Microsoft, which already offers one of the biggest bug bounty programs, said today it is increasing the payouts it makes and the time it takes to push the payments. From a report: A key change in policy is that Microsoft will no longer wait until a fix has been produced for a bug until making a payout -- now the only requirement is that a bug can be reproduced. This is thanks in part to a partnership with HackerOne. [...] The maximum bounty has increased from $15,000 to $50,000 for the Windows Insider Preview bounty and from $15K to $20K for the Microsoft Cloud Bounty.

The pilots of a doomed Ethiopian Airlines jet followed all of Boeing's recommended procedures when the plane started to nose dive but still couldn't save it, according to findings from a preliminary report released Thursday by the Ethiopian government. From a report: The plane crashed just six minutes after taking off from Addis Ababa, killing all 157 people on board. The report, based on flight data and cockpit voice recorders on the Boeing 737 Max 8, was not released in full. Boeing declined to comment pending its review of the report on the March 10 crash. The Max 8 has been under scrutiny since a Lion Air flight crashed off the coast of Indonesia under similar circumstances in October. Thursday's revelations raise questions about repeated assertions by Boeing and U.S. regulators that pilots could regain control in some emergencies by following steps that include turning off an anti-stall system designed specifically for the Max, known by its acronym, MCAS. Investigators are looking into the role of MCAS, whose functions include automatically lowering the plane's nose to prevent an aerodynamic stall. The Max has been grounded worldwide pending a software fix that Boeing is rolling out, which still needs to be approved by the Federal Aviation Administration and other regulators. Further reading: Flawed Analysis, Failed Oversight: How Boeing, FAA Certified the Suspect 737 MAX Flight Control System.

Lots of things can hurt your social credit in China. Failing to repay your debts, plagiarizing academic articles and building a debt-laden tech empire and then fleeing to another country, to name a few random examples. One province now wants to add another "discredited behavior" that seems much more harmless: Switching jobs too often. From a report: Zhejiang is pushing to build a local social credit system that will, among other things, deem residents a "discredited" person if they move from job to job too frequently, according to a local TV report. "If someone keeps quitting and landing new jobs, his social credit will definitely be a problem," Zhejiang official Ge Pingan said at a local forum, addressing a complaint from one company's human resources department about being unable to do anything when employees want to leave. Ge didn't specify how "frequently" is too frequent, but he said the upcoming system will put restrictions on both companies and individual workers.

Amazon is joining the race to provide broadband internet access around the globe via thousands of satellites in low Earth orbit, newly uncovered filings show. From a report: The effort, code-named Project Kuiper, follows up on last September's mysterious reports that Amazon was planning a "big, audacious space project" involving satellites and space-based systems. The Seattle-based company is likely to spend billions of dollars on the project, and could conceivably reap billions of dollars in revenue once the satellites go into commercial service. It'll take years to bring the big, audacious project to fruition, however, and Amazon could face fierce competition from SpaceX, OneWeb and other high-profile players.

Project Kuiper's first public step took the form of three sets of filings made with the International Telecommunications Union last month by the Federal Communications Commission on behalf of Washington, D.C.-based Kuiper Systems LLC. The ITU oversees global telecom satellite operations and eventually will have to sign off on Kuiper's constellation. The filings lay out a plan to put 3,236 satellites in low Earth orbit -- including 784 satellites at an altitude of 367 miles (590 kilometers); 1,296 satellites at a height of 379 miles (610 kilometers); and 1,156 satellites in 391-mile (630-kilometer) orbits. In response to GeekWire's inquiries, Amazon confirmed that Kuiper Systems is actually one of its projects.

An anonymous reader quotes a report from The New York Times: Australia passed sweeping legislation Thursday that threatens huge fines for social media companies and jail for their executives (Warning: source may be paywalled; alternative source) if they fail to rapidly remove "abhorrent violent material" from their platforms. The law -- strongly opposed by the tech industry -- puts Australia at the forefront of a global movement to hold companies like Facebook and YouTube accountable for the content they host. It comes less than a month after a gunman, believed to be an Australian white nationalist, distributed a hate-filled manifesto online before using Facebook to live-stream the massacre of 50 people at two mosques in Christchurch, New Zealand. Written quickly and without much input from technology companies or experts, the measure goes as far as any other democracy's attempt to punish multinational tech platforms for the behavior of their users. "The legislation criminalizes 'abhorrent violent material,' which it defines as videos that show terrorist attacks, murders, rape or kidnapping. Social media companies that fail to remove such content 'expeditiously' could face fines of up to 10 percent of their annual profit, and employees could be sentenced to up to three years in prison," the report adds. "Companies must also inform the police when illegal material is found."

"This law, which was conceived and passed in five days without any meaningful consultation, does nothing to address hate speech, which was the fundamental motivation for the tragic Christchurch terrorist attacks," said Sunita Bose, the managing director of the Digital Industry Group, an advocacy group representing Facebook, Google and other companies. "With the vast volumes of content uploaded to the internet every second, this is a highly complex problem that requires discussion with the technology industry, legal experts, the media and civil society to get the solution right -- that didn't happen this week."

An anonymous reader quotes a report from MIT Technology Review: Machine learning has been used to create basil plants that are extra-delicious. While we sadly cannot report firsthand on the herb's taste, the effort reflects a broader trend that involves using data science and machine learning to improve agriculture. The researchers behind the AI-optimized basil used machine learning to determine the growing conditions that would maximize the concentration of the volatile compounds responsible for basil's flavor. The study appears in the journal PLOS One today.

The basil was grown in hydroponic units within modified shipping containers in Middleton, Massachusetts. Temperature, light, humidity, and other environmental factors inside the containers could be controlled automatically. The researchers tested the taste of the plants by looking for certain compounds using gas chromatography and mass spectrometry. And they fed the resulting data into machine-learning algorithms developed at MIT and a company called Cognizant. The research showed, counterintuitively, that exposing plants to light 24 hours a day generated the best taste. The research group plans to study how the technology might improve the disease-fighting capabilities of plants as well as how different flora may respond to the effects of climate change.

Ford, General Motors, and Toyota have formed a new consortium called the Automated Vehicle Safety Consortium (AVSC) to develop safety standards for self-driving cars. "The newly formed Automated Vehicle Safety Consortium in conjunction with the auto engineering association SAE International says it will fill a critical need by providing a safety framework around which autonomous technology can responsibly evolve before self-driving vehicles are put into widespread use," reports The Detroit News. From the report: Being able to advance the safe deployment of fully self-driving cars represents a new step toward the benefits the technology will bring, said Edward Straub, director of automation for SAE and executive director of the new consortium. Straub said the automakers in the new consortium would turn information discovered through their self-driving testing over to SAE committees every three to six months, and the information would be discussed in public SAE sessions as a set of guidelines are being developed.

Straub said other automakers and technology companies would be welcome to join the consortium, provided they have experience testing fully autonomous cars. The announcement of the new partnership may be a reaction to the inability of Congress to pass legislation that would allow car manufacturers to sell thousands of self-driving vehicles in the near future, said Michelle Krebs, senior analyst for Autotrader. "GM, Ford and Toyota clearly saw a need to set standards that eventually may become regulations because the proposed regulations, which had been moving quickly, have now stalled," she said. Straub said the automakers in the new consortium are operating independently of the efforts to pass legislation in Congress.

mfilion shares a report from Android Police: A new "experimental containerized Android environment" from a company called Collabora allows Android apps to run in floating windows alongside native applications on desktop Linux. You can read all the technical details at the source link, but put simply, 'SPURV' creates a virtual Android device on your Linux computer, much like Bluestacks and other similar tools. There are various components of SPURV that allow the Android environment to play audio, connect to networks, and display hardware-accelerated graphics through the underlying Linux system.

The most interesting part is 'SPURV HWComposer,' which renders Android applications in windows, alongside the windows from native Linux applications. This is what sets SPURV apart from (most) other methods of running Android on a computer. For this to work, the Linux desktop has to be using the Wayland display server (some Linux-based OSes use X11). Pre-built binaries for SPURV are not currently available -- you have to build it yourself from the source code. Still, it's an interesting proof-of-concept, and hopefully someone turns it into a full-featured product.

Verizon announced today that it has turned on its 5G wireless network in Chicago and Minneapolis -- two of the first markets in the world to receive this next-gen network. Verizon CEO Hans Vestberg told CNBC that the company will activate 30 additional markets this year. From a report: Vestberg added that Verizon is unlikely to see any impact on revenue from people who upgrade to new 5G phones until around 2021. This network complements Verizon's existing "5G Home" service which launched in October in select areas and is a wireless alternative to a traditional cable-based home internet connection, but does not work far beyond the walls of your home.

Verizon said the wireless network will give customers access to peak speeds up to 1 Gbps. That's about 10 times faster than you might traditionally find on the LTE connection you have now. Put plainly: You'll be able to download movies in seconds instead of minutes. Only a select number of phones will support the network at first. Samsung will launch a Galaxy S10 5G model later this quarter that will be exclusive to Verizon to start. AT&T, T-Mobile and Sprint will begin to sell it in the second half of the year. That leaves the Motorola Z3 as the only phone that supports Verizon's new 5G network right now, and it requires a separate accessory to work on it.

Jake Laperruque, Senior Counsel at The Constitution Project, where he is working on issues of government surveillance, national security and defending privacy rights in the digital age, argues via Wired that it's time to end the National Security Agency's metadata collection program, known as CDR. An anonymous reader shares an excerpt: In 2015, Congress passed the USA Freedom Act to reform Section 215 and prohibit the nationwide bulk collection of communications metadata, like who we make calls to and receive them from, when, and the call duration. The provision was replaced with a significantly slimmed-down call detail record program, known as CDR. Rather than collecting information in bulk, CDR collects communications metadata of surveillance targets as well as those of individuals up to two degrees of separation (commonly called "two hops") from the surveillance target. But this newer system appears to be no more effective than its predecessor and is highly damaging to constitutional rights. Given this combination, it's time for Congress to pull the plug and end the authority for the CDR program.

It's unsurprising that just last week a bipartisan group in Congress introduced a bill to do so. Last month, the New York Times reported that a highly placed congressional staffer had stated that the CDR program has been out of operation for months, and several days later, NSA Director Paul Nakasone issued comments responding to questions about the Times story by saying the NSA was deliberating the future of the program. If accurate, this news is major but not shocking; this large-scale-collection program has been fraught with problems. Last year, the NSA announced that technical problems had caused it to collect information it wasn't legally authorized to, and that in response, the agency had voluntarily deleted all the call detail records it had previously acquired through the CDR program -- without even waiting for a court order or trying to save some of the data -- indicating that the system was unwieldy and the data being collected was not important to the agency.

According to the Wall Street Journal, Goldman Sachs is planning to release on GitHub some of the code that its traders and engineers use to price securities and analyze and manage risk. "The bank also is offering $100,000 in annual funding for engineers to build new applications using the bank's code," the report adds. "Goldman will own the resulting intellectual property, plus get an early look to invest in promising technology." From the report: It is Goldman's latest move to shed some of its trademark secrecy and share its once closely guarded technology. It is part of a broader shift at Wall Street firms to emulate Silicon Valley giants like Google and Facebook, which have opened up their technology to a community of enthusiastic developers. By letting outsiders tinker with its code, Goldman hopes to crowdsource new uses for it and earn the loyalty of computer-driven "quant" traders who have taken the investing world by storm.

Goldman's proprietary trading engine, known as SecDB, once made its traders the smartest on Wall Street. It is credited with helping the firm weather the 2008 financial meltdown better than rivals. But a postcrisis ban on proprietary trading has made it more valuable as a service offered to clients than an in-house moneymaker. Over the past five years, Goldman has been building SecDB's capabilities into a web application called Marquee, which now has about 13,000 users roughly split between Goldman employees and clients. The code coming to GitHub will allow users to interact directly with Marquee's data feeds, pricing engines and other tools.

As tech giants face growing scrutiny over their market power, Amazon has quietly removed some of the most aggressive promotional spots for so-called private label products on its website. CNBC reports: Private label products are created by Amazon or partners and are sold only on Amazon's website under an exclusive brand name. They benefit Amazon in many ways: They expand the selection of products on the site, offer better profit margins than selling third-party products, make supply-chain management easier and can help Amazon persuade big brands to cut prices to remain competitive on its site. Amazon has been ramping up the number of private label brands during the last three years, stoking fear and concern among some sellers and brands that sell competing products on the marketplace.

Amazon's promotions for these products, which started showing up at least a year ago, were exclusively reserved for Amazon's own private label products and appeared in highly visible areas of the site, like the top of search results or next to the "buy box" of a competitor's product page. Other companies spend billions buying Amazon ads that link to their product listings on the site, vaulting Amazon into the number three spot among U.S. digital advertising providers, behind Google and Facebook, according to eMarketer. However, in recent weeks, Amazon has significantly scaled down or relocated on-site promotions for its private label products, according to multiple Amazon sellers and consultants. The report goes on to cite Sen. Elizabeth Warren's call for breaking up big tech companies like Amazon and Google as a reason why Amazon is scaling back its promo spots. "Amazon's practice of exclusively promoting its own private label products on the most prominent parts of its site has drawn the ire of many sellers and brands for being unfair and abusive," the report adds.

A flaw in Huawei Matebook laptops, found by Microsoft researchers, could have been used to take control of machines. From a report: The "sophisticated flaw" had probably been introduced at the manufacturing stage, one expert told BBC News. Huawei is under increasing scrutiny around the world over how closely it is tied to the Chinese government. The company, which denies any collusion with Beijing, corrected the flaw after it was notified about it in January. Prof Alan Woodward, a computer security expert based at Surrey University, told BBC News the flaw had the hallmarks of a "backdoor" created by the US's National Security Agency to spy on the computers of targets. That tool was leaked online and has been used by a wide variety of hackers, including those who are state-sponsored and criminal gangs. "It was introduced at the manufacture stage but the path by which it came to be there is unknown and the fact that it looks like an exploit that is linked to the NSA doesn't mean anything," Prof Woodward said.

An anonymous reader quotes a report from Ars Technica: Google is releasing the second Android Q Beta today. As we learned with the first release, Android Q is bringing support for foldable smartphones, better privacy and permissions controls, and a grab bag of other features. We've yet to install the second beta on one of our own devices, but Google's release blog post promises "bug fixes, optimizations, and API updates," as well as a crazy new multitasking feature and an emulator for foldables. Android loves multitasking. So far we've had split screens and floating windows, and Android Q Beta 1 even had a hidden desktop mode. Beta 2 brings us a new multitasking feature called "Bubbles." Bubbles let you minimize an app into a little circle, which floats around on the screen above all your other apps. Tapping on a bubble will open a small UI. The only demo Google shows is one for a messaging app. Each bubble is a contact, and tapping on the bubble shows a small chat UI. If you remember Facebook's "Chat Head" UI for Messenger, Bubbles is that, but built into the OS. "Bubbles are great for messaging because they let users keep important conversations within easy reach," Google said in their blog post. "They also provide a convenient view over ongoing tasks and updates, like phone calls or arrival times. They can provide quick access to portable UI, like notes or translations, and can be visual reminders of tasks too."

On Wednesday, Sen. Elizabeth Warren (D-MA) introduced a new piece of legislation that would make it easier to criminally charge company executives when Americans' personal data is breached. From a report: The Corporate Executive Accountability Act is yet another push from Warren who has focused much of her presidential campaign on holding corporations and their leaders responsible for both their market dominance and perceived corruption. The bill, if approved, would widen criminal liability of "negligent" executives of corporations (that make more than $1 billion) when they commit crimes, repeatedly break federal laws, or harm a large number of Americans by way of civil rights violations, including their data privacy. "When a criminal on the street steals money from your wallet, they go to jail. When small-business owners cheat their customers, they go to jail," Warren wrote in a Washington Post op-ed published on Wednesday morning. "But when corporate executives at big companies oversee huge frauds that hurt tens of thousands of people, they often get to walk away with multimillion-dollar payouts."

Amazon is planning a vast expansion of its free streaming service on its Fire TV devices and has asked marketers to commit millions of dollars to support new channels and expanded content offerings, multiple people who held discussions with the company told Cheddar. From a report: Amazon has talked to executives at media companies and advertising agencies about its plans to include more ad-supported streaming channels to compete with Roku and Pluto TV, which offer free access to TV shows and movies with commercials. Advertisers are reluctant to pledge millions of dollars before they know what content Amazon would make available on the new channels, sources said. Some buyers said Amazon is asking for as much as a large cable network for advertising commitments. Since contracts for shows and movies to appear on the new services Amazon is planning are still being negotiated, there's little guaranteed programming to advertise against.

Researchers in Israel created malware to draw attention to serious security weaknesses in medical imaging equipment and networks. An anonymous reader shares a report: Researchers in Israel say they have developed malware to draw attention to serious security weaknesses in critical medical imaging equipment used for diagnosing conditions and the networks that transmit those images -- vulnerabilities that could have potentially life-altering consequences if unaddressed. The malware they created would let attackers automatically add realistic, malignant-seeming growths to CT or MRI scans before radiologists and doctors examine them. Or it could remove real cancerous nodules and lesions without detection, leading to misdiagnosis and possibly a failure to treat patients who need critical and timely care.

Yisroel Mirsky, Yuval Elovici and two others at the Ben-Gurion University Cyber Security Research Center in Israel who created the malware say that attackers could target a presidential candidate or other politicians to trick them into believing they have a serious illness and cause them to withdraw from a race to seek treatment. The research isn't theoretical. In a blind study the researchers conducted involving real CT lung scans, 70 of which were altered by their malware, they were able to trick three skilled radiologists into misdiagnosing conditions nearly every time. In the case of scans with fabricated cancerous nodules, the radiologists diagnosed cancer 99 percent of the time. In cases where the malware removed real cancerous nodules from scans, the radiologists said those patients were healthy 94 percent of the time.

From a wide-ranging interview of Linus Torvalds with Linux Journal on the magazine's 25th anniversary: Linux Journal: If you had to fix one thing about the networked world, what would it be?
Linus: Nothing technical. But, I absolutely detest modern "social media" -- Twitter, Facebook, Instagram. It's a disease. It seems to encourage bad behavior. I think part of it is something that email shares too, and that I've said before: "On the internet, nobody can hear you being subtle". When you're not talking to somebody face to face, and you miss all the normal social cues, it's easy to miss humor and sarcasm, but it's also very easy to overlook the reaction of the recipient, so you get things like flame wars, etc., that might not happen as easily with face-to-face interaction. But email still works. You still have to put in the effort to write it, and there's generally some actual content (technical or otherwise). The whole "liking" and "sharing" model is just garbage. There is no effort and no quality control. In fact, it's all geared to the reverse of quality control, with lowest common denominator targets, and click-bait, and things designed to generate an emotional response, often one of moral outrage.

Add in anonymity, and it's just disgusting. When you don't even put your real name on your garbage (or the garbage you share or like), it really doesn't help. I'm actually one of those people who thinks that anonymity is overrated. Some people confuse privacy and anonymity and think they go hand in hand, and that protecting privacy means that you need to protect anonymity. I think that's wrong. Anonymity is important if you're a whistle-blower, but if you cannot prove your identity, your crazy rant on some social-media platform shouldn't be visible, and you shouldn't be able to share it or like it.

Linux Journal: Is there any advice you'd like to give to young programmers/computer science students?
Linus: I'm actually the worst person to ask. I knew I was interested in math and computers since an early age, and I was largely self-taught until university. And everything I did was fairly self-driven. So I don't understand the problems people face when they say "what should I do?" It's not where I came from at all.

Researchers at UpGuard, a cybersecurity firm, found troves of Facebook user information hiding in plain sight, inadvertently posted publicly on Amazon.com's cloud computing servers. From a report: The discovery shows that a year after the Cambridge Analytica scandal exposed how unsecure and widely disseminated Facebook users' information is online, companies that control that information at every step still haven't done enough to seal up private data, Bloomberg News reports. In one instance, Mexico City-based media company Cultura Colectiva openly stored 540 million records on Facebook users, including identification numbers, comments, reactions and account names. That database was closed on Wednesday after Bloomberg alerted Facebook to the problem and Facebook contacted Amazon. Facebook shares pared their gains after the Bloomberg News report. UpGuard adds: The data sets vary in when they were last updated, the data points present, and the number of unique individuals in each. What ties them together is that they both contain data about Facebook users, describing their interests, relationships, and interactions, that were available to third party developers. As Facebook faces scrutiny over its data stewardship practices, they have made efforts to reduce third party access. But as these exposures show, the data genie cannot be put back in the bottle. Data about Facebook users has been spread far beyond the bounds of what Facebook can control today. Combine that plenitude of personal data with storage technologies that are often misconfigured for public access, and the result is a long tail of data about Facebook users that continues to leak.

Microsoft is partnering with French online education platform OpenClassrooms to train and recruit promising students in AI and prepare them for the workplace. From a report: OpenClassrooms is one of a number of massive open online course (MOOC) platforms, offering an unlimited number of people access to courses ranging from programming and project management to product design. The company has raised north of $60 million since its inception in 2007, including a $60 million series B round last May. Through its latest partnership, OpenClassrooms will construct programs based on Microsoft's content and project-specific tasks -- these are designed to fill the types of AI roles that are in demand. Though it's reasonable to assume Microsoft is a potential suitor for future graduates, the scope of the program is broader than that -- those who complete the master's-level course will be given access to a range of employers with AI positions to fill.