Three U.S. senators today urged Comcast to open all of its Wi-Fi hotspots to children who lack Internet access at home during the pandemic. Ars Technica reports: A letter (PDF) from Sens. Ron Wyden (D-Ore.), Kamala Harris (D-Calif.), and Cory Booker (D-N.J.) says that Comcast recently refused a request to do so because it would cause congestion for subscribers. But the senators argue that "Comcast's excuse simply does not add up." Comcast has been praised by advocates for its pandemic response, which includes two free months of home-Internet service for new low-income subscribers, temporary suspension of its data cap, and making many of its hotspots free to the general public. But while Comcast opened up 1.5 million hotspots located at businesses and other public areas, there's another category of Comcast Wi-Fi hotspots that still require a Comcast login and subscription. Those are the hotspots that are enabled by default on Xfinity routers used by home-Internet subscribers.

Since 2013, Xfinity gateways have broadcasted a separate network that other Comcast subscribers can log in to with a Comcast username and password. Unless you've disabled the functionality, anyone within range of your Comcast router can get Internet access if they have a Comcast subscription or have paid for a temporary Wi-Fi pass. Wyden, Harris, and Booker argue that Comcast should open these hotspots to children without Internet access during the pandemic so that kids can get free broadband at home instead of having to go to a parking lot or other public places. In the letter, the senators ask Comcast to answer a list of questions by May 22. They also want the company to provide specific details on how opening up the hotspots would affect network performance.

"Please identify the specific performance issues that you anticipate would impact Comcast subscribers and their ability to get the level of service for which they pay if Comcast removed the paywall on its residential public Wi-Fi networks," the senators wrote. "For each issue you identify, please explain why the use today of a subscriber's public network by someone who has purchased an access pass from Comcast does not cause the same problem."

An anonymous reader quotes a report from Bloomberg: The messages began arriving in World Health Organization employees' inboxes in early April, seemingly innocuous emails about the coronavirus from news organizations and researchers. But a close examination revealed that they contained malicious links, and some security experts have traced the emails to a hacking group in Iran believed to be sponsored by the government. The hacking effort, which began on April 3, was an attempt to steal passwords and possibly install malware on WHO computers, according to three people familiar with the matter, who requested anonymity because they aren't authorized to talk to the news media. The incident was one of several suspected state-sponsored hacks targeting WHO officials in recent weeks, the people said.

Two of the messages sent to the WHO, which were reviewed by Bloomberg News, were designed to look like coronavirus newsletters from the British Broadcasting Corporation. A third message was tailored to look like an interview request from the American Foreign Policy Council, a conservative think tank based in Washington. It encouraged recipients to click on what looked to be a shortened Google link, which diverted to a malicious domain. Ohad Zaidenberg, lead cyber intelligence researcher at Clearsky Cyber Security, reviewed the messages for Bloomberg News, and said he believed they were sent by a group of state-sponsored Iranian hackers known as "Charming Kitten," which has been active since 2014 and previously targeted Iranian dissidents, academics, journalists and human rights activists. Flavio Aggio, the WHO's chief information security officer, confirmed the "very clever attacks" but said they'd so far been unsuccessful. "We are dealing with an information war and a cyberwar at the same time," he added.

Inkscape, the free and open-source vector graphics editor, has released version 1.0 for Linux, Windows, and macOS. It comes after three years in development and over 16 years after Inkscape's initial release. BetaNews reports: "Built with the power of a team of volunteers, this open source vector editor represents the work of many hearts and hands from around the world, ensuring that Inkscape remains available free for everyone to download and enjoy. In fact, translations for over 20 languages were updated for version 1.0, making the software more accessible to people from all over the world. A major milestone was achieved in enabling Inkscape to use a more recent version of the software used to build the editor's user interface (namely GTK+3). Users with HiDPI (high resolution) screens can thank teamwork that took place during the 2018 Boston Hackfest for setting the updated-GTK wheels in motion," explains the developers.

The devs further explain, "The extensions system has undergone some fundamental changes in version 1.0. Over the years, Inkscape users have become used to working with third-party extensions, such as various ones used for laser cutting and exporting to file formats which are not a native part of Inkscape. While outreach to extension developers was undertaken as Inkscape migrates towards Python 3 and a more logical and fully tested extensions API (now hosted in a separate repository), not all third-party extensions have been brought forward to be compatible yet. This will mean that 1.0 may not allow some users to continue with their normal extensions workflow." The blog post, official release notes, and download page are available at their respective links.

The MPA, MPA-Canada, and Amazon have filed a request with Github requesting that a Kodi add-on developer's account be deleted from the platform. Citing a copyright case and a permanent injunction handed down by Canada's Federal Court, the content companies claim that the account is still being used to infringe their rights. Github has left the account intact, however. TorrentFreak reports: In February 2018, a developer known online as 'Blamo' (aka 'Mr. Blamo') revealed that he, in common with several of his counterparts, had been threatened by content companies. From there the trail went cold but according to a complaint filed against Github this week, legal action in Canada followed. On September 7, 2018, a dozen companies including the studios of the MPA/MPA-Canada plus Amazon and Netflix launched a copyright infringement lawsuit at Canada's Federal Court against an individual "doing business" as Mr. Blamo.

"In the context of that action, our clients alleged that [Blamo] notably developed, hosted, promoted and distributed infringing add-ons for the Kodi media center, which provided unauthorized access to motion pictures and television content for which the copyright is owned by our clients," the MPA writes. According to Federal Court records, Blamo did not mount any kind of defense so as a result, the matter was decided in his absence. On January 15, 2019, the Federal Court handed down a final judgment, including a declaration of infringement and a permanent injunction. "The permanent injunction enjoins and restrains [Blamo] from, inter alia, hosting, distributing or promoting infringing Kodi add-ons and their repositories, including notably the 'Blamo' repository and the "Chocolate Salty Balls' infringing add-ons," the MPA adds.

The problem here is that, according to the MPA and associated companies, Blamo has a Github account where it is claimed he continues to "host and distribute infringing Kodi add-ons and their repository, including notably the Chocolate Salty Balls infringing add-on and the Blamo repository." This, the MPA says, amounts to contempt of court. What's particularly interesting here, however, is that the MPA isn't asking for the specified URLs to be deleted. Instead, it asks for Blamo's entire Github account to be deactivated instead.

Google has added a very useful feature to Google Lens, its multipurpose object recognition tool. From a report: You can now copy and paste handwritten notes from your phone to your computer with Lens, though it only works if your handwriting is neat enough. In order to use the new feature, you need to have the latest version of Google Chrome as well as the standalone Google Lens app on Android or the Google app on iOS (where Lens can be accessed through a button next to the search bar). You'll also need to be logged in to the same Google account on both devices. That done, simply point your camera at any handwritten text, highlight it on-screen, and select copy. You can then go to any document in Google Docs, hit Edit, and then Paste to paste the text. And voila -- or, viola, depending on your handwriting.

New submitter Bradmont shares a report: Sidewalk Labs, a Google-affiliated company, is abandoning its plan to build a high-tech neighbourhood on Toronto's waterfront, citing what it calls unprecedented economic uncertainty. The project, dubbed Quayside, still didn't have all of the government approvals it needed to go ahead. Many had raised concerns about the privacy implications of the project and how much of the city's developing waterfront Sidewalk Labs wanted to control. The so-called "smart city" was set to feature a range of cutting edge technology, from residential towers made of timber to the use of autonomous cars and heated sidewalks. "As unprecedented economic uncertainty has set in around the world and in the Toronto real estate market, it has become too difficult to make the 12-acre project financially viable without sacrificing core parts of the plan we had developed," company CEO Dan Doctoroff said in a statement.

Toronto Mayor John Tory was quick to issue a statement saying he regrets the company's decision, but anticipates others will step in to develop the area. "Toronto's economy will come back strong after COVID-19 and we will continue to be a magnet for smart people and smart companies," he said in an email. Tory also said he plans to push Waterfront Toronto and both the provincial and federal governments to make sure any new development in the area will create new jobs and a "carbon-neutral neighbourhood" with affordable housing units and "better transportation and sustainability features."

Google Authenticator, the company's code-based authentication app, has received its first update in three years, updating the app's interface for larger screens with more modern aspect ratios and delivering one of the platform's most-needed features. From a report: The Android version was last updated on August 22nd, 2017, while the iOS one was updated around a year ago to adjust it for iPhone X screens. Now, for the first time, Authenticator users will be able to easily transfer their account from one device to another without needing to manually transfer each code or disable and reenable two-factor authentication (2FA) on each account. The update introduces this feature through an import / export tool that lets you choose which accounts to include and transfer using a single QR code scan. It's a feature that competitor Authy has provided for quite some time, so it's refreshing to see it come to Authenticator, even if it's years late.

An anonymous reader quotes a report from AppleInsider: Apple has been hit with a class-action lawsuit claiming that the company concealed the so-called "stage lighting" issue experienced by some 2016 MacBook Pro owners. Dubbed "stage lighting" due to abnormal backlighting patterns emanating from the bottom of an impacted MacBook Pro's display, the problem was tied to stress or tearing on the laptop's cable when the lid was opened and closed repeatedly. Apple eventually launched a repair program for the issue in 2019 and quietly fixed the underlying culprit in the next generation of MacBook.

On Wednesday, Los Angeles resident Mahan Taleshpour lodged a complaint in the U.S. District Court of the Northern District of California alleging that Apple was aware of the defect in its product and failed to disclose the issue to consumers. The plaintiff claims that his 2016 15-inch MacBook Pro experienced stage lighting effects in January 2020, but he was left responsible for the full cost of the display repair due to the fact that the repair program only covers 13-inch MacBook Pro models released in 2016. He added that the cost to repair the display was quoted as $850, adding that he's been unable to repair the device since the COVID-19 outbreak. [...] The plaintiff is seeking an official disclosure about the "defective nature" of the display cables, restitutions for MacBook Pro repair costs or economic losses, an expansion of AppleCare and repair program service to 15-inch models, and legal fees.

According to research published in the journal AIP Advances, scientists have created a prototype jet engine that compresses air and ionizes it with microwaves, generating plasma that thrusts it forward. ScienceAlert reports: There's a long way to go between a proof-of-concept prototype and installing an engine in a real plane. But the prototype was able to launch a one-kilogram (2.2-pound) steel ball 24 millimeters (almost one inch) into the air. That's the same thrust, proportional to scale, as a conventional jet engine. "Our results demonstrated that such a jet engine based on microwave air plasma can be a potentially viable alternative to the conventional fossil fuel jet engine," lead researcher and Wuhan University engineer Jau Tang said in a press release.

Volve says it'll start selling LIDAR-equipped cars in 2022, which the Swedish automaker says will be able to drive themselves on highways with no human intervention. The Verge reports: [M]ost LIDAR are ridiculously expensive, with the leading suppliers pricing theirs at around $75,000. But now, Volvo says it has found a LIDAR maker that can produce the sensors cheap enough to justify installing them on its consumer vehicles -- which it says will allow these cars to drive themselves. In 2018, Volvo made a "strategic investment" in a little-known Florida-based LIDAR company called Luminar to use the startup's high-resolution long-range sensor to build self-driving cars.

It's an ambitious plan that carries its own risks and sets Volvo apart from its competitors, many of which are planning to launch self-driving technology as part of fleets of robotaxis rather than production cars for personal ownership. They argue this will help amortize the costs of not just the LIDAR, but also the high-powered computing power needed to enable self-driving cars. But Volvo believes that by limiting the operational domain -- or conditions under which the car can drive autonomously -- to just highways, it is creating vehicle technology that is not only safer, but less costly as well. Volvo says it will roll out its self-driving highway feature, dubbed "Highway Pilot," as part of its next big platform update, the Scalable Product Architecture (SPA2), which will arrive with the next-generation XC90 SUV in 2022. SPA2 will also underpin the automaker's upcoming electric vehicles, the Polestar 3 SUV and the XC40 Recharge.

Walmart confirmed today it's launching a new Walmart Grocery service called "Express," which promises orders in two hours or less for an upcharge of $10 on top of the usual delivery fee. TechCrunch reports: The service has been in pilot testing across 100 Walmart stores in the U.S. since mid-April. Walmart says it plans to expand the service to nearly 1,000 stores in early May and it will be offered in a total of nearly 2,000 stores in the weeks after. Some Walmart customers may have recently received a push notification alerting them to the launch.

To use Express delivery, you first fill your online Walmart Grocery cart with the $30 minimum required for delivery orders or more. The Express service offers more than 160,000 items from across Walmart's grocery, consumables and general merchandise categories. At checkout, you'll see an option beneath the calendar where you pick a delivery date to select the Express service. In many cases, there may not be other standard delivery time slots available for the current day or even several days out, which makes the Express service even more appealing to shoppers who need their orders sooner.

McGruber writes: On Twitter, William Shatner is sending his contempt to the Lethbridge Police department and three of its officers that celebrated May Fourth by drawing their rifles on and then taking down a woman dressed as Stormtrooper, who had been standing in the parking lot of a Star Wars-themed business. According to CTV News, the restaurant was promoting its special May the 4th drive-by and takeaway menus with a dancing stormtrooper.

"In the video, Ashley can be seen dropping the blaster and trying to get on the ground as the officers surround her but being unable to do so due to the rigidity of the costume," reports CBR. "The officers then push her down, remove the helmet, handcuff her and pat down the stormtrooper costume. At the same time as Ashley's boss Brad Whalen, the owner of the Cantina, screamed to the police that Ashley was holding a plastic gun, the author of the video approached the officers to tell them the same thing. The police, however, instructed him to stay back and not interfere."

An investigation has been opened to see if the officers' actions were appropriate.

Facebook trained a new chatbat with 1.5 billion examples of human exchanges from reddit, claiming it's able to demonstrate empathy, knowledge and personality. The BBC reports: The social media giant said 49% of people preferred interactions with the chatbot [named "Blender"], compared with another human. But experts say training the artificial intelligence (AI) using a platform such as Reddit has its drawbacks. Numerous issues arose during longer conversations. Blender would sometimes respond with offensive language, and at other times it would make up facts altogether. Researchers said they hoped further models would address some of these issues.

Facebook also compared Blender's performance with the latest version of Google's own chatbot, Meena. It showed people two sets of conversations, one made with Blender and the other with Meena. Conversations included a wide range of topics including movies, music and veganism. Facebook said that 67% of respondents thought Blender sounded more human than Meena. "We achieved this milestone through a new chatbot recipe that includes improved decoding techniques, novel blending of skills, and a model with 9.4 billion parameters, which is 3.6x more than the largest existing system. This is the first chatbot to blend a diverse set of conversational skills together in one system. Building a truly intelligent dialogue agent that can chat like a human remains one of the largest open challenges in AI today."

Ammalgam shares a report from Redmond Pie: Microsoft has officially announced the Surface Book 3. Not much has changed for the device in terms of external design, but internal circuitry is where it's at. This newest addition to the Surface family was formally unveiled alongside the Surface Go 2 today. And the detachable PC finally got the long overdue refresh. Microsoft decided to go with the latest Intel 10th generation CPUs, codenamed Ice Lake. There was talk that the company might opt for the Comet Lake processors. Both are 10th generation chips, but Ice Lake is made on a 10nm process, while Comet Lake is 14nm. [...] As for the CPU options, we have the Core i5-1035G7 and Core i7-1065G7 available. The Core i5 models don't offer dedicated graphics, while the 15-inch variant of the Surface Book 3 only comes in the Core i7 flavor. GPU got a real look, too. The 13.5-inch Surface Book 3 gets you the 4GB Max-Q variant of the NVIDIA GeForce GTX 1650, while the 15-inch one comes with a GTX 1660 Ti Max-Q with 6GB.

On the display side, we have a 3000 x 2000 screen on the 13.5-inch model, while the 15-inch one offers a resolution of 3240 x 2160. Microsoft also claims that the Surface Book 3 has the best battery life of any device it has made up until now. It's rated at 17.5 hours on the 15-inch model and 15.5 hours on the 13.5-inch variant. Some neat improvements when it comes to port selection, with both the USB Type-A and Type-C ports now being USB 3.1 Gen 2, meaning you get 10Gbps instead of 5Gbps. There is also a Surface Connect port on both the base and the tablet, to go with the 3.5mm audio jack in the tablet. All these enhancements mean that the starting price of the Surface Book 3 is a bit higher at $1,599. It will be available on May 21.

It might soon be much easier to buy a smartphone that can charge small devices like earbuds or smartwatches. From a report: The NFC Forum, responsible for near-field communications tech, has unveiled the Wireless Charging Specification (WLC). That will allow devices like chargers or smartphones, equipped with a single antenna, to transfer power to compatible devices at up to one watt, the organization said. At the same time, NFC devices equipped with the tech would also be able to communicate with each other. While it doesn't seem like a lot, one watt is enough to charge up a smartwatch or wireless earbuds relatively quickly. And since most smartphones come with NFC, it would be easier for manufacturers to implement this type of reverse charging.

"NFC wireless charging is truly transformative because it changes the way we design and interact with small, battery-powered devices as the elimination of plugs and cords enables the creation of smaller, hermetically-sealed devices," said NFC Forum chair Koichi Tagawa. The standard could work with other NFC-equipped devices besides smartphones, including chargers, PCs, tablets and even gaming controllers -- the Wii U gamepad has an NFC chip, for instance.

In one of the most complex and innovative hacking campaigns detected to date, a hacker group created a fake icons hosting website in order to disguise malicious code meant to steal payment card data from hacked websites. From a report: The operation is what security researchers refer to these days as a web skimming, e-skimming, or a Magecart attack. Hackers breach websites and then hide malicious code on its pages, code that records and steals payment card details as they're entered in checkout forms. Web skimming attacks have been going on for almost four years, and as security firms are getting better at detecting them, attackers are also getting craftier. In a report published today, US-based cybersecurity firm Malwarebytes said it detected one such group taking its operations to a whole new level of sophistication with a new trick.

Facebook has a new connectivity app called Discover to help those who can't afford to get online access information on the web. From a report: The service, available through mobile web and Android app, allows users to visit any website in text format (no video, images, audio and other elements that eat up large amounts of data) and consume a few megabytes of internet data. For Discover, which is part of the company's Free Basics initiative, Facebook is working with mobile operators in Bitel, Claro, Entel, and Movistar. Discover is currently available in Peru, where it is in the initial testing phase. In Peru, Discover is offering 10MB of free data to users each day. A Facebook spokesperson told TechCrunch that the partner mobile operator determines the daily data allowance, and it anticipates operators in other countries where Discover would be tested to offer up to 20MB each day.

In an SEC filing dating back to last week, Uber disclosed plans to layoff 3,700 employees. The figure amounts to around 14% percent of the ride hailing giant's total workforce. From a report: In the document, the company states that the job loss is part of a planned reduction in operating expenses, "in response to the economic challenges and uncertainty resulting from the COVID-19 pandemic and its impact on the company's business." While Uber hasn't suspended operations altogether amid widespread shutdown, the company has no doubt taken a massive hit to its bottom line, as state governments have issued stay at home orders for non-essential workers. In a letter to staff, CEO Dara Khosrowshahi noted that the cuts will come from from community operations and recruiting. Uber will also be closing around 40 percent of its Greenlight locations -- used for in-person driver assistance.

CAM4, a popular adult platform that advertises "free live sex cams," misconfigured an ElasticSearch production database so that it was easy to find and view heaps of personally identifiable information, as well as corporate details like fraud and spam detection logs. According to Wired, the database exposed 7 terabytes of names, sexual orientations, payment logs, and email and chat transcripts -- 10.88 billions records in all. From the report: First of all, very important distinction here: There's no evidence that CAM4 was hacked, or that the database was accessed by malicious actors. That doesn't mean it wasn't, but this is not an Ashley Madison-style meltdown. It's the difference between leaving the bank vault door wide open (bad) and robbers actually stealing the money (much worse). [...] The list of data that CAM4 leaked is alarmingly comprehensive. The production logs Safety Detectives found date back to March 16 of this year; in addition to the categories of information mentioned above, they also included country of origin, sign-up dates, device information, language preferences, user names, hashed passwords, and email correspondence between users and the company.

Out of the 10.88 billion records the researchers found, 11 million contained email addresses, while another 26,392,701 had password hashes for both CAM4 users and website systems. A few hundred of the entries included full names, credit card types, and payment amounts. Who's Affected? It's hard to say exactly, but the Safety Detectives analysis suggests that roughly 6.6 million US users of CAM4 were part of the leak, along with 5.4 million in Brazil, 4.9 million in Italy, and 4.2 million in France. It's unclear to what extent the leak impacted both performers and customers. The report says CAM4's parent company, Granity Entertainment, took the server offline within a half hour of being contacted by the researchers.

In its latest effort to deal with rampant harassment on its platform, Twitter will look into giving users a second chance before they tweet. From a report: In a new feature the company is testing, users who use "harmful" language will see a prompt suggesting that they self-edit before posting a reply. The framing here is a bit disingenuous -- harassment on Twitter certainly doesn't just happen in the "heat of the moment" by otherwise well-meaning individuals -- but anything that can reduce toxicity on the platform is probably better than what we've got now.