According to TechCrunch, Mozilla has laid off about 70 employees today. From the report: In an internal memo, Mozilla chairwoman and interim CEO Mitchell Baker specifically mentions the slow rollout of the organization's new revenue-generating products as the reason for why it needed to take this decision. The overall number may still be higher, though, as Mozilla is still looking into how this decision will affect workers in the UK and France. In 2018, Mozilla Corporation (as opposed to the much smaller Mozilla Foundation) said it had about 1,000 employees worldwide.

Baker says laid-off employees will receive "generous exit packages" and outplacement support. She also notes that the leadership team looked into shutting down the Mozilla innovation fund but decided that it needed it in order to continue developing new products. In total, Mozilla is dedicating $43 million to building new products. "You may recall that we expected to be earning revenue in 2019 and 2020 from new subscription products as well as higher revenue from sources outside of search. This did not happen," Baker writes in her memo. "Our 2019 plan underestimated how long it would take to build and ship new, revenue-generating products. Given that, and all we learned in 2019 about the pace of innovation, we decided to take a more conservative approach to projecting our revenue for 2020. We also agreed to a principle of living within our means, of not spending more than we earn for the foreseeable future."

"As we look to the future, we know we must take bold steps to evolve and ensure the strength and longevity of our mission," Baker adds. "Mozilla has a strong line of sight to future revenue generation, but we are taking a more conservative approach to our finances. This will enable us to pivot as needed to respond to market threats to internet health, and champion user privacy and agency."

Most modern iPhones running iOS 13 can now be used as a built-in phone security key for Google apps. 9to5Google reports: A built-in phone security key differs from the Google Prompt, though both essentially share the same UI. The latter push-based approach is found in the Google Search app and Gmail, while today's announcement is more akin to a physical USB-C/Lightning key in terms of being resistant to phishing attempts and verifying who you are. Your phone security key needs to be physically near (within Bluetooth range) the device that wants to log-in. The login prompt is not just being sent over an internet connection.

With an update to the Google Smart Lock app on iOS this week, "you can now set up your phone's built-in security key." According to one Googler today, the company is leveraging the Secure Enclave found on Apple's A-Series chips. Storing Touch ID, Face ID, and other cryptographic data, it was first introduced on the iPhone 5s, though that particular device no longer supports iOS 13. Anytime users enter a Google Account username and password, they'll be prompted to open Smart Lock on their nearby iPhone to confirm a sign-in. There's also the option to cancel with "No, it's not me." This only works when signing-in to Google with Chrome, while Bluetooth on both the desktop computer and phone needs to be enabled as the devices are locally communicating the confirmation request and verification.

Toyota wants to evolve from a car-maker to a mobility company. An anonymous reader shares a report: To do that, it's launching Kinto, a new brand that will provide full-service leasing, car sharing, carpooling and subscription-based leases. Unfortunately, those offerings will only be available in Europe. Toyota is evaluating other services, like ride-hailing and a multi-modal app, and says it will work with cities, companies and individuals. The full service-leasing, Kinto One, will combine the lease, service and insurance in a single monthly payment. The car sharing service, Kinto Share, will offer hybrid vehicles. The carpooling, Kinto Join, will emphasize the opportunity to reduce carbon emissions, and Kinto Flex, the subscription-based car leasing, will offer greater flexibility.

An Italian court has ruled that prolonged use of mobile phones can cause head tumors despite scientists overwhelmingly agreeing there is no evidence to back this up. From a report: The Turin court of appeal on Tuesday upheld a ruling issued by a lower court in 2017 in relation to a man with neurinoma of the acoustic nerve, a benign but disabling tumor. The decision was based on studies provided by two court-appointed doctors that showed an increased risk of head tumours among those who talked on their phones for 30 minutes a day over a 10-year period. Judges concluded that there was a link between the frequent use of a mobile phone by Roberto Romeo, who worked for Telecom Italia, and his condition. Romeo is said to have used his phone for four to five hours a day. "There are solid elements to affirm a causal role between the exposure of the person to radio frequencies from mobile phones and the disease that arose," the judges said in their ruling. Inail, a workplace accident insurance agency, has been ordered to compensate Romeo, although it could take the case to the supreme court.

An anonymous reader shares a report: Google's Call Screening service has allowed you to record screened calls for quite some time, but many people have been asking for a native solution letting them save any phone conversation. It looks like Google is working on introducing this functionality to its Phone app. XDA Developers peeked at the code of the current Phone app beta version 43.0.289191107 and found that Google has already added a new layout, an icon, and more assets that hint at call recording through the application. Some strings also point to a new in-call button that should allow you to quickly start saving audio.

Microsoft today launched its new Edge browser based on Google's Chromium open source project. You can download Chromium Edge now for Windows 7, Windows 8, Windows 10, and macOS directly from microsoft.com/edge in more than 90 languages. From a report: Business features aside, there's also support for Chrome-based extensions, 4K streaming, Dolby audio, inking in PDF, and privacy tools. For the last one, it's worth noting that tracking prevention is on by default and offers three levels of control, like Firefox's tracking protection. Chrome extension support is probably the most important feature for most users. By default, extensions that have been ported over to Edge can be downloaded from the Microsoft Store. Chromium Edge also has an option to "Allow extensions from other stores" to get Chrome extensions from the Chrome Web Store. There are still a few features missing from Chromium Edge, most notably history sync and extension sync. Microsoft is working on these and some other inking functionality that it still wants to port from legacy Edge, as Microsoft is calling it. Microsoft also claims that Chromium Edge is "twice as fast as legacy Edge." Curiously, the team isn't making any claims against other browsers -- at least not yet.

Since the dawn of Twitter, users have been begging and pleading for a way to edit Tweets. Sadly, despite the entreaties of those upon whose usage the service depends, Twitter head honcho Jack Dorsey says you'll "probably" never be able to edit a tweet. From a report: Dorsey was asked during a video Q&A with Twitter users conducted by Wired whether 2020 would be the year Twitter would introduce an edit function. Dorsey's short answer? "No." "The reason there's no edit button ... is we started as an SMS, text messaging service. So, as you all know, when you send a text message, you can't really take it back," Dorsey says, adding that Twitter wants "to preserve that vibe, that feeling, uh, in the early days."

Network security giant Cloudflare said it will provide its security tools and services to U.S. political campaigns for free, as part of its efforts to secure upcoming elections against cyberattacks and election interference. From a report: The company said its new Cloudflare for Campaigns offering will include distributed denial-of-service attack mitigation, load balancing for campaign websites, a website firewall, and anti-bot protections. It's an expansion of the company's security offering for journalists, civil rights activists and humanitarian groups under its Project Galileo, which aims to protect against disruptive cyberattacks. The project later expanded to smaller state and local government sites in 2018, with an aim of protecting servers containing voter registration data and other election infrastructure from attacks. Cloudflare's co-founder and chief executive Matthew Prince said there was a "clear need" to help campaigns secure not only their public facing websites but also their internal data security. The company said it's working with the non-partisan, non-profit organization Defending Digital Campaigns to provide its services to campaigns. Last year the Federal Elections Commission changed the rules to allow political campaigns to receive discounted cybersecurity assistance, which was previously a campaign finance violation.

An anonymous reader quotes a report from VentureBeat: The Cloud Native Computing Foundation (CNCF) today announced it is funding a bug bounty program for Kubernetes. Security researchers who find security vulnerabilities in Kubernetes' codebase, as well as the build and release processes, will be rewarded with bounties ranging from $100 to $10,000. Bug bounty programs motivate individuals and hacker groups to not only find flaws but disclose them properly, instead of using them maliciously or selling them to parties that will. Originally designed by Google and now run by the CNCF, Kubernetes is an open source container orchestration system for automating application deployment, scaling, and management. Given the hundreds of startups and enterprises that use Kubernetes in their tech stacks, it's significantly cheaper to proactively plug security holes than to deal with the aftermath of breaches.

Researchers from the University Hospital Zurich, ETH Zurich, Wyss Zurich and the University of Zurich have developed a machine that repairs injured human livers and keeps them alive outside the body for one week. ScienceDaily reports: Until now, livers could be stored safely outside the body for only a few hours. With the novel perfusion technology, livers -- and even injured livers -- can now be kept alive outside of the body for an entire week. This is a major breakthrough in transplantation medicine, which may increase the number of available organs for transplantation and save many lives of patients suffering from severe liver disease or a variety of cancers. Injured cadaveric livers, initially not suitable for use in transplantation, may regain full function while perfused in the new machine for several days. The basis for this technology is a complex perfusion system, mimicking most core body functions close to physiology. The corresponding study was published in the journal Nature Biotechnology.

The inaugural study shows that six of ten perfused poor-quality human livers, declined for transplantation by all centers in Europe, recovered to full function within one week of perfusion on the machine. The next step will be to use these organs for transplantation. The proposed technology opens a large avenue for many applications offering a new life for many patients with end stage liver disease or cancer.

A research team at Google has developed a deep neural network that can make fast, detailed rainfall forecasts. Google says that its forecasts are more accurate than conventional weather forecasts, at least for time periods under six hours. Ars Technica reports: The researchers say their results are a dramatic improvement over previous techniques in two key ways. One is speed. Google says that leading weather forecasting models today take one to three hours to run, making them useless if you want a weather forecast an hour in the future. By contrast, Google says its system can produce results in less than 10 minutes -- including the time to collect data from sensors around the United States. A second advantage: higher spatial resolution. Google's system breaks the United States down into squares 1km on a side. Google notes that in conventional systems, by contrast, "computational demands limit the spatial resolution to about 5 kilometers."

Interestingly, Google's model is "physics-free": it isn't based on any a priori knowledge of atmospheric physics. The software doesn't try to simulate atmospheric variables like pressure, temperature, or humidity. Instead, it treats precipitation maps as images and tries to predict the next few images in the series based on previous snapshots. It does this using convolutional neural networks, the same technology that allows computers to correctly label images. Specifically, it uses a popular neural network architecture called a U-Net that was first developed for diagnosing medical images. The U-net has several layers that downsample an image from its initial 256-by-256 shape, producing a lower-resolution image where each "pixel" represents a larger region of the original image. Google doesn't explain the exact parameters, but a typical U-Net might convert a 256-by-256 grid to a 128-by-128 grid, then convert that to a 64-by-64 grid, and finally a 32-by-32 grid. While the number of pixels is declining, the number of "channels" -- variables that capture data about each pixel -- is growing.

The second half of the U-Net then upsamples this compact representation -- converting back to 64, 128, and finally 256-pixel representations. At each step, the network copies over the data from the corresponding downsampling step. The practical effect is that the final layer of the network has both the original full-resolution image and summary data reflecting high-level features inferred by the neural network. To produce a weather forecast, the network takes an hour's worth of previous precipitation maps as inputs. Each map is a "channel" in the input image, just as a conventional image has red, blue, and green channels. The network then tries to output a series of precipitation maps reflecting the precipitation over the next hour. Like any neural network, this one is trained with past real-world examples. After repeating this process millions of times, the network gets pretty good at approximating future precipitation patterns for data it hasn't seen before.

An anonymous reader quotes a report from VentureBeat: Verizon Media, the media and digital offshoot of telecommunications giant Verizon, has launched a "privacy-focused" search engine called OneSearch. With OneSearch, Verizon promises there will be no cookie tracking, no ad personalization, no profiling, no data-storing, and no data-sharing with advertisers.

With its default dark mode, OneSearch lets you know that Advanced Privacy Mode is activated. You can manually toggle this mode to the "off" position which returns a brighter interface, but with this setting deactivated you won't have access to privacy features such as search-term encryption. With Advanced Privacy Mode on, links to search results will only be shareable for an hour, after which time they will "self-destruct" and return an error to anyone who clicks on it. More broadly, the OneSearch interface is clean and fairly familiar to anyone who has used a search engine before. But at its core, it promises to show the same search results to everyone given that it's not tailored to the individual. In the OneSearch privacy policy, Verizon says it it will store a user's IP address, search query, and user agent on different servers so that it can't draw correlations between a user's specific location and the query that they've made.

"Verizon said that it will monetize its new search engine through advertising; however, the advertising won't be based on browsing history or data that personally identifies the individual -- it will only serve contextual advertisements based on each individual search," reports VentureBeat. OneSearch is currently available on desktop and mobile web, with mobile apps coming later this month.

Last week, the internet went dark for Yemen and its 28 million citizens. It's still not fully back today. In fact, the entire Red Sea region has dealt with slow to nonexistent connectivity since the severing of a single submarine cable on Thursday. Wired reports: Kuwait, Saudi Arabia, Sudan, and Ethiopia all felt major effects from last week's cut of the so-called Falcon cable, which even impacted countries as far away as Comoros and Tanzania. Most of them weren't totally knocked offline, though, because they were able to fall back on other lines of connectivity. In Yemen, though, that one cable cut led to an 80 percent drop in capacity. Though the country still had that last 20 percent, trying to route a water main of web traffic through a drinking straw resulted in near-total connectivity failure.

While internet blackouts have been used in regions like Iran and Kashmir as a political cudgel, there's no indication that the cut in Yemen's case was nefarious; it's more likely that an anchor unintentionally severed it. Fixing it, though, won't be so simple. Yemen has three submarine cable landings -- a Falcon connection in the east, another Falcon connection in the west, and a third landing in the port city of Aden, which connects to two other cables altogether. Due to an ongoing civil war, Aden is the temporary capital of Yemen, controlled by the Hadi government; Houthi-controlled territory geographically divides the country. By Saturday, one of Yemen's two main internet service providers -- YemenNet -- was able to restore some connectivity by working with Oman's major ISP, Omantel, to receive service from a different undersea cable. The Falcon cable has not yet been fixed, though, and countries like Saudi Arabia and Kuwait, along with Yemen, are still dealing with lingering impacts of the cut. If providers don't have a backup means of communication, or have to reestablish service with a manual rerouting process, restoring connectivity can take days.

The Norwegian Consumer Council published an analysis of how popular apps are sharing user data with the behavioral ad industry. TechCrunch reports the findings: A majority of the apps that were tested for the report were found to transmit data to "unexpected third parties" -- with users not being clearly informed about who was getting their information and what they were doing with it. Most of the apps also did not provide any meaningful options or on-board settings for users to prevent or reduce the sharing of data with third parties. "The evidence keeps mounting against the commercial surveillance systems at the heart of online advertising," the Council writes, dubbing the current situation "completely out of control, harming consumers, societies, and businesses," and calling for curbs to prevalent practices in which app users' personal data is broadcast and spread "with few restraints."

In the report, app users' data is documented being shared with tech giants such as Facebook, Google and Twitter -- which operate their own mobile ad platforms and/or other key infrastructure related to the collection and sharing of smartphone users' data for ad targeting purposes -- but also with scores of other faceless entities that the average consumer is unlikely to have heard of. [...] Among the findings are a makeup filter app sharing the precise GPS coordinates of its users; ovulation, period and mood-tracking apps sharing users' intimate personal data with Facebook and Google (among others); dating apps exchanging user data with each other, and also sharing with third parties sensitive user info like individuals' sexual preferences (and real-time device specific tells such as sensor data from the gyroscope...); and a games app for young children that was found to contain 25 embedded SDKs and which shared the Android Advertising ID of a test device with eight third parties. The 10 apps whose data flows were analyzed for the report are the dating apps Grindr, Happn, OkCupid, and Tinder; fertility/period tracker apps Clue and MyDays; makeup app Perfect365; religious app Muslim: Qibla Finder; children's app My Talking Tom 2; and the keyboard app Wave Keyboard.

An anonymous reader quotes a report from CNN: It's official, Akon has his own city in Senegal. Known as "Akon City," the rapper and entrepreneur tweeted Monday that he had finalized the agreement for the new city. Akon, who is of Senegalese descent, originally announced plans for the futuristic "Crypto city" in 2018 saying that the city would be built on a 2,000-acre land gifted to him by the President of Senegal, Macky Sall. The new city would also trade exclusively in his own digital cash currency called AKoin, he said. The official website for the city said at the time it would be a five-minute drive from the West African state's new international airport. According to a video posted to the project's Facebook page, "all transactional activity" in Akon City will be conducted using AKoin.

"What's worrying is that, at this stage, there doesn't appear to be any white paper for Akon's cryptocurrency, so it's hard to gauge exactly what we're in for," reports The Next Web. "The associated website does however hype the release of a white paper and an 'explainer video' sometime before February this year."

Google is working to improve the speed and security of on-device AI through a little-known initiative called Coral. The Verge reports: "Traditionally, data from [AI] devices was sent to large compute instances, housed in centralized data centers where machine learning models could operate at speed," Vikram Tank, product manager at Coral, explained to The Verge over email. "Coral is a platform of hardware and software components from Google that help you build devices with local AI -- providing hardware acceleration for neural networks ... right on the edge device." To meet customers' needs Coral offers two main types of products: accelerators and dev boards meant for prototyping new ideas, and modules that are destined to power the AI brains of production devices like smart cameras and sensors. In both cases, the heart of the hardware is Google's Edge TPU, an ASIC chip optimized to run lightweight machine learning algorithms -- a (very) little brother to the water-cooled TPU used in Google's cloud servers.

While its hardware can be used by lone engineers to create fun projects (Coral offers guides on how to build an AI marshmallow-sorting machine and smart bird feeder, for example), the long-term focus, says Tank, is on enterprise customers in industries like the automotive world and health care. Although Coral is targeting the world of enterprise, the project actually has its roots in Google's "AIY" range of do-it-yourself machine learning kits, says Tank. Launched in 2017 and powered by Raspberry Pi computers, AIY kits let anyone build their own smart speakers and smart cameras, and they were a big success in the STEM toys and maker markets. Tank says the AIY team quickly noticed that while some customers just wanted to follow the instructions and build the toys, others wanted to cannibalize the hardware to prototype their own devices. Coral was created to cater to these customers. The Coral team says it's trying to differentiate itself from the competition by tightly integrating its hardware with Google's ecosystem of AI services. "Coral is so tightly integrated with Google's AI ecosystem that its Edge TPU-powered hardware only works with Google's machine learning framework, TensorFlow, a fact that rivals in the AI edge market The Verge spoke to said was potentially a limiting factor," the report says.

"Coral products process specifically for their platform [while] our products support all the major AI frameworks and models in the market," a spokesperson for AI edge firm Kneron told The Verge. (Kneron said there was "no negativity" in its assessment and that Google's entry into the market was welcome as it "validates and drives innovation in the space.")

An anonymous reader quotes a report from The Register: Amazon Web Services is expecting a decision next month from a U.S. court about whether the brakes will be slammed on the Pentagon's lucrative Joint Enterprise Defense Infrastructure (JEDI) contract awarded to Microsoft. The filing (PDF), on January 13, sets up the schedule for key dates including February 11, when AWS and Microsoft's lawyers have agreed to expect a court to decide on AWS's motion for a temporary restraining order. A preliminary injunction is also possibly on the cards.

The significance of February -- and the reason for the sped-up negotiated schedule -- is that three days before Valentine's, the $10 billion mega-contract is supposed to begin, and, as the filing notes, "the United States has previously advised AWS and the Court [it] will begin on February 11, 2020," reiterating that "the United States' consistent position that the services to be procured under the Contract are urgently needed in support of national security." Interestingly, the U.S. -- via the Department of Defense -- said in the document that in this specific "bid protest case, it does not intend to file an answer" to AWS's complaint. Microsoft and the U.S. government have agreed to file their motions to dismiss on January 24 -- the same date AWS is flinging out its "temporary restraining order and/or preliminary injunction" to pull the JEDI light saber away from Microsoft. Amazon's initial formal appeal of the decision pointed much of the blame at President Trump, who has been a public critic of Amazon.

"Should it get the nod, AWS's injunction will 'prevent the issuance of substantive task orders under the contract' despite the U.S.'s position that the services 'are urgently needed in support of national security,'" reports The Register.

Microsoft on Tuesday patched an extraordinarily serious security vulnerability in a core cryptographic component present in all versions of Windows. The vulnerability was spotted and reported by the NSA. CNBC reports: The flaw affected encryption of digital signatures used to authenticate content, including software or files. If exploited, the flaw could allow criminals to send malicious content with fake signatures that make it appear safe. The finding was reported earlier by The Washington Post. It is unclear how long the NSA knew about the flaw before reporting it to Microsoft. The cooperation, however, is a departure from past interactions between the NSA and major software developers such as Microsoft. In the past, the top security agency has kept some major vulnerabilities secret in order to use them as part of the U.S. tech arsenal.

In a statement, Microsoft declined to confirm or offer further details. "We follow the principles of coordinated vulnerability disclosure as the industry best practice to protect our customers from reported security vulnerabilities. To prevent unnecessary risk to customers, security researchers and vendors do not discuss the details of reported vulnerabilities before an update is available." Jeff Jones, a senior director at Microsoft said in a statement Tuesday: "Customers who have already applied the update, or have automatic updates enabled, are already protected. As always we encourage customers to install all security updates as soon as possible." Microsoft told CNBC that it had not seen any exploitation of the flaw "in the wild," which means outside a lab testing environment.

Open-source intelligence proved vital in the investigation into Ukraine Airlines flight PS752. Then Iranian officials had to admit the truth. From a report: [...] In the days after the Ukraine Airlines plane crashed into the ground outside Tehran, Bellingcat and The New York Times have blown a hole in the supposition that the downing of the aircraft was an engine failure. The pressure -- and the weight of public evidence -- compelled Iranian officials to admit overnight on January 10 that the country had shot down the plane "in error." So how do they do it? "You can think of OSINT as a puzzle. To get the complete picture, you need to find the missing pieces and put everything together," says Lorand Bodo, an OSINT analyst at Tech versus Terrorism, a campaign group. The team at Bellingcat and other open-source investigators pore over publicly available material. Thanks to our propensity to reach for our cameraphones at the sight of any newsworthy incident, video and photos are often available, posted to social media in the immediate aftermath of events. "Open source investigations essentially involve the collection, preservation, verification, and analysis of evidence that is available in the public domain to build a picture of what happened," says Yvonne McDermott Rees, a lecturer at Swansea University.

Some of the clips in this incident surfaced on Telegram, the encrypted messaging app popular in the Middle East, while others were sent directly to Bellingcat. "Because Bellingcat is known for our open source work on MH17, people immediately thought of us. People started sending us links they'd found," says Eliot Higgins of Bellingcat. "It was involuntary crowdsourcing." OSINT investigators then utilise metadata, including EXIF data -- which is automatically inserted into videos and photos, showing everything from the type of camera used to take the images to the precise latitude and longitude of where the taker was standing -- to validify that the footage is legitimate. They'll also try and identify who took the footage, and whether it's practical for them to have been where they claim to have been at the time. However, for this instance, they couldn't use EXIF data. "People would share photos and videos on Telegram which strip the metadata, and then someone else would find that and share it on Twitter," says Higgins. "We were really getting a second-hand or third-hand version of these images. All we have to go on is what's visible in the photograph." So instead they moved onto the next step.

Google has announced plans to limit the ability of other companies to track people across the internet and collect information about them, a significant change that has widespread ramifications for online privacy as well as the digital economy. From a report: The company said Tuesday that it plans to phase out the use of digital tools known as tracking cookies, which other companies use to identify people online and learn more about them. The move is meant to offer users greater control over their digital footprints and enhance user privacy, according to Google. But the move could also provide Google with even greater control over the online advertising market, which the company already dominates. Google said the change will come to its Chrome web browser and be rolled out over two years. Google did not announce any changes to its own data collection methods.

Google also said that a previously announced change to make third-party cookies more secure and precise in their abilities will be rolled out in February. Justin Schuh, director of engineering for trust and safety for Google's Chrome, said the search giant needs time to enact changes because it is working with advertisers and publishers to address the need for cookies to remember sign-ins, embed third-party services such as weather widgets and deliver targeted advertising. But he did not downplay the significance of Google's announcement. "We want to change the way the web works," he said in an interview.