AmiMoJo writes: When browsing the web with Google Chrome, some sites are using a method to determine if a visitor is in a regular browsing session or in incognito mode. As this can be considered a breach of privacy, Google will be changing how a particular API works so that web sites can no longer utilize this technique.

Chrome supports the FileSystem API, which allows sites to create a virtual file system that lives within the sandbox of the browser. This allows sites that utilize large assets, such as online games, to download these assets to a virtual file system so that they do not have to download them each time they are needed. Currently the FileSystem API is not available in incognito sessions, because it leaves files behind and could be considered a privacy risk. Currently the API doesn't work in incognito mode, offering sites a way to check for it. In a Chrome Gerrit post started this week and updated earlier this morning, Google has stated that they are changing the FileSystem API so that it can be used in incognito mode, without the risks to privacy.

Two bills introduced in the Kansas House on Wednesday generate funding for human trafficking programs by requiring all new internet-capable telephones or computers sold in the state to feature anti-pornography software and by mandating adult entertainment businesses charge a special admissions tax. From a report: Sabetha Rep. Randy Garber sponsored legislation requiring the software installations and dictating purchasers would have to pay a $20 fee to the state, and whatever cost was assessed by retail stores, to remove filters for "obscene" material. No one under 18 would be allowed to have filter software deleted. "It's to protect children," Garber, a Republican, said in an interview. "What it would do is any X-rated pornography stuff would be filtered. It would be on all purchases going forward. Why wouldn't anybody like this?" He said it wouldn't be surprising if the bill, if adopted as law, generated legal challenges.

Last week, an alt-rock mystery puzzled the music press. Almost 25 years after its release, the Dinosaur Jr. song "Over Your Shoulder" appeared at number 18 on Japan's Hot 100 chart, beating out major new releases like Ariana Grande's "7 Rings." Here's what drove the popularity of the old song: More than 15 years ago, it was used on a Japanese reality show about boxing bad boys. Six years ago, Billboard started counting YouTube plays. And just days ago, YouTube apparently began recommending pirated episodes of that reality show to Japanese users, who seemingly binged it in the thousands, playing "Over Your Shoulder" over and over again in the process.

Germany has experienced a big increase in the number of security incidents hitting critical infrastructure such as power grids and water suppliers, the BSI cybersecurity agency said on Sunday, adding however that they were not all due to hacking. From a report: The Welt am Sonntag weekly had reported on Sunday that Germany had learned of 157 hacker attacks on critical infrastructure companies in the second half of 2018 compared to 145 attacks in the whole of the previous year. "The number of reports of IT security incidents has increased but it is not to be equated with the number of cyber attacks," tweeted the BSI in response to the newspaper report.

An excerpt from a report, which looks at the complicated business of funding open source software development: On the surface, the open source software community has never been better. Companies and governments are adopting open source software at rates that would've been unfathomable 20 years ago, and a whole new generation of programmers are cutting their teeth on developing software in plain sight and making it freely available for anyone to use. Go a little deeper, however, and the cracks start to show. The ascendancy of open source has placed a mounting burden on the maintainers of popular software, who now handle more bug reports, feature requests, code reviews, and code commits than ever before.

At the same time, open source developers must also deal with an influx of corporate users who are unfamiliar with community norms when it comes to producing and consuming open source software. This leads to developer burnout and a growing feeling of resentment toward the companies that rely on free labor to produce software that is folded into products and sold back to consumers for huge profits. From this perspective, Heartbleed wasn't an isolated example of developer burnout and lack of funding, but an outgrowth of a systemic disease that had been festering in the open source software community for years. Identifying the symptoms and causes of this disease was the easy part; finding a cure is more difficult. Further reading: How Does Heartbleed Alter the 'Open Source Is Safer' Discussion?

Google has changed its stance on upcoming Chrome Manifest V3 changes as benchmark shows they lied about performance hit. Catalin Cimpanu, writing for ZDNet: A study analyzing the performance of Chrome ad blocker extensions published on Friday has proven wrong claims made by Google developers last month, when a controversy broke out surrounding their decision to modify the Chrome browser in such a way that would have eventually killed off ad blockers and many other extensions. The study, carried out by the team behind the Ghostery ad blocker, found that ad blockers had sub-millisecond impact on Chrome's network requests that could hardly be called a performance hit. Hours after the Ghostery team published its study and benchmark results, the Chrome team backtracked on their planned modifications. At the root of Ghostery's benchmark into ad blocker performance stands Manifest V3, a new standard for developing Chrome extensions that Google announced last October.

In the hunt for potential acts of student violence, "schools are increasingly turning to artificial intelligence-backed solutions," reports USA Today. Bark Technologies, Gaggle.Net, and Securly Inc. are three companies that employ AI and machine learning to scan student emails, texts, documents, and in some cases, social media activity. They look for warning signs of cyber bullying, sexting, drug and alcohol use, depression, and to flag students who may pose a violent risk not only to themselves, but classmates. When potential problems are found, and depending on the severity, school administrators, parents -- and under the most extreme cases -- law enforcement officials, are alerted. In the fall of 2017, Bark ran a test pilot with 25 schools. "We found some pretty alarming issues, including a bombing and school shooting threat," says Bark chief parent officer, Titania Jordan....

The Bark product [which monitors more than 25 social media platforms] is free to schools in the U.S. for perpetuity. The company says it can afford to give the service away to schools, because of the money it makes from a version aimed at parents... Bark is currently used in more than 1,100 school districts, covering 2.6 million children. If it detects something that is considered exceedingly severe such as a child abduction or school shooting threat, the issue is escalated to the FBI. According to Jordan, Bark sends out between 35,000 and 55,000 alerts each day, many just instances of profanity. But 16 plausible school shootings have been reported to the FBI since Bark launched its school product last February, she says.
The article notes these solutions have three major limitations:

• "A school can't police a student's smartphone or other devices outside the ones it issued, unless the student signed into a social media, or other account, using the email or credentials the school provided."

• "None of the companies USA TODAY talked to for this story claim the ability to catch suspect behavior every time."

• "Students also are often more tech savvy than their parents and won't tell them about every account they have."

"As a disturbing number of measles outbreaks crop up around the United States, Facebook is facing challenges combating widespread misinformation about vaccinations on its platform," reported the Washington Post Wednesday, saying Facebook "has become a haven for the anti-vaccination movement" and that "the rise of 'anti-vaxx' Facebook groups is overlapping with a resurgence of measles" in the U.S. Facebook has publicly declared that fighting misinformation is one of its top priorities. But when it comes to policing misleading content about vaccinations, the site faces a thorny challenge. The bulk of anti-vaccination content doesn't violate Facebook's community guidelines for inciting "real-world harm," according to a spokesperson, and the site's algorithms often promote unscientific pages or posts about the issue...

Wendy Sue Swanson, a pediatrician at Seattle Children's Hospital and spokeswoman for the American Academy of Pediatrics, recently met with Facebook strategists about dealing with public health issues, including misinformation about vaccines, on the platform... "Facebook isn't responsible for changing quacks but they do have an opportunity to change the way information is served up." But Facebook's algorithms often promote anti-vaccination content over widely accepted, scientifically backed posts or pages about vaccinations. A recent investigation from the Guardian found that Facebook search results regarding vaccines were "dominated by anti-vaccination propaganda...." Facebook also accepted advertising revenue from Vax Truther, Anti-Vaxxer, Vaccines Revealed and Michigan for Vaccine Choice, among others, according to another investigation from the Guardian [which found Facebook even offers the ability to target 900,000 users that Facebook has helpfully identified as interested in "vaccine controversies."]
Last month YouTube promised to stop recommending videos that "could misinform users in harmful ways," and later told the Guardian that that would include anti-vaccine videos. The Guardian also noted this week that one anti-vaccination group on Facebook has over 150,000 members. But Facebook told the Post Wednesday that by not deleting the pseudoscience, they're actually giving their users an opportunity to speak up on their own and share factual counter-arguments themselves.

By Thursday Facebook added that it was "exploring" additional steps, including "reducing or removing this type of content from recommendations, including 'Groups You Should Join,' and demoting it in search results, while also ensuring that higher quality and more authoritative information is available."

Remember when America's National Highway Traffic Safety Administration reported Tesla's Autopilot reduced crashes by 40%? Two years later the small research and consulting firm Quality Control Systems (QCS) finally obtained the underlying data -- and found flaws in the methodology "serious enough to completely discredit the 40 percent figure," reports Ars Technica, "which Tesla has cited multiple times over the last two years."
The majority of the vehicles in the Tesla data set suffered from missing data or other problems that made it impossible to say whether the activation of Autosteer increased or decreased the crash rate. But when QCS focused on 5,714 vehicles whose data didn't suffer from these problems, it found that the activation of Autosteer actually increased crash rates by 59 percent...

NHTSA undertook its study of Autopilot safety in the wake of the fatal crash of Tesla owner Josh Brown in 2016. Autopilot -- more specifically Tesla's lane-keeping function called Autosteer -- was active at the time of the crash, and Brown ignored multiple warnings to put his hands back on the wheel. Critics questioned whether Autopilot actually made Tesla owners less safe by encouraging them to pay less attention to the road. NHTSA's 2017 finding that Autosteer reduced crash rates by 40 percent seemed to put that concern to rest. When another Tesla customer, Walter Huang, died in an Autosteer-related crash last March, Tesla cited NHTSA's 40 percent figure in a blog post defending the technology. A few weeks later, Tesla CEO Elon Musk berated reporters for focusing on stories about crashes instead of touting the safety benefits of Autopilot....

[T]hese new findings are relevant to a larger debate about how the federal government oversees driver-assistance systems like Autopilot. By publishing that 40 percent figure, NHTSA conferred unwarranted legitimacy on Tesla's Autopilot technology. NHTSA then fought to prevent the public release of data that could help the public independently evaluate these findings, allowing Tesla to continue citing the figure for another year.... NHTSA fought QCS' FOIA request after Tesla indicated that the data was confidential and would cause Tesla competitive harm if it was released.
Last May the NHTSA finally clarified that their study "did not assess the effectiveness of this technology." Ars Technica also points out that the data focused on version 1 of Autopilot, "which Tesla hasn't sold since 2016."

fstack writes: Intel is still a year out from releasing their first discrete graphics processors, but the company has begun publishing their open-source Linux GPU driver code. This week they began by publishing patches on top of their existing Intel Linux driver for supporting device local memory for dedicated video memory as part of their restructuring effort to support discrete graphics cards. Intel later confirmed this is the start of their open-source driver support for discrete graphics solutions. They have also begun working on Linux driver support for Adaptive-Sync and better reset recovery.

An anonymous reader quotes a report from Motherboard: Last week, Motherboard published an investigation which revealed that law enforcement agencies around the country are using PredPol -- a predictive policing software that once cited the controversial, unproven "broken windows" policing theory as a part of its best practices. Our report showed that local police in Kansas, Washington, South Carolina, California, Georgia, Utah, and Michigan are using or have used the software. In a 2014 presentation to police departments obtained by Motherboard, the company says that the software is "based on nearly seven years of detailed academic research into the causes of crime pattern formation the mathematics looks complicated -- and it is complicated for normal mortal humans -- but the behaviors upon which the math is based are very understandable."

The company says those behaviors are "repeat victimization" of an address, "near-repeat victimization" (the proximity of other addresses to previously reported crimes), and "local search" (criminals are likely to commit crimes near their homes or near other crimes they've committed, PredPol says.) But academics Motherboard spoke to say that the mathematical theory that is used to power PredPol is flawed, and that its algorithm -- at least as pitched to police -- is far too simplistic to actually predict crime. Kristian Lum, who co-wrote a 2016 paper that tested the algorithmic mechanisms of PredPol with real crime data, told Motherboard in a phone call that although PredPol is powered by complicated-looking mathematical formulas, its actual function can be summarized as a moving average -- or an average of subsets within a data set. "The academic foundation for PredPol's software takes a statistical modeling method used to predict earthquakes and apply it to crime," reports Motherboard. "Much like how earthquakes are likely to appear in similar places, the papers argue, crimes are also likely to occur in similar places. Suresh Venkatasubramanian, a professor of computing at the University of Utah and a member of the board of directors for ACLU Utah, told Motherboard that earthquake data and crime data are, naturally, collected in different ways."

"I would say in our mind, the key difference is that in earthquake models, you have seismographs everywhere -- wherever an earthquake happens, you'll find it," Venkatasubramanian said. "The crux of the issue really is that to what extent are you able to get data about what you're observing that is not also totally on the model itself." "If you build predictive policing, you are essentially sending police to certain neighborhoods based on what what they told you -- but that also means you're not sending police to other neighborhoods because the system didn't tell you to go there," Venkatasubramanian said. "If you assume that the data collection for your system is generated by police whom you sent to certain neighborhoods, then essentially your model is controlling the next round of data you get."

The Laser Interferometer Gravitational-Wave Observatory (LIGO) facilities, residing in Washington and Louisiana, will be upgraded via grants from the U.S. National Science Foundation, UK Research and Innovation and the Australian Research Council -- providing stronger, more frequent detections and decreasing noise. CNET reports: Over $34 million will be provided for the upgrade which makes LIGO sound like the latest iPhone. When it is complete, LIGO will go from its crusty old 2015 "Advanced LIGO" phase to the "Advanced LIGO Plus" phase. LIGO's twin facilities both contain two 4-kilometer long arms that use lasers to detect minute disturbances caused by extremely energetic cosmic events -- like black holes merging. The incredibly high-powered events are responsible for gravitational waves, rippling out through spacetime the same way water does when you drop a rock in a pond. By the time they reach Earth, the ripples are so small that only incredibly tiny disturbances in LIGO's lasers can detect them.

The proposed upgrades will greatly increase the number of events that LIGO will detect. With only 11 under its belt so far, [David Reitze, executive director of LIGO] even expects we might see "black hole mergers on a daily basis" and describes neutron star mergers becoming "much more frequent." All that extra power adds up, hopefully revealing some of the cosmos' deepest, darkest secrets. In September 2015, LIGO provided the first evidence for a black hole merger -- and in turn, the existence of gravitational waves -- just four days after a three-year long upgrade. Since then, LIGO has seen 10 black hole mergers and a single, huge collision between two incredibly dense stars, known as neutron stars.

Samsung has unveiled the Galaxy Tab S5e, its lightest and thinnest tablet ever made. "At $399, it's not only far more affordable than the flagship $649 Samsung Galaxy Tab S4, it's arguably surpassed it in some ways," reports The Verge. From the report: For starters, the Tab S5e has the thinnest and lightest metal unibody of any Galaxy Tab, measuring 5.5mm thin and weighing just 400 grams -- even compared to the 11-inch iPad Pro at 5.9mm thick and 468 grams, the Tab S5e is both lighter and thinner. The company also claims they've maximized space with the Tab S5e's massive 81.8 percent screen-to-body ratio, which on paper, is an improvement over the Tab S4's lower 79 percent ratio. It's also right on the heels of the 11-inch iPad Pro's ~82.9 percent screen-to-body ratio.

And unlike Samsung's previous attempt to make its 10.5-inch tablet more affordable, this slate doesn't skimp on the screen and not nearly as much on the processor. Samsung's Tab S5e is a 10.5-inch Super AMOLED device with a 16:10 aspect ratio and 2560 x 1600 resolution, while its octa-core Snapdragon 670 processor should provide solid mid-range performance. Samsung's also promising up to 14.5 hours of battery life. The Tab S5e is also the first tablet from the Korean tech giant to ship with Pie, the latest version of Android, along with the new Bixby 2.0 virtual assistant and information tool. Samsung is also carrying features like Dex, a desktop-style Android environment, over from other Galaxy devices, like the Note 9 and Tab S4. It allows users to interact with their device using the screen, a mouse, keyboard, or all three. Other features include AKG-tuned, quad surround sound speakers, 64GB of internal storage (microSD expandable to 512GB), with 4GB RAM (upgradable to 6GB RAM/128GB storage), and 13-megapixel back and 8-megapixel front-facing cameras. Cellular models will follow the Wi-Fi versions later this year.

18,000 Android apps with tens or hundreds of millions of installs on the Google Play Store have been found to violate Google's Play Store Advertising ID policy guidance by collecting persistent device identifiers such as serial numbers, IMEI, WiFi MAC addresses, SIM card serial numbers, and sending them to mobile advertising related domains alongside ad IDs. Bleeping Computer reports: AppCensus is an organization based in Berkeley, California, and created by researchers from all over the world with expertise in a wide range of fields, ranging from networking and privacy to security and usability. The project is supported by "grants from the National Science Foundation, the Department of Homeland Security, and the Data Transparency Lab." By highlighting this behavior, AppCensus shows that while users are being offered the option to reset the advertising ID, doing so will not immediately translate into getting a new "identity" because app developers can also use a multitude of other identifiers to keep their tracking and targeting going.

Google did not yet respond to a report sent by AppCensus in September 2018 containing a list of 17,000 Android apps that send persistent identifiers together with ad IDs to various advertising networks, also attaching a list of 30 recipient mobile advertising related domains where the various IDs were being sent. While looking at the network packets sent between the apps and these 30 domains, AppCensus observed that "they are either being used to place ads in apps, or track user engagement with ads." In a statement to CNET, a Google spokesperson said: "We take these issues very seriously. Combining Ad ID with device identifiers for the purpose of ads personalization is strictly forbidden. We're constantly reviewing apps -- including those listed in the researcher's report -- and will take action when they do not comply with our policies."

Some of the most popular applications found to be violating Google's Usage of Android Adverting ID policies include Clean Master, Subway Surfers, Flipboard, My Talking Tom, Temple Run 2, and Angry Birds Classic. The list goes on and on, and the last app in the "Top 20" list still has over 100 million installations.

An anonymous reader quotes a report from TechCrunch: Twitter retains direct messages for years, including messages you and others have deleted, but also data sent to and from accounts that have been deactivated and suspended, according to security researcher Karan Saini. Saini found years-old messages in a file from an archive of his data obtained through the website from accounts that were no longer on Twitter. He also reported a similar bug, found a year earlier but not disclosed until now, that allowed him to use a since-deprecated API to retrieve direct messages even after a message was deleted from both the sender and the recipient -- though, the bug wasn't able to retrieve messages from suspended accounts.

Direct messages once let users "unsend" messages from someone else's inbox, simply by deleting it from their own. Twitter changed this years ago, and now only allows a user to delete messages from their account. "Others in the conversation will still be able to see direct messages or conversations that you have deleted," Twitter says in a help page. Twitter also says in its privacy policy that anyone wanting to leave the service can have their account "deactivated and then deleted." After a 30-day grace period, the account disappears, along with its data. But, in our tests, we could recover direct messages from years ago -- including old messages that had since been lost to suspended or deleted accounts. By downloading your account's data, it's possible to download all of the data Twitter stores on you. A Twitter spokesperson said the company was "looking into this further to ensure we have considered the entire scope of the issue."

According to a report from Forbes, Samsung may be exiting the 4K Blu-ray player market. "After launching its first 4K players in 2017, the company didn't add any new players to its lineup in 2018," reports CNET. "A high-end player for 2019 along the lines of its UBD-M9500 was in the works, the report says, but has now been scrapped." From the report: One of the reasons for pulling out could be that the existing players' format support has lagged behind the rest of the industry. For example, instead of supporting Dolby Vision, Samsung created its own version of HDR10, HDR10+, which was designed for use in streaming and physical media. Competitor Oppo was the first company to support both HDR10 and Dolby Vision but announced it was ending production of its 4K Blu-ray players in April 2018. Meanwhile Sony announced the M2 player at CES 2019 with support for Dolby Vision and Panasonic recently released the high-end DP-UB9000 player in Europe and Australia.

An anonymous reader quotes a report from Gamasutra: In the wake of Activision Blizzard's massive layoff wave, a move that was announced in the same call as the company's record quarter, the union federation AFL-CIO has published an open letter to game developers urging members of the industry to organize. The AFL-CIO itself is the largest labor organization in the United States and counts 55 individual unions (and more than 12.5 million workers) among its affiliates. The letter, readable in full on Kotaku, calls out many of the issues that have prompted conversations about unionization in just recent years like excessive crunch, toxic work conditions, inadequate pay, and job instability. The industry, points out AFL-CIO's secretary-treasurer Liz Shuler, boasted sales 3.6 times greater than those of the film industry in 2018, yet much of that financial success isn't felt by the developers working on the games that generate those billions. "Executives are always quick to brag about your work. It's the talk of every industry corner office and boardroom. They pay tribute to the games that capture our imaginations and seem to defy economic gravity. They talk up the latest innovations in virtual reality and celebrate record-smashing releases, as your creations reach unparalleled new heights," says Shuler.

"My question is this: what have you gotten in return? They get rich. They get notoriety. They get to be crowned visionaries and regarded as pioneers. What do you get? Outrageous hours and inadequate paychecks. Stressful, toxic work conditions that push you to your physical and mental limits. The fear that asking for better means risking your dream job. [...] Change will happen when you gain leverage by joining together in a strong union. And, it will happen when you use your collective voice to bargain for a fair share of the wealth you create every day. No matter where you work, bosses will only offer fair treatment when you stand together and demand it."

An independent report authored by a US government auditing agency has recommended that Congress develop internet data privacy legislation to enhance consumer protections, similar to the EU's General Data Protection Regulation (GDPR). From a report: The 56-page report [PDF] was put together by the US Government Accountability Office (GAO), a bi-partisan government agency that provides auditing, evaluation, and investigative services for Congress. Its reports are used for hearings and drafting legislation. The House Energy and Commerce Committee, which requested the GAO report two years ago, has scheduled a hearing for February 26, during which it plans to discuss GAO's findings and the possibility in drafting the US' first federal-level internet privacy law. If the committee's members would be to follow GAO's conclusions, a GDPR-like legislation should be coming to the US.

A robot outfitted with remotely controlled pinchers poked at debris that's suspected to contain molten nuclear fuel at the bottom of one of Fukushima's nuclear reactors, World Nuclear News reports. From a report: The poking and prodding is part of the ongoing cleanup effort at Japan's Fukushima Daiichi power plant, the site of a major nuclear accident in 2011. The dextrous robot was dangled into the Unit 2 reactor on February 13th, according to a news release from the plant's operator, Tokyo Electric Power Company (TEPCO). Unit 2 is one of the reactors at the Fukushima Daiichi power plant that overheated after a massive earthquake and tsunami hit Japan in 2011, which caused the reactor core to melt. TEPCO suspects that radioactive fuel may have melted through the bottom of the reactor vessel to fall into the containment structure surrounding it. The company has to find the radioactive debris and figure out how to remove them, so TEPCO has been sending in a series of robots to scout out the reactors. It's a dangerous journey that some of the robots haven't survived.

From a report: A new robot can navigate without GPS, using the same light-sensing abilities as desert ants. Desert ants survive in searingly hot conditions in the Sahara. They sometimes have just a few minutes to forage for food before they risk burning to death. As a result, they are very efficient navigators, using bands of polarized light, invisible to humans, to get around. They also carefully count their steps. These two tactics help to keep them alive. AntBot: The bot, described this week in Science Robotics, is fitted with UV light sensors that can detect polarized light from the sun. This is known as a "celestial compass" and is designed to mimic the way desert ants see the sun's light. This helps it work out the direction it's going in. The robot also counts its steps, much like its desert muse. In tests, it successfully managed to complete an outdoor homing task, where it was required to go to several checkpoints and then return to a fixed location within a range of 14 meters.