Data Storage

Tech Terms Face Scrutiny Amid Anti-Racism Efforts (cnet.com) 318

Apple, Google, Microsoft and other Big Tech companies have stepped up their comments on the need for racial justice amid the Black Lives Matter protests that have gripped the US for the past two weeks. Now, a growing group of technologists say the language of the industry itself needs to change in order to fight racism. From a report: The terms "master" and "slave," used to describe the relationships between two computer hard drives and or between two camera flashes, have come under scrutiny because of their association with America's history of slavery. Similarly, "whitelist" and "blacklist," terms for allowing and denying access to a service, are being revisited because of their potentially racial overtones.

"I refuse to use 'whitelist'/'blacklist' or 'master'/'slave' terminology for computers. Join me. Words matter," tweeted Leah Culver, co-founder of the Breaker podcast app and a co-author of the widely used OAuth signon technology. More than 16,000 people liked her tweet. Photographer Theresa Bear expressed a similar sentiment on the PetaPixel photo site, writing that it's time to "make way for our black community" by banishing the use of "master" and "slave" to refer to how flashes are controlled. "Can you imagine being on set with a black human and the photographer yells to the assistant, 'Hey, can you put it on slave mode?'" Bear asked. Other terms proposed for sunsetting include "white hat" and "black hat," with "ethical" and "unethical" suggested as replacements.

Google

Despite Disappointing Pixel 4, 2019 Was Google's Best Year for Phone Sales Yet (androidauthority.com) 15

A few weeks ago, news broke that Google was allegedly disappointed with the Google Pixel 4, even prior to that device's launch. However disappointing it may have been, it doesn't appear to have stopped Google Pixel sales from hitting a record high in 2019. From a report: According to third-party analyst firm International Data Corporation (IDC), Google Pixel sales hit 7.2 million units in 2019. Although the numbers don't get broken down by device, it's likely most of those sales come from the two 2019 phones launched -- the Google Pixel 3a and Google Pixel 4. At least some of the shipments are probably made up of Google Pixel 3 sales, too. However, it's estimated that the Google Pixel 4 only sold around 2 million units over its first six months, which would mean a portion of that number wouldn't count towards the 2019 total. Therefore, it's basically a guarantee that the bulk of the Google Pixel sales in 2019 came from the Pixel 3a line.
Android

Android 11 Will Help You Rein In Zombie App Permissions (wired.com) 37

With 2.5 billion users worldwide, Google has a responsibility to make its Android operating system as secure as possible. But the company has at times struggled to adequately vet apps in the Google Play Store, allowing malicious programs through that thousands or millions of users go on to download. With Google's release of the Android 11 Beta on Wednesday, though, the company is taking steps to make it even more difficult for rogue apps to grab your data even when they do slip by. From a report: Google has worked for years to incrementally tighten Android security under the hood. And the release of Android 11 is particularly focused on expanding privacy improvements to give you more control over what your apps can access and giving more ways to distribute software updates across Android's fragmented and disjointed device population. Android 10 addressed some of this as well, requiring that app developers request permissions and then reaffirm user choices more often. Android 11 adds a feature that allows developer to request one-time permissions for things like the microphone, camera, or location as an alternative to all or nothing. You can share your location with a friend through a chat app once, for example, without granting indefinite location access, or having to remember to wade back into settings to revoke the permission later.

"We can see that people are actually leveraging these features from Android 10 and thinking about their choices when they're giving apps access to permissions," says Charmaine D'Silva, an Android product manager who works on privacy. "So building on that this time we've added even more controls." Android 11 will also rein in apps that you don't use very often, automatically revoking permissions if you don't open it for a still undetermined period of time. If you start using the app again you can always reinstate its access, but the permission won't be lurking forgotten. Google plans to experiment with different cutoffs after 60-90 days, with the goal of eliminating stray permissions without breaking functionality.

Google

Amazon, Facebook and Google Turn To Deep Network of Political Allies To Battle Back Antitrust Probes (washingtonpost.com) 26

Under the withering microscope of government watchdogs, tech giants including Amazon, Facebook and Google have funded a bevy of political groups that have helped push positive polling and engaged in other fingerprint-free tactics designed to deter regulators who are seeking to break up or penalize the industry. The approach reflects the growing threats they now face from the Justice Department and the country's top attorneys general, who have been investigating them on antitrust grounds. From a report: The Connected Commerce Council, for example, is a Washington-based nonprofit that bills itself as a voice for small businesses. But it counts Amazon, Facebook and Google as "partners," and in recent months the group known as 3C has put its muscle to work arguing that Silicon Valley giants do not threaten competition, stifle smaller rivals and harm consumers in the process. Espinoza, a bootmaker by profession, said he was approached by 3C last year after he participated in a Google seminar meant to help small businesses better use digital tools. The advocacy group then wrote the opinion piece largely on his behalf, which appeared online just days after state attorneys general announced their antitrust probe of the company. The opinion piece did not indicate that 3C largely penned it. Espinoza said he still supported Google, whose technology, including its ad tools now under government investigation, have helped his company reach new customers across the country. But he also said he didn't know about Google's relationship with 3C, a group of which he is a member, before being contacted by The Post this week.

Jake Ward, the president of 3C, said his organization represents thousands of small businesses, not Silicon Valley's largest players. The organization often seeks to encourage corporate founders to share their views publicly, he added. "It is our responsibility, on behalf of our small business members, to protect the existing model and promote the market, which is working exceedingly well" Ward said, later adding: "We are not, and will not work for, Big Tech." Amazon and Facebook declined to comment. Julie Tarallo McAlister, a spokeswoman for Google, said in a statement that the company supports "a range of organizations like the Connected Commerce Council that are working to help small businesses grow and prosper online." Silicon Valley tech giants -- and companies across a range of industries -- often back a wide array of advocacy groups to boost their political fortunes. They aren't required to disclose how much they spend on these organizations and exactly how involved they are in their day-to-day decisions, but ethics watchdogs say their participation alone is important.

Google

Playing Around With the Fuchsia OS (quarkslab.com) 102

Security and software development company Quarkslab played around with Google's new Fuchsia operating system, which could one day replace Android on smartphones and Chrome OS on laptops. The researchers "decided to give a quick look at Fuchsia, learn about its inner design, security properties, strengths and weaknesses, and find ways to attack it." Here's what they concluded: Fuchsia's micro kernel is called Zircon. It is written in C++. [...] Contrary to every other major OS, it appears rather difficult to target the Zircon kernel directly. A successful RCE (Remote Code Execution) on the world-facing parts of the system (USB, Bluetooth, network stack, etc) will only give you control over the targeted components, but they run in independent userland processes, not in the kernel. From a component, you then need to escalate privileges to the kernel using the limited number of syscalls you can access with the handles you have. Overall, it seems easier to target other components rather than the kernel, and to focus on components that you can talk to via IPC and that you know have interesting handles.

Overall, Fuchsia exhibits interesting security properties compared to other OSes such as Android. A few days of vulnerability research allowed us to conclude that the common programming bugs found in other OSes can also be found in Fuchsia. However, while these bugs can often be considered as vulnerabilities in other OSes, they turn out to be uninteresting on Fuchsia, because their impact is, for the most part, mitigated by Fuchsia's security properties. We note however that these security properties do not -- and in fact, cannot -- hold in the lowest layers of the kernel related to virtualization, exception handling and scheduling, and that any bug here remains exploitable just like on any other OS. All the bugs we found were reported to Google, and are now fixed.

Again, it is not clear where Fuchsia is heading, and whether it is just a research OS as Google claims or a real OS that is vowed to be used on future products. What's clear, though, is that it has the potential to significantly increase the difficulty for attackers to compromise devices.

Government

FCC Failed To Monitor Chinese Telecoms For Almost 20 Years: Senate Report (arstechnica.com) 38

The Federal Communications Commission and other U.S. agencies have failed to properly oversee Chinese telecom companies that operate in the United States, according to a bipartisan Senate report released today. Ars Technica reports: After a year-long investigation, the staff report by the US Senate's Permanent Subcommittee on Investigations "found that the FCC and 'Team Telecom' -- an informal group comprised of officials from the Departments of Justice, Homeland Security, and Defenseâ"have failed to monitor these three Chinese government-owned carriers," a joint announcement by the subcommittee's Republican and Democratic leaders said. The three carriers the subcommittee referred to are China Telecom Americas (CTA), China Unicom Americas (CUA), and ComNet USA. The companies "operated in the U.S. for nearly 20 Years with little to no oversight from the federal government," the senators' announcement said. "The Chinese government engages in cyber and economic espionage efforts against the United States and may use telecommunications carriers operating in the United States to further these efforts," the report said.

The report comes two months after the FCC stepped up its scrutiny of telecom companies controlled by the Chinese government. The FCC issued orders to China Telecom, China Unicom, ComNet, and ComNet owner Pacific Networks, directing them "to explain why the Commission should not start the process of revoking their domestic and international section authorizations enabling them to operate in the United States." But the FCC and other agencies had previously failed to exercise proper oversight of these companies, the Senate report said. The lack of oversight described in the report occurred during both Republican and Democratic administrations. "An FCC spokesman said the commission looks forward to reviewing the Senate report," according to a Reuters article today.

Earth

Commonwealth Nations To Protect Coral Reefs With Satellite Technology (theguardian.com) 16

Commonwealth countries are to gain free access to satellite technology that will help them monitor and protect their endangered coral reefs from threats such as climate breakdown, overfishing and pollution. The Guardian reports: Commonwealth countries hold nearly half of the world's remaining tropical coral reefs, with 47 out of the 54 member countries having a coastline. Nearly half of them are islands or groups of islands, which face particular threats from the climate crisis, and for whom coral reefs are often vital protections against storms as well as fish nurseries and tourist attractions. Nearly all the reefs are at risk of extinction in the coming decades as the climate crisis takes hold, and nearly half of the world's reefs have already been destroyed or badly damaged in the last 30 years owing to changes in the climate, overfishing, pollution and other exploitation. About 250 million people are directly dependent on coral reefs for their livelihoods.

The technology will use high-resolution satellite images and data analyses to allow marine scientists, government officials and policymakers to monitor the health of coral reefs and take the action needed to protect them. Software will be provided to countries free through the Commonwealth's partnership with Vulcan Inc, a US-based group founded by Microsoft co-founder and philanthropist Paul Allen, and a new interactive coral reef map will be hosted online at the Commonwealth Innovation Hub.

Cloud

Google Meet Rolls Out Impressive New Background Noise Cancellation Feature (venturebeat.com) 32

Google is rolling out AI-powered noise cancellation in Google Meet. It's coming to the web first, with iOS and Android following later. The Verge reports: A video produced by VentureBeat shows the software in action, with G Suite's director of product management Serge Lachapelle demonstrating how it can pretty seamlessly remove the sound of crackling crisp packets, clicking pens, or glass clinking. Google's announcement said the tech will also work on dogs barking or the clicking of a keyboard. VentureBeat reports that Google has been working on the feature for around a year and a half, using thousands of its own meetings to train its AI model. YouTube clips of lots of people talking were also used by the team. However, Lachapelle was keen to emphasize that although the feature will improve over time, the company will not directly use external meetings to train it. Instead, it will use customer support channels to try to identify where the software might be going wrong. Google says the processing happens via the cloud and that the data is encrypted during transport. It's also enabled by default, but can be turned off from the audio menu in the settings.
Patents

Apple Granted Patent That Would Allow For Socially Distant Group Selfies (cnn.com) 37

With people around the world self-isolating at home in order to curb the spread of Covid-19, Apple has received a patent for software that would allow people to take group selfies while socially distancing from one another. CNN reports: The US Patent and Trademark Office recently granted Apple a patent for the software that would allow for "synthetic group selfies," or socially distant group selfies. The software would allow a user to invite others to participate in a group selfie that would arrange multiple people into a single image. It would remove the background image from other users' selfies and place them into the user's photo.

While it appears as if Apple filed for the patent as a response to the pandemic, the tech giant originally filed for the patent in 2018 and it received it June 2. Whether Apple decides to move forward with the patented software remains to be seen, but it would be the perfect way for people to create memories with one another while still socially distancing.

United States

Audio Engineers Built a Shield To Deflect Police Sound Cannons (vice.com) 257

An anonymous reader quotes a report from Motherboard: Over the past two weeks, cops have been deploying every tool at their disposal to suppress worldwide protests and riots over the deaths of George Floyd, Breonna Taylor, Tony McDade, and other Black citizens killed by police. Since the protests began, demonstrators in multiple cities have reported spotting LRADs, or Long-Range Acoustic Devices, sonic weapons that blast sound waves at crowds over large distances and can cause permanent hearing loss. In response, two audio engineers from New York City have designed and built a shield which they say can block and even partially reflect these harmful sonic blasts back at the police. The shield's designers, Dave Rife and Gabe Liberti, were inspired to build the device after marching in the protests in New York City and hearing about LRAD sightings at demonstrations across the U.S.

"It's definitely been on our mind a lot how we've been seeing police instigating violence, and we've heard rumblings here and there about LRADs being spotted in NYC," said Rife, the shield's co-designer, who has previously worked in the architecture industry as an expert in acoustics. "We met on Sunday with the aim of building something that resembles a protest sign but can block a fair amount of sound energy. The idea is there could be a few of these in a car, driven to the location where someone has seen an LRAD, and then carried by hand from there." Rife and Liberti designed their shield to reflect audible sound waves that are condensed and carried via ultrasonic frequencies, and have tested it against a smaller and less powerful version of the LRAD that they built in their studio. It's made from a pine batten structure filled with recycled denim insulation, and covered by a half inch of clear acrylic on both sides, enabling the user to see ahead through a small window. According to a detailed teardown of the LRAD 300X posted by another audio technician, the LRADs produced by Genasys, the company that pioneered the devices, do not use an ultrasonic beam to project sound. However, Rife and Liberti say their design would still be effective against these hyper-directional blasts.

KDE

KDE Plasma 5.19 Released (kde.org) 18

jrepin writes: The KDE community has released Plasma 5.19, the popular free and open-source desktop environment. "In this release, we have prioritized making Plasma more consistent, correcting and unifying designs of widgets and desktop elements; worked on giving you more control over your desktop by adding configuration options to the System Settings; and improved usability, making Plasma and its components easier to use and an overall more pleasurable experience," reads the announcement. For a complete list of what's new, you can visit the Plasma 5.19 changelog.
Communications

FCC Awarding Up To $16 Billion To Address US Areas Lacking Broadband Service (reuters.com) 68

The U.S. Federal Communications Commission voted on Tuesday to adopt auction procedures to provide up to $16 billion to areas that lack broadband service, including nearly 6 million unserved rural homes and businesses. From a report: The FCC voted to commence the auction on Oct. 29. Auction applicants will be required to offer voice and broadband services in unserved locations in exchange for receiving monthly payments over 10 years. The three FCC Republican commissioners approved the proposal, while the two Democrats dissented in part. FCC Chairman Ajit Pai, a Republican, said Americans without access to high-speed internet "deserve access as soon as possible. They cannot afford to wait ... while we work to develop new, more granular broadband coverage maps" that will be used to award a subsequent $4 billion.
Communications

FCC Proposes Record $225 Million Fine For Massive Robocall Campaign (reuters.com) 64

The Federal Communications Commission (FCC) on Tuesday voted unanimously to propose a record-setting $225 million fine against Texas-based health insurance telemarketers for allegedly making approximately 1 billion illegally spoofed robocalls. From a report: The order names two individuals using business names including Rising Eagle and JSquared Telecom. The FCC said robocalls falsely claimed to offer health insurance plans from major health insurance companies such as Aetna, Blue Cross Blue Shield, Cigna, and UnitedHealth Group.
United States

Senate Faults Oversight of Chinese Telecom Companies in US (nytimes.com) 13

Senate investigators said Tuesday that government officials had "exercised minimal oversight" of the risks posed by three Chinese telecom companies that operate on American communications networks. From a report: Federal agencies failed to properly follow up on some agreements meant to protect national security, did not provide adequate workers to vet the Chinese companies and operated through a "disorganized" process, according to a report from the Senate's Permanent Subcommittee on Investigations. The report looked into a group of officials from the Homeland Security, Justice and Defense Departments, known as Team Telecom, that has historically advised the Federal Communications Commission on the possible national security risks of foreign involvement in American networks. The findings could put pressure on officials at those agencies and embolden politicians from both parties who argue that the United States must move quickly to sever any links between its communications networks and Chinese companies.
Facebook

WhatsApp Was Exposing Users' Phone Numbers in Google Search (engadget.com) 15

WhatsApp claims it fixed an issue that was showing users' phone numbers in Google search results. From a report: The change comes after security researcher Athul Jayaram revealed that phone numbers of WhatsApp users who used the Click to Chat feature were being indexed in search. Click to Chat allows users to create a link with their phone number in plain text. According to Jayaram, because the links don't have a robot.txt file in the server root, they cannot stop Google or other search engine bots from crawling and indexing the links. Jayaram says as many as 300,000 phone numbers may have appeared in Google search results, and they could be found by searching "site:wa.me."
Businesses

Honda Global Operations Halted by Ransomware Attack (techcrunch.com) 8

Dharkfiber shares a report: Honda has confirmed a cyberattack that brought parts of its global operations to a standstill. The company said in a brief statement Tuesday that the attack caused production issues outside of its headquarters in Japan. "Work is being undertaken to minimize the impact and to restore full functionality of production, sales, and development activities," according to the BBC. It follows a tweet from the company, now pinned to the top of its Twitter feed, stating that its customer service and financial services are "unavailable" due to the attack. Honda is one of the largest vehicle manufacturers in the world, employing more than 200,000 staff, with factories in the U.K., North America, and Europe.
Microsoft

250 Microsoft Employees Call on CEO To Cancel Police Contracts and Support Defunding Seattle PD (medium.com) 483

Hundreds of Microsoft employees have signed a letter to the company's top executives asking for Microsoft to take action in the wake of national protests. From a report: The letter, which was obtained by OneZero, requests that Microsoft cancel contracts with the Seattle Police Department (SPD) and other law enforcement agencies, asks the company to formally support the Black Lives Matter (BLM) movement, and calls for the resignation of the Seattle mayor. The email, which eventually included more than 250 employees CC'd in solidarity, was sent in the early hours of Monday, June 8, and was addressed to Microsoft CEO Satya Nadella and executive vice president Kurt DelBene with the subject line, "Our neighborhood has been turned into a warzone." Much of the email focused on the protests and police response in Seattle. "Every one of us in the CC line are either first-hand witnesses or direct victims to the inhumane responses of SPD to peaceful protesting," the letter said, according to the copy obtained by OneZero.
Medicine

Slashback: Forced Social Isolation Causes Neural Craving Similar To Hunger (scientificamerican.com) 105

This is the first story in a new occasional article series we're calling Slashback. We'll be covering a topic that may not be breaking news, but is interesting to us. Today's Slashback story features an article from Scientific American highlighting the profound effect of severe social isolation on the brain. From the report: The feeling of "wanting" something has repeatedly been shown to increase dopamine transmission in the brain reward circuit (see here and here). This circuit consists of the dopamingeric midbrain and the striatum. These areas are particularly active in response to images of food when hungry, to drug-related images for those who are addicted, and people with Internet Gaming Disorder who are deprived of gaming (see here, here, and here). What about social interactions? For social animals, it would make sense that social interactions would be a primary reward. However, so far such research has primarily been conducted on mice. In 2016, Gillian Matthews and colleagues published a paper showing that after 24 hours of social isolation, dopamine neurons in the midbrain were activated when mice sought social interaction. These dopamine neurons showed similar activation patterns to other cravings. It appears that the acute social isolation in these mice led to an aversive "loneliness-like" state that increased motivation for social engagement. Nevertheless, researchers have questioned whether these findings would apply to humans, especially since it's not possible to assess whether a mouse subjectively feels lonely.

Livia Tomova, a postdoctoral fellow in the Saxelab at MIT, was inspired by this earlier research on mice and pitched to Rebecca Saxe the idea of trying to replicate the findings in humans. [...] What did the researchers find? After only ten hours of social isolation-- and even despite people knowing exactly when their deprivation would end-- people reported substantially more social craving, loneliness, discomfort, dislike of isolation, and decreased happiness than they did at baseline. Similarly, the same findings were seen after ten hours of food fasting. Critically, the researchers found similar midbrain activity in response to food cues after fasting and social cues after isolation. The response was variable across participants, and those who reported more social craving after the social isolation period showed a larger brain response to the social stimuli. Interestingly, the variability across participants was also partially explained by the variability in pre-existing chronic levels of loneliness. Participants with higher levels of chronic loneliness at baseline reported less craving for social contact after 10 hours of isolation in response to the social stimuli, and showed a muted response in their midbrain in response to the social cues after social isolation (they also showed reduced midbrain responses to food cues after fasting). This finding is consistent with prior research showing that chronic loneliness is associated with reduced motivation to engage socially with others.

These results are exciting because they are consistent with the results from earlier research on mice and the "social homeostasis" hypothesis developed based on animal models. According to this hypothesis, since social connection is an innate need, animals evolved neural system to regulate "social homeostasis." The current findings suggest that there is a similar mechanism underlying social craving in humans, and that people who are forced to be isolated crave social interactions in a similar way as a hungry person craves food. As the researchers note, these findings are also encouraging for translating mouse models of mental health disorders that affect social motivation, such as autism spectrum disorder, social anxiety disorder, or depression.
While the article makes little to no mention of the coronavirus, it does make one ponder how the mandated period of isolation associated with it will affect us, especially as local governments around the country begin to lift restrictions and reopen.

What happens when a person starved of food is suddenly presented with the ability to eat? They gorge themselves. What about when a person who has been socially isolated for weeks suddenly gets to socialize? Perhaps they'll jump on the chance to surround themselves with others. We're already starting to see more people booking local holidays...
Privacy

Apple Should Acquire DuckDuckGo To Put Pressure On Google Search, Analyst Argues (9to5mac.com) 94

According to Bernstein analyst Toni Sacconaghi, Apple should acquire privacy-focused search engine DuckDuckGo to put pressure on Google Search and tap into lucrative advertising revenue. 9to5Mac reports: According to Sacconaghi, Apple should acquire DuckDuckGo for around $1 billion as a way to put more pressure on Google and capture the advertising revenue that comes from the search industry. As reported by Street Insider, acquiring DuckDuckGo could serve as a 'stalking horse' to pressure Google: "Google is clearly the dominant force in search today. However, we suspect the company's fear of 'rocking the boat' -- which could compromise $15B in profits it captures today from iOS -- may ultimately limit its freedom of action with Apple. Conversely, Apple may be in a stronger position than at first glance, given it controls the keys to the kingdom on who can monetize iOS search. However, it remains uncomfortably dependent on Bing to act as a counter weight to Google -- hence our suggestion that Apple acquire its own search engine. Finally, Microsoft Bing may (counterintuitively) have the most 'option value' vis-a-vis the status quo -- although it remains to be seen how aggressively it will pursue this opportunity." What do you think of Sacconaghi's suggestion? Do you think Apple should cut ties with Google and acquire DuckDuckGo?
Privacy

Senator Fears Clearview AI Facial Recognition Could Be Used On Protesters (cnet.com) 74

Sen. Edward Markey has raised concerns that police and law enforcement agencies have access to controversial facial recognition app Clearview AI in cities where people are protesting the killing of George Floyd, an unarmed black man who died two weeks ago while in the custody of Minneapolis police. CNET reports: Markey, a Democratic senator from Massachusetts and a member of the Commerce, Science, and Transportation Committee, said Tuesday the technology could be used to identify and arrest protestors. "As demonstrators across the country exercise their First Amendment rights by protesting racial injustice, it is important that law enforcement does not use technological tools to stifle free speech or endanger the public," Markey said in a letter to Clearview AI CEO and co-founder Hoan Ton-That. The threat of surveillance could also deter people from "speaking out against injustice for fear of being permanently included in law enforcement databases," he said.

Markey, who has previously hammered Clearview AI over its sales to foreign governments, use by domestic law enforcement and use in the COVID-19 pandemic, is now asking the company for a list of law enforcement agencies that have signed new contracts since May 25, 2020. It's also being asked if search traffic on its database has increased during the past two weeks; whether it considers a law enforcement agency's "history of unlawful or discriminatory policing practices" before selling the technology to them; what process it takes to give away free trials; and whether it will prohibit its technology from being used to identify peaceful protestors.
Ton-That said he will respond to the letter from Markey. "Clearview AI's technology is intended only for after-the-crime investigations, and not as a surveillance tool relating to protests or under any other circumstances," he said in an emailed statement.

Slashdot Top Deals