An anonymous reader quotes a report from NPR: So many of us do it: You get into bed, turn off the lights, and look at your phone to check Twitter one more time. You see that coronavirus infections are up. Maybe your kids can't go back to school. The economy is cratering. Still, you incessantly scroll though bottomless doom-and-gloom news for hours as you sink into a pool of despair. This self-destructive behavior has become so common that a new word for it has entered our lexicon: "doomscrolling." The recent onslaught of dystopian stories related to the coronavirus pandemic, combined with stay-at-home orders, have enabled our penchant for binging on bad news. But the habit is eroding our mental health, experts say. [C]linical psychologist Dr. Amelia Aldao warns that doomscrolling traps us in a "vicious cycle of negativity" that fuels our anxiety. "Our minds are wired to look out for threats," she says. "The more time we spend scrolling, the more we find those dangers, the more we get sucked into them, the more anxious we get." Aldao, the director of Together CBT, a clinic that specializes in cognitive behavioral therapy, has worked with her patients to cut back on doomscrolling. Here's some of her advice on how to temper the doom:

Set a timer. I work mostly with clients who experience anxiety and part of what I've been doing with them now for weeks, for months, is actually setting limits to how much they're scrolling. And I literally tell them, "Set up a timer." You do want to know what's happening in the world, so the solution isn't to never go online again, but it's finding boundaries.

Stay cognizant. Going into it, opening up your phone, reminding yourself why you're there, what are you looking for, what information are you trying to find. And then periodically checking in with yourself -- have I found what I needed?

Swap 'vicious cycles' for 'virtuous cycles.' Whether it's ice cream, connecting with friends, sending something funny to a friend -- those are the things we should spend more time doing just to build positive emotions in our lives.

ProcMon for Linux is Microsoft's newest open-source Linux software. ProcMon is a rewritten and re-imagined version of its Processor Monitor found on Windows within their Sysinternals suite. From a report: Microsoft explains, "The Procmon is a Linux reimagining of the classic Procmon tool from the Sysinternals suite of tools for Windows. Procmon provides a convenient and efficient way for Linux developers to trace the syscall activity on the system."

The US Department of Commerce added 11 Chinese companies to its list of firms implicated in human rights violations, including China's reported campaign against Muslim minority groups from an area of the country known as the Xinjiang Uighur Autonomous Region. At least one of those companies, Nanchang O-Film Tech, is listed as a supplier or undefined "partner" with nearly two dozen tech and car companies, including Amazon, Apple, Dell, GM and Microsoft. From a report: The Commerce Department said the group of 11 companies that supported "mass arbitrary detention, forced labor, involuntary collection of biometric data and genetic analysis" targeted at Uighurs and other minority groups will face restrictions on US products, including technology. "Beijing actively promotes the reprehensible practice of forced labor and abusive DNA collection and analysis schemes to repress its citizens," Secretary of Commerce Wilbur Ross said in a statement Monday. "This action will ensure that our goods and technologies are not used in the Chinese Communist Party's despicable offensive against defenseless Muslim minority populations."

Hammeh writes: Since the middle of last month, thousands of Samsung customers found their older internet-connected Blu-ray players had stopped working. In the days that followed, complaints about devices caught in an endless startup boot loop began to appear on various internet discussion boards, and videos documenting the device failure appeared on YouTube. To fix the issue, Samsung eventually advised customers to return their inoperable video players for repairs. There is no software fix. "We are aware of the boot loop issue that appeared on certain 2015 Samsung Blu-Ray players and are offering free mail-in repairs to customers who have been impacted," a representative of the mega-manufacturer said in a Samsung forum post.

It was speculated by netizens and some media reports that a HTTPS certificate error was to blame. However, it's been suggested to The Register that the cause of the failure was an XML file downloaded by the network-connected devices from Samsung servers during periodic logging policy checks. This file, when fetched and saved to the device's flash storage and processed by the equipment, crashed the system software and force a reboot. Upon reboot, the player parsed the XML file again from its flash storage, crashed and rebooted again. And so on, and so on, and so on. Crucially, the XML file would be parsed before a new one could be fetched from the internet, so once the bad configuration file was fetched and stored by these particular Samsung Blu-ray players in the field, they were bricked.

Chinese security researchers said they can alter the firmware of fast chargers to cause damage to connected (charging) systems, such as melt the components, or even set devices on fire. A reader shares a report: The technique, named BadPower, was detailed last week in a report published by Xuanwu Lab, a research unit of Chinese tech giant Tencent. According to researchers, BadPower works by corrupting the firmware of fast chargers -- a new type of charger that was developed in the past few years to speed up charging times. A fast charger looks like any typical charger but works using special firmware. This firmware "talks" to a connected device and negotiates a charging speed, based on the device's capabilities. If a fast-charging feature is not supported, the fast charger delivers the standard 5V, but if the device can handle bigger inputs, the fast charger can deliver up to 12V, 20V, or even more, for faster charging speeds. The BadPower technique works by altering the default charging parameters to deliver more voltage than the receiving device can handle, which degrades and damages the receiver's components, as they heat up, bend, melt, or even burn.

Facebook CEO Mark Zuckerberg, under fire for allowing President Trump to post inflammatory statements on his platform, tells Axios there's no truth to whispers that the two have a secret understanding. From a report: Zuckerberg, facing a growing ad boycott from brands that say Facebook hasn't done enough to curtail hate speech, has become increasingly public in criticizing Trump. "I've heard this speculation, too, so let me be clear: There's no deal of any kind," Zuckerberg told Axios. "Actually, the whole idea of a deal is pretty ridiculous. I do speak with the president from time to time, just like I spoke with our last president and political leaders around the world," he added.

Microsoft officials haven't provided a public update on the company's Windows 10X plans since they acknowledged in early May that they were switching gears by making it available first on single-screen devices. Internally, however, things are taking shape and the team is targeting spring 2021 for a first 10X commercial release, ZDNet reported Monday. From the report: Windows 10X, codenamed "Lite"/"Santorini," is not a new operating system. It's a Windows 10 variant in a more modular form and with a new, simpler interface. Originally, Microsoft planned to ship 10X first on new dual-screen devices such as the postponed Surface Neo. I'm hearing Microsoft's latest plan calls for 10X to debut on single-screen devices designed primarily for businesses (especially firstline workers) and education in the spring of 2021. And in the spring of 2022, Microsoft is aiming to roll out 10X for additional single screen and dual-screen devices, my contacts say. The first release of 10X will not include support for running Win32 apps in containers, as originally planned.

"Google has decided to disable a feature in Windows 10 version 2004 that allowed Chrome and Microsoft Edge browsers to use a lot less RAM," reports ZDNet: Windows 10 gave Win32 apps including Chrome access to a 'segment heap' API to allow apps to reduce memory usage, but as Techdows spotted, Chromium engineers have decided for now to turn off the feature by default in Chrome 85 after discovering it has a negative impact on CPU usage. Chrome 85 should reach stable status in August...

The CPU issue was discovered by an Intel engineer who found that when Chrome used segment heap, it led to significant performance regression in benchmarks on a PC with an Intel Core i9-9900K processor...

Microsoft has defended the trade-off between memory and CPU but conceded it can be implemented better to reduce the impact on CPU performance. "It is common practice to trade one resource for another. More often it's increased memory usage for reduced CPU usage. In this case it's increased CPU usage for dramatically reduced memory usage, or more accurately commit," wrote a Microsoft employee... "In the short term this is a good trade-off of one resource for another as memory/commit usage is a significant pain point for browser users," argued the Microsoft employee....

However, Chromium developers want to see more evidence about the possible impact of Chrome using segment heap... "The CPU cost (10% slowdown on Speedometer 2.0, 13% increase in CPU/power consumption) is too great for us to keep."

The United States Air Force's elite "PJ" pararescue units and Alaska National Guard units "are ready to respond if war breaks out on top of the world," reports a new article in Popular Mechanics: With much of the ice cap melted, the Arctic is teeming with competitive activity because it's no longer an impenetrable land of glaciers — void of economic or strategic military advantages. In fact, quite the opposite. The U.S., Russia, and China all recognize that new shipping lanes and natural resources, worth trillions of dollars, are becoming more viable every day in the Arctic. Each nation has its own economic interests and the competition for control in the Arctic is only increasing.

Lt. Gen. Tom Bussiere says simply: "Whoever holds Alaska holds the region, and that impacts the globe," and according to the U.S. Senator of Alaska Dan Sullivan, "we have fallen behind in the race with China and Russia." Russia is reviving Soviet-era Arctic bases, increasing its fleet of Arctic icebreakers to a whopping 41 vessels (the U.S. has only two though this shortage is getting more attention), and Russian TU-95 "Bear" bombers frequently test F-22A Raptors' readiness near U.S. airspace.

And China has its own plans. Though not an Arctic nation like the U.S. or Russia, China's economic clout gained the nation an observer seat in the Arctic Council under the claims that they are a "near-Arctic state." China is positioning itself to stake a greater claim to the bountiful resources that the Arctic can provide, based on a bold plan they call the "Polar Silk Road." If completed, the plan will create an economic network beneficial to China through the once-frozen ocean.

In response to Russian operations and Chinese advances, the U.S. Air Force is battling for air superiority in the Arctic with its most valuable — and lethal — assets in Alaska, including the F-22A Raptor and F-35A Joint Strike Fighter.
By "battling" I think they mean "spending." A related side note: The article was co-authored by the producer of the TV series War On Top of The World

Google's announcement of a new open source initiative called the Open Usage Commons "caused some consternation among other open source proponents," according to Diginomica: IBM's reaction is typical. In a statement, the company said that "the creation of the Open Usage Commons (OUC) is disappointing because it doesn't live up to the community's expectation for open governance... Without this vendor-neutral approach to project governance, there will be friction within the community of Kubernetes-related projects...."

Google's underlying reason was that the management of trademarks was an area for legal specialists — something beyond the competence of open source project maintainers. According to Google, the new initiative would address this knowledge gap. "The Open Usage Commons is therefore dedicated to creating a model where everyone in the open source chain — from project maintainers to downstream users to ecosystem companies — has peace of mind around trademark usage and management. The projects in the Open Usage Commons will receive support specific to trademark protection and management, usage guidelines, and conformance testing...."

The Linux Foundation's response... "When trademarks of an open source project are owned by a single company within a community, there is an imbalance of control... The reservation of this exclusive right to exercise such control necessarily undermines the level playing field that is the basis for open governance. This is especially the case where the trademark is used in association with commercial products or solutions."

Red Monk analyst James Governor says that while Google's actions can be seen as provocative, it has gone down an interesting route. "The CNCF community is perhaps justifiably upset given expectations about Google's direction of travel for open source projects, but the creation of a trademark commons is an interesting one. We shall have to see how this plays out. There could be a fork ahead, or it all might be a storm in a teacup."

"Starting today, there's a VPN on the market from a company you trust," Mozilla announced Wednesday.

Mozilla VPN is now officially available for Windows and Android in six countries: the U.S., Canada, the U.K., Singapore, Malaysia, and New Zealand, and it'll be coming to even more countries later this year, reports the Verge: The service is available for $4.99 a month, and, like other VPNs, it's designed to make your web-browsing more private and secure. As part of the move, the service is being rebranded from Firefox Private Network to Mozilla VPN, a change that was announced last month.

Mozilla argues that its VPN service has a couple of advantages over its many competitors. It says it should offer a faster browsing experience in many cases because it's based on a protocol with less than a third of the lines of code of an average VPN service provider. The company is also banking on the reputation it's built up with its privacy-focused browser, and it adds that it only collects the information it needs to run a service and doesn't keep user data logs.

The VPN's launch follows beta trials in the US, which also included tests of a VPN built directly into the Firefox browser. Last month, Mozilla announced that it would be testing asking users to pay $2.99 a month for unlimited usage of the extension, which is designed to mask your traffic within the browser rather than at a system-wide level.

An anonymous reader quotes the Verge: Disney has significantly reduced its spending on Facebook and Instagram ads amid concerns about the social media platform's enforcement of its content policies, The Wall Street Journal reported. It joins a list of large companies that have cut back on Facebook ads as part of an effort to compel Facebook to change how it handles hate speech and misinformation on its platforms.

The monthlong #StopHateforProfit boycott organized by a coalition of civil rights organizations including the Anti-Defamation League, the NAACP, Color of Change, and Sleeping Giants kicked off July 1st and includes companies like Hershey, Honda, Ben & Jerry's, and Verizon. Other companies not part of the formal boycott that have pulled ads from Facebook and other social platforms included Coca-Cola, Lego, Starbucks, and Unilever. And Microsoft suspended its advertising on Facebook and Instagram through August.

"The ride-hailing platform Lyft has opened an online store to sell masks and other protective gear as the Covid-19 pandemic intensifies, enraging drivers and labor organizers who say the company should be providing these free," reports the Guardian: The tech company's move to sell drivers protective gear rather than provide it resurfaces the debate of whether drivers are employees or independent contractors, and to what extent the tech giants carry responsibility for the work conditions of gig workers... The Lyft store launched on 1 June, a company spokeswoman told the Guardian, and sells the supplies "at cost", she said.

"Lyft does not make a profit on PPE," she said, adding that Lyft had distributed more than 150,000 sanitizing products and masks to drivers since the Covid-19 crisis began. "The Lyft store is a resource to provide millions of drivers across the US easy access to cleaning supplies and face masks that have consistently been difficult to find." Still, drivers complain they have shouldered much of the safety responsibilities, and cost. Eden Alva, a driver organizer in the Bay Area, said Lyft should not be charging drivers for the personal protective equipment required to work safely but instead providing it free...

"From the start they have pushed all costs, expenses and risks on to drivers while pocketing as much revenue as possible," he said. "During a crisis like coronavirus, drivers suffer even more, and there isn't any form of safety net."

Remember that anonymous online hoaxster who urged hundreds of armed protesters to counter a non-existent flag-burning event at America's historic Civil War battefield at Gettysburg?

An investigation by the Washington Post reveals that the hoaxster had in fact been a "lifelong Democrat" before instead registering in 2015 with the Socialist Party — and that he now collects food stamps: Adam Rahuba, a former concert promoter, works part-time as a food-delivery driver and a DJ. [Alternate URL here] At 38, he spent most of the past year staying on a friend's couch in a small town north of Pittsburgh. A Washington Post investigation found that Rahuba is also the anonymous figure behind a number of social media hoaxes — the most recent played out in Gettysburg on Independence Day — that have riled far-right extremists in recent years and repeatedly duped partisan media outlets...

These false claims circulated widely on social media and on Internet message boards. They were often amplified by right-wing commentators and covered as real news by media outlets such as Breitbart News and the Gateway Pundit... They have led to highly combustible situations — attracting heavily armed militia members and far-right activists eager to protect values they think are under siege — as well as large mobilizations of police... His July 4 hoax, a purported burning of the American flag, was billed as an antifa event. Hundreds of counterprotesters, including skinheads, flocked to Gettysburg National Military Park to confront the nonexistent flag burners.

A Post examination of Rahuba's activities provides a rare inside look at the work of a homegrown troll who uses social media to stoke partisan division. It shows that in an era of heightened sensitivity about disinformation campaigns carried out by foreign nations, bad-faith actors with far fewer resources can also manipulate public discourse and affect events in the real world.... Post reporters located Rahuba last week at a friend's apartment in Harmony Township, Pa., where he acknowledged in an interview that he was behind 13 aliases and social media accounts that promoted hoaxes as far back as 2013.... A self-described democratic socialist and supporter of former presidential candidate Bernie Sanders, Rahuba said he antagonizes far-right extremists mostly for his own amusement...

"The message here was that any idiot on the Internet can get a bunch of people to show up at a Union cemetery with a bunch of Confederate flags and Nazi tattoos on their necks that just make them look foolish," he said.
The Post also reports that to deal with his July 4th hoax, "A local middle school was transformed into a makeshift command center to help coordinate the 16 federal and local law enforcement agencies monitoring the event. The state provided 100 Pennsylvania State troopers to assist, including mounted officers and a helicopter, according to Gettysburg city manager Charles Gable....

"That weekend, Rahuba said, he went camping with his girlfriend."

Engineers have developed a new type of hybrid solar energy converter, which uses energy from the Sun to create both electricity and steam. The device reportedly has high efficiency and runs at low cost, allowing industry to make use of a wider spectrum of solar energy. New Atlas reports: The device looks like a satellite dish, with a small device suspended over the center of a parabolic collector. The dish part is mirrored, and focuses the sun's rays onto the box in the middle. The bottom of this section contains multi-junction solar cells, which collect and convert visible and ultraviolet light into electricity. But the clever part is that these cells redirect the infrared light -- the heat energy -- to a separate thermal receiver, higher up in the device. This receiver is essentially a cup-shaped cavity surrounded by pressurized water, which captures the heat and turns into steam.

The team says that the total collection efficiency is 85.1 percent, meaning a very high amount of the Sun's energy is converted into either electricity or heat. The steam can be heated up to 248C (478F), which is a much higher temperature than many other thermal energy collectors. This means it's hot enough for many industrial processes, such as drying, curing, sterilizing, and pasteurizing. The other advantage is cost. The team reports that once scaled up, the hybrid device could run for as little as 3 cents per kilowatt hour. The research was published in the journal Cell Reports Physical Science.

"Many major websites and services were unreachable for a period Friday afternoon due to issues at Cloudflare's 1.1.1.1 DNS service," reports TechCrunch: The outage seems to have started at about 2:15 Pacific time and lasted for about 25 minutes before connections began to be restored. Google DNS may also have been affected.

Cloudflare at 2:46 says "the issue has been identified and a fix is being implemented." CEO Matthew Prince explains that it all came down to a bad router in Atlanta... The company also issued a statement via email emphasizing that this was not an attack on the system...

Discord, Feedly, Politico, Shopify and League of Legends were all affected, giving an idea of the breadth of the issue. Not only were websites down but also some status pages meant to provide warnings and track outages. In at least one case, even the status page for the status page was down.
Other sites that went down briefly include Discord, Patreon, Deliveroo, GitLab, Zendesk, and Medium, according to the Verge. And FBI.gov was also down, reports PC Magazine, as well as their own site, Mashable.com, "and even Downdetector.com, a real-time outage monitoring website."

They note that Cloudflare serves 26 million sites, and Cloudflare's CEO acknowledged tonight that the outage affected about 50% of their private backbone.

An anonymous reader quotes a report from VentureBeat: Google today launched Chrome 84 for Windows, Mac, Linux, Android, and iOS. Chrome 84 resumes SameSite cookie changes, includes the Web OTP API and Web Animations API, and removes older Transport Layer Security (TLS) versions. First deprecated with Chrome 81 in April, TLS 1.0 and TLS 1.1 have now been completely removed with Chrome 84. This is notable for anyone who manages a website, even if they don't use Chrome at home or at work. TLS is a cryptographic protocol designed to provide communications security over a computer network -- websites use it to secure all communications between their servers and browsers. TLS also succeeds Secure Sockets Layer (SSL) and thus handles the encryption of every HTTPS connection.

In May 2016, Chrome 51 introduced the SameSite attribute to allow sites to declare whether cookies should be restricted to a same-site (first-party) context. The hope was this would mitigate cross-site request forgeries (CSRF). Chrome 80 began enforcing a new secure-by-default cookie classification system, treating cookies that have no declared SameSite value as SameSite=Lax cookies. Only cookies set as SameSite=None; Secure are available in third-party contexts, provided they are being accessed from secure connections. Due to the coronavirus crisis, however, Google paused the SameSite cookie changes, with plans to resume enforcement sometime over the summer. SameSite cookie enforcement has now resumed with a gradual rollout ramping up over the next several weeks for Chrome 80 and newer.

Chrome 84 introduces the Web OTP API (formerly called the SMS Receiver API). This API helps users enter a one-time password (OTP) on a webpage when a specially crafted SMS message is delivered to their Android phone. When verifying the ownership of a phone number, developers typically send an OTP over SMS that must be manually entered by the user (or copied and pasted). The user has to switch to their native SMS app and back to their web app to input the code. The Web OTP API lets developers help users enter the code with one tap. Chrome 84 also adopts the Web Animations API, which gives developers more control over web animations. These can be used to help users navigate a digital space, remember your app or site, and provide implicit hints around how to use your product. Parts of the API have been around for some time, but this implementation brings greater spec compliance and supports compositing operations, which control how effects are combined and offer many new hooks that enable replaceable events. The API also supports Promises, which allow for animation sequencing and provide greater control over how animations interact with other app features.

Microsoft-owned GitHub has finally moved its snapshot of all active public repositories on the site to a vault in Norway. ZDNet reports: GiHub announced the archiving plan last November and on February 20 followed through with the 21 terabyte snapshot written to 186 reels of film. GitHub cancelled plans for a team to "personally escort the world's open-source code to the Arctic" due to the coronavirus pandemic, leaving the job to local partners who received the boxed films and deposited them in an old coal mine on July 8. The archive is being stored in Svalbard, Norway, a group of islands that's also home to the global seed bank.

"The code landed in Longyearbyen, a town of a few thousand people on Svalbard, where our boxes were met by a local logistics company and taken into intermediate secure storage overnight," said Julia Metcalf, director of strategic programs at GitHub. "The next morning, it traveled to the decommissioned coal mine set in the mountain, and then to a chamber deep inside hundreds of meters of permafrost, where the code now resides fulfilling their mission of preserving the world's open-source code for over 1,000 years." The repository includes public code repositories and significant dormant repos. The snapshot consists of the HEAD of the default branch of each repository, minus any binaries larger than 100kB in size. Each repository is then packaged as a single TAR file, and for efficiency's sake, most of the data will be stored as QR codes. A human-readable index and guide will itemize the location of each repository and explain how to recover the data.

The recent retraction of a research paper which claimed to find no link between police killings and the race of the victims was a story tailor-made for today's fights over cancel culture. From a report: First, the authors asked for the paper to be withdrawn, both because they'd been "careless when describing the inferences that could be made from our data" and because of how others had interpreted the work. (In particular they pointed to recent op-ed in The Wall Street Journal with the headline, "The Myth of Systemic Police Racism.") Then, after two days of predictable blowback from those decrying what they saw as left-wing censorship, the authors tried to clarify: "People were incorrectly concluding that we retracted due to either political pressure or the political views of those citing the paper," they wrote in an amended statement. No, the authors said, the real reason they retracted the paper was because it contained a serious mistake. In fact, that mistake -- a misstatement of its central finding -- had been caught soon after the paper's initial publication in the Proceedings of the National Academy of Sciences in July 2019, and was formally corrected in April of this year. At that point, the authors acknowledged their error -- sort of -- while insisting that their main conclusions held. That the eventual retraction came only after the paper became a flashpoint in the debate over race and policing in the wake of George Floyd's murder ... well, let's agree that the retraction happened.

[...] As we and others have written many times, peer review -- the way journals ask researchers to perform it, anyway -- is not designed to catch fraud. It's also vulnerable to rigging and doesn't go so well when done in haste. Editors and publishers tend to admit these problems only under duress -- i.e., when a well-publicized retraction happens -- and then hope that we believe their claims that such colossal blunders are somehow "the system is working the way it should." But their protestations only serve as an acknowledgement that the standard system doesn't work, and that we must instead rely upon the more informal sort of peer review that happens to a paper after it gets published. The internet has enabled such post-publication peer review, as it is known, to happen with more speed, on sites like PubPeer.com. In some cases, though -- as with the PNAS paper described above -- the resolution of this after-the-fact assessment comes much too late, after a mistaken claim has already made the rounds. So how might journals do things better? As Daniel Lakens, of Eindhoven University of Technology in the Netherlands, and his colleagues have argued, researchers should embrace a "Red Team challenge" approach to peer review. Just as software companies hire hackers to probe their products for potential gaps in the security, a journal might recruit a team of scientific devil's advocates: subject-matter specialists and methodologists who will look for "holes and errors in ongoing work and ... challenge dominant assumptions, with the goal of improving project quality," Lakens wrote in Nature recently. After all, he added, science is only as robust as the strongest critique it can handle.

"Bad-actor" phone companies that profit from robocalls could be blocked by more legitimate carriers under rules approved unanimously yesterday by the Federal Communications Commission. From a report: Under the change, the FCC said carriers can block calls "from bad-actor upstream voice service providers that pass illegal or unwanted calls along to other providers, when those upstream providers have been notified but fail to take action to stop these calls." Carriers that impose this type of blocking will get a safe harbor from liability "for the unintended or inadvertent blocking of wanted calls, thus eliminating a concern that kept some companies from implementing robust robocall blocking efforts."

This expanded level of blocking -- spurred by a new law in which Congress directed the FCC to expand safe harbors -- could be implemented by companies that sell phone service directly to consumers. That includes mobile carriers Verizon, AT&T, and T-Mobile, traditional landline companies, and VoIP providers. Carriers won't be able to block calls from just any provider. As Chairman Ajit Pai explained, the safe harbor will be available in cases when the "bad-actor" telecom has been notified by the FCC that it is carrying illegal traffic and "fails either to effectively mitigate such traffic or to implement effective measures to prevent customers from using its network to originate illegal calls."