Thousands of personal Zoom videos have been left viewable on the open Web, highlighting the privacy risks to millions of Americans as they shift many of their personal interactions to video calls in an age of social distancing. From a report: Many of the videos appear to have been recorded through Zoom's software and saved onto separate online storage space without a password. But because Zoom names every video recording in an identical way, a simple online search can reveal a long stream of videos that anyone can download and watch. Zoom videos are not recorded by default, though call hosts can choose to save them to Zoom servers or their own computers. There's no indication that live-streamed videos or videos saved onto Zoom's servers are publicly visible. But many participants in Zoom calls may be surprised to find their faces, voices and personal information exposed because a call host can record a large group call without participants' consent.

An anonymous reader shares a column: Remember that story about the Polish dentist who pulled out all of her ex-boyfriend's teeth in an act of revenge? It was complete and utter bullshit. 100% fabricated. No one knows who wrote it. Nevertheless, it was picked up by Fox News, the Los Angeles Times and many other publishers. That was eight years ago, yet when I search now for "dentist pulled ex boyfriends teeth," I get a featured snippet that quotes ABC News' original, uncorrected story. Who invented the fidget spinner? Ask Google Assistant and it will tell you that Catherine Hettinger did: a conclusion based on poorly-reported stories from The Guardian, The New York Times and other major news outlets. Bloomberg's Joshua Brustein clearly demonstrated that Ms. Hettinger did not invent the low friction toy. Nevertheless, ask Google Assistant "who really invented the fidget spinner?" and you'll get the same answer: Catherine Hettinger.

In 1998, the velocity of information was slow and the cost of publishing it was high (even on the web). Google leveraged those realities to make the best information retrieval system in the world. Today, information is free, plentiful and fast moving; somewhat by design, Google has become a card catalog that is constantly being reordered by an angry, misinformed mob. The web was supposed to forcefully challenge our opinions and push back, like a personal trainer who doesn't care how tired you say you are. Instead, Google has become like the pampering robots in WALL-E, giving us what we want at the expense of what we need. But, it's not our bodies that are turning into mush: It's our minds.

Meetings on Zoom, the increasingly popular video conferencing service, are encrypted using an algorithm with serious, well-known weaknesses, and sometimes using keys issued by servers in China, even when meeting participants are all in North America, according to researchers at the University of Toronto. From a report: The researchers also found that Zoom protects video and audio content using a home-grown encryption scheme, that there is a vulnerability in Zoom's "waiting room" feature, and that Zoom appears to have at least 700 employees in China spread across three subsidiaries. They conclude, in a report for the university's Citizen Lab -- widely followed in information security circles -- that Zoom's service is "not suited for secrets" and that it may be legally obligated to disclose encryption keys to Chinese authorities and "responsive to pressure" from them.

For the past two weeks, a hacker has been breaking into Elasticsearch servers that have been left open on the internet without a password and attempting to wipe their content, while also leaving the name of a cyber-security firm behind, trying to divert blame. From a report: According to security researcher John Wethington, one of the people who saw this campaign unfolding and who aided ZDNet in this report, the first intrusions began around March 24. The attacks appear to be carried with the help of an automated script that scans the internet for ElasticSearch systems left unprotected, connects to the databases, attempts to wipe their content, and then creates a new empty index called nightlionsecurity.com. The attacking script doesn't appear to work in all instances, though, as the nightlionsecurity.com index is also present in databases where the content has been left intact.

Facebook representatives approached controversial surveillance vendor NSO Group to try and buy a tool that could help Facebook better monitor a subset of its users, according to an extraordinary court filing from NSO in an ongoing lawsuit. From a report: Facebook is currently suing NSO for how the hacking firm leveraged a vulnerability in WhatsApp to help governments hack users. NSO sells a product called Pegasus, which allows operators to remotely infect cell phones and lift data from them. According to a declaration from NSO CEO Shalev Hulio, two Facebook representatives approached NSO in October 2017 and asked to purchase the right to use certain capabilities of Pegasus. At the time, Facebook was in the early stages of deploying a VPN product called Onavo Protect, which, unbeknownst to some users, analyzed the web traffic of users who downloaded it to see what other apps they were using. According to the court documents, it seems the Facebook representatives were not interested in buying parts of Pegasus as a hacking tool to remotely break into phones, but more as a way to more effectively monitor phones of users who had already installed Onavo.

Google is using the location data it collects from billions of smartphones to show how people's movements have changed as governments around the world lock down cities and issue shelter in place orders to slow down the spread of the coronavirus. From a report: Reports generated using this data, which is normally used to show how busy a certain location is on Google Maps, and which Google says does not identify individual people, are freely available on a brand new website called COVID-19 Community Mobility Reports. "We have heard from public health officials that this same type of aggregated, anonymized data could be helpful as they make critical decisions to combat COVID-19," wrote Google senior vice president Jen Fitzpatrick and Karen DeSalvo, chief health officer for Google Health, in a blog post published Friday. The data is currently available for 131 countries, and in many locations including the US, you can also access data for individual counties.

An anonymous reader quotes a report from The Guardian: Writing in the journal Nature Neuroscience, [researchers from the University of California, San Francisco] reveal how they developed their system by recruiting four participants who had electrode arrays implanted in their brain to monitor epileptic seizures. These participants were asked to read aloud from 50 set sentences multiple times, including "Tina Turner is a pop singer," and "Those thieves stole 30 jewels." The team tracked their neural activity while they were speaking. This data was then fed into a machine-learning algorithm, a type of artificial intelligence system that converted the brain activity data for each spoken sentence into a string of numbers.

To make sure the numbers related only to aspects of speech, the system compared sounds predicted from small chunks of the brain activity data with actual recorded audio. The string of numbers was then fed into a second part of the system which converted it into a sequence of words. At first the system spat out nonsense sentences. But as the system compared each sequence of words with the sentences that were actually read aloud it improved, learning how the string of numbers related to words, and which words tend to follow each other. The team then tested the system, generating written text just from brain activity during speech. The system was not perfect, but for one participant just 3% of each sentence on average needed correcting -- "higher than the word error rate of 5% for professional human transcribers," the report says. "But, the team stress, unlike the latter, the algorithm only handles a small number of sentences."

"The team also found that training the algorithm on one participant's data meant less training data was needed from the final user -- something that could make training less onerous for patients."

Nikon USA is offering 10 classes from the its online school for free during the month of April. Engadget reports: The courses range in length from 15 minutes to well over an hour, and all are taught by pro photographers and often Nikon ambassadors. Each class runs between $15 and $50, so Nikon is offering $250 worth of photography training for free. The courses run a wide gamut from landscape photography, macro photography, fundamentals by Reed Hoffman and even "The Art of Making Music Videos" with Chris Hershman. Several others are camera-specific, like a Z50 video course from Kitty Peters and a hands-on course with Nikon's SB-5000 speedlight. You do have to give Nikon your name and address, but the value of the courses is easily worth that -- to check them out, go here.

"Sixty years ago on this date, April 1, a Thor-Able rocket launched a small satellite weighing 122.5kg into an orbit about 650km above the Earth's surface," writes Ars Technica's Eric Berger. "Effectively, this launch from Florida's Cape Canaveral Air Force Station marked the beginning of the era of modern weather forecasting." From the report: Designed by the Radio Corporation of America and put into space by NASA, the Television InfraRed Observation Satellite, or TIROS-1, was the nation's first weather satellite. During its 78 days of operation, TIROS-1 successfully monitored Earth's cloud cover and weather patterns from space. This was a potent moment for the field of meteorology. For the first time, scientists were able to combine space-based observations with physical models of the atmosphere that were just beginning to be run on supercomputers.

After World War II, mathematician John von Neumann led development of a computer to crunch through a set of equations put together by Jule Charney and other scientists. By the mid-1950s, Charney's group began to produce numerical forecasts on a regular basis. All of a sudden, meteorologists had two incredibly useful tools at their hands. Of course, it would take time for more powerful computers to produce higher-resolution forecasts, and the sensor technology launched on satellites would require decades to improve to the point where spacecraft could collect data for temperature, moisture, and other environmental variables at various levels in the atmosphere. But by around 1980, the tools of satellite observations and numerical models that could process that data started to mature. Scientists had global satellite coverage, 24 hours a day, and forecasts began to improve dramatically. Today, the fifth day of a five-day forecast on the app on your phone is about as accurate as the next day's forecast was in 1980.

Social networking giant Twitter today disclosed a bug on its platform that impacted users who accessed their platform using Firefox browsers. From a report: According to Twitter, its platform stored private files inside the Firefox browser's cache -- a folder where websites store information and files temporarily. Twitter said that once users left their platform or logged off, the files would remain in the browser cache, allowing anyone to retrieve it. The company is now warning users who share workstations or used a public computer that some of their private files may still be present in the Firefox cache. Malware present on a system could also scrape and steal this data, if ever configured to do so.

Included in New York's tentative budget agreement reached on April 1st is a provision that would legalize throttle-based bikes and scooters. The Verge reports: The budget language almost exactly mirrors a bill that passed the New York State Legislature last year but was inexplicably vetoed at the last minute by Gov. Andrew Cuomo. It changes state law to legalize e-bikes and scooters but would give localities the ability to decide for themselves how to regulate the vehicles. Throttle-based e-bikes favored by delivery workers would be legal, and dockless scooter services like Bird and Lime would need to be permitted by municipalities before launching. Scooters would stay illegal in Manhattan, though the city could eventually overrule that provision.

The budget language would create three classes of e-bikes: Class 1 is pedal-assisted with no throttle; Class 2 is throttle-assisted with a maximum speed of 20 mph; and Class 3 is throttle-powered with a maximum speed of 25 mph. E-scooters would be capped at 15 mph, and riders under 18 years of age would be required to wear a helmet. Helmets would also be required for riders of Class 3 e-bikes. (Food delivery workers, who favor these bikes, are already required by law to wear helmets.) But the budget is undoubtedly a huge win for delivery workers and immigrant rights groups that have been fighting for nearly a decade to overturn the rules.

An anonymous reader quotes a report from Gizmodo: Devices with Wi-Fi 6 started rolling out at the end of 2019, but now, a new vote proposed by the FCC could open up the 6Ghz band to unlicensed wifi and add a massive speed boost to wireless gadgets. Backed by Chairman Pai, the FCC vote is scheduled to take place on April 23rd, and if passed would add 1200MHz of available bandwidth to the usable wifi spectrum which the FCC says would "effectively increase the amount of spectrum available for Wi-Fi almost by a factor of five."

Not only would this improve things like latency and download and uploads speeds, because the 6Ghz band was previously mostly used to support things like wireless backhaul, microwave services, and a limited number of public safety services, new 6GHz wifi devices wouldn't really have to compete with other gadgets for spectrum, unlike the existing 2.4Ghz wifi band which often suffers from interference caused by household appliances. The move is also seeing widespread industry support from a number of groups including the Wi-Fi Alliance, which earlier this year announced the creation of the Wi-Fi 6E which incorporates the 6Ghz band into current wireless standards. A number of tech companies also approve of the proposal, including Qualcomm, Intel, Facebook, Cisco and Apple.

The U.S. Federal Aviation Administration has ordered Boeing 787 operators to switch their aircraft off and on every 51 days to prevent what it called "several potentially catastrophic failure scenarios" -- including the crashing of onboard network switches. The Register reports: The airworthiness directive, due to be enforced from later this month, orders airlines to power-cycle their B787s before the aircraft reaches the specified days of continuous power-on operation. The power cycling is needed to prevent stale data from populating the aircraft's systems, a problem that has occurred on different 787 systems in the past. According to the directive itself, if the aircraft is powered on for more than 51 days this can lead to "display of misleading data" to the pilots, with that data including airspeed, attitude, altitude and engine operating indications. On top of all that, the stall warning horn and overspeed horn also stop working.

This alarming-sounding situation comes about because, for reasons the directive did not go into, the 787's common core system (CCS) -- a Wind River VxWorks realtime OS product, at heart -- stops filtering out stale data from key flight control displays. That stale data-monitoring function going down in turn "could lead to undetected or unannunciated loss of common data network (CDN) message age validation, combined with a CDN switch failure." Solving the problem is simple: power the aircraft down completely before reaching 51 days. It is usual for commercial airliners to spend weeks or more continuously powered on as crews change at airports, or ground power is plugged in overnight while cleaners and maintainers do their thing.

An anonymous reader quotes a report from NPR: City authorities in Moscow are rolling out new digital "social monitoring" tools targeting the public, after what officials say were constant violations of the city's quarantine imposed this week to fight the spread of the new coronavirus. Under restrictions in place since Monday, most of the city's 12 million residents must remain indoors, barring a few exceptions -- like trips to the supermarket or pharmacy, taking out the trash or briefly walking the dog. But starting Thursday, Muscovites will have their movements tracked through a mandatory app required on their smartphones. Don't have one? The city says it will lend out devices.

In addition, Moscow residents will be obligated to register for a government-issued QR code -- a small square matrix bar code containing personal data. What information the codes will hold isn't yet clear. But Russians must present it on their smartphones or carry a printout of their QR profiles to present to police, when requested. (City officials say they're also preparing to educate the public -- and elder Russians, in particular -- on what a QR code actually is.) The new tools will merge with existing street cameras and face recognition software to quickly identify residents who stray from their homes and/or quarantines, say authorities. President Putin also signed a bill into law on Wednesday that introduces criminal penalties for skipping quarantine and infecting others. They include fines and up to seven years in prison.

Everything is so dark, but the internet -- for all its bad and broken parts -- is helping to keep us together in a way that has never happened before, writes Joshua Topolsky in an essay on Input Mag. Two excerpts from the essay: What the hell would we do right now without the internet? How would so many of us work, stay connected, stay informed, stay entertained? For all of its failings and flops, all of its breeches and blunders, the internet has become the digital town square that we always believed it could and should be. At a time when politicians and many corporations have exhibited the worst instincts, we're seeing some of the best of what humanity has to offer -- and we're seeing it because the internet exists.

I was 12 the first time I logged onto whatever was called the internet then. There were no websites to speak of, not really. No ecommerce, no banner ads, no data tracking, no spyware. iPhones hadn't been invented yet; we called apps "programs"; and I had an EGA monitor on my PC (a whole 16 colors of range). But the first time I telnetted into a chatroom about raves, made new friends in Australia, or downloaded files to load into a music tracker, I felt the same elation that I feel now. This force, propelled by people, connected by copper and light, letting us make new connections. Connections we need now more than ever. We're here together, for how long we don't know. But we're not alone. Not anymore.

A community effort to improve the internet's routing security has won the backing of some of the web's biggest names. From a report: Amazon, Google, Facebook, Microsoft, Akamai, and Netflix, among others, have signed up to the Mutually Agreed Norms for Routing Security (MANRS) group, in their roles as content delivery networks (CDNs) and cloud providers (CPs). MANRS's goal is to shore up the internet's lax security when it comes to routing people's connections around Earth. It is, essentially, depending on the circumstances, too easy for miscreants to hijack and redirect internet traffic from legit servers to malicious machines so that web browsing and other online activities can be snooped on or meddled with. This widespread issue is something that has become increasingly important in the past few years as the number and size of connectivity breakdowns and attacks on the global system have grown. Criminals and possibly government spies have realized the potential that exists in snatching people's internet traffic for surveillance, disruption, and theft. The MANRS group pushes four main approaches, two technical and two cultural: filtering, anti-spoofing, and then coordination and validation.

According to The Information, the YouTube app will soon be home to a new "Shorts" format that will counter TikTok. 9to5Google reports: Shorts will be brief videos available in a new feed. On the creation front, these videos can use YouTube's existing catalog of licensed music as a background soundtrack. YouTube reportedly plans to launch Shorts by the end of this year. Today's article describes the YouTube Shorts effort as the "most serious effort yet by a Silicon Valley tech company to combat the rise of TikTok." It speculates that YouTube will be able to leverage its existing stable of creators to generate the new type of content.

By making Shorts available inside the YouTube apps, Google is guaranteeing a built-in audience. This is similar to how YouTube rolled out a Stories format to compete with Snapchat and Instagram. Used by channels to make shorter update-like content, it lives alongside full videos in the Subscriptions tab. Unlike videos, these Stories are limited to a certain subscriber count, with that possibly applying to the initial launch of Shorts.

An anonymous reader quotes a report from CNBC: Google will offer 100,000 free Wi-Fi hotspots and will donate 4,000 Chromebooks to students across the state of California, governor Gavin Newsom said during a news conference Wednesday. The internet access points are supposed to help improve broadband internet in rural households across the state where internet access is either limited or very slow. Students will get access to the free Wi-Fi for a minimum of three months.There are still many parts of the state that do not have access to high-speed internet, however. "This was a substantial enhancement that came just at the right time," Newsom said. "We need more Googles," he added. The latest move comes as Newsom announced that California schools will remain closed for the remainder of the school year with many classes switching to online learning.

Researchers at Tohoku University have developed a new method of adapting X-ray to image soft tissue, "so that its higher resolution can reveal tumors or other problems earlier than other techniques," reports New Atlas. From the report: Elastography is a field of medical imaging that focuses on the stiffness or softness of tissues. Shear waves are sent through the body, and then an imaging technology like ultrasound or MRI is used to watch how they spread. The waves move through stiff tissue faster than they do through soft tissue, and since tumors, lesions and hardened arteries are all stiffer than surrounding tissue, the technique can highlight these signs of disease. X-rays usually work on a different mechanism, but recent research has suggested that they could be applied to elastography too. And if they were, the resulting images would be much higher resolution, able to spot things on the scale of microns instead of millimeters.

And now, X-ray elastography has moved from principle to practice. The Tohoku team has taken the first images using the technique, and shown that it is able to identify the stiffness of different materials. The researchers imaged a polyacrylamide gel, with some samples containing harder particles of zirconium dioxide. Vibrations were then sent through these samples while X-ray images were taken. And sure enough, the X-ray elastography method was able to spot these tiny intruders. After showing that the concept does work, the researchers say that the next steps are to create 3D images, and eventually develop x-ray elastography equipment for medical diagnoses. The research was published in the journal Applied Physics Express.

The popular early internet meme machine YTMND.com is back online after shutting down last May due to declining ad revenue and the site creator's ill health. Motherboard reports: Launched in 2001, YTMND was one of the early internet's first sources of viral content. Users could attach a gif, often animated but not always, to a piece of looping sound. Users could vote on these animations, share, or remix them. Its death was sad, a piece of early internet, gone forever. But over the last year, [the site's creator Max Goldberg] said fans helped him test the new site, find bugs, and pushed him for regular updates.

Goldberg said he rebuilt the site from the ground up, which is why it took the better part of a year. One of the biggest challenges was converting everything away from Flash, which Adobe is finally retiring this year. "That means YTMNDs play more reliably (and work on mobile phones!) and will also be future-compatible," Goldberg said. "The new player was written in a way that makes archiving a YTMND significantly easier, which opens up a lot of possibilities. I've also removed all social media and advertising from the site." He also replaced all the hardware that was running the site.