In just three pages, a Russian mathematician has presented a better way to color certain types of networks than many experts thought possible. From a report: A paper posted online last month has disproved a 53-year-old conjecture about the best way to assign colors to the nodes of a network. The paper shows, in a mere three pages, that there are better ways to color certain networks than many mathematicians had supposed possible. Network coloring problems, which were inspired by the question of how to color maps so that adjoining countries are different colors, have been a focus of study among mathematicians for nearly 200 years. The goal is to figure out how to color the nodes of some network (or graph, as mathematicians call them) so that no two connected nodes share the same color. Depending on the context, such a coloring can provide an effective way to seat guests at a wedding, schedule factory tasks for different time slots, or even solve a sudoku puzzle.

Graph coloring problems tend to be simple to state, but they are often enormously hard to solve. Even the question that launched the field -- Do four colors suffice to color any map? -- took more than a century to answer (the answer is yes, in case you were wondering). The problem tackled in the new paper seemed, until now, to be no exception to this rule. Unsolved for more than 50 years, it concerns tensor products -- graphs made by combining two different graphs (call them G and H) in a specific way. The tensor product of G and H is a new, larger graph in which each node represents a pair of nodes from the original graphs -- one from G and one from H -- and two nodes in the tensor product are connected if both their corresponding nodes in G and their corresponding nodes in H are connected.

Apple CEO Tim Cook said Sunday in a commencement address at Stanford University that technology companies need to take responsibility for the "chaos" they create. From a report: He did not name specific companies in his speech, but referenced several reasons that tech firms, particularly social media platforms, have come under scrutiny in recent months. He also made an apparent reference to embattled health startup Theranos. "Lately it seems this industry is becoming better known for a less noble innovation -- the belief you can claim credit without accepting responsibility," Cook said, according to videos posted online of his speech. "We see it every day now with every data breach, every privacy violation, every blind eye turned to hate speech, fake news poisoning out national conversation, the false miracles in exchange for a single drop of your blood," he added. "Too many seem to think that good intentions excuse away harmful outcomes, but whether you like it or not, what you build and what you create define who you are. It feels a bit crazy that anyone should have to say this, but if you built a chaos factory, you can't dodge responsibility for the chaos."

Malaysia Airlines Flight 370's disappearance in March 2014 instantly become a global news phenomenon, as multiple countries joined the search for the Boeing 777 and its 239 passengers and crew. But the mystery is still swirling five years on. The Atlantic's July cover story looks at all of the known evidence about how MH370 vanished into the Indian Ocean to deliver the clearest picture to date of what happened: that in all likelihood the plane was intentionally crashed by the pilot. From the report: In truth, a lot can now be known with certainty about the fate of MH 370. First, the disappearance was an intentional act. It is inconceivable that the known flight path, accompanied by radio and electronic silence, was caused by any combination of system failure and human error. The story also tracked down Blaine Gibson, an American who has taken it upon himself to recover pieces of MH370 wreckage. Gibson has collected more plane fragments than any other person or entity -- and on beaches hundreds of miles apart. What Gibson's discovery of so many pieces of debris has confirmed is that the signals analysis was correct. The airplane flew for six hours until the flight came suddenly to an end. There was no effort by someone at the controls to bring the plane down gently. It shattered. Amid the bizarre conspiracy theories that continue to surround the disappearance of MH370, Gibson has become a target of threats and abuse. Yet his work to recover pieces of MH370 continues.

China's Huawei has taken a harder-than-expected hit from a U.S. ban, the company's founder and CEO Ren Zhengfei said, and slashed revenue expectations for the year. From a report: Ren's downbeat assessment that the ban will hit revenue by $30 billion, the first time Huawei has quantified the impact of the U.S. action, comes as a surprise after weeks of defiant comments from company executives who maintained Huawei was technologically self-sufficient. [...] Huawei had not expected that U.S. determination to "crack" the company would be "so strong and so pervasive," Ren said, speaking at the company's Shenzhen headquarters on Monday. Two U.S. tech experts, George Gilder and Nicholas Negroponte, also joined the session. "We did not expect they would attack us on so many aspects," Ren said, adding he expects a revival in business in 2021.

Samsung has reminded owners of its smart TVs that they should be regularly scanning for malware using its built-in virus scanning software. From a report: In a tweet, Samsung US support account shared a video Sunday outlining how users can scan their smart TVs for viruses. It is unclear what prompted the tweet or why the process seems to be opt-in as opposed to the operating system automatically scanning for viruses in the background. "Scanning your computer for malware viruses is important to keep it running smoothly. This also is true for your QLED TV if it's connected to Wi-Fi! Prevent malicious software attacks on your TV by scanning for viruses on your TV every few weeks," the company said in the tweet. It has since deleted the tweet.

Some users of Yahoo Japan are rising up against Japan's biggest web portal after the rollout of a new rating system that's being compared with a social-scoring initiative in China. From a report: The 48 million people with a Yahoo! Japan ID will have to opt-out within a privacy settings webpage if they don't want to be rated. The score is based on a variety of factors and is calculated based on inputs such as payment history, shopping reviews, whether a user canceled bookings and the amount of identifiable personal information. Unless users opt out, their ratings may be accessible to freelance jobs site Crowdworks, Yahoo's bike-sharing service and other businesses. Makoto Niida, a longtime Yahoo user, opted out of the rating system when he learned about it. "It's a big deal that the service was enabled by default," Niida said. "The way they created services that benefit businesses without clear explanations to their users reminds me of China's surveillance society." Yahoo's new credit-score program follows efforts by Mizuho Financial Group, NTT Docomo and other companies to use algorithms to assign ratings to consumers. Japan doesn't have a system similar to FICO in the U.S., so businesses in the world's third-largest economy have come up with their own solutions to determine financial trustworthiness.

Every day 5.7 million people ride the subway in New York City -- and are subjected to both "the whims of the Metropolitan Transit Authority and the unheard-of reliability of a marginally successful operating system from the early 1990s."

martiniturbide shared this report from Tedium: OS/2 and MTA consultant Neil Waldhauer said in an email, "For a few years, you could bet your career on OS/2." To understand why, you need to understand the timing. Waldhauer continues, "The design is from a time before either Linux or Windows was around. OS/2 would have seemed like a secure choice for the future." So for a lack of options, the MTA went with its best one. And it's worked out for decades, as one of the key software components of a quite complex system...

Despite the failure of OS/2 in the consumer market, it was hilariously robust, leading to a long life in industrial and enterprise systems -- with one other famous example being ATMs. Waldhauer said, "Thinking about all the operating systems in use [in the MTA], I'd have to say that OS/2 is probably the most robust part of the system, except for the mainframe." It's still in use in the NYC subway system in 2019. IBM had long given up on it, even allowing another company to maintain the software in 2001. (These days, a firm named Arca Noae sells an officially supported version of OS/2, ArcaOS, though most of its users are in similar situations to the MTA.)

Researchers from Austria's Graz University of Technology "have devised an automated system for browser profiling using two new side channel attacks that can help expose information about software and hardware," reports The Register.

The researchers recently presented a paper titled "JavaScript Template Attacks: Automatically Inferring Host Information for Targeted Exploits," which The Register says "calls into question the effectiveness of anonymized browsing and browser privacy extensions... "

Long-time Slashdot reader Artem S. Tashkinov shared their report: One of the side-channel attacks developed for JavaScript Template Attacks involve measuring runtime differences between two code snippets to infer the underlying instruction set architecture through variations in JIT compiler behavior. The other involves measuring timing differences in the memory allocator to infer the allocated size of a memory region.

The boffins' exploration of the JavaScript environment reveals not only the ability to fingerprint via browser version, installed privacy extension, privacy mode, operating system, device microarchitecture, and virtual machine, but also the properties of JavaScript objects. And their research shows there are far more of these than are covered in official documentation. This means browser fingerprints have the potential to be far more detailed -- have more data points -- than they are now.

The Mozilla Developer Network documentation for Firefox, for example, covers 2,247 browser properties. The researchers were able to capture 15,709. Though not all of these are usable for fingerprinting and some represent duplicates, they say they found about 10,000 usable properties for all browsers.

"Genius.com says its traffic is dropping because, for the past several years, Google has been publishing lyrics on its own platform, with some of them lifted directly from the music site," reports the Wall Street Journal: Google denies doing anything nefarious. Still, Genius's complaints offer a window into the challenges small tech companies can face when the unit of Alphabet Inc. starts offering competing services on its platform... Genius said it notified Google as far back as 2017, and again in an April letter, that copied transcriptions appear on Google's website. The April letter, a copy of which was viewed by the Journal, warned that reuse of Genius's transcriptions breaks the Genius.com terms of service and violates antitrust law.

"Over the last two years, we've shown Google irrefutable evidence again and again that they are displaying lyrics copied from Genius," said Ben Gross, Genius's chief strategy officer, in an email message.... Genius said it found more than 100 examples of songs on Google that came from its site. Starting around 2016, Genius made a subtle change to some of the songs on its website, alternating the lyrics' apostrophes between straight and curly single-quote marks in exactly the same sequence for every song. When the two types of apostrophes were converted to the dots and dashes used in Morse code, they spelled out the words "Red Handed."

Genius is a privately held company, and its investors include Andreessen Horowitz, Emagen Investment Group and the rapper Nas... Genius clients include the music streaming website Spotify Technology SA and Apple Inc.
The article also notes March study from web-analytics firm Jumpshot Inc. which found 62% of mobile searches on Google now don't result in the user clicking through to a non-Google web site.

After Apple announced a single sign-on tool last week, The Verge interviewed Google product management director Mark Risher. Though Google offers its own single sign-on tool, The Verge found him "surprisingly sunny about having a new button to compete with. While the login buttons are relatively simple, they're much more resistant to common attacks like phishing, making them much stronger than the average password -- provided you trust the network offering them." RISHER: I honestly do think this technology will be better for the internet and will make people much, much safer. Even if they're clicking our competitor's button when they're logging into sites, that's still way better than typing in a bespoke username and password, or more commonly, a recycled username and password...

Usually with passwords they recommend the capital letters and symbols and all of that, which the majority of the planet believes is the best thing that they should do to improve their security. But it actually has no bearing on phishing, no bearing on password breaches, no bearing on password reuse. We think that it's much more important to reduce the total number of passwords out there...

People often push back against the federated model, saying we're putting all our eggs into one basket. It sort of rolls off the tongue, but I think it's the wrong metaphor. A better metaphor might be a bank. There are two ways to store your hundred dollars: you could spread it around the house, putting one dollar in each drawer, and some under your mattress and all of that. Or you could put it in a bank, which is one basket, but it's a basket that is protected by 12-inch thick steel doors. That seems like the better option!

Long-time Slashdot reader Proudrooster writes: Fiber Internet is coming to Traverse City, Michigan in the hopes of attracting high tech startups and helping the city become a high-tech hub. Even in the face of intense lobbying by [commercial high-speed internet provider] Charter, The Mackinaw Center for Public Policy, and a barrage of pop up ads opposing it, the project is moving ahead into phase one.

It was more than apparent that Charter did everything it could to try and sow fear, uncertainty, and doubt to try and kill this project as other incumbent providers have done across the USA. [Citation needed -- though Traverse City officials did report high-powered anonymous lobbying.] Kudos to the board of Traverse City Light and Power and the residents of Traverse City for being brave and making this investment in their community. Even though the decision is not finalized, the network may be an open network, allowing customers to purchase from a variety of providers.

This project will undoubtedly be watched nationwide and possibly serve as a new model for other community fiber builds.

malachiorion writes: Facebook just open sourced a simulator for testing and training embodied AI systems -- like virtual robots. They worked with AR/VR researchers to release the simulator along with what they say are the most photorealistic 3D reconstructions of real world places available. [Facebook Reality Labs have named this "the Replica data set".]

The crazy part: Because more frames are always better for training computer vision in simulators, it can run at 10,000 FPS!
The simulator's ability to hit 10K frames per second prompted an interesting follow-up on the original submission. "It's a totally useless framerate for humans -- just absolute overkill for our brains/eyeballs -- but it's apparently a benefit for AI systems."

"As more researchers adopt the platform, we can collectively develop embodied AI techniques more quickly," explains Facebook's blog post, "as well as realize the larger benefits of replacing yesterday's training data sets with active environments that better reflect the world we're preparing machine assistants to operate in."

And if you're worried about privacy, Facebook assures readers that "The data used to generate Replica scans was anonymized to remove any personal details (such as family photos) that could identify an individual. The overall reconstruction process was meticulous, with researchers manually filling in the small holes that are inevitably missed during scanning and using a 3D paint tool to apply annotations directly onto meshes."

An anonymous reader quotes the Washington Post: The company's new initiative -- a collaborative effort between its Uber Eats and Uber Elevate divisions -- began with tests in San Diego using fast food meals from McDonald's, but could expand to include a local fine-dining restaurant called Juniper and Ivy, the company said. Uber intends to roll out commercial food delivery using drones in the same city this summer, with a fee structure that mimics Uber Eats current pricing, according to Bloomberg Businessweek, which first reported the company's plan...

"We've been working closely with the FAA to ensure that we're meeting requirements and prioritizing safety," Uber Elevate's Luke Fischer, the company's head of flight operations, said in a statement. "From there, our goal is to expand Uber Eats drone delivery so we can provide more options to more people at the tap of a button. We believe that Uber is uniquely positioned to take on this challenge as we're able to leverage the Uber Eats network of restaurant partners and delivery partners as well as the aviation experience and technology of Uber Elevate."

How will Uber's drone delivery service work? After a restaurant loads a meal into a drone and the robot takes to the air, the company's technology will notify a nearby Uber Eats driver at a designated drop-off location, the company said. The driver will pick up and hand deliver the meal to the customer the same way the service currently operates. But in the future, Uber said, the company would like to land drones atop parked vehicles near delivery locations "through QR code correspondence." Once that happens, the last-mile leg of delivery would be completed by the Uber Eats driver who would hand-deliver the order.

This week Pinboard founder Maciej Ceglowski (also a web developer and social critic) asked readers of his blog to consider an emerging threat to ambient privacy.

He defines it as "the understanding that there is value in having our everyday interactions with one another remain outside the reach of monitoring, and that the small details of our daily lives should pass by unremembered." Until recently, ambient privacy was a simple fact of life. Recording something for posterity required making special arrangements, and most of our shared experience of the past was filtered through the attenuating haze of human memory. Even police states like East Germany, where one in seven citizens was an informer, were not able to keep tabs on their entire population. Today computers have given us that power. Authoritarian states like China and Saudi Arabia are using this newfound capacity as a tool of social control. Here in the United States, we're using it to show ads. But the infrastructure of total surveillance is everywhere the same, and everywhere being deployed at scale....

Because our laws frame privacy as an individual right, we don't have a mechanism for deciding whether we want to live in a surveillance society. Congress has remained silent on the matter, with both parties content to watch Silicon Valley make up its own rules. The large tech companies point to our willing use of their services as proof that people don't really care about their privacy. But this is like arguing that inmates are happy to be in jail because they use the prison library. Confronted with the reality of a monitored world, people make the rational decision to make the best of it.

That is not consent...

Our discourse around privacy needs to expand to address foundational questions about the role of automation: To what extent is living in a surveillance-saturated world compatible with pluralism and democracy? What are the consequences of raising a generation of children whose every action feeds into a corporate database? What does it mean to be manipulated from an early age by machine learning algorithms that adaptively learn to shape our behavior? That is not the conversation Facebook or Google want us to have. Their totalizing vision is of a world with no ambient privacy and strong data protections, dominated by the few companies that can manage to hoard information at a planetary scale. They correctly see the new round of privacy laws as a weapon to deploy against smaller rivals, further consolidating their control over the algorithmic panopticon.

Chris Urmson helped pioneer self-driving car technology at Google before founding Aurora (which sells self-driving car software to automakers, and this week announced a new partnership with Chrysler and a new round of investment by Hyundai). In a new interview, Urmson "says he expects that in about five to 10 years, Americans will start seeing robots cruising down the road in a handful of cities and towns across the country," reports Slate.

"It will be about 30 to 50 years, he says, until they're everywhere. " I think within the next five years we'll see small-scale deployment. That'll be a few hundred or a few thousand vehicles. Really this is the, it's Silicon Valley speak, this is the zero-to-one moment of proving that the technology actually works, understanding how customers want to use it, convincing ourselves that -- and when I say ourselves, I mean as a society -- that these are sufficiently safe, that we trust them on the roadway, and that's that first phase... [W]hen the technology actually starts to become scaled, then we can ask the question what have we learned, what are the ways that we can make this a little bit safer, a little bit incrementally more efficient, and that's what I think local and state governments and federal government would invest in infrastructure...

The statistic I heard was 30 percent of traffic in San Francisco is people looking for parking. I heard a more alarming statistic that was 80 percent of traffic in Paris was people looking for parking. So imagine you have automated vehicles that take you to a location, you hop out, then it just drives down the block and picks up the next person and takes them where they're going. Suddenly, you've alleviated a massive chunk of the congestion in a city. Similarly, if you look at the floor plan of a city today, somewhere between 30â"40 percent of cities is dedicated to parking and roads. And so again, if you have automated vehicles operating as a transportation service, whether it's private or public transportation networks in the city, you don't need that real estate to be dedicated for parking. That real estate now can be recaptured, and it can be used for park space, it can be used for residential space, yeah, it can be used for mixed residential-commercial office space... Certainly for urban centers, I think it's much more likely that this technology is a shared platform that people get on and get off. It's an even more convenient version of a bus or of a taxi service.

This week USA Today's former editor-in-chief argued that "Tech overlords Google and Facebook have used monopoly to rob journalism of its revenue," in an op-ed shared by schwit1: Over the past decade, the news business has endured a bloodbath, with tens of thousands of journalists losing their jobs amid mass layoffs. The irony is, more people than ever are consuming news... Why the disconnect? Look no further than a new study by the News Media Alliance, which found that in 2018, Google made $4.7 billion off of news content -- almost as much as every news organization in America combined made from digital ads last year. Yet Google paid a grand total of zero for the privilege. News industry revenue, meanwhile, has plunged... Google and Facebook command about 60% of all U.S. digital advertising revenue, and have siphoned off billions of dollars that once were the lifeblood of the news media.

Let's be perfectly clear: Journalism's primary revenue source has been hijacked. It's time that news providers are compensated for the journalism they produce. That's why passage of the bipartisan Journalism Competition and Preservation Act is crucial...
Toward that end, "News industry officials, including Atlanta Journal-Constitution Editor Kevin Riley, testified Tuesday on Capitol Hill in favor of legislation they say would help recover advertising revenue lost in recent years to tech behemoths such as Google and Facebook."
The bipartisan bill would provide a four-year reprieve from federal antitrust laws, allowing print and digital publishers to collectively bargain with tech companies about how their content is used -- and what share of ad dollars they'll receive.... Federal antitrust laws bar news organizations from banding together to negotiate more favorable terms from social media and search sites. And individual outlets are deterred from acting alone, according to Chavern's group, because large tech companies could tank a news organization's traffic by demoting or excluding its stories from searches.

The bill's proponents say it could help turn the tide for an industry that's been harmed over the past two decades by declining print subscriptions and ad revenue streams that have dried up and increasingly headed online. As tech sites' share of advertising revenue has grown -- Google's skyrocketed from $3.8 billion in 2005 to $52.4 billion in 2017 -- U.S. newspapers have watched their's nosedive from more than $49 billion to $16.5 billion during the same 12-year period, according to the Pew Research Center.

ZDNet reports: Internet-connected security cameras account for almost half of the Internet of Things devices that are compromised by hackers even as homes and businesses continue to add these and other connected devices to their networks. Research from cybersecurity company SAM Seamless Network found that security cameras represent 47 percent of vulnerable devices installed on home networks.

According to the data, the average U.S. household contains 17 smart devices while European homes have an average of 14 devices connected to the network... Figures from the security firm suggest that the average device is the target of an average of five attacks per day, with midnight the most common time for attacks to be executed -- it's likely that at this time of the night, the users will be asleep and not paying attention to devices, so won't be witness to a burst of strange behavior.
The anonymous reader who submitted this story suggests a possible solution: government inspectors should examine every imported IoT device at the border.

"The device gets rejected if it has non-essential ports open, hard-coded or generic passwords, no automated patching for at least four years, etc."

Long-time Slashdot reader jrepin writes: The KDE community has released Plasma 5.16, the newest iteration of the popular desktop environment. It features an improved notification system, Not only can you mute notifications altogether with the Do Not Disturb mode, but the system also groups notifications by app.

Developers also focused on user's privacy. When any application accesses the microphone, an icon will pop up in your system tray, showing that something is listening. Vaults, a built-in utility to encrypt folders, are easier and more convenient to use.

Dolphin file and folder manager now opens folders you click on in new tabs instead of new windows. Discover software manager is cleaner and clearer as it now has two distinct areas for downloading and installing software. The Wallpaper Slideshow settings window displays the images in the folders you selected, and lets you select only the graphics you want to display in the slideshow.

For a more comprehensive overview of what to expect in Plasma 5.16, check out the official announcement or the changelog for the complete list of changes.

An anonymous reader quotes a report from Wired: On Friday afternoon, the Israeli forensics firm and law enforcement contractor Cellebrite publicly announced a new version of its product known as a Universal Forensic Extraction Device or UFED, one that it's calling UFED Premium. In marketing that update, it says that the tool can now unlock any iOS device cops can lay their hands on, including those running iOS 12.3, released just a month ago. Cellebrite claims UFED Premium can extract files from many recent Android phones as well, including the Samsung Galaxy S9. No other law enforcement contractor has made such broad claims about a single product, at least not publicly. The move signals not only another step in the cat and mouse game between smartphone makers and the government-sponsored firms that seek to defeat their security, but also a more unabashedly public phase of that security face-off. "Cellebrite is proud to introduce #UFED Premium! An exclusive solution for law enforcement to unlock and extract data from all iOS and high-end Android devices," the company wrote on its Twitter feed for the UFED product. On a linked web page, the company says the new tool can pull forensic data off any iOS device dating back to iOS 7, and Android devices not just from Samsung but Huawei, LG, and Xiaomi.

JustAnotherOldGuy shares a report from Boing Boing: For years, Paul Hansmeier terrorized internet users through his copyright trolling racket Prenda Law, evading the law through shell companies and fraud, until, finally, he was brought to justice and pleaded guilty last August. Now, Hansmeier has been sentenced to 14 years in prison and must pay $1.5 million in restitution to his victims -- the same people he accused of being copyright infringers and then bullied into paying "settlement" fees to avoid being dragged through expensive litigation. Any Prenda Law victim can contact the Minnesota DA to apply for compensation. Prenda's tactics included identity theft, entrapment (uploading their own files to The Pirate Bay in order to generate downloads that they could threaten people over), and several kinds of fraud. Hansmeier and his co-defendant, John Steele, were indicted for money laundering, perjury, mail and wire fraud. Both men entered into plea agreements.