An anonymous reader quotes a report from Ars Technica: Mozilla is urging Congress to reject the broadband industry's lobbying campaign against encrypted DNS in Firefox and Chrome. The Internet providers' fight against this privacy feature raises questions about how they use broadband customers' Web-browsing data, Mozilla wrote in a letter sent today to the chairs and ranking members of three House of Representatives committees. Mozilla also said that Internet providers have been giving inaccurate information to lawmakers and urged Congress to "publicly probe current ISP data collection and use policies." DNS over HTTPS helps keep eavesdroppers from seeing what DNS lookups your browser is making. This can make it more difficult for ISPs or other third parties to monitor what websites you visit.

"Unsurprisingly, our work on DoH [DNS over HTTPS] has prompted a campaign to forestall these privacy and security protections, as demonstrated by the recent letter to Congress from major telecommunications associations. That letter contained a number of factual inaccuracies," Mozilla Senior Director of Trust and Security Marshall Erwin wrote. This part of Erwin's letter referred to an Ars article in which we examined the ISPs' claims, which center largely around Google's plans for Chrome. The broadband industry claimed that Google plans to automatically switch Chrome users to its own DNS service, but that's not what Google says it is doing. Google's publicly announced plan is to "check if the user's current DNS provider is among a list of DoH-compatible providers, and upgrade to the equivalent DoH service from the same provider." If the user-selected DNS service is not on that list, Chrome would make no changes for that user.

David Ruddock of AndroidPolice technology blog tries to make sense of last week's $2.1 billion acquisition of Fitbit by Google. He argues that Fitbit's offerings -- hardware, software, engineering talent, or even patent wall -- can't save Google's wearable operating system Wear OS. From his column: Hardware is what Google is after, with a blog post cleatly stating its acquisition of Fitbit is about future Wear OS devices, meaning you can probably kiss Fitbit's unloved smartwatch OS goodbye. So, that means we can count on Google leveraging Fitbit's renowned hardware to finally give Wear OS the horsepower and capabilities it needs to compete with Apple, right? Well, no. Fitbit's smartwatches have been most lauded for their long battery life, which has historically been enabled by extremely slow but highly power-efficient processors. The Versa 2 allegedly comes with significant performance improvements, but as a smartwatch, it just isn't very... smart. Michael Fisher points out in his review that the Versa 2's near week-long life on a single charge is only impressive when looked at in a very generous light. The Versa 2 doesn't have GPS, the battery only lasts that long when not using the always-on display (with AoD, it's closer to 3 days), the watch itself doesn't work for almost anything but fitness tracking on its own, and most of your interactions with it end up happening on your smartphone anyway. I can also tell you from experience that the Apple Watch Series 5 lasts about two days on a charge with the always-on display enabled (and Samsung's watches last even longer), so Fitbit managing a day more which a much less useful watch isn't exactly game-changing technology.

In short, Fitbit's products are not ones Google should be excited about buying. The hardware is nothing special, and the software is clearly going in the dumpster. What has Google bought, then? The sad, very practical truth is probably patents and engineers. Fitbit does develop at least some of its hardware in-house, and likely has a decent number of patents related to fitness tracking and basic wearable technology, including those stemming from its acquisition of Pebble. Its product engineers would receive resources and tools at Google that Fitbit may not have afforded them. In short: Google's purchase is almost certainly a speculative one. Google is hoping that Fitbit's technology portfolio and its engineering talent can create a better, faster, stronger Wear OS watch. That isn't the kind of acquisition that screams "our product is successful," it's one that looks far more like a Hail Mary from a company that is rapidly losing any hope of remaining relevant in the wearables space. A more cynical view of Google's acquisition might argue that this is more about Fitbit's brand and users than anything else. If Google simply markets its in-house smartwatches as Fitbits running Wear OS, it would be more able to tap into Fitbit's existing customer base and retail relationships. Customer base is something Wear OS is sorely missing at the moment, and Fitbit is a brand that many consumers recognize, albeit mostly for the company's "dumb" fitness trackers, not its smartwatches. Speaking of, given Google's focus on Wear OS as part of this acquisition, my guess is that those more popular but very basic trackers will be discontinued.

Following months of conflict over a controversial data-sharing policy, Los Angeles has temporarily suspended Uber's permit to rent electric scooters and bicycles on city streets and sidewalks. From a report: The company's subsidiary, Jump, must appeal the decision by Friday or leave the city, the Transportation Department told the company in a letter last week. For now, customers can still rent the vivid red scooters and electric bikes through the Jump app. In response, Uber threatened in a letter to sue the city over the "patently unfair and improper" suspension. The letter also questioned the validity of the "eleventh-hour administrative review process" that the city created last month. "Every other company that is permitted in Los Angeles is following the rules," said Transportation Department spokeswoman Connie Llanos. "We look forward to being able to work with Uber on getting them into compliance." The suspension follows months of tension and failed attempts at compromise between Uber and the city over a data-sharing rule in L.A.'s one-year pilot permit program. Companies are required to transmit real-time data on all trips made within the city, including the start point, end point and travel time.

An anonymous reader writes: At Ignite 2019 today, Microsoft launched Visual Studio Online public preview. Visual Studio Online meshes Visual Studio, cloud-hosted developer environments, and a web-based editor. AI, big data, and cloud computing are shifting development beyond the "standard issue development laptop," and Visual Studio Online is clearly a reflection of this trend. "Visual Studio Online philosophically (and technically) extends Visual Studio Code Remote Development to provide managed development environments that can be created on-demand and accessed from anywhere," Microsoft explained today. "These environments can be used for long-term projects, to quickly prototype a new feature, or for short-term tasks, like reviewing pull requests." The company also announced the public preview of its Power Virtual Agents tool, a new no-code tool for building chatbots that's part of the company's Power Platform, which also includes Microsoft Flow automation tool, which is being renamed to Power Automate today, and Power BI. From a report: Built on top of Azure's existing AI smarts and tools for building bots, Power Virtual Agents promises to make building a chatbot almost as easy as writing a Word document. With this, anybody within an organization could build a bot that walks a new employee through the onboarding experience for example. "Power virtual agent is the newest addition to the Power Platform family," said Microsoft's Charles Lamanna. "Power Virtual Agent is very much focused on the same type of low code, accessible to anybody, no matter whether they're a business user or business analyst or professional developer, to go build a conversational agent that's AI-driven and can actually solve problems for your employees, for your customers, for your partners, in a very natural way." Further reading: Microsoft rebrands Flow as Power Automate, adds RPA features and virtual agents; and Visual Studio IntelliCode gets whole-line code completions, dynamic refactoring detection.

Adobe Photoshop is now available for iPads. From a report: The release follows an official announcement at Adobe's MAX event last year. The app is free to download and use for 30 days, but you'll need a Creative Cloud subscription to continue using it after that. If you already have a subscription for Adobe's desktop apps that covers Photoshop, you should be good to go -- you just need to log in with your paid account credentials. The app has full support for Apple Pencil, and lets you work on full PSD files -- layers and all. The company has also modified oft-used Photoshop functions for touchscreen interfaces, such as quick selection and paintbrush.

Yael Eisenstat, a visiting fellow at Cornell Tech in the Digital Life Initiative and a former elections integrity head at Facebook, CIA officer, and White House adviser, writes for the Washington Post: As the company continues to struggle with how to handle political content and as another presidential election approaches, it's clear that tinkering around the margins of advertising policies won't fix the most serious issues. The real problem is that Facebook profits partly by amplifying lies and selling dangerous targeting tools that allow political operatives to engage in a new level of information warfare. Its business model exploits our data to let advertisers custom-target people, show us each a different version of the truth and manipulate us with hyper-customized ads -- ads that, as of two weeks ago, can contain blatantly false and debunked information if they're run by a political campaign. As long as Facebook prioritizes profit over healthy discourse, they can't avoid damaging democracies.

Early in my time there, I dug into the question of misinformation in political advertising. Posting in a "tribe" (Facebook's internal collaboration platform), I asked our teams working on political advertising whether we should incorporate the same tools for political ads that other integrity teams at Facebook were developing to address misinformation in pages and organic posts. It was unclear to me why the company was applying different, siloed policies and tools across the platform. Most users do not differentiate organic content from ads -- as I clearly saw on a trip to India, where we were testing our ads-integrity products -- so why were we expecting users to understand that we applied different standards to different forms of content that all just appear in their news feeds?

The fact that we were taking money for political ads and allowing campaigns and other political organizations to target users based on the vast amounts of data we had gathered meant political ads should have an even higher bar for integrity than what people were posting in organic content. We verified advertisers to run political ads, giving them a check mark and a "paid for by" label, and I questioned if that gave the false impression that we were vouching for the validity of the content, boosting its perceived credibility even though we weren't checking any facts or ensuring that ads weren't spreading false information. Most of my colleagues agreed. People wanted to get this right. But above me, there was no appetite for my pushing, and I was accused of "creating confusion."

Microsoft has teamed up with Warner Bros. to text. The collaboration, which was unveiled at Microsoft's Ignite 2019 conference in Orlando, Florida Monday, is a first test case for a new storage technology that could eventually help safeguard Hollywood's movies and TV shows, as well as many other forms of data, for centuries to come. From a report: "Glass has a very, very long lifetime," said Microsoft Research principal researcher Ant Rowstron in a recent conversation with Variety. "Thousands of years." The piece of silica glass storing the 1978 "Superman" movie, measures 7.5 cm x 7.5 cm x 2 mm. The glass contains 75.6 GB of data plus error redundancy codes. Microsoft began to investigate glass as a storage medium in 2016 in partnership with the University of Southampton Optoelectonics Research Centre. The goal of these efforts, dubbed "Project Silica," is to find a new storage medium optimized for what industry insiders like to call cold data -- the type of data you likely won't need to access for months, years, or even decades. It's data that doesn't need to sit on a server, ready to be used 24/7, but that is kept in a vault, away from anything that could corrupt it.

Turns out that Warner Bros. has quite a bit of this kind of cold data. Founded in the 1920s, the studio has been safekeeping original celluloid film reels, audio from 1940s radio shows and much more, for decades. Think classics like "Casablanca," "The Wizard of Oz" or "Looney Tunes" cartoons. "Our mission is to preserve those original assets in perpetuity," said Brad Collar, who is leading these efforts at Warner Bros. as the studio's senior vice president of global archives and media engineering. And while the studio is deeply invested in these classics, it also keeps adding an ever-increasing number of modern assets to its archives, ranging from digitally-shot films and television episodes to newer forms of entertainment, including video games. To date, the Warner Bros. archive contains some 20 million assets, with tens of thousands of new items being added every year. Each of them is being stored in multiple locations, explained Collar. "We want to have more than one copy."

Microsoft today announced that its new Edge browser based on Google's Chromium open source project has hit release candidate status. From a report: Additionally, the company shared that Chromium Edge will hit general availability in more than 90 languages on January 15, 2020. Microsoft also detailed some new features around Microsoft Search in Bing. While the two announcements might seem disjointed at first, Microsoft is trying to position Edge and Bing as "the browser and search engine for business." [...] Now that Chromium Edge is at the release candidate stage, Microsoft is sharing a little more about how it plans to differentiate the new browser from the many other Chromium-based options. As with its decision to build its own Android phone, Microsoft is tapping Google to give business users unique features on popular consumer platforms.

Whether it's hardware or software, Microsoft is obsessed with selling productivity. So that's what Chromium Edge appears destined to be: a business browser. Businesses mainly use Windows, though some also have Macs floating around so Chromium Edge is not just a Windows 10 affair. Microsoft knows the existing version of Edge isn't appealing because it isn't keeping up with the web. But the company also knows Chromium Edge will not convert most existing Chrome users, so it's focusing on the business use case. To do so, Microsoft plans to give Chromium Edge some extra privacy tools and access to corporate information that exists on company intranets. "The irony is that it is easier to find an obscure piece of information on the much larger internet than it is to find a simple document on your company's intranet -- such as a paystub portal, a pet at work policy, or the office location of a fellow employee," Microsoft CVP Yusuf Mehdi laments.

Long-time Slashdot reader theodp writes: Code.org's tech sponsors haven't been shy when it comes to using the annual Hour of Code as an infomercial of sorts, and it seems unlikely 2019 will be any different. For this year's event, Google is not only offering Code Your Hero, a one-hour coding activity for kids from Google CS First, it's also asking educators to sing the praises of Google CS First in the already-underway Code Your Hero Social Media Teacher Contest. From the Code Your Hero Official Rules:

"The Code Your Hero Social Media Teacher Contest (the "Contest") is a skill contest where entrants must submit an essay that describes what teachers like best about using CS First for Hour of Code. [...] To enter the Contest, visit the Contest website located at TBD ('Contest Site') during the Contest Period and follow the instructions for submitting an entry that consists of screenshots or photos of students' saved work in Scratch (requires CS First account registration for teachers and students) and brief description of why CS First was helpful in the classroom. Entries are posted to social media using both of these hashtags: '#csfirsthourofcode' and '#codeyourhero' to qualify."

An anonymous reader quotes Forbes: When Microsoft issued the first patch in years for Windows XP in May 2019, you knew that something big was brewing. That something was a wormable Windows vulnerability that security experts warned could have a similar impact as the WannaCry worm from 2017. The BlueKeep vulnerability exists in unpatched versions of Windows Server 2003, Windows XP, Windows Vista, Windows 7, Windows Server 2008 and Windows Server 2008 R2: and it's now been confirmed that a BlueKeep exploit attack is currently ongoing...

Security researchers, including Kevin Beaumont who originally named the vulnerability and Marcus Hutchins (also known as MalwareTech) who was responsible for hitting the kill switch that stopped the WannaCry, have confirmed that a widespread BlueKeep exploit attack is now currently underway. Hutchins told Wired that "BlueKeep has been out there for a while now. But this is the first instance where I've seen it being used on a mass scale." It would appear that rather than a wormable threat, where the BlueKeep exploit could spread itself from one machine to another, the attackers are searching for vulnerable unpatched Windows systems that have Remote Desktop Services (RDP) 3389 ports exposed to the internet. This dampens the panic that there could be another WannaCry about to happen, although the potential for such a scenario, albeit on a much smaller scale, certainly remains. For now though, this looks like being an attack campaign with a cryptocurrency miner payload.

While there is always the possibility that the threat actors behind this attack could drop more malicious payloads than a crypto-miner, for now, this acts as yet another warning for users of the 700,000 or so still vulnerable Windows systems to get patching... Seriously folks, if you are using one of the vulnerable versions of Windows, then what more is it going to take to get you to apply the update that fixes the BlueKeep vulnerability?

"Waymo wants to deploy a robotaxi service for the general public in parts of California as soon as possible," reports the Los Angeles Times. "But that's unlikely, the company says, because California says it has to offer the service for free." Last year, the California Public Utilities Commission allowed driverless "robotaxi" pilot programs in the state but banned permit-holders from charging fares. The ban is considered temporary but has no timeline. Some industry analysts say the uncertainty could put California's reputation as the world leader in driverless technology at risk.

The free-or-nothing mandate makes no sense to Waymo, the driverless vehicle arm of Google's Alphabet, or to other driverless vehicle start-ups hoping to establish themselves in a new industry that could produce the biggest change in ground transportation since the invention of the automobile. Waymo requires a "commercial path forward" before it can offer Californians the kind of driverless taxi service it's already running across 100 square miles in Phoenix, according to George Ivanov, Waymo's head of policy development and regulatory initiatives...

In July, Waymo began a commission-approved pilot program to ferry Waymo and Google employees and guests through parts of Silicon Valley in driverless cars for free. Waymo doesn't need fare money to fund operations -- Alphabet is an enormous profit machine, and holds more than $100 billion in cash. But Ivanov explained that experimenting with customer response to different fare structures is essential to building out the robotaxi business, which would be like Uber or Lyft but without a human driver.

"Waymo said that its autonomous vehicles will be used to help shuttle car parts between several AutoNation locations and other repair shops in the Phoenix, Arizona area," reports the International Business Times: While the expanded partnership may not seem like a big deal at first blush, it's important for investors to know that the move is yet another step for Waymo toward the self-driving business-to-business delivery market. While Waymo has received a lot of attention for the company's robotaxis (which currently run in a limited capacity in the Phoenix area), the company has always been clear that the same technology that drives its people-moving vans can be used for delivery of goods as well.

Why focus on self-driving vans for package deliveries and autonomous freight trucks? Because the market for B2B deliveries could eventually be as high as $1 trillion, according to Bloomberg. Autonomous vehicle deliveries are being seen as the answer to the growing truck driver shortage in America. Sixty-five percent of the consumable goods in the U.S. are moved via trucks, and the American Trucking Association says that the shortage of long-haul drivers has reached 60,000... With e-commerce still growing quickly, companies of all sizes are trying to find better ways to deliver their merchandise to third-party businesses and customers. And that's what makes Waymo's expanded AutoNation partnership so important.

If the company can prove that its autonomous driving vehicles can quickly and reliably perform deliveries over and over again for AutoNation, then other retailers may soon look to the company for their delivery needs.

"Lots of hay has been made over self-driving, self-parking, and summon features of new cars," writes Shotgun (Slashdot reader #30,919). "Now Garmin has a system that will land your plane for you."

He shares this new report from the Aircraft Owners and Pilots Association: During this first-ever autoland for me, nothing felt terribly out of the ordinary until the final 100 feet or so when it finally sunk in that in a few seconds we would be hitting the pavement and no one had their hands on the yoke.

But just as briefed, the airplane "decrabbed" from the 10-knot left crosswind and soon plunked us down just left of center on Runway 18 at New Century AirCenter in Olathe, Kansas, and then quickly tracked us back to the centerline. A few seconds later we rolled to a stop... Such was my introduction to Garmin's new autoland system, a first in general aviation...

While the notion of an autoland system seems futuristic, Garmin has been quietly working on it since 2011 and conducted its first autoland in a Columbia piston-powered airplane in 2014 and first briefed the FAA on it in 2015. Since then it has conducted some 800 autolands... Someday, with more experience and the FAA more comfortable with the notion, perhaps Autoland will be available on any given flight where the pilot doesn't feel up to the landing. Meanwhile, it's a great safety feature. "This will save lives," said Ron Gunnarson, Piper's vice president of sales, marketing, and customer support. Once certified, the system will be standard on the 2020 M600 SLS models... Cirrus plans to offer Autoland as a standard feature on the 2020 models.
The article describes it as "a digital parachute" for the pilot and passengers in emergency situations. And the original submission argues that it brings to general aviation a safety feature that the big airliners have already had for years.

"Web pages have never been able to directly access your computer's (or phone's) file system, unless there was a plugin like Java or ActiveX involved somewhere," reports Android Police.

The new Native File System API in Chrome 78 changes that... Here's how the API works: A web page can bring up a file picker dialog, just like you would see when clicking an Upload button on any web site. One file, a group of files, or an entire folder can be selected (it's up to the web page). The page can later save changes to those files, if it wants.

Before you start freaking out that web sites can now alter your files, there are a lot of security precautions built into this already, and the Chrome team will likely add more before the feature is ready for widespread use. Sites can only see the files you specifically select, they can only save changes back to those files if granted permission, an indicator is added to the address bar if a site has file permissions (on the desktop, anyway), and right now the permission only stays granted until the site is closed.

I can't wait to see what gets done with this functionality. We could get online code editors that can actually work with several local files at once, or maybe Google Docs could edit Word files directly on your PC without uploading/converting them first.
The article also describes one possible application from Chrome's SMS Receiver API (currently in "Origin Trial" status): Many apps and services ask you to verify your phone number by sending a code via SMS. In most cases, you have to leave the app, open the messaging app, copy the code, return to the original app, and paste the code. Google just added an API for Android apps that can automate this process, and now a similar feature is in the works for Chrome.

"Congrats! This car is all yours, with no one up front," announces the cheery pop-up notification from Waymo's app. "This ride will be different. With no one else in the car, Waymo will do all the driving. Enjoy this free ride on us!"

TechCrunch got one of the first completely-driverless rides as a journalist, writes long-time Slashdot reader galgon. "It appears per Waymo's annoucement earlier this month that driverless rides really are ramping up in the Chandler, AZ area." From TechCrunch's report: Moments later, an empty Chrysler Pacifica minivan appears and navigates its way to my location near a park in Chandler, the Phoenix suburb where Waymo has been testing its autonomous vehicles since 2016.... Waymo wouldn't share specific numbers on just how many driverless rides it would be giving, only saying that it continues to ramp up its operations. Here's what we do know. There are hundreds of customers in its early rider program, all of whom will have access to this offering. These early riders can't request a fully driverless ride. Instead, they are matched with a driverless car if it's nearby. There are, of course, caveats to this milestone. Waymo is conducting these "completely driverless" rides in a controlled geofenced environment. Early rider program members are people who are selected based on what ZIP code they live in and are required to sign NDAs. And the rides are free, at least for now.

Still, as I buckle my seatbelt and take stock of the empty driver's seat, it's hard not to be struck, at least for a fleeting moment, by the achievement... Seeing an empty driver's seat at 45 miles per hour, or a steering wheel spinning in empty space as it navigates suburban traffic, feels inescapably surreal... There were moments where the self-driving system's driving impressed, like the way it caught an unprotected left turn just as the traffic signal turned yellow or how its acceleration matched surrounding traffic. The vehicle seemed to even have mastered the more human-like driving skill of crawling forward at a stop sign to signal its intent. Only a few typical quirks, like moments of overly cautious traffic spacing and overactive path planning, betrayed the fact that a computer was in control. A more typical rider, specifically one who doesn't regularly practice their version of the driving Turing Test, might not have even noticed them...

Given how fundamentally autonomous mobility could impact our society and cities, it's reassuring to know that one of the technology's leading developers is taking the time to understand and adapt to them.
The article also notes that "developing the technologies and protocols that allow a driverless Waymo to detect and pull over for emergency response vehicles and even allow emergency services to take over control was a complex task that required extensive testing and collaboration with local authorities."

The original submission also points out that the first video of a completely driver-less Waymo car has now surfaced on YouTube. "Waymo has produced several videos over the years without safety drivers but actual driverless operations have been very minimal and never photographed in the wild."

Until now...

Thelasko shared Sandia's report: Ducted fuel injection, developed by Chuck Mueller at Sandia's Combustion Research Facility, is able to fine-tune the amount of diesel used in an engine to the point of eliminating between 50 and 100% of the soot... [H]e and his team, Christopher Nilsen, Drummond Biles and Nathan Harry, began experiments that have now resulted in an assembly of four to six small tubes, or ducts, directing fuel mixture from the injector right to the points of ignition. Chuck said that injectors in a traditional diesel engine create local mixtures containing 3-10 times more fuel than is needed for complete combustion. "When you have that much excess fuel at high temperature, you tend to produce a lot of soot," he said...

"Soot is second only to carbon dioxide in climate change, and it's toxic, so its emissions should be minimized," Chuck said. "In the past, there's always been this problem called the soot/nitrogen oxides trade-off. That is: when you do something to lower soot, emissions of nitrogen oxides -- or NOx -- go up, and vice versa... Now that we've got soot out of the way, there's no more soot/NOx trade-off," he said. "So we can add dilution -- taking some of the engine exhaust and routing it back to the intake -- to get rid of NOx without soot emissions becoming a problem. It's like a two-for-one deal on reducing pollutants... This gives us a path to much lower emissions for diesel engines, solving a long-standing problem for this highly efficient technology," he said.
The article also notes that two major diesel engine manufacturers, Ford and Caterpillar, "recently signed a cooperative research and development agreement with Sandia to help advance the technology."

"An unprecedented investigation into disinformation on Facebook has hit turbulence over questions about how much data to release to outside researchers," reports Fast Company, "curtailing efforts to stem one of social media's most pernicious threats ahead of the 2020 elections."

Slashdot reader tedlistens writes: Social Science One, an unprecedented, Mark Zuckerberg-backed plan to open up Facebook's data to outside researchers -- with the aim of fighting disinformation and propaganda ahead of elections in 2020 -- has run up against privacy concerns at Facebook. A month after the funders' deadline, Facebook continues to work on treating the data with differential privacy techniques and says it hopes to publish more datasets soon. But researchers are frustrated and confused, and the backers are reconsidering their support. And lawmakers like Sen. Mark Warner, the vice chair of the Senate Intelligence Committee, are growing impatient too.

"In Congress, we need to require greater accountability from social media platforms on everything from the transparency of political ad funding, to the legitimacy of content, to the authenticity of user accounts," Warner tells Alex Pasternack at Fast Company. "And if platforms refuse to comply, we need to be able to hold them responsible."

"Top domain name registrars NetworkSolutions.com, Register.com and Web.com are asking customers to reset their passwords after discovering an intrusion in August 2019 in which customer account information was accessed," reports security researcher Brian Krebs: "On October 16, 2019, Web.com determined that a third-party gained unauthorized access to a limited number of its computer systems in late August 2019, and as a result, account information may have been accessed," Web.com said in a written statement. "No credit card data was compromised as a result of this incident." The Jacksonville, Fla.-based Web.com said the information exposed includes "contact details such as name, address, phone numbers, email address and information about the services that we offer to a given account holder...."

Both Network Solutions and Register.com are owned by Web.com. Network Solutions is now the world's fifth-largest domain name registrar, with almost seven million domains in its stable, according to domainstate.com; Register.com listed at #17 with 1.7 million domains.... Web.com said it has reported the incident to law enforcement and hired an outside security firm to investigate further, and is in the process of notifying affected customers through email and via its website....

Web.com wasn't clear how long the intrusion lasted, but if the breach wasn't detected until mid-October that means the intruders potentially had about six weeks inside unnoticed. That's a long time for an adversary to wander about one's network, and plenty of time to steal a great deal more information than just names, addresses and phone numbers.

An anonymous reader quotes a report from NPR: A Russian law has taken effect that, in theory, would allow the Russian government to cut off the country's Internet from the rest of the world. The "sovereign Internet law," as the government calls it, greatly enhances the Kremlin's control over the Web. It was passed earlier this year and allows Russia's government to cut off the Internet completely or from traffic outside Russia "in an emergency," as the BBC reported. But some of the applications could be more subtle, like the ability to block a single post.

It requires Internet service providers to install software that can "track, filter, and reroute internet traffic," as Human Rights Watch stated. Such technology allows the state telecommunications watchdog "to independently and extrajudicially block access to content that the government deems a threat." The equipment would conduct what's known as "deep packet inspection," an advanced way to filter network traffic. Such widespread control is alarming to human rights groups, which fear it could be used to silence dissent. The Russian government has justified the law by saying it is needed to prevent U.S. cyberattacks. And, as the BBC reported, Kremlin spokesman Dmitry Peskov has rejected the idea the law could be used to cut off Russia from the rest of the world: "No-one is suggesting cutting the Internet."

dryriver shares a report from the BBC: When McDonald's closed all its restaurants in Iceland in 2009, one man decided to buy his last hamburger and fries. "I had heard that McDonald's never decompose so I just wanted to see if it was true or not," Hjortur Smarason told AFP. This week, it's 10 years since the seemingly indestructible meal was purchased, and it barely looks a day older. Curious observers can watch a live stream of the burger and fries from its current location in a glass cabinet in Snotra House, a hostel in southern Iceland. "The old guy is still there, feeling quite well. It still looks quite good actually," the hostel's owner Siggi Sigurdur told BBC News. "It's a fun thing, of course, but it makes you think about what you are eating. There is no mold, it's only the paper wrapping that looks old." The hostel claims that people come from around the world to visit the burger, and the website receives up to 400,000 hits daily.