditions in court, paving the way for today's ruling. The case was decided in a 2-1 vote by a panel of three DC Circuit judges.

The lawsuit against the FCC seeking to overturn Charter merger conditions was filed by the Competitive Enterprise Institute (CEI), a free-market think tank, and four Charter users who claim they were harmed by the conditions. The FCC unsuccessfully challenged the suing parties' standing to sue, and it did not mount a legal defense of the conditions themselves. Though Charter did not file this lawsuit, the ISP separately asked the FCC to let the network-interconnection condition and a condition prohibiting data caps expire on May 18, 2021, two years earlier than scheduled. Today's court's ruling seems to render Charter's petition moot as far as the network-interconnection condition goes, but the court ruling did not overturn the data-cap prohibition.

Google

Google Plans To Eventually Replace Duo With Meet (9to5google.com) 35

An anonymous reader shares a report: With classic Hangouts on the way out, Google today has two video calling apps. However, that is one too many for the company, and sources familiar with the matter tell us that Google Duo will eventually be replaced by Meet. This decision is the result of Google placing its consumer communication services -- Duo, Messages, and Android's Phone app -- under the leadership of G Suite head Javier Soltero. After the unified team was made public in May, Soltero announced to employees that it does not make sense for Duo and Meet to coexist. Following the rise of work from home and remote learning, Google has moved aggressively to make Meet a Zoom competitor. Like Duo, it's now "free for everyone" to use and going after the same market. With all the focus on Meet, the new messaging chief opted to have the service become Google's one video calling service for both regular and enterprise customers. Internally, this is being described as a merger of the two services that is codenamed "Duet" -- a portmanteau of Duo and Meet. We're told by sources that this new direction and the reduced interest in building a dedicated consumer service came as a surprise to the Duo team.
Facebook

Facebook Goes After Apple (axios.com) 99

Facebook is seeking to force a face-off with Apple over its 30% in-app purchase commission fee, which Facebook suggests hurts small businesses struggling to get by during the pandemic. From a report: Facebook has never publicly gone after Apple, a key strategic partner, this aggressively. Both companies face antitrust scrutiny, which in Apple's case has centered on the very fee structure Facebook is now attacking. Facebook is trying to position itself as friendlier to small businesses than Apple, which also faces a lawsuit from Fortnite maker Epic Games over its commission and in-app payment restrictions. Facebook said Friday that it will launch "Paid Online Events" for small businesses in 20 countries around the world to charge Facebook users to attend their classes, instructions and other events. The feature could be useful for any small business or individual offering a service, such a preacher, musician, yoga teacher or cooking instructor. Facebook asked Apple to either waive its 30% cut or let Facebook go around it and process event payments via Facebook Pay, in either case letting event hosts keep all the revenue they generate. Apple declined, according to Facebook. "Really what we're pushing on right now is to make sure all tech companies who can afford to do so join us in supporting small businesses," Fidji Simo, head of Facebook App, said on a press call Friday. Hosts will be able to collect the full ticket price from Facebook users who attend their online events via the web or Android. Facebook says it is using its own payment system on Android and letting developers keep all the money.
Businesses

Google Has Stopped Responding To Data Requests from Hong Kong Authorities (cnet.com) 34

Google will stop responding to requests for data from Hong Kong authorities with the search giant instead directing requests for user data to a Mutual Legal Assistance Treaty with the United States that is done in conjunction with the Department of Justice. From a report: The move comes after a new national security law imposed by China curbed political expression. Although Hong Kong officials have said that the law would only target a "small minority," human rights groups such as Amnesty International are concerned that police will use the new law as a way to crack down on government critics with those that are found guilty potentially facing life imprisonment. Google, Facebook and Twitter each announced in July that they were pausing the review of the Hong Kong government requests for user data to study the new law, with Google now taking the next step in stopping responding directly. "Since the new national security law was enacted in June, we have not produced data in response to new requests from Hong Kong authorities and that remains the case," a Google spokesperson tells CNET in a statement.
Google

Google Resumes Its Attack on the URL Bar, Hides Full Addresses on Chrome 86 (androidpolice.com) 231

An anonymous reader shares a report: Google has tried on and off for years to hide full URLs in Chrome's address bar, because apparently long web addresses are scary and evil. Despite the public backlash that came after every previous attempt, Google is pressing on with new plans to hide all parts of web addresses except the domain name in Chrome 86, this time accompanied by an admittedly hover animation. The new look builds upon the animation-less hover reveal that's already in testing, but in contrast to that method, the improved variant also displays the protocol and the subdomain, which remain invisible in the older version. That's achieved with a neat sliding animation that moves over the visible part of the URL to make space for the strings preceding it.
Social Networks

A Third of TikTok's US Users May Be 14 or Under, Raising Safety Questions (nytimes.com) 39

If Microsoft or another company buys TikTok before President Trump bans the Chinese-owned video app on national security grounds, it will acquire a giant community of devoted fans and a lucrative platform for selling ads. It might be buying something else, too: a big population of users ages 14 and under. The minimum age for using TikTok is 13. From a report: In July, TikTok classified more than a third of its 49 million daily users in the United States as being 14 years old or younger, according to internal company data and documents that were reviewed by The New York Times. While some of those users are likely to be 13 or 14, one former employee said TikTok workers had previously pointed out videos from children who appeared to be even younger that were allowed to remain online for weeks. The number of users who TikTok believes might be younger than 13 raises questions about whether the company is doing enough to protect them. In the United States, the Children's Online Privacy Protection Act requires internet platforms to obtain parental permission before collecting personal information on children under 13. The operators of Musical.ly, an app that was merged into TikTok in 2018, paid a $5.7 million fine last year to settle accusations from the Federal Trade Commission that it had broken those rules.
The Internet

Instagram Wasn't Removing Photos and Direct Messages From Its Servers (techcrunch.com) 34

A security researcher was awarded a $6,000 bug bounty payout after he found Instagram retained photos and private direct messages on its servers long after he deleted them. From a report: Independent security researcher Saugat Pokharel found that when he downloaded his data from Instagram, a feature it launched in 2018 to comply with new European data rules, his downloaded data contained photos and private messages with other users that he had previously deleted. It's not uncommon for companies to store freshly deleted data for a time until it can be properly scrubbed from its networks, systems and caches. Instagram said it takes about 90 days for deleted data to be fully removed from its systems. But Pokharel found that his ostensibly deleted data from more than a year ago was still stored on Instagram's servers, and could be downloaded using the company's data download tool. Pokharel reported the bug in October 2019 through Instagram's bug bounty program. The bug was fixed earlier this month, he said.
The Almighty Buck

'All Of My TikTok Followers Are Fake' (vice.com) 79

An anonymous reader shares a report: The followers poured in. Then the likes. Then tens of thousands of people watched my TikTok video. The clip itself was of a few Motherboard staffers winning a match in the hugely popular game Call of Duty: Warzone; TikTok is full of streamers and players uploading their wins or soul-crushing loses. The video itself isn't good -- there's no slick editing, no captivating TikTok personality talking to camera, and certainly no dancing -- but in a few short hours the video accumulated 25,000 views and over 1,000 likes. This is very little engagement compared to the most popular videos on TikTok, but it's not bad for my first ever clip uploaded to the platform. The video climbed through the rankings of one of the Warzone-related hashtags people use to share their games.

But most of that engagement was fake. I bought the TikTok followers, likes, and views from a website that offers them all for sale. For around $50 in total I had artificially inflated the popularity of my TikTok clip, and, although my video certainly isn't about to go viral, potentially increased the chance for unsuspecting TikTok users to see it themselves. The news comes amid increased attention on TikTok, including not-yet-publicly verified claims from the Trump administration that the app poses a national security risk. Last week President Trump signed an executive order that would ban TikTok from the United States if the company isn't bought by an American company. TikTok plans to sue in response as early as this week, NPR reported. Microsoft is in talks to purchase TikTok.

Bug

Single-line Software Bug Causes Fledgling YAM Cryptocurrency To Implode Just Two Days After Launch (theregister.com) 108

A two-day-old decentralized cryptocurrency called YAM collapsed this week after its creators revealed that a software bug had effectively vetoed human governance. From a report: "At approximately 6PM UTC, on Wednesday, August 12, we discovered a bug in the YAM rebasing contract that would mint far more YAM than intended to sell to the Uniswap YAM/yCRV pool, sending a large amount of excess YAM to the protocol reserve," the YAM project explained in a post on Thursday. "Given YAM's governance module, this bug would render it impossible to reach quorum, meaning no governance action would be possible and funds in the treasury would be locked."

The bug followed from this line of code... totalSupply = initSupply.mul(yamsScalingFactor);
...which was supposed to beâ¦
totalSupply = initSupply.mul(yamsScalingFactor).div(BASE);

YAM, a decentralized finance experiment, implements a governance system (for making protocol changes) based on supposed smart contracts that allocates votes based on assets. [...] The code flaw locked up about $750,000 worth of Curve (yCRV) tokens in the YAM treasury, assets intended to serve as a reserve currency to support the value of YAM tokens.

Facebook

Facebook Abandons Broken Drilling Equipment Under Oregon Coast Seafloor (oregonlive.com) 140

Kale Williams, reporting for The Oregonian: Lynnae Ruttledge was worried when she heard Facebook planned to build a landing spot for an undersea fiber-optic cable near her Oregon Coast home. Tierra Del Mar, where the 70-year-old retired government worker lives part-time, is a tiny community north of Pacific City with no stoplights and no cell-phone service. The enclave, all zoned residential, consists of about a dozen mostly gravel streets running perpendicular to an idyllic stretch of beach, each lined with single-family homes. Ruttledge and many of her neighbors worried about heavy equipment on fragile roads built over sand dunes. They worried about noise and vibrations from the drill needed to punch a hole under the seafloor thousands of feet out into the ocean. They worried about threatened bird species, like the snowy plover and marbled murrelet, that could be affected.

Despite their concerns, and a vocal campaign to stop the project, construction began earlier this year. Then, on April 28, the drilling crew hit an unexpected area of hard rock. The drill bit became lodged and the drill pipe snapped 50 feet below the seafloor. The crew was able to recover some of the equipment, but they left the rest where it lay. Today, about 1,100 feet of pipe, a drill tip, various other tools and 6,500 gallons of drilling fluid sit under the seafloor just off the central Oregon coast. Facebook has no plans to retrieve the equipment. Edge Cable Holdings, a Facebook subsidiary responsible for the project, notified the county of the accident on May 5, but it did not explicitly mention the abandoned equipment. That information didn't emerge until a meeting with state officials June 17, nearly two months after the malfunction, said Ali Hansen, a Department of State Lands spokeswoman. "The delay in notification eliminated any potential options for recovery of the equipment," Hansen said in an email. The U.S. Army Corps of Engineers said the company's new plan is to return in early 2021 to drill a new hole, leaving the lost equipment under the seafloor indefinitely.

Facebook

Facebook Launches Hub To Help Users With US Poll Related Information (reuters.com) 28

Facebook on Thursday launched a 'Voting Information Center' for the 2020 U.S. elections to help voters easily navigate the poll process. From a report: The hub will connect Facebook and Instagram users to accurate and easy-to-find information about voting wherever they live and help them hold their elected officials accountable, the social media company said in a blog.
Communications

Cities Lose Lawsuit Against FCC's 5G Rules (axios.com) 89

A federal appeals court upheld the Federal Communications Commission's rules that limit municipalities' ability to negotiate with telecom companies such as AT&T and Verizon that are seeking to deploy thousands of 5G antennas on city streets and neighborhoods. From a report: The ruling by the Ninth Circuit Court of Appeals is a blow to dozens of cities that sued the agency, claiming the FCC's 2018 rules takes away their leverage and autonomy in deciding how the telecom industry can install "small-cell" antennas to build 5G networks. The FCC maintains that its rules -- which prohibit excessive fees and permitting delays by municipal governments -- will speed up the deployment of 5G networks throughout the country by removing burdensome barriers to telecom providers. "The wind is at our backs: With the FCC's infrastructure policies now ratified by the court, along with pathbreaking spectrum auctions concluded, ongoing and to come, America is well-positioned to extend its global lead in 5G and American consumers will benefit from the next generation of wireless technologies and services," said FCC Chairman Ajit Pai in a statement.
Mozilla

Mozilla Extends its Google Search Deal (zdnet.com) 100

Mozilla and Google have extended their search deal for another three years, news outlet ZDNet reported Wednesday, citing sources familiar with thee matter. Mozilla confirmed the news. From a report: The new search deal will ensure Google remains the default search engine provider inside the Firefox browser until 2023 at an estimated price tag of around $400 million to $450 million per year. Mozilla officials are expected to announce the search deal's extension later this fall, in November, when the organization is scheduled to disclose its 2019 financial figures. Terms of the new deal were leaked to this reporter after Mozilla announced plans to lay off more than 250 employees on Wednesday in a move that had many users fearing for the browser maker's future, as Mozilla's current Google search deal was scheduled to expire at the end of the year. However, several sources have confirmed that the organization is sound financially, and the layoffs were part of a restructuring of its core business, with Mozilla moving away from its current role of internet standards steward and experimental approach to its product catalog to more commercially-viable offerings that generate revenues on their own.
Facebook

Silicon Valley Game-Plans For a Messy Election Night (politico.com) 286

Google, Facebook, Twitter and other major social media companies are working together to scenario-plan for the last three months before Election Day in the United States -- including gaming out what to do if there's no quickly declared winner in the contest between President Donald Trump and former Vice President Joe Biden on election night. From a report: The close collaboration between Silicon Valley companies in the run-up to election day is detailed in an unusual cross-industry statement put out Wednesday. Pinterest, LinkedIn-owner Microsoft, and Reddit are also among its signatories. "We discussed preparations for the upcoming conventions and scenario planning related to election results. We will continue to stay vigilant on these issues and meet regularly ahead of the November election,â reads the statement. Among dozens of scenarios being contemplated by the companies for election night in particular are a "hack and leak" operation where stolen materials are quickly spread through online networks and addressing the distribution of manipulated videos, according to a person involved in the planning who spoke anonymously so as to not speak on behalf of the full industry coalition. The scenario planning is "candidate agnostic," they said. Today's statement comes shortly after a meeting among the companies and government officials -- the Cybersecurity and Infrastructure Security Agency, the FBI's Foreign Influence Task Force, the Department of Justice's National Security Division, and the Office of the Director of National Intelligence -- to discuss the planning. It builds on a series of monthly meetings, the person said, that go back to September of last year.
Google

'Stalkerware' Phone Spying Apps Have Escaped Google's Ad Ban (techcrunch.com) 25

An anonymous reader quotes a report from TechCrunch: Several companies offering phone-spying apps -- known as "stalkerware" -- are still advertising in Google search results, despite the search giant's ban that took effect today, TechCrunch has found. These controversial apps are often pitched to help parents snoop on their child's calls, messages, apps and other private data under the guise of helping to protect against online predators. But some repurpose these apps to spy on their spouses -- often without their permission. It's a problem that the wider tech industry has worked to tackle. Security firms and antivirus makers are working to combat the rise of stalkerware, and federal authorities have taken action when app makers have violated the law.

One of the biggest actions to date came last month when Google announced an updated ads policy, effectively banning companies from advertising phone-snooping apps "with the express purpose of tracking or monitoring another person or their activities without their authorization." Google gave these companies until August 11 to remove these ads. But TechCrunch found seven companies known to provide stalkerware -- including FlexiSpy, mSpy, WebWatcher and KidsGuard -- were still advertising in Google search results after the ban took effect. Google did not say explicitly say if the stalkerware apps violated its policy, but told TechCrunch that it removed ads for WebWatcher. Despite the deadline, Google said that enforcement is not always immediate.
"We recently updated our policies to prohibit ads promoting spyware for partner surveillance while still allowing ads for technology that helps parents monitor their underage children," said a Google spokesperson. "To prevent deceitful actors who try to disguise the product's intent and evade our enforcement, we look at several signals like the ad text, creative and landing page, among others, for policy compliance. When we find that an ad or advertiser is violating our policies, we take immediate action."
Privacy

Police Use of Facial Recognition Violates Human Rights, UK Court Rules (arstechnica.com) 58

An appeals court ruled today that police use of facial recognition technology in the UK has "fundamental deficiencies" and violates several laws. Ars Technica reports: South Wales Police began using automated facial recognition technology on a trial basis in 2017, deploying a system called AFR Locate overtly at several dozen major events such as soccer matches. Police matched the scans against watchlists of known individuals to identify persons who were wanted by the police, had open warrants against them, or were in some other way persons of interest. In 2019, Cardiff resident Ed Bridges filed suit against the police, alleging that having his face scanned in 2017 and 2018 was a violation of his legal rights. Although he was backed by UK civil rights organization Liberty, Bridges lost his suit in 2019, but the Court of Appeal today overturned that ruling, finding that the South Wales Police facial recognition program was unlawful.

"Too much discretion is currently left to individual police officers," the court ruled. "It is not clear who can be placed on the watchlist, nor is it clear that there are any criteria for determining where AFR can be deployed." The police did not sufficiently investigate if the software in use exhibited race or gender bias, the court added. The South Wales Police in 2018 released data admitting that about 2,300 of nearly 2,500 matches -- roughly 92 percent -- the software made at an event in 2017 were false positives. The ruling did not completely ban the use of facial recognition tech inside the UK, but does narrow the scope of what is permissible and what law enforcement agencies have to do to be in compliance with human rights law. Other police inside the UK who deploy facial recognition technology will have to meet the standard set by today's ruling. That includes the Metropolitan Police in London, who deployed a similar type of system earlier this year.

Slashdot Top Deals