Twitter Users Are Escaping Online Hate by Switching Profiles To Germany (cnbc.com) 335
"We are not the paradise of social media without any hate speech whatsoever," said Stephan Dreyer, a senior media law and governance researcher at the Hans-Bredow-Institut in Germany. While the most obvious expressions of Nazism and racism may be harder to find on Twitter accounts with their locations set to Germany, there is still plenty of coded content that slips through the cracks, Dreyer said. Twitter users often point to the company's content policy in Germany to argue it should be able to identify and remove Nazis from the platform in other regions. When Maureen Colford learned about the location setting "hack" to filter out Nazis, she said she was "amazed that somehow Twitter manages to do this in Germany," and wondered, "why can't they do this everywhere?"
UK-based Mobile-Only Bank Monzo Admits To Storing Payment Card PINs in Internal Logs (zdnet.com) 33
Elon Musk Hints at Tesla's Secret Project 'Dojo' Making the Difference in Race To Full Self-Driving (electrek.co) 122
Last weekend, Musk was asked about the secret project and while the CEO didn't reveal anything new, he did hint that it could make the difference. During Autonomy Day, Musk briefly mentioned the project 'Dojo': "We do have a major program at Tesla which we don't have enough time to talk about today called "Dojo." That's a super powerful training computer. The goal of Dojo will be to be able to take in vast amounts of data and train at a video level and do unsupervised massive training of vast amounts of video with the Dojo program -- or Dojo computer."
Huawei Tests Smartphone With Own OS, Could Potentially Start Selling Them Later This Year (reuters.com) 70
Half of All Google Chrome Extensions Have Fewer Than 16 Installs (zdnet.com) 56
Lyft Pulls Its Electric Bikes From the Bay Area After Four Catch on Fire (siliconvalley.com) 52
Representatives from Lyft reached out to the city on Wednesday after two fires were reported in San Francisco over the past week, he said, and told them it would deactivate the e-bikes until it could remove them from its fleet...
Lyft spokeswoman Julie Wood declined to answer questions about the incidents, other than to say no one was injured.... Wood on Thursday didn't respond to repeated questions from this news organization about whether there were any fires involving the e-bikes outside of San Francisco.
Lyft told the paper at least one of the fires was causd by vandalism (and not a malfunctioning battery) but acknowledged they weren't sure what caused the next two bike fires.
One frequent cycler wondered why Lyft didn't simply offer their customers regular (non-electric) bicycles? He told the newspaper that the disruption in service was frustrating -- though "I understand the safety concern and I don't want there to be a battery exploding between my legs when I'm riding the bike around."
The paper also notes reports that Lyft "pulled its black electric assist bikes in April after problems with the brakes caused some riders to careen over the handlebars."
Cloudflare Terminates 8chan (cloudflare.com) 940
"The rationale is simple: they have proven themselves to be lawless and that lawlessness has caused multiple tragic deaths. Even if 8chan may not have violated the letter of the law in refusing to moderate their hate-filled community, they have created an environment that revels in violating its spirit." We do not take this decision lightly. Cloudflare is a network provider. In pursuit of our goal of helping build a better internet, we've considered it important to provide our security services broadly to make sure as many users as possible are secure, and thereby making cyberattacks less attractive -- regardless of the content of those websites. Many of our customers run platforms of their own on top of our network. If our policies are more conservative than theirs it effectively undercuts their ability to run their services and set their own policies. We reluctantly tolerate content that we find reprehensible, but we draw the line at platforms that have demonstrated they directly inspire tragic events and are lawless by design. 8chan has crossed that line. It will therefore no longer be allowed to use our services.
Unfortunately, we have seen this situation before and so we have a good sense of what will play out. Almost exactly two years ago we made the determination to kick another disgusting site off Cloudflare's network: the Daily Stormer. That caused a brief interruption in the site's operations but they quickly came back online using a Cloudflare competitor. That competitor at the time promoted as a feature the fact that they didn't respond to legal process. Today, the Daily Stormer is still available and still disgusting. They have bragged that they have more readers than ever. They are no longer Cloudflare's problem, but they remain the Internet's problem.
I have little doubt we'll see the same happen with 8chan.
Prince adds that since terminating the Daily Stormer they've been "engaging" with law enforcement and civil society organizations to "try and find solutions," which include "cooperating around monitoring potential hate sites on our network and notifying law enforcement when there was content that contained an indication of potential violence." Earlier today Prince had used this argument in defense of Cloudflare's hosting of the 8chan, telling the Guardian "There are lots of competitors to Cloudflare that are not nearly as law abiding as we have always been." He added in today's blog post that "We believe this is our responsibility and, given Cloudflare's scale and reach, we are hopeful we will continue to make progress toward solving the deeper problem."
"We continue to feel incredibly uncomfortable about playing the role of content arbiter and do not plan to exercise it often.... Cloudflare is not a government. While we've been successful as a company, that does not give us the political legitimacy to make determinations on what content is good and bad. Nor should it. Questions around content are real societal issues that need politically legitimate solutions..."
"What's hard is defining the policy that we can enforce transparently and consistently going forward. We, and other technology companies like us that enable the great parts of the Internet, have an obligation to help propose solutions to deal with the parts we're not proud of. That's our obligation and we're committed to it."
Google's Plans for Chrome Extensions 'Won't Really Help Security', Argues EFF (eff.org) 35
As both security experts and the developers of extensions that will be greatly harmed by Manifest V3, we're here to tell you: Google's statement just isn't true. Manifest V3 is a blunt instrument that will do little to improve security while severely limiting future innovation... The only part of Manifest V3 that goes directly to the heart of stopping DataSpii-like abuses is banning remotely hosted code. You can't ensure extensions are what they appear to be if you give them the ability to download new instructions after they're installed.
But you don't need the rest of Google's proposed API changes to stop this narrow form of bad extension behavior. What Manifest V3 does do is stifle innovation...
The EFF makes the following arguments Google's proposal:
- Manifest V3 will still allow extensions to observe the same data as before, including what URLs users visit and the contents of pages users visit
- Manifest V3 won't change anything about how "content scripts" work...another way to extract user browsing data.
- Chrome will still allow users to give extensions permission to run on all sites.
In response Google argued to Forbes that the EFF "fails to account for the proposed changes to how permissions work. It is the combination of these two changes, along with others included in the proposal, that would have prevented or significantly mitigated incidents such as this one."
But the EFF's technology projects director also gave Forbes their response. "We agree that Google isn't killing ad-blockers. But they are killing a wide range of security and privacy enhancing extensions, and so far they haven't justified why that's necessary."
And in the same article, security researcher Sean Wright added that Google's proposed change "appears to do little to prevent rogue extensions from obtaining information from loaded sites, which is certainly a privacy issue and it looks as if the V3 changes don't help."
The EFF suggests Google just do a better job of reviewing extensions.
Ask Slashdot: Do You Prefer One-Time Purchases or SaaS Subscriptions? (wikipedia.org) 356
Not limited to Microsoft, of course. Perhaps Apple was the original source of the approach... Slashdot reader dryriver sees a dire trend: Current computing younglings may never know a future where you can actually run software locally on a PC you own, and/or not pay for it as SaaS. All perpetual software licenses may go away in the next six years. Autodesk and Adobe have already moved to SaaS-only.
But is there a case to made for ongoing payments to fund ongoing support? Or is SaaS just an exploitative business model that's bad for customers but good for software vendors? Share your own thoughts in the comments.
And do you prefer one-time purchases or SaaS subscriptions?
After 8chan Possibly Linked To Another Shooting, Cloudflare CEO Defends Hosting It (theguardian.com) 407
UPDATE: 8:25 p.m. PST: Cloudflare's CEO announced that they are in fact terminating 8chan, effective at midnight PST.
Here are his remarks to the Guardian less than 24 hours earlier... "If I could wave a magic wand and make all of the bad things that are on the internet go away -- and I personally would put the Daily Stormer and 8chan in that category of bad things -- I would wave that magic wand tomorrow," [Cloudflare CEO Matthew] Prince said. "It would be the easiest thing in the world and it would feel incredibly good for us to kick 8chan off our network, but I think it would step away from the obligation that we have and cause that community to still exist and be more lawless over time."
Prince argued that keeping "bad" sites within Cloudflare's network means that the company is able to help monitor activity and flag illegal content to law enforcement. While he would not comment on specifics, he said that Cloudflare receives "regular requests" from law enforcement not to ban certain sites. "There are lots of competitors to Cloudflare that are not nearly as law abiding as we have always been," he said. "The minute that someone isn't on our network, they're going to be on someone else's network...." Prince also rejected any implication that Cloudflare's position is self-interested. "The right answer from a pure business perspective is just to kick them off," he said of 8chan. "Of the 2 million-plus Cloudflare customers, they don't matter, and the pain that they cause is well beyond anything else."
Keeping 8chan within its network is a "moral obligation", he said, adding: "We, as well as all tech companies, have an obligation to think about how we solve real problems of real human suffering and death. What happened in El Paso is abhorrent in every possible way, and it's ugly, and I hate that there's any association between us and that... For us the question is which is the worse evil? Is the worse evil that we kick the can down the road and don't take responsibility? Or do we get on the phone with people like you and say we need to own up to the fact that the internet is home to many amazing things and many terrible things and we have an absolute moral obligation to deal with that."
Facebook, Instagram and WhatsApp Suffer Outages Again (engadget.com) 39
UPI has more information: Some Instagram users could not log into their accounts while Facebook users globally could not use sharing features, upload photos and comment, The Mirror reported. Others received messages stating that the site needed maintenance and would be up again soon.
The Express said that the outage monitoring website Down Detector logged more than 7,000 reports issues on Facebook. Down Detector said that Facebook started having problems about 9:30 a.m., Eastern time. About 34 percent of the complaints said they faced "total blackout." Another 33 percent of the complainants said there were issues with its newsfeed while 32 percent said they could not log in.
CNet.com reported that users across the United States, Canada, Australia and parts of Asia claimed that had lack of access Sunday morning
Ask Slashdot: Why Do Popular Websites Have Bad UI Navigation? 235
Or you go on Youtube. Hundreds of millions of videos for you to browse. Except that there are only 3 basic UI elements you can use -- keyword search, automated recommendations panel on the right, or a sortable list of a specific channel's uploaded videos.
- There is no visual network or node-diagram UI that would let you browse videos by association.
- There is no browsing by category (e.g. sports > soccer > amateurs > kids ) or by alphabetic order.
- There is no master index or master list of videos -- like a phonebook -- that you can call up to find videos you haven't come across yet.
And yet these UI elements are not very difficult to put in the user's hands at all. Why do websites with tens of millions of daily visitors and massive web development resources do so little to allow more sophisticated browsing for those users who desire it?
"Is there a cogent reason to restrict website navigation to 'simple, limited and dumb'," asks the original submission, "or do these websites simply not care enough or bother enough to put more sophisticated UIs into place?" Share your own thoughts in the comments.
Why do popular web sites have bad UI navigation?
Did WhatsApp Backdoor Rumor Come From 'Unanswered Questions ' and 'Leap of Faith' For Closed-Source Encryption Products? (forbes.com) 105
Schneier has also added the words "This story is wrong" to his original blog post. "The only source for that post was a Forbes essay by Kalev Leetaru, which links to a previous Forbes essay by him, which links to a video presentation from a Facebook developers conference." But that Forbes contributor has also responded, saying that he'd first asked Facebook three times about when they'd deploy the backdoor in WhatsApp -- and never received a response.
Asked again on July 25th the company's plans for "moderating end to end encrypted conversations such as WhatsApp by using on device algorithms," a company spokesperson did not dispute the statement, instead pointing to Zuckerberg's blog post calling for precisely such filtering in its end-to-end encrypted products including WhatsApp [apparently this blog post], but declined to comment when asked for more detail about precisely when such an integration might happen... [T]here are myriad unanswered questions, with the company declining to answer any of the questions posed to it regarding why it is investing in building a technology that appears to serve little purpose outside filtering end-to-end encrypted communications and which so precisely matches Zuckerberg's call. Moreover, beyond its F8 presentation, given Zuckerberg's call for filtering of its end-to-end encrypted products, how does the company plan on accomplishing this apparent contradiction with the very meaning of end-to-end encryption?
The company's lack of transparency and unwillingness to answer even the most basic questions about how it plans to balance the protections of end-to-end encryption in its products including WhatsApp with the need to eliminate illegal content reminds us the giant leap of faith we take when we use closed encryption products whose source we cannot review... Governments are increasingly demanding some kind of compromise regarding end-to-end encryption that would permit them to prevent such tools from being used to conduct illegal activity. What would happen if WhatsApp were to receive a lawful court order from a government instructing it to insert such content moderation within the WhatsApp client and provide real-time notification to the government of posts that match the filter, along with a copy of the offending content?
Asked about this scenario, Carl Woog, Director of Communications for WhatsApp, stated that he was not aware of any such cases to date and noted that "we've repeatedly defended end-to-end encryption before the courts, most notably in Brazil." When it was noted that the Brazilian case involved the encryption itself, rather than a court order to install a real-time filter and bypass directly within the client before and after the encryption process at national scale, which would preserve the encryption, Woog initially said he would look into providing a response, but ultimately did not respond.
Given Zuckerberg's call for moderation of the company's end-to-end encryption products and given that Facebook's on-device content moderation appears to answer directly to this call, Woog was asked whether its on-device moderation might be applied in future to its other end-to-end encrypted products rather than WhatsApp. After initially saying he would look into providing a response, Woog ultimately did not respond.
Here's the exact words from Zuckerberg's March blog post. It said Facebook is "working to improve our ability to identify and stop bad actors across our apps by detecting patterns of activity or through other means, even when we can't see the content of the messages, and we will continue to invest in this work. "
Another Breach: What Capital One Could Have Learned From Google's 'BeyondCorp' (vortex.com) 119
"The thing is, firewall vulnerabilities are not headline news -- they're an old story, and better solutions to providing network security already exist." In particular, Google's "BeyondCorp" approach is something that every enterprise involved in computing should make itself familiar with. Right now! BeyondCorp techniques are how Google protects its own internal networks and systems from attack, with enormous success.
In a nutshell, BeyondCorp is a set of practices that effectively puts "zero trust" in the networks themselves, moving access control and other authentication elements to individual devices and users. This eliminates traditional firewalls (and in nearly all instances, VPNs) because there is no longer any need for such devices or systems that, once breached, give an attacker access to internal goodies.
If Capital One had been following BeyondCorp principles, there'd likely be 100+ million fewer potentially panicky people today.
Google Just Stopped Displaying 'www' and 'https' In Chrome's Address Bar (techrepublic.com) 185
However the announcement provoked a fresh wave of criticism, from those who say the move will confuse users and even potentially make it easier for them to inadvertently connect to fake sites... There are also some who claim Google's motivation in changing how the URL is displayed may be to make it harder for users to tell whether they are on a page hosted on Google's Accelerated Mobile Pages subdomain...
Google says it has also built a Chrome extension that doesn't obfuscate the URL to "help power users recognize suspicious sites and report them to Safe Browsing". Despite the backlash from some online, Chrome isn't the first browser to truncate the URL in this way, with Apple's Safari similarly hiding the full address.
GNOME and KDE Join Forces To Co-Host Linux App Summit (lwn.net) 64
An anonymous reader shared the big announcement: LAS is the first collaborative event co-hosted by the two organizations since the Desktop Summit in 2009. Both organizations are eager to bring their communities together in building an application ecosystem that transcends individual distros and broadens the market for everyone involved.
KDE and GNOME will no longer be taking a passive role in the free desktop sector. With the joint influence of the two desktop projects, LAS will shepherd the growth of the FOSS desktop by encouraging the creation of quality applications, seeking opportunities for compensation for FOSS developers, and fostering a vibrant market for the Linux operating system.
- "I am excited to see GNOME and KDE working together on LAS, and I believe that the event will help lay down strong foundations for collaborative cross-project development that would benefit Linux users across all distributions and on any compatible device." -- Christel Dahlskjaer, Private Internet Access and freenode Project Lead.
- "Together with GNOME, counting with the collaboration of many distributions and application developers, we'll have the opportunity to work side by side, share our perspectives and offer the platform that the next generation of solutions will be built on." -- Aleix Pol Gonzalez, KDE e.V Vice-President says about the inaugural effort about LAS.
- "By partnering with KDE we show the desire to build the kind of application ecosystem that demonstrates that Open Source and Free Software are important; the technology and organization we build to achieve this is valuable and necessary." -- GNOME executive director, Neil McGovern
- "The desktop wars is not really a thing any more. It makes more sense to work together and pool resources." -- Paul Brown, a KDE Communications Specialist (quoted by ZDNet)
ZDNet called the collaboration "a major step forward," giving their story the headline "GNOME and KDE work together on the Linux desktop." But the Twitter feed for the KDE community quickly clarified that KDE "is working with GNOME to create a common, fair, sustainable and open app ecosystem, not a desktop."
"The GNOME and KDE communities want to provide users with free and open applications that will respect their privacy and rights. That is what Linux App Summit is about."
Facebook To Add Its Name To Instagram, WhatsApp (theinformation.com) 62
But Facebook CEO Mark Zuckerberg has also been frustrated that Facebook doesn't get more credit for the growth of Instagram and WhatsApp. Associating those apps with Facebook could improve the overall companies' brand with consumers. The 'from Facebook' branding will be visible inside the apps -- users will see it when they log on, for instance -- and elsewhere, such as in app stores. The report also mentioned that Facebook is bringing employees responsible for Instagram's messaging feature called Direct into the team behind Facebook's standalone Messenger app.
Alphabet Overtakes Apple To Become Most Cash-Rich Company (theverge.com) 81
NYT Publishes Anti-Google Rant, Doesn't Mention Author Is Facebook Board Member (gizmodo.com) 109
Thiel's central argument is that anyone helping China to develop artificial intelligence technologies is assisting China's military because, he says, all AI should be seen first and foremost as having military applications: "A.I. is a military technology. Forget the sci-fi fantasy; what is powerful about actually existing A.I. is its application to relatively mundane tasks like computer vision and data analysis. Though less uncanny than Frankenstein's monster, these tools are nevertheless valuable to any army -- to gain an intelligence advantage, for example, or to penetrate defenses in the relatively new theater of cyberwarfare, where we are already living amid the equivalent of a multinational shooting war." Thiel, who in 2017 sold the majority of his Facebook shares but remains on its board of directors, goes on to characterize Google as "naive" for opening an AI lab in China while deciding to not renew a contract for its work on Project Maven, a U.S. military initiative for which the company was developing an AI system to analyze drone footage, following employee backlash. Thiel also acknowledges that AI can be used for civilian purposes, but he claims that it doesn't matter. He calls Google's actions "shocking": "A.I.'s military power is the simple reason that the recent behavior of America's leading software company, Google -- starting an A.I. lab in China while ending an A.I. contract with the Pentagon -- is shocking. As President Barack Obama's defense secretary Ash Carter pointed out last month, 'If you're working in China, you don't know whether you're working on a project for the military or not.'"
He continues: "How can Google use the rhetoric of 'borderless' benefits to justify working with the country whose 'Great Firewall' has imposed a border on the internet itself? This way of thinking works only inside Google's cosseted Northern California campus, quite distinct from the world outside. The Silicon Valley attitude sometimes called 'cosmopolitanism' is probably better understood as an extreme strain of parochialism, that of fortunate enclaves isolated from the problems of other places -- and incurious about them."
At the end of the op-ed, where it says "Peter Thiel is an entrepreneur and investor," would be a great place to note that Peter Thiel is also on the board of Facebook.