United States

Laptops To Stay in Bags as TSA Brings New Technology To Airports (bgov.com) 160

Air passengers at a growing number of U.S. airports will no longer need to remove electronics, liquids, and other items from their carry-on luggage at security checkpoints as the Transportation Security Administration rolls out new technology. From a report: The TSA took a major step in a broader plan to revamp its overall screening process with faster, more advanced technology when it signed a contract Thursday for hundreds of new carry-on baggage screening machines, Administrator David Pekoske said on a press call Friday. The agency has tested the new technology at more than a dozen airports since 2017, along with the relaxed protocols that allow passengers to leave items such as laptops and toiletries inside their luggage. The rollout of the computed tomography, or CT, machines will begin this summer, Pekoske said. The $97 million contract will buy 300 machines, but the list of airports receiving them has yet to be made final, Pekoske said. The technology creates 3-D images of bags' contents and will eventually be able to detect items automatically that the TSA now asks passengers to remove, he said.
Operating Systems

Linux Mint 19.2 'Tina' is On the Way, But the Developers Seem Defeated and Depressed (betanews.com) 269

Brian Fagioli, reporting for BetaNews: Today should be happy times for the Linux Mint community, as we finally learn some new details about the upcoming version 19.2! It will be based on Ubuntu 18.04 and once again feature three desktop environments -- Xfce, Mate, and Cinnamon. We even found out the code name for Linux Mint 19.2 -- "Tina." And yet, it is hard to celebrate. Why? Because the developers seem to be depressed and defeated. They even appear to be a bit disenchanted with Free Software development overall. Clement Lefebvre, leader of the Linux Mint project, shared a very lengthy blog post today, and it really made me sad.

He wrote, "For a team to work, developers need to feel like heroes. They want the same things as users, they are users, they were 'only' users to start with. At some stage they decide to get involved and they start investing time, efforts and emotions into improving our project. What they're looking for the most is support and happiness. They need feedback and information to understand bugs or feature requests and when they're done implementing something, they need to feel like heroes, they literally do, that's part of the reason they're here really."
Upon publication of the article, Jason Hicks, Muffin maintainer and member of the Linux Mint team, corroborated the claims made by others.
Transportation

Researchers Trick Tesla Autopilot Into Steering Into Oncoming Traffic (arstechnica.com) 186

An anonymous reader quotes a report from Ars Technica: Researchers have devised a simple attack that might cause a Tesla to automatically steer into oncoming traffic under certain conditions. The proof-of-concept exploit works not by hacking into the car's onboard computing system. Instead, it works by using small, inconspicuous stickers that trick the Enhanced Autopilot of a Model S 75 into detecting and then following a change in the current lane. Researchers from Tencent's Keen Security Lab recently reverse-engineered several of Tesla's automated processes to see how they reacted when environmental variables changed. One of the most striking discoveries was a way to cause Autopilot to steer into oncoming traffic. The attack worked by carefully affixing three stickers to the road. The stickers were nearly invisible to drivers, but machine-learning algorithms used by by the Autopilot detected them as a line that indicated the lane was shifting to the left. As a result, Autopilot steered in that direction.

The researchers noted that Autopilot uses a variety of measures to prevent incorrect detections. The measures include the position of road shoulders, lane histories, and the size and distance of various object. [A section of the researchers' 37-page report] showed how researchers could tamper with a Tesla's autowiper system to activate wipers on when rain wasn't falling. Unlike traditional autowiper systems -- which use optical sensors to detect moisture -- Tesla's system uses a suite of cameras that feeds data into an artificial intelligence network to determine when wipers should be turned on. The researchers found that -- in much the way it's easy for small changes in an image to throw off artificial intelligence-based image recognition (for instance, changes that cause an AI system to mistake a panda for a gibbon) -- it wasn't hard to trick Tesla's autowiper feature into thinking rain was falling even when it was not. So far, the researchers have only been able to fool autowiper when they feed images directly into the system. Eventually, they said, it may be possible for attackers to display an "adversarial image" that's displayed on road signs or other cars that do the same thing.
In a statement, Tesla officials said that the vulnerabilities addressed in the report have been fixed via security update in 2017, "followed by another comprehensive security update in 2018, both of which we released before this group reported this research to us." They added: "The rest of the findings are all based on scenarios in which the physical environment around the vehicle is artificially altered to make the automatic windshield wipers or Autopilot system behave differently, which is not a realistic concern given that a driver can easily override Autopilot at any time by using the steering wheel or brakes and should always be prepared to do so and can manually operate the windshield wiper settings at all times."
Power

Over Half of Norway Car Sales Are Now Electric (reuters.com) 345

The Norwegian Road Federation (NRF) said on Monday that almost 60 percent of all new cars sold in the country last month were fully electric, "a global record as the country seeks to end fossil-fueled vehicles sales by 2025," reports Reuters. From the report: Exempting battery engines from taxes imposed on diesel and petrol cars has upended Norway's auto market, elevating brands like Tesla and Nissan, with its Leaf model, while hurting sales of Toyota, Daimler and others. In 2018, Norway's fully electric car sales rose to a record 31.2 percent market share from 20.8 percent in 2017, far ahead of any other nation, and buyers had to wait as producers struggled to keep up with demand.

The surge of electric cars to a 58.4 percent market share in March came as Tesla ramped up delivery of its mid-sized Model 3, which retails from 442,000 crowns ($51,400), while Audi began deliveries of its 652,000-crowns e-tron sports utility vehicle. The sales figures consolidate Norway's global lead in electric car sales per capita, part of an attempt by Western Europe's biggest producer of oil and gas to transform to a greener economy.

Businesses

Taiwan To Block Tencent and Baidu Streaming Sites, Citing National Security and Propaganda Concerns (nikkei.com) 38

Taiwan is blocking video streaming services of Chinese tech giants Baidu and Tencent Holdings, citing national security and propaganda concerns ahead of a presidential election next year. "Chiu Chui-Cheng, deputy minister of Taiwan's Mainland Affairs Council, [said] that Taiwan is likely to ban Baidu's popular iQiyi platform, and block Tencent's plan to bring its streaming service to the island later this year," Nikkei Asian Review reports. From the report: "We are concerned that streaming media services that have close ties with Beijing could have cultural and political influences in Taiwan... and even affect Taiwan's elections," Chiu said. "If Tencent's streaming video service is trying to enter the Taiwanese market, it's very likely that it's a part of Beijing's propaganda campaign," he said. "What if the company inserts some content that Beijing hopes to advertise? What if it implements messages linked to the Communist Party or its army? We should treat this seriously and carefully at a national security level."

The official said that Beijing has stepped up its "cultural infiltration" into Taiwan after Chinese President Xi Jinping used a speech in January to push for an accelerated reunification process. Taiwan does not allow any Chinese Netflix-like streaming services to operate locally, but search engine giant Baidu has been operating in Taiwan through an agent, OTT Entertainment, after Taipei blocked the platform in November 2016. The company's data shows iQiyi's Taiwan site -- one of the most popular video streaming platforms on the island, has 2 million active daily users.

AI

LA County Is Using An Algorithm To Clear 50,000 Pot Convictions Faster (engadget.com) 89

Los Angeles and San Joaquin counties have teamed up with Code for America to help clear around 54,000 marijuana convictions. "The nonprofit's algorithm will aid prosecutors by automatically evaluating whether a case is eligible for dismissal or resentencing," reports Engadget. From the report: The two counties have been working with Code for America since July to examine marijuana conviction data, as automating the process should help them clear cases much more quickly than through entirely manual processes. There are an estimated 50,000 eligible cases in Los Angeles County and 4,000 in San Joaquin County. Code for America's Clear My Record system also helped San Francisco clear more than 8,000 marijuana convictions.

"As technology advances and the criminal justice system evolves, we as prosecutors must do our part to pursue innovative justice procedures on behalf of our constituents," Los Angeles County DA Jackie Lacey said. "This collaboration will improve people's lives by erasing the mistakes of their past and hopefully lead them on a path to a better future. Helping to clear that path by reducing or dismissing cannabis convictions can result in someone securing a job or benefitting from other programs that may have been unavailable to them in the past."
Last year's passage of Assembly Bill 1793 gave district attorneys until July 1st, 2020 to review convictions eligible for downgrading or expungement and act accordingly.
Encryption

Gmail Becomes First Major Email Provider To Support MTA-STS, TLS Reporting (zdnet.com) 25

Google announced today that Gmail has become the first major email provider to support two new security standards, namely MTA-STS and TLS Reporting. Both are extensions to the Simple Mail Transfer Protocol (SMTP), the protocol through which all emails are sent today. ZDNet reports: The purpose of MTA-STS and TLS Reporting is to help email providers establish cryptographically secure connections between each other, with the main goal of thwarting SMTP man-in-the-middle attacks. The two new standards will prevent this by allowing legitimate email providers to create a secure channel for exchanging emails. For example, SMTP MTA Strict Transport Security (MTA-STS) works by allowing email server admins to set up an MTA-STS policy on their server. This policy allows a legitimate provider to request that external email servers verify the security of a SMTP connections before sending any emails. Minimum requirements, such as forcing external email servers to authenticate with a valid public certificate encrypted with TLS 1.2 or higher, can be enforced, depending on preferences, ensuring that emails sent to a company's server travel through an obligatory and properly encrypted channel -- or they don't arrive at all.

In addition, the TLS Reporting SMTP extension sets up a reporting mechanism through which a legitimate email server can request daily reports from other email servers about the success or failure of emails that have been sent to the legitimate server's domain. Both, when combined, will either prevent or help email server admins identify SMTP man-in-the-middle attacks against their email traffic.

Businesses

FTC Allows ISPs To Block Apps But They Must Disclose It (arstechnica.com) 38

An anonymous reader quotes a report from Ars Technica: The FTC can punish U.S. companies for unfair or deceptive practices. But in regard to net neutrality, this simply means that ISPs must disclose any behavior that would have violated the old net neutrality rules. "Under Section 5 of the FTC Act, we may prosecute unfair or deceptive acts or practices... Simply stated, we have a strong interest in ensuring that companies stand by their promises to consumers," FTC Chairman Joseph Simons said. The FTC would review whether ISPs keep their promises just as it reviews whether other companies keep their promises. "We would review ISPs' activities in the same way," Simons said. "For example, we could take action against ISPs if they block applications without adequately disclosing those practices or mislead consumers about what applications they block or how."

How would the FTC handle throttling of websites or online services? Simons explained: "To determine whether particular instances of throttling are deceptive, we would first evaluate what claims an ISP made to consumers about their services and how those claims are supported. We would look closely at any relevant research and evaluate the study's design, scope, and results and consider how a study relates to a particular claim. To evaluate whether a practice was unfair, we would consider whether the alleged throttling had countervailing benefits and whether there were reasonable steps consumers could have taken to avoid it. We would also consider consumer injury, the number of consumers affected, and the need to prevent future misconduct."

Operating Systems

Windows 10 Makes Large Share Gains, While Windows 7 Declines Significantly (betanews.com) 122

An anonymous reader shared a report: It took quite some time for Windows 10 to overtake Windows 7, but it finally did it in December 2018, at least according to NetMarketShare's figures. In February however, Windows 10 actually lost share, while Windows 7 gained some, narrowing the gap between the two operating systems once more. In March though, roles were reversed, as Windows 10 made some big gains, and Windows 7 lost a sizable chunk of its share. In the month just gone, NetMarketShare shows Windows 10 going from 40.30 percent to 43.62 percent, a big gain of 3.32 percentage points. There is currently a gap of 7.11 percentage points between Windows 10 and Windows 7.
Social Networks

Singapore Seeks Social Media 'Corrections' In Proposed Fake News Law (reuters.com) 42

A new bill sent to Singapore's parliament on Monday will require social media to carry warnings on posts it deems false and remove comments against "public interest." "The move came two days after Facebook founder Mark Zuckerberg said governments should play a more active role in regulating the online platform," reports Reuters. From the report: Singapore, which has been run by the same political party since independence from Britain more than 50 years ago, says it is vulnerable to fake news because of its position as a global financial hub, its mixed ethnic and religious population and widespread internet access. The new bill proposes that the government get online platforms to publish warnings or "corrections alongside posts carrying false information, without removing them.

This would be the "primary response" to counter falsehoods online, the Law Ministry said. "That way, in a sense, people can read whatever they want and make up their minds. That is our preference," Law Minister K. Shanmugam told reporters on Monday. "This legislation deals with false statements of facts. It doesn't deal with opinions, it doesn't deal with viewpoints. You can have whatever viewpoints however reasonable or unreasonable." Under the proposals, which must be approved by parliament, criminal sanctions will only be imposed if the falsehoods are spread by "malicious actors" who "undermine society," the ministry said, without elaborating. It added that it would cut off an online site's "ability to profit," without shutting it down, if the site had published three falsehoods that were "against the public interest" over the previous six months. It did not say how it would block a site's profit streams.

Android

Google Is Killing Off the Pixel 2, Inbox, goo.gl URL Shortener, and Google+ This Week (pcworld.com) 90

In addition to shutting down Google+, Google URL Shortener, and Inbox by Gmail this week, the company has stopped selling its Pixel 2 and Pixel 2 XL smartphones through its online store, which means whatever remaining stock at other retailers will likely be extremely limited. It also means that the $799 Pixel 3 is now the cheapest phone Google sells. PCWorld summarizes the other three products coming to an end this week: Inbox by Gmail: When the Inbox by Gmail app launched in 2015, it was a revelation. A completely new way to view and organize your messages, Inbox boiled your emails down to a smart task manager, with bundles, pins, scheduling, and shortcuts that made managing your inbox a breeze. But over the years, Google's interest in Inbox faded, and it never really got the attention it deserved. Most of its unique features are now part of the Gmail app (though we're still waiting for bundles), and several third-party apps have adopted Inbox's style. Apparently that's good enough for Google, because as of this week you won't be able to use it anymore.

Google URL Shortener (goo.gl): Back in 2009, link shortening was still a novel idea, and Google was one of the first to bring the concept to the masses with the Google URL Shortener. It was a simple way to turn a lengthy web address into a short one that consisted of goo.gl and a short string of letter and numbers. With the rise of bit.ly and similar services, Google's own URL shortener became less important to people's work flow and now, nearly 10 years later, it's gone for good.

Google+: Google+ was once supposed to be the one-stop shop for social and support among Google users, but it never really caught on. And then it was revealed that some 50 million users may have had their name, email address, occupation, and age exposed to third-party developers, which accelerated its demise. Now it's going away for good, but we can't imagine that anyone will actually notice.

Privacy

Former NSA Spies Hacked BBC Host, Al Jazeera Chairman for UAE (reuters.com) 50

A UAE cyber espionage contractor staffed with several former U.S. intelligence agents hacked journalists or news executives at Al Jazeera, the BBC, Al Arabi and others throughout June 2017, Reuters reported Monday. From the report: The American operatives worked for Project Raven, a secret Emirati intelligence program that spied on dissidents, militants and political opponents of the UAE monarchy. A Reuters investigation in January revealed Project Raven's existence and inner workings, including the fact that it surveilled a British activist and several unnamed U.S. journalists. The Raven operatives -- who included at least nine former employees of the U.S. National Security Agency and the U.S. military -- found themselves thrust into the thick of a high-stakes dispute among America's Gulf allies. The Americans' role in the UAE-Qatar imbroglio highlights how former U.S. intelligence officials have become key players in the cyber wars of other nations, with little oversight from Washington.

The crisis erupted in the spring of 2017, when the UAE and allies -- including Saudi Arabia and Egypt -- accused Qatar of sowing unrest in the Middle East through its support of media outlets and political groups. The UAE camp demanded Qatar take a series of actions, including shuttering the Qatar-funded Al Jazeera satellite television network, withdrawing funding from other media outlets Doha supports, and cracking down on the Muslim Brotherhood, an Islamic movement some Arab governments regard as a threat.

Security

Over 13K iSCSI Storage Clusters Left Exposed Online Without a Password (zdnet.com) 48

Over 13,000 iSCSI storage clusters are currently accessible via the internet after their respective owners forgot to enable authentication. From a report: This misconfiguration has the risk of causing serious harm to devices' owners, as cyber-criminal groups could access these internet-accessible hard drives (storage disk arrays and NAS devices) to replace legitimate files with malware, insert backdoors inside backups, or steal company information stored on the unprotected devices. [...] Over the weekend, penetration tester A Shadow tipped ZDNet about this hugely dangerous misconfiguration issue. The researcher found over 13,500 iSCSI clusters on Shodan, a search engine that indexes internet-connected devices. In an online conversation with ZDNet, the researcher described this iSCSI exposure as a "dangerous backdoor" that can allow cyber-criminals to plant ransomware-infected files on companies' networks, steal company data, or place backdoors inside backup archives that may get activated when a company restores one of these booby-trapped files.
Businesses

Blockbuster Video Now Has Just One Store Left On Earth (apnews.com) 129

Cutting_Crew writes: After the last remaining Blockbuster Video store closed in Australia on March 31st, there is only one remaining left on earth. That location is in Bend, Oregon and seems to be a thriving location, where they write out membership cards by hand and the system is rebooted using floppy disks, apparently only something one person, the general manager, knows how to do. If you are wondering how there could be still blockbuster videos open since they went bankrupt back in 2010, the remaining stores left open were independent franchises and were separate from most of the other corporate stores, thus not part of the bankruptcy. There was also an Onion video before they even went bankrupt that's pretty funny. I remember getting a membership way back in late 90s and new releases were $8 per night. Even then, that seemed way too expensive. What are your most memorable (good or bad) memories of your local blockbuster?
Network

Cloudflare Says Its New VPN Service Won't Slow You Down (wired.com) 73

Cloudflare has announced that it's adding a VPN service to its 1.1.1.1 DNS resolver app. The 1.1.1.1 service, which first came to mobile back in November, currently attempts to speed up mobile data speeds by using Cloudflare's network to resolve DNS queries faster than your existing mobile network. From a report: "We wanted to build a VPN service that my dad would install on his phone," says Cloudflare CEO Matthew Prince. "If you tell him that it will make his connection more private and secure, he'd never do it. But if you tell him it will make his connection faster, make his phone's battery last longer, and make his connections more private, then it would be something he'd install."

Mobile phone users can begin signing up for the service, dubbed Warp, through Cloudflare's mobile app 1.1.1.1 on Monday; Cloudflare says it hopes the service is working Monday, but it might take a few days. Regardless, Warp is a sign of things to come for the rest of the internet. The technology that Cloudflare is betting will make Warp fast is a protocol invented by Google called QUIC, and it could one day make the rest of the internet faster and more reliable. QUIC is essentially a substitute for TCP, the venerable protocol now used for most internet connections. TCP, introduced in 1981, made reliable internet connections possible, says Jana Iyengar, who worked on QUIC for Google; Iyengar is now a distinguished engineer at the cloud computing company Fastly working to help finalize QUIC with the Internet Engineering Task Force standards body.

Businesses

Burger King is Testing a Vegetarian Whopper Made With Impossible Burger (cnbc.com) 187

Burger King is testing a vegetarian version of its Whopper that uses an Impossible Burger for its patties, becoming the first national fast-food chain to sell the plant-based burger. From a report: The Restaurant Brands International subsidiary is offering the Impossible Whopper at 59 St. Louis locations. The chain already sells veggie patties made by Kellogg's vegetarian brand, Morningstar Farms. To announce the launch, Burger King released a video on April Fools' Day that shows unsuspecting Whopper fans eating the version with the Impossible Burger and then exclaiming that they can't taste the difference. Silicon Valley-based Impossible Foods genetically engineers heme, a protein that makes the vegetarian-friendly burger taste like meat. The ingredient is also responsible for giving the patty red juices that make it look like it's bleeding, just like a piece of beef.
Social Networks

'Fortnite' May be a Virtual Game, But It's Having Real-life, Dangerous Effects (bostonglobe.com) 377

An anonymous reader shares a report: "They are not sleeping. They are not going to school. They are dropping out of social activities. A lot of kids have stopped playing sports so they can do this." Michael Rich, a pediatrician and director of the Clinic for Interactive Media and Internet Disorders at Boston Children's Hospital, was talking about the impact "Fortnite: Battle Royale" -- a cartoonish multiplayer shooter game -- is having on kids, mainly boys, some still in grade school. "We have one kid who destroyed the family car because he thought his parents had locked his device inside," Rich said. "He took a hammer to the windshield."

A year and a half since the game's release, Rich's account is just one of many that describe an obsession so intense that kids are seeing doctors and therapists to break the game's grip, in some cases losing so much weight -- because they refuse to stop playing to eat -- that doctors initially think they're wasting away from a physical disease. The stress on families has become so severe that parents are going to couples' counselors, fighting over who's to blame for allowing "Fortnite" into the house in the first place and how to rein in a situation that's grown out of control.
Further reading: 'Fortnite' Creator Sees Epic Games Becoming as Big as Facebook, Google.
Facebook

Years of Mark Zuckerberg's Old Facebook Posts Have Vanished. The Company Says it 'Mistakenly Deleted' Them. (businessinsider.com) 118

Old Facebook posts by Mark Zuckerberg have disappeared -- obscuring details about core moments in Facebook's history. An anonymous reader shares a report: On multiple occassions, years-old public posts made by the 34-year-old billionaire chief executive that were previously public and reported on by news outlets at the time have since vanished, Business Insider has found. That includes all of the posts he made during 2007 and 2008. Reached for comment, a Facebook spokesperson said the posts were "mistakenly deleted" due to "technical errors." "A few years ago some of Mark's posts were mistakenly deleted due to technical errors. The work required to restore them would have been extensive and not guaranteed to be successful so we didn't do it," the spokesperson said in a statement.

"We agree people should be able to find information about past announcements and major company news, which is why for years we've shared and archived this information publicly - first on our blog and in recent years on our Newsroom." The total number of vanished posts could be significantly higher, as the very nature of the issue makes it extremely difficult to make a full accounting of what exactly what has gone missing over the years. The spokesperson said they didn't know how many posts in total were deleted.

The Internet

On its 10th Anniversary, Grammarly Looks Way Beyond Grammar (fastcompany.com) 52

The service that began by checking prose for glaring mistakes increasingly wants to help its nearly 20 million daily users do more than simply avoid errors. From a report: Plenty of technology companies give away stickers of the sort their fans can slap on the back of a laptop. But the ones available for the taking in the reception area at Grammarly's San Francisco office are distinctly its own -- willfully low-key and thoughtful rather than brash and boastful. Being low-key and thoughtful is a logical tone for a company that is in the business of helping people fine-tune their written words, whether they're meant for a business document, school paper, or social media post. That is what Grammarly has been doing for a decade, since its founding on April 1, 2009, under its soon-abandoned original name of Sentenceworks. But it's also how it wants to run its business, which -- rather than moving fast and breaking things -- waited six years before offering a free version and another two before taking on outside funding.

[...] Grammarly is celebrating its 10th birthday by announcing that it's on the cusp of reaching 20 million daily active users, including both users of the free version and those who pay $30 a month (or $140 a year) for Grammarly Premium or $15 per user per month for Grammarly Business. That's up from 15 million last October and just 1 million at the end of 2015, the year it introduced its free version. The company is an uncommonly effective direct marketer; even if you've never tried its service yourself, there's a pretty good chance you've been exposed to it on YouTube. And even if you hit the "Skip Ad" button as fast as you could, enough viewers have paid attention that YouTube rated Grammarly's spot as the most effective "TrueView for Action" ad of 2018, based on reach, clicks, and engagement.

Google

Gmail Turns 15, Gets Smart Compose Improvements and Email Scheduling (techcrunch.com) 56

Today, to celebrate its fifteenth birthday, the Gmail team announced a couple of a new and useful Gmail features, including improvements to Smart Compose and the ability to schedule emails to be sent in the future. From a report: Smart Compose, which tries to autocomplete your emails as you type them, will now be able to adapt to the way you write the greetings in your emails. If you prefer 'Hey' over 'Hi,' then Smart Compose will learn that. If you often fret over which subject to use for your emails, then there's some relief here for you, too, because Smart Compose can now suggest a subject line based on the content of your email. With this update, Smart Compose is now also available on all Android devices.

Slashdot Top Deals