An anonymous reader quotes Bloomberg: Russian internet trolls appear to be shifting strategy in their efforts to disrupt the 2020 U.S. elections, promoting politically divisive messages through phony social media accounts instead of creating propaganda themselves, cybersecurity experts say. The Kremlin-linked Internet Research Agency may be among those trying to circumvent protections put in place by companies including Facebook Inc. and Twitter Inc. to find and remove fake content that hackers created to sow division among the American electorate in the 2016 presidential campaign. "Instead of creating content themselves, we see them amplifying content," said John Hultquist, the director of intelligence analysis at FireEye Inc. "Then it's not necessarily inauthentic, and that creates an opportunity for them to hide behind somebody else."

Other hackers are breaking into computing devices and using them to open large numbers of social media accounts, according to Candid Wueest, a senior threat researcher at Symantec Corp. The hacked devices are used to create many legitimate-looking users as well as believable followers and likes for those fake users... Wueest said he observed a decrease in the creation of new content by fake accounts from 2017 to 2018 and a shift toward building massive followings that could be used as platforms for divisive messages in 2020.
Facebook's head of cybersecurity policy responded that policing foreign influence campaigns is "an incredibly hard balance" between the need to slow down bad actors while maintaining "meaningful public discussion."

Ten days ago 66-year-old tech pundit Robert Cringely revealed the first of what may be his final set of annual predictions for the technology industry -- but he's not done yet. Thursday Cringely predicted that "the Virtual Private Cloud (VPC) solution based on Open Source using Linux will change the Internet-as-a-Service Cloudscape to VPC-only during 2019" -- and that there'll be an industry-wide shakeout.

Long-time Slashdot reader supremebob, a Connecticut-based sys-admin, writes: He seems to believe that IBM Cloud and Oracle Cloud and doomed to fail, and Alibaba will only survive because of its strong Chinese presence. These seem like safe predictions, but his comments on Google Cloud are somewhat controversial...
After AWS, Alibaba, and Microsoft, "All the others will eventually disappear," Cringely writes, adding "Remember you read it first here." Google's largest cloud customer will always be Google and that will inevitably lead to poorer service for outside customers. That's why I think of Google Cloud as half of a player. Feel free to prove me wrong by delighting customers, Google... I don't see the marketing effort to help clients migrate. Lots of handholding is needed that IBM and Microsoft are happy to provide. Google does not understand customers whose IQs are sub-200. As such, Google doesn't have (and likely won't) have a history of winning outside of search advertising.

For IBM, their VPC roll-out is coming in the next month or two, but it's more marketing than an actual product. Big Blue simply has no capital to build out a unique offering. And Oracle? Well the new head of Google Cloud came from Oracle, where not enough was happening.
Cringely also predicts the U.S. government will try to force Amazon to spin-off its near-monopoly cloud business, noting that "the larger customers of AWS (those not operating on a credit card) generally hate Amazon because of its ruthless business behavior."

Lots of pressure will come to bear in this case from IBM, Microsoft, and Oracle, who are all suffering from a very specific database problem competing with AWS. Each of these companies sells their own database (DB2, SQL Server, and Oracle, respectively) that they've rolled into their cloud services. AWS's RDB, in contrast, is based on MySQL and costs Amazon almost nothing to support, giving the biggest cloud player a clear pricing advantage.

"The next success for the company behind Angry Birds could be twofold: convincing the U.S. public they should buy a 5G mobile phone from Sprint Corp., and developing the world's biggest video game streaming platform in the process," reports Bloomberg: Rovio Entertainment is in talks with "several" investors to take a stake in its subsidiary Hatch -- a "Netflix for games" platform that Sprint will use to showcase what its high-speed 5G handsets can do when it opens its new network in May. But Rovio Chief Executive Officer Kati Levoranta also needs new investors to buy into her vision for three-year-old Hatch, on which Rovio has already spent about 17 million euros ($19 million), to help it build up its library of games from developers such as Ubisoft and Sega.

"The Hatch service is brilliant for use with 5G, and many of our strategic partners are looking for services that demonstrate how 5G works and the benefits it brings," Levoranta said in an interview at the company's seaside headquarters in Espoo, Finland.... "5G is a big opportunity for us," Vesa Jutila, co-founder and chief commercial officer of Hatch Entertainment Oy, said in an interview. "Everyone seems to think cloud gaming is the way to tell the 5G story to consumers."

The app offers a portfolio of pre-vetted games to consumers, streamed to their handsets via a monthly subscription. Once the initial account is set up, mobile games can be played straight from the cloud, without needing to be downloaded or installed. The advent of high speed, low latency 5G networks makes the model all the more attractive to carriers looking to sell their latest services.

"In what appears to be a first-of-its-kind transaction, two developers working in separate countries have successfully sent a bitcoin lightning payment over radio waves," writes CoinBase.

An anonymous reader quotes their report: The completed payment effectively moved real bitcoin from Toronto, Canada, to San Francisco, California... But sending bitcoin over radio isn't just fun. Some researchers argue it actually has a necessary use case... The idea is that, while the internet can potentially be censored, it's not the only form of technology that can be used to send data from one part of the world to another, "in case China decides to censor bitcoin via the Great Firewall, or places like North Korea where there is no internet at all," as Bloomberg columnist Elaine Ou put it in an email to CoinDesk.

Technology infrastructure startup Blockstream licensed satellites that beam bitcoin to users around the world for similar reasons.

AmiMoJo quotes Computerworld: Microsoft plans to start selling its Windows 7 add-on support beginning April 1. Labeled "Extended Security Updates" (ESU), the post-retirement support will give enterprise customers more time to purge their environments of Windows 7. From Windows 7's Jan. 14, 2020 end of support, ESU will provide security fixes for uncovered or reported vulnerabilities in the OS.

Patches will be issued only for bugs rated "Critical" or "Important" by Microsoft, the top two rankings in a four-step scoring system. ESU will be dealt out in one-year increments for up to three years and support will be sold on a per-device basis, rather than the per-user approach Microsoft has pushed for Windows 10 licensing. Costs for ESU will start out low — $25 or $50 per year per device — but will double each year, ending at $100 or $200 per device for the third and final year

What if a robot came to your house to retrieve library books? An anonymous reader quotes the Bay Area Newsgroup: Residents in downtown Mountain View have gotten their first peek at the future with the debut of BookBot, the library's newest non-human helper. A creation of Google's Area 120 -- an experimental division of the technology juggernaut -- the bot is the company's first personal delivery robot to hit the streets and begin interacting with the public, said Christian Bersch, the project's team lead. It's part of a program to test the waters of what could be possible for autonomous, electric robots, he said...

The pilot will run for nine months with a human handler following behind the BookBot for the first six months, he said. That's just to make sure it's operating as planned, get it out of trouble as needed and observe how people are responding. After that, a human will sit behind the controls remotely. And, on a recent Thursday, the response was overwhelmingly positive. Children shrieked at the sight of the robot and immediately jumped in its path to see if it would stop. (It does...) Users must schedule the pickup time in advance, which -- because the bot is fairly popular -- means planning at least a week ahead. It can carry up to about 10 items, Bersch said, depending on the size of the books.

Saturday the Associated Press analyzed Mark Zuckerberg's new vision for Facebook as an encrypted "privacy-focused communications platform." [C]ritics say the announcement obscures Facebook's deeper motivations: To expand lucrative new commercial services, continue monopolizing the attention of users, develop new data sources to track people and frustrate regulators who might be eyeing a breakup of the social-media behemoth. Facebook "wants to be the operating system of our lives," said Siva Vaidhyanathan, director of media studies at the University of Virginia... Vaidhyanathan said Zuckerberg wants people to abandon competing, person-to-person forms of communication such as email, texting and Apple's iMessage in order to "do everything through a Facebook product."

The end goal could be transform Facebook into a service like the Chinese app WeChat , which has 1.1 billion users and includes the world's most popular person-to-person online payment system... But Zuckerberg said nothing in the Wednesday blog post about reforming privacy practices in its core business, which remains hungry for data. A recent Wall Street Journal report found that Facebook was still collecting personal information from apps such as user heart rates and when women ovulate ... Facebook also has trackers that harvest data on people's online behavior on about 30 percent of the world's websites , said Jeremy Tillman of Ghostery, a popular ad-blocker and anti-tracking software.

"When they say they are building a private messaging platform there is nothing in there that suggests they are going to stop their data collection and ad-targeting business model," he said.

"Two popular smart alarm systems for cars had major security flaws that allowed potential hackers to track the vehicles, unlock their doors and, in some cases, cut off the engine," reports CNET: The vulnerabilities could be exploited with two simple steps, security researchers from Pen Test Partners, who discovered the flaw, said Friday. The problems were found in alarm systems made by Viper [known as Clifford in the U.K.] and Pandora Car Alarm System, two of the largest smart car alarm makers in the world. The two brands have as many as 3 million customers between them and make high-end devices that can cost thousands...

Both apps' API didn't properly authenticate for update requests, including requests to change the password or email address. Ken Munro, founder of Pen Test Partners, said that all his team needed to do was send the request to a specific host URL and they were able to change an account's password and email address without notifying the victim that anything happened. Once they had access to the account, the researchers had full control of the smart car alarm. This allowed them to learn where a car was and unlock it. You don't have to be near the car to do this, and the accounts can be taken over remotely, Munro said. Potential attackers could also use the apps' API to target specific types of cars, the security researcher added...

Pandora's alarm system also contained a microphone that would've allowed potential hackers to listen in on live audio, the security company found.
Both companies fixed the issue in less than a week, CNET reports, possibly due to the seriousness of the issue. In a video demonstrating the severity of the bug, security researcher Munro even uses the driver's app to set off a car's alarms remotely. When that driver began pulling over, Munro then used the app to cut off the car's engine. "So simple, so serious," he said.

ZDNet notes that one of the companies had been advertising their "smart" alarms as "unhackable".

America now has 206 confirmed cases of measles, its highest year-to-date number in over 25 years . Now USA Today reports on how Facebook is responding: In mid-February, Facebook told USA TODAY it had "taken steps" to reduce fake health news and anti-vaxx posts and said it was considering making anti-vaccination content on its site less visible amid a measles outbreak that has reignited a conversation about preventative shots. At the time, Facebook said, "we know we have more to do...." Revealed Thursday: The social network says it will reduce distribution and provide users with "authoritative information" on the topic.

Facebook is following the lead of Pinterest, which has blocked all searches using terms related to vaccines or vaccinations as part of a plan to stop the spread of misinformation related to anti-vaxx posts.... It will reduce the ranking of Facebook groups and Pages that spread misinformation about vaccinations in News Feed and Search. "These groups and Pages will not be included in recommendations or in predictions when you type into Search," Facebook said. When it discovers ads with misinformation about vaccinations, "we will reject them." Facebook said it has removed related targeting options, like "vaccine controversies," in ads.... Additionally, Facebook said it wouldn't show or recommend content that contains misinformation about vaccinations on the Explore section of Facebook-owned Instagram or on its hashtag pages.

The Guardian reports on what may happen next to British businesses and individuals who own .EU domains: There are about 340,000 registered British holders of these web addresses, and the government has urged them to make contingency plans as their web addresses will disappear if the UK does not agree on a deal with Brussels. The domains were introduced in 2006 as a rival to the likes of .com and .org but are available only to individuals or businesses based in the EU or the European Economic Area (EEA)...

Updated government guidance confirms that if the UK leaves without a deal at the end of March then domain owners based in the UK will have two months leeway to move their principal location to somewhere within the EU or EEA. "These .EU domain names will then be withdrawn and will become inoperable," states the guidance issued by the Department for Digital, Culture, Media and Sport, which confirms warnings issued this year by the EU's domain registrar. "This means you may not be able to access your .EU websites or email from 30 May 2019."

After a year, all the British-registered .EU domains will be made available for purchase by individuals and companies who continue to reside in the EU. This raises the possibility that on the anniversary of a no-deal Brexit, one lucky German or Spaniard could be able to mark the occasion by taking over the Leave.EU domain and using it for their own purposes.

With Google+ being shutdown in just a few weeks, the official Android Beta community announced that it will be leaving the dying social media site in exchange for Reddit. The group on Google+ was home to over 163,000 members. Android Police reports: The community's new home will be r/android_beta. In an official announcement, the Android Beta team says they'll keep a close eye on the subreddit for feedback and will use it for announcements and updates. There's nothing there just yet, but when the Android Q beta hits, we're sure things will get much busier. For now, just make sure you subscribe and keep in mind that you have a second address where you can send all your Q beta complaints -- the first is obviously our tips inbox.

By April 2020, a total of 11 public pools in Singapore will feature a state-of-the-art computer vision drowning detection system (CVDDS). The CVDDS uses a network of overhead infrared cameras to detect if anyone in the pool becomes unconscious while swimming. It reportedly has a detect response time of 15 seconds, allowing lifeguards to spot distressed swimmers more quickly.

"[T]he system will be installed at pools in Bukit Batok, Jurong West and Our Tampines Hub this year, with another seven to follow by April 2020," reports Channel NewsAsia. "The system will be implemented following a successful year-long trial at Hougang Swimming Complex. MCCY said that the system was assessed to have complied with international standards and had a low false-alarm rate."

An anonymous reader quotes a report from Ars Technica: Pai's claim was questionable from the beginning, as we detailed last month. The Federal Communications Commission data cited by Chairman Pai merely showed that deployment continued at about the same rate seen during the Obama administration. Despite that, Pai claimed that new broadband deployed in 2017 was made possible by the FCC "removing barriers to infrastructure investment." But even the modest gains cited by Pai rely partly on the implausible claims of one ISP that apparently submitted false broadband coverage data to the FCC, advocacy group Free Press told the FCC in a filing this week.

The FCC data is based on Form 477 filings made by ISPs from around the country. A new Form 477 filer called Barrier Communications Corporation, doing business as BarrierFree, suddenly "claimed deployment of fiber-to-the-home and fixed wireless services (each at downstream/upstream speeds of 940mbps/880mbps) to census blocks containing nearly 62 million persons," Free Press Research Director Derek Turner wrote. "This claimed level of deployment stood out to us for numerous reasons, including the impossibility of a new entrant going from serving zero census blocks as of June 30, 2017, to serving nearly 1.5 million blocks containing nearly 20 percent of the U.S. population in just six months time," Turner wrote. "We further examined the underlying Form 477 data and discovered that BarrierFree appears to have simply submitted as its coverage area a list of every single census block in each of eight states in which it claimed service: CT, DC, MD, NJ, NY, PA, RI, and VA." In reality, BarrierFree's website doesn't market any fiber-to-the-home service, and it advertises wireless home Internet speeds of up to just 25mbps, Free Press noted. BarrierFree appears to have ignored the FCC's instructions to report service only in census blocks in which an ISP currently offers service and instead simply "listed every single census block located in eight of the states in which it's registered as a CLEC [competitive local exchange carrier]."

As a result of BarrierFree's claimed level of deployment, it skewed the FCC's overall data significantly. "Pai claimed that the number of Americans lacking access to fixed broadband with speeds of at least 25Mbps down and 3Mbps up 'has dropped by over 25 percent, from 26.1 million Americans at the end of 2016 to 19.4 million at the end of 2017,'" reports Ars. "With BarrierFree's erroneous filing removed, 'the number of Americans lacking access to a fixed broadband connection at the 25Mbps/3Mbps threshold declined to 21.3 million, not 19.4 million,' Free Press wrote."

As NASA looks into developing planes that can fly faster than sound without creating "sonic booms," the space agency has captured unprecedented photos of the interaction of shockwaves from two supersonic aircraft. Phys.Org reports: When an aircraft crosses that threshold -- around 1,225 kilometers (760 miles) per hour at sea level -- it produces waves from the pressure it puts on the air around it, which merge to cause the ear-splitting sound. In an intricate maneuver by "rock star" pilots at NASA's Armstrong Flight Research Center in California, two supersonic T-38 jets flew just 30 feet (nine meters) apart below another plane waiting to photograph them with an advanced, high-speed camera, the agency said. The rendezvous -- at an altitude of around 30,000 feet -- yielded mesmerizing images of the shockwaves emanating from both planes. You can view all of the photos via NASA.

The Centers for Disease Control and Prevention (CDC) is examining the rise of injuries related to shareable electric scooters. From a report: "We want to identify the risk factors for those who get injured, how severe the injuries are and why they're getting hurt," said Jeff Taylor, manager of the Epidemiology and Disease Surveillance Unit with Austin Public Health. Taylor, who is overseeing the investigation, is working with three CDC epidemiologists to examine severe injuries that occurred in Austin from September to November 2018. He said both agencies have completed collecting data and are currently in the process of summarizing various reports. "There's a perception that scooter-related injuries occur at night. Well that's not true," Taylor said. "Our study will show they occur during all times of the day. People may also perceive there's typically a car involved. But our study finds most of the time the rider may hit a bump in the road or they simply lose their balance."

Researchers from the University of Michigan and Zhejiang Univeristy in China have found that hard disk drives can be turned into listening devices, using malicious firmware and signal processing calculations. The Register reports: For a study titled "Hard Drive of Hearing: Disks that Eavesdrop with a Synthesized Microphone," computer scientists Andrew Kwong, Wenyuan Xu, and Kevin Fu describe an acoustic side-channel that can be accessed by measuring how sound waves make hard disk parts vibrate. "Our research demonstrates that the mechanical components in magnetic hard disk drives behave as microphones with sufficient precision to extract and parse human speech," their paper, obtained by The Register ahead of its formal publication, stated. "These unintentional microphones sense speech with high enough fidelity for the Shazam service to recognize a song recorded through the hard drive."

The team's research work, scheduled to be presented in May at the 2019 IEEE Symposium on Security and Privacy, explores how it's possible to alter HDD firmware to measure the offset of a disk drive's read/write head from the center of the track it's seeking. The offset is referred to as the Positional Error Signal (PES) and hard drives monitor this signal to keep the read/write head in the optimal position for reading and writing data. PES measurements must be very fine because drive heads can only be off by a few nanometers before data errors arise. The sensitivity of the gear, however, means human speech is sufficient to move the needle, so to speak. Vibrations from HDD parts don't yield particularly good sound, but with digital filtering techniques, human speech can be discerned, given the right conditions. "Flashing HDD firmware is a prerequisite for the snooping [...] because the ATA protocol does not expose the PES," The Register reports. "To exfiltrate captured data, the three boffins suggest transmitting it over the internet by modifying Linux operating system files to create a reverse shell with root privileges or storing it to disk for physical recovery at a later date."

The researchers note that this technique does require a fairly loud conversation to take place near the eavesdropping hard drive. "To record comprehensible speech, the conversation had to reach 85 dBA, with 75 dBA being the low threshold for capturing muffled sound," the report says. "To get Shazam to identify recordings captured through a hard drive, the source file had to be played at 90 dBA. Which is pretty loud. Like lawn mower or food blender loud."

An anonymous reader quotes a report from CNBC: Fearing that China could be spying on them using power cords and plugs, several U.S. technology companies have asked their Taiwanese suppliers to shift production of some components out of the mainland, Nikkei Asian Review reported on Friday. The report cited unnamed executives from two Taiwanese companies: Lite-On Technology, a manufacturer of electronic parts, and Quanta Computer, a supplier of servers and data centers. Lite-On's clients include Dell EMC, Hewlett-Packard and IBM, while Quanta counts Google and Facebook among its customers, according to Nikkei. The executives told Nikkei that some of their American clients -- without specifying which companies -- asked them to move out of China partly because of cyberespionage and cybersecurity risks. The U.S. tech firms were worried that even mundane components such as power plugs could be tapped by Beijing to access sensitive data, according to the report. According to the report, Lite-On Technology is building a new factory in Taiwan to manufacture power components for servers due to China's cybersecurity concerns. Quanta has also shifted production out of mainland China to Taiwan due to similar concerns, as well as additional tariffs imposed by Washington as a result of the U.S.-China trade war.

You asked, he answered!

Bill Ottman, founder and CEO of social networking site Minds.com, has answered more than a dozen questions that Slashdot readers sent his way. Ottman has addressed a wide-range of queries surrounding how Minds.com makes use of tokens; how many users the platform has; and, who is Minds.com aimed for. You can read his answers below. For those of you who are going to give Minds.com a try, you can find Slashdot there.

Google said this week that a Chrome zero-day the company patched last week was actually used together with a second one, a zero-day impacting the Microsoft Windows 7 operating system. From a report: The two zero-days were part of ongoing cyber-attacks that Clement Lecigne, a member of Google's Threat Analysis Group, discovered last week on February 27. The attackers were using a combination of a Chrome and Windows 7 zero-days to execute malicious code and take over vulnerable systems. The company revealed the true severity of these attacks in a blog post this week. Google said that Microsoft is working on a fix, but did not give out a timeline. The company's blog post comes to put more clarity into a confusing timeline of events that started last Friday, March 1, when Google released Chrome 72.0.3626.121, a new Chrome version that included one solitary security fix (CVE-2019-5786) for Chrome's FileReader --a web API that lets websites and web apps read the contents of files stored on the user's computer.

Researchers at Ohio State University, the security company FireEye, and research firm Leidos last week published a paper [PDF] describing a new system that reads millions of tweets for mentions of software security vulnerabilities, and then, using their machine-learning-trained algorithm, assessed how much of a threat they represent based on how they're described. From a report: They found that Twitter can not only predict the majority of security flaws that will show up days later on the National Vulnerability Database -- the official register of security vulnerabilities tracked by the National Institute of Standards and Technology -- but that they could also use natural language processing to roughly predict which of those vulnerabilities will be given a "high" or "critical" severity rating with better than 80 percent accuracy.

"We think of it almost like Twitter trending topics," says Alan Ritter, an Ohio State professor who worked on the research and will be presenting it at the North American Chapter of the Association for Computational Linguistics in June. "These are trending vulnerabilities." A work-in-progress prototype they've put online, for instance, surfaces tweets from the last week about a fresh vulnerability in MacOS known as "BuggyCow," as well as an attack known as SPOILER that could allow webpages to exploit deep-seated vulnerabilities in Intel chips. Neither of the attacks, which the researchers' Twitter scanner labeled "probably severe," has shown up yet in the National Vulnerability Database.