The Courts

Man Sued For Using Bogus YouTube Takedowns To Get Address For Swatting (arstechnica.com) 78

An anonymous reader quotes a report from Ars Technica: YouTube is suing a Nebraska man the company says has blatantly abused its copyright takedown process. The Digital Millennium Copyright Act offers online platforms like YouTube legal protections if they promptly take down content flagged by copyright holders. However, this process can be abused -- and boy did defendant Christopher L. Brady abuse it, according to YouTube's legal complaint (pdf). Brady allegedly made fraudulent takedown notices against YouTube videos from at least three well-known Minecraft streamers. In one case, Brady made two false claims against a YouTuber and then sent the user an anonymous message demanding a payment of $150 by PayPal -- or $75 in bitcoin.

"If you decide not to pay us, we will file a 3rd strike," the message said. When a YouTube user receives a third copyright strike, the YouTuber's account gets terminated. A second target was ordered to pay $300 by PayPal or $200 in Bitcoin to avoid a third fraudulent copyright strike. A third incident was arguably even more egregious. According to YouTube, Brady filed several fraudulent copyright notices against another YouTuber with whom he was "engaged in some sort of online dispute." The YouTuber responded with a formal counter-notice stating that the content wasn't infringing -- a move that allows the content to be reinstated. However, the law requires the person filing the counter-notice to provide his or her real-world name and address -- information that's passed along to the person who filed the takedown request. This contact information is supposed to enable a legitimate copyright holder to file an infringement lawsuit in court.
Shortly after filing a counter-notice, the targeted YouTuber "announced via Twitter that he had been the victim of a swatting scheme."

YouTube says it doesn't have hard proof that Brady was responsible for the swatting call -- even though it "appears" that way, but it does have compelling evidence that Brady was responsible for the fraudulent takedown notices, which are against the law.
Android

Google Launches Android Studio 3.5 With Improved Memory Settings, Build Speed, and Apply Changes (venturebeat.com) 15

Google today launched Android Studio 3.5, the latest version of its integrated development environment (IDE), with a specific focus on "product quality." From a report: This release is the last one under Project Marble, a fancy name for an initiative Google announced late last year to improve Android Studio. For eight months, the team focused "on making the fundamental features and flows of Android Studio & Emulator rock-solid." All the improvements were either to system health, feature polish, or bug fixes. To improve system health, Google created a new set of infrastructure and internal dashboards to better detect performance problems. The team ultimately fixed over 600 bugs, 50 memory leaks, and 20 IDE hangs, and improved XML & Kotlin typing latency. For the Android Emulator, the team decreased the CPU and memory impact. The team also took a look at app deployment flow to a device, replacing Instant Run with Apply Changes. The new system no longer modifies an APK during your build. Instead, it uses runtime instrumentation to redefine classes on the fly.
AI

Flawed Algorithms Are Grading Millions of Students' Essays (vice.com) 90

Fooled by gibberish and highly susceptible to human bias, automated essay-scoring systems are being increasingly adopted, a Motherboard investigation has found. From a report: Every year, millions of students sit down for standardized tests that carry weighty consequences. National tests like the Graduate Record Examinations (GRE) serve as gatekeepers to higher education, while state assessments can determine everything from whether a student will graduate to federal funding for schools and teacher pay. Traditional paper-and-pencil tests have given way to computerized versions. And increasingly, the grading process -- even for written essays -- has also been turned over to algorithms. Natural language processing (NLP) artificial intelligence systems -- often called automated essay scoring engines -- are now either the primary or secondary grader on standardized tests in at least 21 states, according to a survey conducted by Motherboard. Three states didn't respond to the questions.

Of those 21 states, three said every essay is also graded by a human. But in the remaining 18 states, only a small percentage of students' essays -- it varies between 5 to 20 percent -- will be randomly selected for a human grader to double check the machine's work. But research from psychometricians -- professionals who study testing -- and AI experts, as well as documents obtained by Motherboard, show that these tools are susceptible to a flaw that has repeatedly sprung up in the AI world: bias against certain demographic groups. And as a Motherboard experiment demonstrated, some of the systems can be fooled by nonsense essays with sophisticated vocabulary. Essay-scoring engines don't actually analyze the quality of writing. They're trained on sets of hundreds of example essays to recognize patterns that correlate with higher or lower human-assigned grades. They then predict what score a human would assign an essay, based on those patterns.

Facebook

You Can Finally See All Of The Info Facebook Collected About You From Other Websites (buzzfeednews.com) 35

Facebook said Tuesday it's rolling out a long-awaited privacy feature that will let users see and clear information from apps and websites they browse outside of the social network. Some people in Ireland, South Korea, and Spain will gain access to this feature first, but the company plans to broaden the availability soon. From a report: Facebook collects information about its users in two ways: first, through the information you input into its website and apps, and second, by tracking which websites you visit while you're not on Facebook. That's why, after you visit a clothing retailer's website, you'll likely see an ad for it in your Facebook News Feed or Instagram feed. Basically, Facebook monitors where you go, all across the internet, and uses your digital footprints to target you with ads. But Facebook users have never been able to view this external data Facebook collected about them, until now.

Facebook tracks your browsing history via the "Login with Facebook" button, the "like" button, Facebook comments, and little bits of invisible code, called the Facebook pixel, embedded on other sites. Today the company will start to roll out a feature called "Off-Facebook Activity" that allows people to manage that external browsing data -- finally delivering on a promise it made over a year ago when CEO Mark Zuckerberg announced at a company event that it would develop a feature then called "Clear History." The new tool will display a summary of those third-party websites that shared your visit with Facebook, and will allow you to disconnect that browsing history from your Facebook account. You can also opt out of future off-Facebook activity tracking, or selectively stop certain websites from sending your browsing activity to Facebook. Nearly a third of all websites include a Facebook tracker, according to several studies.

Google

Google's Clickless Era (axios.com) 52

For the first time last month, a majority of all browser-based Google searches resulted in zero clicks, according to a new study from software company Sparktoro. From a report: The report's author notes that Google's functionality has changed to keep users within the Google ecosystem, not to always refer them outside of it. "We've passed a milestone in Google's evolution from search engine to walled-garden," he writes. On mobile, where the majority of search traffic takes place, organic searches have fallen about 20%, and have instead been replaced by paid searches and "zero click" searches, or search queries that result in snippets of information being presented, removing the need for a user to click into a link. In January 2016, the report notes, more than half of mobile searches ended without a click. Today, it's almost two-thirds.
Programming

Bitbucket Dropping Support For Mercurial 42

Bitbucket, once one of the largest Mercurial repository hosting sites, said Tuesday it plans to remove Mercurial features and repositories from its platform on June 1, 2020. In a blog post, Bitbucket wrote: As we surpass 10 million registered users on the platform, we're at a point in our growth where we are conducting a deeper evaluation of the market and how we can best support our users going forward. After much consideration, we've decided to remove Mercurial support from Bitbucket Cloud and its API. Bitbucket will stop letting users create new Mercurial repositories starting February 1, 2020, and start removing all the Mercurial repositories four months later. So you will want to backup your repositories and switch to a different platform in the coming months. A different user pointed out, "Another shitty aspect of bitbucket dropping mercurial support and deleting all the old repositories in 2020: all yt pull request discussions from before 2017 are going to be deleted. There's valuable context for how the code got written in those discussions." Several users have expressed their concerns over this decision. Sebastien Jodogne, CSO at Osimis, said, "This is an extremely concerning decision that endangers diversity in the computer science industry by pushing the de facto hegemony of git."

For those of you affected by this, you can consider a number of platforms including SourceForge to host and manage your repositories.
Privacy

WebKit Introduces New Tracking Prevention Policy (webkit.org) 35

AmiMoJo writes: WebKit, the open source HTML engine used by Apple's Safari browser and a number of others, has created a new policy on tracking prevention. The short version is that many forms of tracking will now be treated the same way as security flaws, being blocked or mitigated with no exceptions. While on-site tracking will still be allowed (and is practically impossible to prevent anyway), all forms of cross-site tracking and covert tracking will be actively and aggressively blocked.
The Internet

The Truth About Faster Internet: It's Not Worth It (wsj.com) 253

Americans are spending ever more for blazing internet speeds, on the promise that faster is better. Is that really the case? For most people, the answer is no. From a report: The Wall Street Journal studied the internet use of 53 of our journalists across the country, over a period of months, in coordination with researchers at Princeton University and the University of Chicago. Our panelists used only a fraction of their available bandwidth to watch streaming services including Netflix, Amazon Prime Video and YouTube, even simultaneously. Quality didn't improve much with higher speeds. Picture clarity was about the same. Videos didn't launch quicker. Broadband providers such as Comcast, Charter and AT&T are marketing speeds in the range of 250, 500 or even 1,000 megabits a second, often promising that streaming-video bingers will benefit. "Fast speeds for all of your shows," declares one online ad from Comcast. But for a typical household, the benefits of paying for more than 100 megabits a second are marginal at best, according to the researchers. That means many households are paying a premium for services they don't need.

To gauge how much bandwidth, or speed capacity, households need, it helps to look at an extreme scenario. Our users spent an evening streaming up to seven services simultaneously, including on-demand services like Netflix and live-TV services like Sling TV. We monitored the results. Peter Loftus, one of our panelists, lives outside Philadelphia and is a Comcast customer with a speed package of 150 megabits a second. Peter's median usage over 35 viewing minutes was 6.9 Mbps, 5% of the capacity he pays for. For the portion when all seven of his streams were going at once, he averaged 8.1 Mbps. At one point, for one second, Peter reached 65% of his capacity. Did his video launch faster or play more smoothly? Not really. The researchers said that to the extent there were differences in video quality such as picture resolution or the time it took to launch a show, they were marginal.

United States

States To Launch Antitrust Investigation Into Big Tech Companies (techcrunch.com) 47

An anonymous reader shares a report: The state attorneys in more than a dozen states are preparing to begin an antitrust investigation of the tech giants, the Wall Street Journal and the New York Times reported Monday, putting the spotlight on an industry that is already facing federal scrutiny. The bipartisan group of attorneys from as many as 20 states is expected to formally launch a probe as soon as next month to assess whether tech companies are using their dominant market position to hurt competition, WSJ reported.
Technology

Juul, Philip Morris Sued Under Racketeer Act For Targeting Kids (bloomberg.com) 112

An anonymous reader quotes a report from Bloomberg: E-cigarette maker Juul Labs Inc. and Philip Morris USA Inc. were sued for illegally marketing nicotine-delivery devices to minors and deceiving consumers about the risks of vaping. The lawsuit was filed on behalf of a 19-year-old, Christian Foss, who says he became addicted to nicotine and suffered worsening asthma symptoms after he began using Juul's device at 16, and seeks to represent all Illinois minors who used it. It alleges that Juul and Philip Morris violated the Racketeer Influenced and Corrupt Organizations Act, adopting the tobacco industry's past use of catchy ad campaigns aimed at children. The Justice Department invoked RICO to sue the industry two decades ago. "Mimicking Big Tobacco's past marketing practices, defendants prey on youth for financial gain," according to the lawsuit, filed Monday in federal court in Chicago. Philip Morris is a unit of Altria Group, which is also named as a defendant and which recently bought a 35% stake in Juul for $12.8 billion.
Transportation

Jaguar and Audi SUVs Fail To Dent Tesla's Electric-Car Dominance (bloomberg.com) 215

Tesla has managed to expand its electric-car marketshare, despite two new battery-powered luxury SUVs that have been in U.S. showrooms for the last 10 months: Jaguar's I-Pace and Audi's e-tron. Bloomberg reports: Their starts are the latest indications that legacy automakers aren't assured instant success when they roll out new plug-in models. Tesla's Model S and X have largely held its own against the two crossovers that offer shorter range and less plentiful public charging infrastructure. Jaguar and Audi also lack the cool factor Musk has cultivated for the Tesla brand by taking an aggressive approach to autonomy and using over-the-air software updates to add games and entertainment features. Tesla's Model X and Model S each boast more than 300 miles of range, and the cheaper Model 3 travels 240 miles between charges. Jaguar's $69,500 I-Pace is rated at 234 miles, and Audi's $74,800 e-tron registers 204 miles.

Jaguar's marketing team spent years laying the groundwork to introduce the I-Pace. In 2016, the brand joined Formula E, an open-wheeled, electric-powered race circuit similar to Formula One. Porsche and Mercedes-Benz are also joining Formula E for the 2019-2020 season to help generate buzz for the new all-electric models they have coming out. The circuit makes stops in cities including New York, Hong Kong and London, which the brands are banking on as major markets for plug-in cars. But while Formula E is drawing crowds of urban dwellers and a substantial audience on social media, all that buzz may not necessarily translate into showroom traffic.

The Military

Pentagon Conducts First Test of Previously Banned Missile (apnews.com) 142

The U.S. military has conducted a flight test of a type of missile banned for more than 30 years by a treaty that both the United States and Russia abandoned this month, the Pentagon said. The Associated Press reports: The test off the coast of California on Sunday marked the resumption of an arms competition that some analysts worry could increase U.S.-Russian tensions. The Trump administration has said it remains interested in useful arms control but questions Moscow's willingness to adhere to its treaty commitments. The Pentagon said it tested a modified ground-launched version of a Navy Tomahawk cruise missile, which was launched from San Nicolas Island and accurately struck its target after flying more than 500 kilometers (310 miles). The missile was armed with a conventional, not nuclear, warhead.

Defense officials had said last March that this missile likely would have a range of about 1,000 kilometers (620 miles) and that it might be ready for deployment within 18 months. The missile would have violated the Intermediate-range Nuclear Forces (INF) Treaty of 1987, which banned all types of missiles with ranges between 500 kilometers (310 miles) and 5,500 kilometers (3,410 miles). The U.S. and Russia withdrew from the treaty on Aug. 2, prompted by what the administration said was Russia's unwillingness to stop violating the treaty's terms. Russia accused the U.S. of violating the agreement.
The Pentagon says it also intends to begin testing, probably before the end of this year, an INF-range ballistic missile with a range of roughly 3,000 kilometers (1,864 miles) to 4,000 kilometers (2,485 miles).
Twitter

Twitter Blocks State-Controlled Media Outlets From Advertising On Its Social Network 100

Twitter is now blocking state-run media outlets from advertising on its platform. The new policy was announced just hours after the company was criticized for running promoted tweets by China's largest state agency that paint pro-democracy demonstrations in Hong Kong as violent, even though the rallies, including one that drew an estimated 1.7 million people this weekend, have been described as mostly peaceful by international media. TechCrunch reports: State-funded media enterprises that do not rely on taxpayer dollars for their financing and don't operate independently of the governments that finance them will no longer be allowed to advertise on the platform, Twitter said in a statement. That leaves a big exception for outlets like the Associated Press, the British Broadcasting Corp., Public Broadcasting Service and National Public Radio, according to reporting from BBC reporter, Dave Lee. The affected accounts will be able to use Twitter, but can't access the company's advertising products, Twitter said in a statement.

The policy applies to news media outlets that are financially or editorially controlled by the state, Twitter said. The company said it will make its policy determinations on the basis of media freedom and independence, including editorial control over articles and video, the financial ownership of the publication, the influence or interference governments may exert over editors, broadcasters and journalists, and political pressure or control over the production and distribution process. Twitter said the advertising rules wouldn't apply to entities that are focused on entertainment, sports or travel, but if there's news in the mix, the company will block advertising access. Affected outlets have 30 days before they're removed from Twitter and the company is halting all existing campaigns.
Bitcoin

Terrorists Turn To Bitcoin For Funding, and They're Learning Fast (nytimes.com) 62

An anonymous reader quotes a report from The New York Times: Hamas, the militant Palestinian group, has been designated a terrorist organization by Western governments and some others and has been locked out of the traditional financial system. But this year its military wing has developed an increasingly sophisticated campaign to raise money using Bitcoin. In the latest version of the website set up by the wing, known as the Qassam Brigades, every visitor is given a unique Bitcoin address where he or she can send the digital currency, a method that makes the donations nearly impossible for law enforcement to track. The site, which is available in seven languages and features the brigades' logo, with a green flag and a machine gun, contains a well-produced video that explains how to acquire and send Bitcoin without tipping off the authorities. Terrorists have been slow to join other criminal elements that have been drawn to Bitcoin and have used it for everything from drug purchases to money laundering.

But in recent months, government authorities and organizations that track terrorist financing have begun to raise alarms about an uptick in the number of Islamist terrorist organizations experimenting with Bitcoin and other digital coins. The yields from individual campaigns appear to be modest -- in the tens of thousands of dollars. But the authorities note that terrorist attacks often require little funding. And the groups' use of cryptocurrencies appears to be getting more sophisticated.
The Middle East Media Research Institute, a nonprofit that tracks and translates communication from terrorist groups, is about to publish a 253-page report about the increased signs of cryptocurrency use by terrorist organizations. According to the NYT, the report will focus on groups in Syria that are on the run as Islamic militants have lost almost all the territory they used to hold.
AI

Cerebras Systems Unveils a Record 1.2 Trillion Transistor Chip For AI (venturebeat.com) 67

An anonymous reader quotes a report from VentureBeat: New artificial intelligence company Cerebras Systems is unveiling the largest semiconductor chip ever built. The Cerebras Wafer Scale Engine has 1.2 trillion transistors, the basic on-off electronic switches that are the building blocks of silicon chips. Intel's first 4004 processor in 1971 had 2,300 transistors, and a recent Advanced Micro Devices processor has 32 billion transistors. Samsung has actually built a flash memory chip, the eUFS, with 2 trillion transistors. But the Cerebras chip is built for processing, and it boasts 400,000 cores on 42,225 square millimeters. It is 56.7 times larger than the largest Nvidia graphics processing unit, which measures 815 square millimeters and 21.1 billion transistors. The WSE also contains 3,000 times more high-speed, on-chip memory and has 10,000 times more memory bandwidth.
IOS

Hacker Releases First Public Jailbreak for Up-to-Date iPhones in Years (vice.com) 12

Apple has mistakenly made it a bit easier to hack iPhone users who are on the latest version of its mobile operating system iOS by unpatching a vulnerability it had already fixed. From a report: Hackers quickly jumped on this over the weekend, and publicly released a jailbreak for current, up-to-date iPhones -- the first free public jailbreak for a fully updated iPhone that's been released in years. Security researchers found this weekend that iOS 12.4, the latest version released in June, reintroduced a bug found by a Google hacker that was fixed in iOS 12.3. That means it's currently relatively easy to not only jailbreak up to date iPhones, but also hack iPhone users, according to people who have studied the issue.

"Due to 12.4 being the latest version of iOS currently available and the only one which Apple allows upgrading to, for the next couple of days (till 12.4.1 comes out), all devices of this version (or any 11.x and 12.x below 12.3) are jail breakable -- which means they are also vulnerable to what is effectively a 100+ day exploit," said Jonathan Levin, a security researcher and trainer who specializes in iOS, referring to the fact that this vulnerability can be exploited with code that was found more than 100 days ago. Pwn20wnd, a security researcher who develops iPhone jailbreaks, published a jailbreak for iOS 12.4 on Monday.

Books

An Ode To Microsoft Encarta (hanselman.com) 81

Scott Hanselman: Microsoft Encarta came out in 1993 and was one of the first CD-ROMs I had. It stopped shipping in 2009 on DVD. I recently found a disk and was impressed that it installed just perfectly on my latest Window 10 machine and runs nicely. Encarta existed in an interesting place between the rise of the internet and computer's ability to deal with (at the time) massive amounts of data. CD-ROMs could bring us 700 MEGABYTES which was unbelievable when compared to the 1.44MB (or even 120KB) floppy disks we were used to. The idea that Encarta was so large that it was 5 CD-ROMs (!) was staggering, even though that's just a few gigs today. Even a $5 USB stick could hold Encarta - twice!

My kids can't possibly intellectualize the scale that data exists in today. We could barely believe that a whole bookshelf of Encyclopedias was now in our pockets. I spent hours and hours just wandering around random articles in Encarta. The scope of knowledge was overwhelming, but accessible. But it was contained - it was bounded. Today, my kids just assume that the sum of all human knowledge is available with a single search or a "hey Alexa" so the world's mysteries are less mysteries and they become bored by the Paradox of Choice. In a world of 4k streaming video, global wireless, and high-speed everything, there's really no analog to the feeling we got watching the Moon Landing as a video in Encarta - short of watching it live on TV in the 1969! For most of us, this was the first time we'd ever seen full-motion video on-demand on a computer in any sort of fidelity - and these are mostly 320x240 or smaller videos!

Twitter

Twitter is Blocked in China, But Chinese State News Agency is Buying Promoted Tweets To Portray Hong Kong Protestors as Violent (techcrunch.com) 123

Chinese state-run news agency Xinhua is promoting tweets attacking the protestors and claiming they do not have wider support. From a report: Twitter is being criticized for running promoted tweets by China's largest state news agency that paint pro-democracy demonstrations in Hong Kong as violent, even though the rallies, including one that drew an estimated 1.7 million people this weekend, have been described as mostly peaceful by international media. Promoted tweets from China Xinhua News, the official mouthpiece of the Chinese Communist Party, were spotted and shared by the Twitter account of Pinboard, the bookmarking service founded by Maciej Ceglowski, and other users. The demonstrations began in March to protest a now-suspended extradition bill, but have grown to encompass other demands, including the release of imprisoned protestors, inquiries into police conduct, the resignation of current Chief Executive of Hong Kong Carrie Lam and a more democratic process for electing Legislative Council members and the chief executive. UPDATE: Twitter is now blocking state-run media outlets from advertising on its platform.
Communications

Small Companies Play Big Role in Robocall Scourge, But Remedies Are Elusive (wsj.com) 56

The billions of illegal robocalls inundating Americans are being facilitated largely by small telecom carriers that transmit calls over the internet, industry officials say, but authorities are at odds over what -- if anything -- they can do to stop them. From a report: These telecom carriers typically charge fractions of a cent per call, making their money on huge volume. Their outsize role in the robocall scourge has become apparent as large telecom companies get better at tracing robocalls to their source, spurring calls for regulators to hold them accountable. "There are definitely repeat offenders who keep showing up as the sources of illegal robocalls," said Patrick Halley, a senior vice president at USTelecom, a trade association of telecom companies that runs a robocall-tracing group. "Carriers that knowingly allow the origination of billions of illegal robocalls should be held accountable." U.S. regulators have conflicting interpretations of their ability to take the companies to court, however. And carriers aren't explicitly required to try to differentiate between legal and illegal robocalls, further clouding enforcement.
Privacy

Degrading Tor Network Performance Only Costs a Few Thousand Dollars Per Month (zdnet.com) 16

Threat actors or nation-states looking into degrading the performance of the Tor anonymity network can do it on the cheap, for only a few thousands US dollars per month, new academic research has revealed. An anonymous reader writes: According to researchers from Georgetown University and the US Naval Research Laboratory, threat actors can use tools as banal as public DDoS stressers (booters) to slow down Tor network download speeds or hinder access to Tor's censorship circumvention capabilities. Academics said that while an attack against the entire Tor network would require immense DDoS resources (512.73 Gbit/s) and would cost around $7.2 million per month, there are far simpler and more targeted means for degrading Tor performance for all users. In research presented this week at the USENIX security conference, the research team showed the feasibility and effects of three types of carefully targeted "bandwidth DoS [denial of service] attacks" that can wreak havoc on Tor and its users. Researchers argue that while these attacks don't shut down or clog the Tor network entirely, they can be used to dissuade or drive users away from Tor due to prolongued poor performance, which can be an effective strategy in the long run.

Slashdot Top Deals