Network

The 40th Root KSK Ceremony Rescheduled (icann.org) 20

rastos1 writes: The 40th Root Key Signing Key Ceremony, originally scheduled for 12 February 2020 at 2100 UTC in El Segundo, California, is being postponed. "During routine administrative maintenance of our Key Management Facility on 11 February, we identified an equipment malfunction that will prevent us from successfully conducting the ceremony as originally scheduled. The issue disables access to one of the secure safes that contains material for the ceremony," ICANN's Kim Davies wrote.
Power

Developer Finds USB Chargers Have as Much Processing Power as the Apollo 11 Guidance Computers (gizmodo.com) 110

An anonymous reader shares a report: It comes as no surprise that the guidance computers aboard the Apollo 11 spacecraft were impossibly primitive compared to the pocket computers we all carry around 50 years later. But on his website, an Apple developer analyzed the tech specs even further and found that even something as simple as a modern USB charger is packed with more processing power. Forrest Heller, a software developer who formerly worked on Occipital's Structure 3D scanner accessory for mobile devices, but who now works for Apple, broke down the numbers when it comes to the processing power, memory, and storage capacity of Google's 18W Pixel charger, Huawei's 40W SuperCharge, the Anker PowerPort Atom PD 2 charger, and the Apollo 11 guidance computer, also referred to as the AGC. It's not easy to directly compare those modern devices with the 50-year-old AGC, which was custom developed by NASA for controlling and automating the guidance and navigation systems aboard the Apollo 11 spacecraft.

In a time when computers were the size of giant rooms, the AGC was contained in a box just a few feet in length because it was one of the first computers to be made with integrated circuits. Instead of plopping in an off the shelf processor, NASA's engineers designed and built the AGC with somewhere around 5,600 electronic gates that were capable of performing nearly 40,000 simple mathematical calculations every second. While we measure processor speeds in gigahertz these days, the AGC chugged along at 1.024 MHz. By comparison, the Anker PowerPort Atom PD 2 USB-C charger includes a Cypress CYPD4225 processor running at 48 MHz with the twice the RAM of the AGC, and almost twice the storage space for software instructions.

Democrats

Nevada Democrats To Use iPads Loaded With Google Forms To Track Caucus (cnet.com) 145

An anonymous reader quotes a report from CNET: Nevada's Democratic Party said Thursday it plans to use iPads loaded with survey app Google Forms to calculate voting results in next week's caucuses. The system is an effort to avoid a repeat of the Iowa caucus chaos. The app will be loaded onto 2,000 iPads purchased by the party and distributed to precinct chairs, according to a memo signed by party Executive Director Alana Mounce seen by the Associated Press Thursday. Google's app will calculate and submit results electronically, while a second step will rely on submissions also being made by phone. Nevada's caucuses will be held on Feb. 22.
Chrome

500 Chrome Extensions Secretly Uploaded Private Data From Millions of Users (arstechnica.com) 26

More than 500 browser extensions downloaded millions of times from Google's Chrome Web Store surreptitiously uploaded private browsing data to attacker-controlled servers, researchers said on Thursday. Ars Technica reports: The extensions were part of a long-running malvertising and ad-fraud scheme that was discovered by independent researcher Jamila Kaya. She and researchers from Cisco-owned Duo Security eventually identified 71 Chrome Web Store extensions that had more than 1.7 million installations. After the researchers privately reported their findings to Google, the company identified more than 430 additional extensions. Google has since removed all known extensions. "In the case reported here, the Chrome extension creators had specifically made extensions that obfuscated the underlying advertising functionality from users," Kaya and Duo Security Jacob Rickerd wrote in a report. "This was done in order to connect the browser clients to a command and control architecture, exfiltrate private browsing data without the users' knowledge, expose the user to risk of exploit through advertising streams, and attempt to evade the Chrome Web Store's fraud detection mechanisms."

The extensions were mostly presented as tools that provided various promotion- and advertising-as-a service utilities. In fact, they engaged in ad fraud and malvertising by shuffling infected browsers through a maze of sketchy domains. Each plugin first connected to a domain that used the same name as the plugin (e.g.: Mapstrek[.]com or ArcadeYum[.]com) to check for instructions on whether to uninstall themselves. The plugins then redirected browsers to one of a handful of hard-coded control servers to receive additional instructions, locations to upload data, advertisement feed lists, and domains for future redirects. Infected browsers then uploaded user data, updated plugin configurations, and flowed through a stream of site redirections.
The researchers say the campaign dates back to at least January 2019, but it's possible that the operators were active "as early as 2017."
The Courts

Apple Liable For Millions In Unpaid Wages After Court Rules Retail Worker Bag Checks Illegal (appleinsider.com) 117

The California Supreme Court in a decision (PDF) delivered on Thursday found Apple broke state law by not paying retail workers for the time they spent participating in mandatory bag and device searches, leaving the company liable for millions in unpaid wages. AppleInsider reports: In a unanimous ruling, the court holds employees were and are in Apple's control during mandatory exit searches of bags, packages, devices and other items. As such, Apple is required to compensate its employees for time spent on the anti-theft program, which in this case allegedly amounted to up to 20 minutes worth hundreds or thousands of dollars a year.

Chief Justice Tani Cantil-Sakauye notes courts should consider a number of factors when evaluating employer-controlled conduct, including location, degree of employer control, benefit to employees and disciplinary consequences. Applying the logic to the current case, "it is clear that plaintiffs are subject to Apple's control while awaiting, and during, Apple's exit searches. Apple's exit searches are required as a practical matter, occur at the workplace, involve a significant degree of control, are imposed primarily for Apple's benefit, and are enforced through threat of discipline," Cantil-Sakauye writes. Apple's policy demands hourly retail employees submit to a search of personal packages and bags at the end of each shift and when clocking out for meal breaks. The checks are performed off-the-clock, meaning workers do not get paid for the mandatory procedure.

Facebook

Facebook Dating Launch Blocked In Europe After It Fails To Show Privacy Workings (techcrunch.com) 16

An anonymous reader quotes a report from TechCrunch: Facebook has been left red-faced after being forced to call off the launch date of its dating service in Europe because it failed to give its lead EU data regulator enough advanced warning -- including failing to demonstrate it had performed a legally required assessment of privacy risks. Yesterday, Ireland's Independent.ie newspaper reported that the Irish Data Protection Commission (DPC) -- using inspection and document seizure powers set out in Section 130 of the country's Data Protection Act -- had sent agents to Facebook's Dublin office seeking documentation that Facebook had failed to provide.

In a statement on its website, the DPC said Facebook first contacted it about the rollout of the dating feature in the EU on February 3. "We were very concerned that this was the first that we'd heard from Facebook Ireland about this new feature, considering that it was their intention to roll it out tomorrow, February 13," the regulator writes. "Our concerns were further compounded by the fact that no information/documentation was provided to us on February 3 in relation to the Data Protection Impact Assessment [DPIA] or the decision-making processes that were undertaken by Facebook Ireland." At the time of its U.S. launch, Facebook said dating would arrive in Europe by early 2020. It just didn't think to keep its lead EU privacy regulator in the loop, despite the DPC having multiple (ongoing) investigations into other Facebook-owned products at this stage.
A Facebook spokesperson said in a statement: "It's really important that we get the launch of Facebook Dating right so we are taking a bit more time to make sure the product is ready for the European market. We worked carefully to create strong privacy safeguards, and complete the data processing impact assessment ahead of the proposed launch in Europe, which we shared with the IDPC when it was requested."

In a second statement, the Facebook spokesperson added: "We're under no legal obligation to notify the IDPC of product launches. However, as a courtesy to the Office of the Data Protection Commission, who is our lead regulator for data protection in Europe, we proactively informed them of this proposed launch two weeks in advance. We had completed the data processing impact assessment well in advance of the European launch, which we shared with the IDPC when they asked for it."
Censorship

YouTube Censors Senate Floor Speech With Whistleblower's Name (thehill.com) 382

SonicSpike shares a report from The Hill: YouTube has removed a video from its platform that shows Sen. Rand Paul (R-Ky.) stating on the Senate floor the name of a person who conservative media have suggested is the whistleblower whose complaint triggered the impeachment inquiry of President Trump. The company, home to millions of hours of video content, said in a statement on Thursday that "videos, comments, and other forms of content that mention the leaked whistleblower's name" violate its community guidelines and will be removed from the site. "We've removed hundreds of videos and over ten thousand comments that contained the name. Video uploaders have the option to edit their videos to exclude the name and reupload," Ivy Choi, a spokesperson, said in the statement, which was first reported by Politico.

The video clip removed by YouTube comes from the Senate impeachment trial, when Paul mentioned a name that has circulated in conservative media as the whistleblower. Paul did so after Supreme Court Chief Justice John Roberts declined to read a question he submitted including that person's name. Paul says he does not know if the name he said on the Senate floor is the whistleblower's or not, but he said it was wrong for his speech to be censored. "It is a chilling and disturbing day in America when giant web companies such as YouTube decide to censure speech," he said in a statement. "Now, even protected speech, such as that of a senator on the Senate floor, can be blocked from getting to the American people. This is dangerous and politically biased. Nowhere in my speech did I accuse anyone of being a whistleblower, nor do I know the whistleblower's identity."
Important to note: Federal whistleblowers are protected from retaliation by the Whistleblower Protection Act (WPA). "This law protects federal employees who disclose illegal or improper government activities," notes Study.com. "Generally, this means the government can't fire, demote, suspend, threaten, harass, or discriminate against a whistleblower."
The Courts

Qualcomm Makes Case To Appeals Court That It Didn't Hurt Competition (cnet.com) 7

Qualcomm is making the case for why it didn't hurt competition in the smartphone chip business. "The company, represented by attorney Thomas Goldstein of the firm Goldstein & Russell, on Thursday appeared before the U.S. Court of Appeals for the Ninth Circuit in downtown San Francisco," reports CNET. "Qualcomm is hoping the appeals court will overturn a ruling by a district court judge that declared it to be a monopoly and ordered it to renegotiate its licensing contracts." From the report: Qualcomm during the hearing didn't dispute that it has a monopoly in 3G and 4G LTE chips. But it maintains that it didn't wield that power to harm competition. "What has gone wrong in the competitive process?" Goldstein said. "The answer is nothing." He noted that Qualcomm's business practices could be an issue of contract violations but not an antitrust issue. The US Federal Trade Commission, meanwhile, tried to make it clear how Qualcomm's "no license, no chip" policy undercut rivals and caused handset makers to shift business to Qualcomm. Brian Fletcher, an attorney who teaches at Stanford University, spoke for the FTC. He said Qualcomm is making it harder for competitors not because its policies have meant lower chip prices but "because it's demanding customers pay Qualcomm even when they decide to buy from rival suppliers."

The hearing is the latest twist in a legal saga that began three years ago when the FTC accused Qualcomm of operating a monopoly and forcing Apple and other customers to work with it exclusively. The FTC also accused the company of charging excessive licensing fees for its technology. As part of the district court's ruling, Qualcomm must submit compliance and monitoring reports for the next seven years and report to the FTC annually. Thursday's hearing marks Qualcomm's attempt to have that ruling overturned. The three appeals court judges likely won't make a decision for three months to over a year as they weigh the evidence.

Google

Google's Area 120 Brings Quick Web Games To Slow Phones (engadget.com) 14

Google is countering Facebook's Instant Games with its own bid to make web games more accessible. Its Area 120 experimental lab is introducing GameSnacks, HTML5-based casual games that are designed to load quickly and play well even on poor connections and basic smartphones. From a report: The combination of a lean initial web page, compressed media and just-in-time loading means you can start playing within just a few seconds, even on a phone with less than a 1Mbps connection (all too common in the world) and just 1GB of RAM. All titles work with both touch as well as a PC's mouse and keyboard, and are designed to run on virtually any platform and device. Like many casual games, they're designed to be playable with a minimum of instructions -- important when they're meant to reach people across many different languages. Some are not-so-subtle riffs on familiar titles like Puzzle Bobble and Tetris, but that's probably not a bad thing for gamers who otherwise couldn't play those games on their phones.
Facebook

Facebook Dating Launch Blocked in Europe After it Fails To Show Privacy Workings (techcrunch.com) 31

Facebook has been left red-faced after being forced to call off the launch date of its dating service in Europe because it failed to give its lead EU data regulator enough advanced warning -- including failing to demonstrate it had performed a legally required assessment of privacy risks. From a report: Late yesterday Ireland's Independent.ie newspaper reported that the Irish Data Protection Commission (DPC) had sent agents to Facebook's Dublin office seeking documentation that Facebook had failed to provide -- using inspection and document seizure powers set out in Section 130 of the country's Data Protection Act. In a statement on its website the DPC said Facebook first contacted it about the rollout of the dating feature in the EU on February 3. "We were very concerned that this was the first that we'd heard from Facebook Ireland about this new feature, considering that it was their intention to roll it out tomorrow, 13 February," the regulator writes. "Our concerns were further compounded by the fact that no information/documentation was provided to us on 3 February in relation to the Data Protection Impact Assessment [DPIA] or the decision-making processes that were undertaken by Facebook Ireland." Facebook announced its plan to get into the dating game all the way back in May 2018, trailing its Tinder-encroaching idea to bake a dating feature for non-friends into its social network at its F8 developer conference.
Desktops (Apple)

Apple's Mac Computers Now Outpace Windows In Malware (vox.com) 97

According to cybersecurity software company Malwarebytes' latest State of Malware report, the amount of malware on Macs is outpacing PCs for the first time ever. Recode reports: Windows machines still dominate the market share and tend to have more security vulnerabilities, which has for years made them the bigger and easier target for hackers. But as Apple's computers have grown in popularity, hackers appear to be focusing more of their attention on the versions of macOS that power them. Malwarebytes said there was a 400 percent increase in threats on Mac devices from 2018 to 2019, and found an average of 11 threats per Mac devices, which about twice the 5.8 average on Windows.

Now, this isn't quite as bad as it may appear. First of all, as Malwarebytes notes, the increase in threats could be attributable to an increase in Mac devices running its software. That makes the per-device statistic a better barometer. In 2018, there were 4.8 threats per Mac device, which means the per-device number has more than doubled. That's not great, but it's not as bad as that 400 percent increase. Also, the report says, the types of threats differ between operating systems. While Windows devices were more prone to "traditional"; malware, the top 10 Mac threats were adware and what are known as "potentially unwanted programs."

Communications

Understanding the Impact of Satellite Constellations On Astronomy (iau.org) 43

jrepin writes: In June 2019, the International Astronomical Union expressed concern about the negative impact that the planned mega-constellations of communication satellites may have on astronomical observations and on the pristine appearance of the night sky when observed from a dark region. Now IAU presents a summary of the current understanding of the impact of these satellite constellations, and considers the consequences of satellite constellations worrisome. They will have a negative impact on the progress of ground-based astronomy, radio, optical and infrared, and will require diverting human and financial resources from basic research to studying and implementing mitigating measures. The IAU notes that currently there are no internationally agreed rules or guidelines on the brightness of orbiting manmade objects.

Given the increasing relevancy of the topic, the IAU "will regularly present its findings at the meetings of the UN Committee for Peaceful Uses of Outer Space (COPUOS), bringing the attention of the world Government representatives to the threats posed by any new space initiative on astronomy and science in general."
AI

AI Shortcuts Speed Up Science Simulations By Billions of Times (sciencemag.org) 74

sciencehabit shares a report from Science Magazine: Modeling immensely complex natural phenomena such as how subatomic particles interact or how atmospheric haze affects climate can take thousands of hours on even the fastest supercomputers. Emulators, algorithms that quickly approximate these detailed simulations, offer a shortcut. Now, work posted online shows how artificial intelligence can produce accurate emulators that can accelerate simulations across all of science by billions of times. The new system automatically creates emulators that work better and faster than those designed and trained by hand. And they could be used to improve the models they mimic and help scientists make the most of their time at experimental facilities.
Social Networks

15-Year-Old Fights the FAA's Anti-Model-Flying NPRM With Social Media 106

NewtonsLaw writes: The FAA has issued an NPRM (Notice of Proposed Rule Making) that would effectively see the end of the traditional hobby of flying RC planes, helicopters and drones. As well as mandating remote ID on store-bought products it would effectively (over time) outlaw scratch-built craft as well. This stands to have a hugely negative impact on those STEM/STEAM programs that have in the past used drones and RC planes as a teaching tool and a way of getting kids into electronics, engineering, and aerospace-related subjects. Although many older folk have tried to rally public support for some pushback on these outrageous proposed new rules, a 15-year-old named Jack Thornton has outclassed everyone with his four-and-a-half-minute YouTube video. Not only does he explain what's going on but he makes a fantastic case for the continuation of the hobby and even uses some of the tech to create the video. I am seriously impressed by what this guy has done!
Crime

Man Who Refused To Decrypt Hard Drives Is Free After Four Years In Jail (arstechnica.com) 149

An anonymous reader quotes a report from Ars Technica: A Philadelphia man has been freed after a federal appeals court ruled that his continued detention was violating federal law. Francis Rawls, a former police officer, had been in jail since 2015, when a federal judge held him in contempt for failing to decrypt two hard drives taken from his home. The government believes they contain child pornography.

After losing that appeal, Rawls raised another challenge: the federal statute that allows judges to hold witnesses in contempt for refusing to testify, passed in 1970, states that "in no event shall such confinement exceed eighteen months." The government argued that this provision didn't apply to Rawls because he was a suspect, not a witness. Also, the rule applies to a "proceeding before or ancillary to any court or grand jury." But because the government hadn't formally charged Rawls with a crime, the government argued, there was no court proceeding under way. Last week, a three-judge panel of the 3rd Circuit rejected this argument in a 2-1 vote. The court's two-judge majority held that Congress had intended for the 18-month limitation to apply broadly to any legal proceeding, not just a formal trial. And while Rawls was a suspect in the case, he was also a witness. The practical result is that, at least in federal court, someone can only be imprisoned for 18 months for refusing to open an encrypted device.
The government says it has other evidence suggesting that Rawls possessed child pornography, "so prosecutors may be able to piece together enough evidence to convict him, even without access to his encrypted hard drives," the report adds. "One of the two judges who formed the 3rd Circuit's majority urged the trial court judge to consider the four years of imprisonment Rawls has already served if he eventually has to sentence Rawls after a child pornography conviction."
Facebook

Facebook Accidentally Blacked Out an Entire Language (theverge.com) 26

On January 16th, Facebook users received an error message when posting in Jinghpaw, a language spoken by Myanmar's ethnic Kachin and written with a Roman alphabet. From a report: "We couldn't post this. Tap for more info," the message said. When clicking, a second appeared: "Your request couldn't be processed. There was a problem with this request. We're working on getting it fixed as soon as we can." A Facebook representative told The Verge that the issue was caused by "a bug in our language infrastructure," and coincided with the launch, the same day, of an updated language identification model supporting ten new languages, including Jinghpaw. The representative said Facebook fixed the issue within hours of receiving reports on January 17th. But while the disabling of Jinghpaw was not an active move of censorship, it alerted many Kachin people that Facebook had the capability to identify their language, an alarming thought for the embattled minority group. That realization has evoked a visceral reaction from the Kachin, and brought forth new calls for the company to be more transparent about its technology and the ways it will be used.
Businesses

Average Tenure of a CISO is Just 26 Months Due To High Stress and Burnout (zdnet.com) 44

Chief Information Security Officers (CISOs, or CSOs) across the industry are reporting high levels of stress. From a report: Many say the heightened stress levels has led to mental and physical health issues, relationship problems, medication and alcohol abuse, and in some cases, an eventual burnout, resulting in an average 26-month tenure before CISOs find new employment. The numbers, reported by Nominet, represent a growing issue that's been commonly acknowledged, but mostly ignored across the information security (infosec) community, but one that is slowly starting to rear its ugly head as once-ignored infosec roles are becoming more prominent inside today's companies. [...] The survey's results paint a gloomy picture about one of today's most in-demand jobs. According to the numbers: 88% of CISOs reported being "moderately or tremendously stressed." 48% of CISOs said work stress has had a detrimental impact on their mental health. 40% of CISOs said that their stress levels had affected their relationships with their partners or children. 32% said that their job stress levels had repercussions on their marriage or romantic relationships.
Communications

This App Automatically Cancels and Sues Robocallers (vice.com) 99

DoNotPay, the family of consumer advocacy services meant to protect people from corporate exploitation, is launching a new app aimed at helping end our long national nightmare surrounding robocalls by giving you a burner credit card to get their contact details then giving you a chatbot lawyer to automatically sue them. From a report: DoNotPay Founder and CEO Joshua Browder's Robo Revenge app is unique from every other app looking to protect you from robocalls in that it can get you cash while stopping them completely. "All of the big companies like AT&T and Apple have failed to protect consumers," Browder told Motherboard over the phone. "Consumers have to protect themselves. The only way the problem will end is if the robocallers start losing money every time they call someone."

In the past, DoNot Pay has offered various apps to help consumers fight back. DoNotPay's Free Trial Card creates a virtual, one-time-use credit card to protect you from getting charged by "industrialized scams" like free trials. DoNotPay's original offering was a chatbot lawyer program that automatically disputed parking tickets in small claims court. Robo Revenge combines both features to automatically add you to the Do Not Call Registry, generate a virtual DoNotPay burner credit card to provide scammers when they illegally call you anyways, use the transaction information to get the scammer's contact information, then walk you through how to sue them for as much as $3,000 per call under the Telephone Consumer Protection Act (TCPA), a law already on the books meant to protect consumers from calls that violate the Do Not Call Registry. The app also streamlines the litigation paperwork by automatically generating demand letters and court filing documents.

Portables (Apple)

Samsung Galaxy Book S is Thinner, Lighter, Faster Than MacBook Air (notebookcheck.net) 81

An anonymous reader shares a report: The Intel Core i5-8210Y delivers a multi-core score of 1544 which compares poorly with the Qualcomm Snapdragon 8cx multi-core score of 2745. Yet, despite fitting the MacBook Air with a 49.9 Wh battery, Apple claims it will deliver just 13 hours of continuous video playback. However, because of the superior performance-per-watt of the Snapdragon 8cx when paired with the smaller 42 Wh battery in the Galaxy Book S, it delivers up to 25 hours (claimed) of continuous video playback. You can probably also argue that Microsoft has done an excellent job of optimizing Windows on ARM so that it works so harmoniously in this WinARM union. The MacBook Air weighs 1.25 kg (2.75 pounds) and is 15.6 mm (0.61-inches) at its thickest point. This compares with the Galaxy Book S which weighs 0.96 kg (2.11 pounds) and measures 11.8 mm (0.46-inches). Given that buyers of the slightly more expensive MacBook Air (US$1,099) are also only going to be doing relatively light-weight tasks on it like internet browsing and running Microsoft's Office suite on it, why would anyone choose the MacBook Air over the Galaxy Book S (US$999)? Like the MacBook Air, the Galaxy Book S runs its operating system, pre-installed apps and the Office suite natively while also giving users the option to use 32-bit x86 apps for those occasions where you might want to use other apps.
Communications

WhatsApp Hits 2 Billion Users (techcrunch.com) 44

WhatsApp, the most popular messaging service, revealed today just how big it has become. From a report: The Facebook-owned app said it has amassed two billion users, up from 1.5 billion it revealed two years ago. The announcement today makes WhatsApp the only second app from Facebook to join the two-billion-users club. (Facebook's marquee app has 2.5 billion users.) In an earnings call late January, Facebook also noted that that there were 2.26 billion users that opened either Facebook, Messenger, Instagram, or WhatsApp each day, up from 2.2 billion last quarter. The family of apps sees 2.89 billion total monthly users, up 9% year-over-year. WhatsApp, founded 11 years ago and sold to Facebook for $19 billion six years ago, took the opportunity today to reiterate how committed it is to providing end-to-end encryption to its customers all over the globe -- a crucial feature lauded by security experts everywhere but something that many governments are increasingly trying to contest. "Strong encryption acts like an unbreakable digital lock that keeps the information you send over WhatsApp secure, helping protect you from hackers and criminals. Messages are only kept on your phone, and no one in between can read your messages or listen to your calls, not even us. Your private conversations stay between you," WhatsApp wrote in a blog post.

Slashdot Top Deals