Government

Hollywood and Netflix Report Top Piracy Threats To US Government (torrentfreak.com) 103

An anonymous reader quotes a report from TorrentFreak: The Motion Picture Association (MPA) has sent its latest overview of notorious piracy markets to the US Government. The Hollywood group, which also represents Netflix, lists a broad variety of online piracy threats. Aside from traditional pirate sites, it also includes domain registries, hosting providers, advertisers, and apps. [...] The MPA report typically provides a detailed overview of the piracy landscape. This year, the USTR further asked rightsholders to explain how piracy impacts US workers. According to the movie industry group, the effect is significant. "In 2020, there were an estimated 137.2 billion visits to film and TV piracy sites globally, which cost the U.S. economy at least $29.2 billion in lost revenue each year. Specifically, piracy has been estimated to reduce employment in our industry between 230,000 and 560,000 jobs," MPA writes, citing external research. The MPA notes that piracy is a global problem that requires cooperation from the broader Internet ecosystem. Services that see themselves as neutral intermediaries, operating parts of the core Internet infrastructure, should take responsibility. "All stakeholders in the internet ecosystem -- including hosting providers, DNS providers, cloud services, advertising networks, payment processors, social networks, and search engines -- should actively seek to reduce support for notoriously infringing sites," MPA writes.

The industry group views Cloudflare as part of this group and mentions the US company by name in its submission. "Cloudflare's customers include some of the most notorious, longstanding pirate websites in the world, including the massively popular streaming site cuevana3.me and The Pirate Bay," MPA notes, adding that repeated notices of infringement elicited no action on Cloudflare's part. The notorious markets list is limited to non-US operations, so Cloudflare itself isn't one of the MPA's targets. Various other Internet services are, including several third-party intermediaries. The MPA's list of notorious markets calls out domain name registries, including the Russian .RU registry, and the companies that maintain the records for the .CH, .CC, .IO, .ME and .TO domain names. These continue to keep pirate sites on board, despite numerous complaints. The same is true for the payment provider VoguePay, which is reportedly quite popular among IPTV services. In addition, advertisers such as 1XBET and Propeller Ads are called out as well. The latter company rebutted MPA's accusations last year but that didn't prevent it from being highlighted again.

Hosting companies are also cited as intermediaries that could and should do more. Instead, some find themselves appealing to pirate services with products such as "bulletproof" hosting. Squitter.eu and Amaratu are two such examples, the MPA reports. In addition to third-party intermediaries, there is also a category of services that caters to pirates directly. These "piracy as a service" (PaaS) companies offer tools that allow people to start a pirate site with minimal effort. "PaaS encompasses a suite of often off-the-shelf services that make it easy for would-be pirates without any technical knowledge to create, operate, and monetize a fully functioning pirate operation," MPA writes. [...] Actual pirate sites themselves are also mentioned, including the usual suspects The Pirate Bay, RARBG and YTS. In addition to torrent sites, the MPA also lists direct download hubs, streaming portals and linking sites, including Uptobox.com, Fmovies.to and Egy.best. Various dedicated piracy apps get a mention as well, and the MPA further includes a long list of unauthorized IPTV services. The anti-piracy group says that it has identified more than a thousand pirate IPTV platforms, so the list provided to the USTR is certainly not exhaustive. In fact, the MPA says that all companies, sites, and services are part of a broader piracy problem. Those flagged in the MPA's report are just examples of some of the worst offenders, nothing more.
A list of all sites and services that are highlighted and categorized in MPA's notorious markets submission (PDF) can be found in the article.
AMD

New Working Speculative Execution Attack Sends Intel and AMD Scrambling (arstechnica.com) 66

Some microprocessors from Intel and AMD are vulnerable to a newly discovered speculative execution attack that can covertly leak password data and other sensitive material, sending both chipmakers scrambling once again to contain what is proving to be a stubbornly persistent vulnerability. Ars Technica reports: Researchers from ETH Zurich have named their attack Retbleed because it exploits a software defense known as retpoline, which was introduced in 2018 to mitigate the harmful effects of speculative execution attacks. Speculative execution attacks, also known as Spectre, exploit the fact that when modern CPUs encounter a direct or indirect instruction branch, they predict the address for the next instruction they're about to receive and automatically execute it before the prediction is confirmed. Spectre works by tricking the CPU into executing an instruction that accesses sensitive data in memory that would normally be off-limits to a low-privileged application. Retbleed then extracts the data after the operation is canceled. [...] The ETH Zurich researchers have conclusively shown that retpoline is insufficient for preventing speculative execution attacks. Their Retbleed proof-of-concept works against Intel CPUs with the Kaby Lake and Coffee Lake microarchitectures and AMD Zen 1, Zen 1+, and Zen 2 microarchitectures.

In response to the research, both Intel and AMD advised customers to adopt new mitigations that the researchers said will add as much as 28 percent more overhead to operations. [...] Both Intel and AMD have responded with advisories. Intel has confirmed that the vulnerability exists on Skylake-generation processors that don't have a protection known as enhanced Indirect Branch Restricted Speculation (eIBRS) in place. "Intel has worked with the Linux community and VMM vendors to provide customers with software mitigation guidance which should be available on or around today's public disclosure date," Intel wrote in a blog post. "Note that Windows systems are not affected given that these systems use Indirect Branch Restricted Speculation (IBRS) by default which is also the mitigation being made available to Linux users. Intel is not aware of this issue being exploited outside of a controlled lab environment." AMD, meanwhile, has also published guidance. "As part of its ongoing work to identify and respond to new potential security vulnerabilities, AMD is recommending software suppliers consider taking additional steps to help guard against Spectre-like attacks," a spokesman wrote in an email. The company has also published a whitepaper.

[Research Kaveh Razavi added:] "Retbleed is more than just a retpoline bypass on Intel, specially on AMD machines. AMD is in fact going to release a white paper introducing Branch Type Confusion based on Retbleed. Essentially, Retbleed is making AMD CPUs confuse return instructions with indirect branches. This makes exploitation of returns very trivial on AMD CPUs." The mitigations will come at a cost that the researchers measured to be between 12 percent and 28 percent more computational overhead. Organizations that rely on affected CPUs should carefully read the publications from the researchers, Intel, and AMD and be sure to follow the mitigation guidance.

China

Mysterious Firm Seeks To Buy Majority Stake In Arm China (theregister.com) 9

An anonymous reader quotes a report from The Register: The saga surrounding Arm's joint venture in China just took another intriguing turn: a mysterious firm named Lotcap Group claims it has signed a letter of intent to buy a 51 percent stake in Arm China from existing investors in the country. In a Chinese-language press release posted Wednesday, Lotcap said it has formed a subsidiary, Lotcap Fund, to buy a majority stake in the joint venture. However, reporting by one newspaper suggested that the investment firm still needs the approval of one significant investor to gain 51 percent control of Arm China.

The development comes a couple of weeks after Arm China said that its former CEO, Allen Wu, was refusing once again to step down from his position, despite the company's board voting in late April to replace Wu with two co-chief executives. SoftBank Group, which owns 49 percent of the Chinese venture, has been trying to unentangle Arm China from Wu as the Japanese tech investment giant plans for an initial public offering of the British parent company. According to the South China Morning Post, Lotcap claimed in the press release that its proposed deal has "support" from Arm. We asked Arm about this, and despite a spokesperson saying in an email to The Register that the British chip designer is "not commenting at this time," the representative did say that an updated press release from Lotcap does not mention Arm or SoftBank supporting Lotcap's deal.

Google

Google Blocks File Manager Total Commander From Allowing Users To Sideload Apps (androidpolice.com) 74

An anonymous reader shares a report: Total Commander has been around since the 90s, eventually expanding into Android after the platform launched over a decade ago. The app has more than 10 million downloads on the Play Store, still supporting OS versions as far back as Android 2.2. With a new update, developer Christian Ghisler has removed the ability to install APK files on Android, blaming Google Play policies in the patch notes for the app. It's a shocking twist for the service and, seemingly, a bad omen of things to come for other mobile file managers. A forum post from Ghisler sheds some more light on what's going on here, as Google sent him a notice warning of his app's removal from the Play Store within a week if the app went unmodified. The company's automated response pointed the developer to the "Device and Network Abuse" policy.
Earth

UN Climate Report: 'Atlas of Human Suffering' Worse, Bigger 116

An anonymous reader quotes a report from the Associated Press: Deadly with extreme weather now, climate change is about to get so much worse. It is likely going to make the world sicker, hungrier, poorer, gloomier and way more dangerous in the next 18 years with an "unavoidable" increase in risks, a new United Nations science report says. And after that watch out. The UN Intergovernmental Panel on Climate Change report said Monday if human-caused global warming isn't limited to just another couple tenths of a degree, an Earth now struck regularly by deadly heat, fires, floods and drought in future decades will degrade in 127 ways with some being "potentially irreversible."

Today's children who may still be alive in the year 2100 are going to experience four times more climate extremes than they do now even with only a few more tenths of a degree of warming over today's heat. But if temperatures increase nearly 2 more degrees Celsius from now (3.4 degrees Fahrenheit) they would feel five times the floods, storms, drought and heat waves, according to the collection of scientists at the IPCC. Already at least 3.3 billion people's daily lives "are highly vulnerable to climate change" and 15 times more likely to die from extreme weather, the report says. Large numbers of people are being displaced by worsening weather extremes. And the world's poor are being hit by far the hardest, it says.

More people are going to die each year from heat waves, diseases, extreme weather, air pollution and starvation because of global warming, the report says. Just how many people die depends on how much heat-trapping gas from the burning of coal, oil and natural gas gets spewed into the air and how the world adapts to an ever-hotter world, scientists say. The report lists mounting dangers to people, plants, animals, ecosystems and economies, with people at risk in the millions and billions and potential damages in the trillions of dollars. The report highlights people being displaced from homes, places becoming uninhabitable, the number of species dwindling, coral disappearing, ice shrinking and rising and increasingly oxygen-depleted and acidic oceans. Some of these risks can still be prevented or lessened with prompt action.
"Today's IPCC report is an atlas of human suffering and a damning indictment of failed climate leadership," United Nations Secretary-General Antonio Guterres said in a statement. "With fact upon fact, this report reveals how people and the planet are getting clobbered by climate change."
Power

Losses Estimated at $334M For Cargo Ship Fire, as Lithium-Ion Batteries Burned More Than a Week (qz.com) 73

"Volkswagen AG has lost hope that many of its roughly 4,000 vehicles aboard a cargo ship that caught fire last week in the Atlantic can be saved," Bloomberg reported Friday, citing estimates that the total cargo loss for the Felicity Ace could exceed a third of a billion dollars.

"The blaze is believed to have lasted more than a week after the Panama-flagged ship's crew members were evacuated and it was left adrift." VW's Golf compact cars and ID.4 electric crossovers were among the vehicles aboard the ship, according to an internal email last week from the automaker's U.S. operation. Headquartered in Wolfsburg, Germany, the group manufactures cars under brands including VW, Porsche, Audi and Lamborghini — all of which were on the ship.
Earlier this week Qz.com argued that the fire was being fueled by lithium-ion batteries. Slashdot reader McGruber shared their report: It's not clear if the batteries contributed to the fire starting in the first place — a greasy rag in a lubricant-slicked engine room or a fuel leak are the usual suspects in ship fires — but the batteries are keeping the flames going now.

A forensic investigation will take months to determine the cause. [Last] Saturday, João Mendes CabeÃas, captain of the port of Faial, the nearest Azorean island, told Reuters that the batteries in the ship's cargo are "keeping the fire alive...." Large quantities of dry chemicals are needed to smother lithium ion battery fires, which burn hotter and release noxious gases in the process. Pouring water onto the Felicity Ace wouldn't put out a lithium-ion battery fire, CabeÃas told Reuters, and the added water weight could make the ship more unstable.

Electric vehicle fires are rare, but pose their own kind of flammability risk, and one that becomes heightened as EVs go mainstream. Large numbers of EVs grouped together, as when they are transported by cargo ship, or electric buses parked in an overnight lot, raise the risk that one flaming battery could ignite a chain reaction in adjacent batteries. According to a research proposal at the National Academy of Sciences' Transportation Research Board, "Lithium-ion battery fire risks are currently undermanaged in transit operations."

There have been more than 35 large lithium-ion battery fires since 2018, Paul Christensen, an expert in lithium fires, told the Financial Times, including a 13-ton Tesla megapack storage battery in Victoria Australia that burned for three days. An electric ferry in Norway caught fire in 2019, and in April 2021, a battery fire at a Beijing mall killed two firefighters.

In addition, car-carrying ships and ferries can face higher risks from fires, according to insurer Allianz Global's head of marine risk. Due to the internal areas not being divided to make it easier to transport cars, when a fire starts it can spread more easily.

AI

China's New AI Policy Doesn't Prevent It From Building Autonomous Weapons (thenextweb.com) 46

The Next Web's Tristan Greene combed through a recently published "position paper" detailing China's views on military AI regulation and found that it "makes absolutely no mention of restricting the use of machines capable of choosing and firing on targets autonomously." From the report: Per the paper: "In terms of law and ethics, countries need to uphold the common values of humanity, put people's well-being front and center, follow the principle of AI for good, and observe national or regional ethical norms in the development, deployment and use of relevant weapon systems." Neither the US or the PRC has any laws, rules, or regulations currently restricting the development or use of military LAWs.

The paper's rhetoric may be empty, but there's still a lot we can glean from its contents. Research analyst Megha Pardhi, writing for the Asia Times, recently opined it was intended to signal that China's seeking to "be seen as a responsible state," and that it may be concerned over its progress in the field relative to other superpowers. According to Pardhi: "Beijing is likely talking about regulation out of fear either that it cannot catch up with others or that it is not confident of its capabilities. Meanwhile, formulating a few commonly agreeable rules on weaponization of AI would be prudent."
"Despite the fact that neither the colonel's article nor the PRC's position paper mention LAWs directly, it's apparent that what they don't say is what's really at the heart of the issue," concludes Greene. "The global community has every reason to believe, and fear, that both China and the US are actively developing LAWS."
Medicine

Suicide Pods Now Legal In Switzerland, Providing Users With a Painless Death (globalnews.ca) 363

Switzerland is giving the green light to so-called "suicide capsules" -- 3-D printed pods that allow people to choose the place where they want to die an assisted death. Global News reports: The country's medical review board announced the legalization of the Sarco Suicide Pods this week. They can be operated by the user from the inside. Dr. Philip Nitschke, the developer of the pods and founder of Exit International, a pro-euthanasia group, told SwissInfo.ch the machines can be "towed anywhere for the death" and one of the most positive features of the capsules is that they can be transported to an "idyllic outdoor setting."

Currently, assisted suicide in Switzerland means swallowing a capsule filled with a cocktail of controlled substances that puts the person into a deep coma before they die. But Sarco pods -- short for sarcophagus -- allow a person to control their death inside the pod by quickly reducing internal oxygen levels. The person intending to end their life is required to answer a set of pre-recorded questions, then press a button that floods the interior with nitrogen. The oxygen level inside is quickly reduced from 21 per cent to one per cent. After death, the pod can be used as a coffin. [...]

Nitschke said his method of death is painless, and the person will feel a little bit disoriented and/or euphoric before they lose consciousness. He said there are only two capsule prototypes in existence, but a third machine is being printed now, and he expects this method to become available to the Swiss public next year.

Hardware

DDR4 Memory Protections Are Broken Wide Open By New Rowhammer Technique (arstechnica.com) 115

"An unprivileged application can corrupt data in memory by accessing 'hammering' rows of DDR4 memory in certain patterns millions of times a second, giving those untrusted applications nearly unfettered system privileges," writes long-time Slashdot reader shoor. Ars Technica reports: Rowhammer attacks work by accessing -- or hammering -- physical rows inside vulnerable chips millions of times per second in ways that cause bits in neighboring rows to flip, meaning 1s turn to 0s and vice versa. Researchers have shown the attacks can be used to give untrusted applications nearly unfettered system privileges, bypass security sandboxes designed to keep malicious code from accessing sensitive operating system resources, and root or infect Android devices, among other things. All previous Rowhammer attacks have hammered rows with uniform patterns, such as single-sided, double-sided, or n-sided. In all three cases, these "aggressor" rows -- meaning those that cause bitflips in nearby "victim" rows -- are accessed the same number of times.

Research published on Monday presented a new Rowhammer technique. It uses non-uniform patterns that access two or more aggressor rows with different frequencies. The result: all 40 of the randomly selected DIMMs in a test pool experienced bitflips, up from 13 out of 42 chips tested in previous work (PDF) from the same researchers. "We found that by creating special memory access patterns we can bypass all mitigations that are deployed inside DRAM," Kaveh Razavi and Patrick Jattke, two of the research authors, wrote in an email. "This increases the number of devices that can potentially be hacked with known attacks to 80 percent, according to our analysis. These issues cannot be patched due to their hardware nature and will remain with us for many years to come."

The non-uniform patterns work against Target Row Refresh. Abbreviated as TRR, the mitigation works differently from vendor to vendor but generally tracks the number of times a row is accessed and recharges neighboring victim rows when there are signs of abuse. The neutering of this defense puts further pressure on chipmakers to mitigate a class of attacks that many people thought more recent types of memory chips were resistant to. In Monday's paper, the researchers wrote: "Proprietary, undocumented in-DRAM TRR is currently the only mitigation that stands between Rowhammer and attackers exploiting it in various scenarios such as browsers, mobile phones, the cloud, and even over the network. In this paper, we show how deviations from known uniform Rowhammer access patterns allow attackers to flip bits on all 40 recently-acquired DDR4 DIMMs, 2.6x more than the state of the art. The effectiveness of these new non-uniform patterns in bypassing TRR highlights the need for a more principled approach to address Rowhammer."
While PCs, laptops, and mobile phones are most affected by the new findings, the report notes that cloud services like AWS and Azure "remain largely safe from Rowhammer because they use higher-end chips that include a defense known as ECC, short for Error Correcting Code."

"Concluding, our work confirms that the DRAM vendors' claims about Rowhammer protections are false and lure you into a false sense of security," the researchers wrote. "All currently deployed mitigations are insufficient to fully protect against Rowhammer. Our novel patterns show that attackers can more easily exploit systems than previously assumed."
Earth

The 'Montreal Protocol' Designed To Heal the Ozone Layer May Have Also Fended Off Several Degrees of Warming (technologyreview.com) 44

James Temple writes via MIT Technology Review: In 1987, dozens of nations adopted the Montreal Protocol, agreeing to phase out the use of chlorofluorocarbons and other chemicals used in refrigerants, solvents, and other industrial products that were breaking down Earth's protective ozone layer. It was a landmark achievement, the most successful example of nations pulling together in the face of a complex, collective threat to the environment. Three decades later, the atmospheric ozone layer is slowly recovering, preventing additional levels of ultraviolet radiation that cause cancer, eye damage, and other health problems. But the virtues of the agreement, ultimately ratified by every country, are more widespread than its impact on the ozone hole. Many of those chemicals are also powerful greenhouse gases. So as a major side benefit, their reduction over the last three decades has already eased warming and could cut as much as 1C off worldwide average temperatures by 2050.

Now, a new study in Nature highlights yet another crucial, if inadvertent, bonus: reducing the strain that ultraviolet radiation from the sun puts on plants, inhibiting photosynthesis and slowing growth. The Montreal Protocol avoided "a catastrophic collapse of forests and croplands" that would have added hundreds of billions of tons of carbon to the atmosphere, Anna Harper, a senior lecturer in climate science at the University of Exeter and a coauthor of the paper, said in an email. The Nature paper, published August 18, found that if production of ozone-depleting substances had continued ticking up 3% each year, the additional UV radiation would have curtailed the growth of trees, grasses, ferns, flowers, and crops across the globe.

The world's plants would absorb less carbon dioxide, releasing as much as 645 billion tons of carbon from the land to the atmosphere this century. That could drive global warming up to 1C higher over the same period. It would also have devastating effects on agricultural yields and food supplies around the globe. The impact of rising CFCs levels on plants, plus their direct warming effect in the atmosphere, could have pushed temperatures around 2.5C higher this century, the researchers found. That would all come on top of the already dire warming projections for 2100.

Math

Scientists Calculate Pi To 62.8 Trillion Digits (www.fhgr.ch) 123

OneHundredAndTen writes: Pi is now known to 62.8 trillion decimal digits. Motherboard adds: Researchers in Switzerland broke the world record for the most accurate value of pi over the weekend, the team announced on Monday. They calculated the first 62.8 trillion digits, surpassing the former record by 12.8 trillion decimal points. Calculation first started in late April at the Competence Center for Data Analysis, Visualization and Simulation (DAViS) at the University of Applied Sciences in Graubünden, Switzerland. The calculated data was then backed up onto the high-performance computer where a Y-cruncher wrote it into the hexadecimal notation. It was then converted into the decimal system and verified by a mathematical algorithm
Earth

Greenhouse Gas Emissions Must Peak Within 4 Years, Says Leaked UN Report (theguardian.com) 462

An anonymous reader shares a report from The Guardian: Global greenhouse gas emissions must peak in the next four years, coal and gas-fired power plants must close in the next decade and lifestyle and behavioral changes will be needed to avoid climate breakdown, according to the leaked draft of a report from the world's leading authority on climate science. The leak is from the forthcoming third part of the landmark report by the Intergovernmental Panel on Climate Change, the first part of which was published on Monday, warning of unprecedented changes to the climate, some of them irreversible. The document, called the sixth assessment report, is divided into three parts: the physical science of climate change; the impacts and ways of reducing human influence on the climate.

Part three is not scheduled to be released before next March, but a small group of scientists decided to leak the draft via the Spanish branch of Scientist Rebellion, an offshoot of the Extinction Rebellion movement. It was first published by the journalist Juan Bordera in the Spanish online magazine CTXT. Bordera told the Guardian that the leak reflected the concern of some of those involved in drawing up the document that their conclusions could be watered down before publication in 2022. Governments have the right to make changes to the "summary for policymakers."

The top 10% of emitters globally, who are the wealthiest 10%, contribute between 36 and 45% of emissions, which is 10 times as much as the poorest 10%, who are responsible for only about three to 5%, the report finds. "The consumption patterns of higher income consumers are associated with large carbon footprints. Top emitters dominate emissions in key sectors, for example the top 1% account for 50% of emissions from aviation," the summary says. The report underlines the lifestyle changes that will be necessary, particularly in rich countries and among the wealthy globally. Refraining from over-heating or over-cooling homes, walking and cycling, cutting air travel and using energy-consuming appliances less can all contribute significantly to the reductions in emissions needed, the report finds.

United Kingdom

Make Coal History Says PM Boris Johnson After UN Climate Report (bbc.com) 247

An anonymous reader quotes a report from the BBC: Coal needs to be consigned to history to limit global warming, says PM Boris Johnson, describing a UN report on climate change as "sobering." He said the world must shift to clean energy and provide finance to help countries at risk from changing climates. The landmark study found it was "unequivocal" that human activity was responsible for global warming.

Green campaigners said the UK must halt planned new fossil fuel projects. Despite the call to end the use of coal, the UK is considering plans for a new coking coal mine in Cumbria, as well as proposals to tap a new oil field near Shetland. Mr Johnson said: "Today's report makes for sobering reading, and it is clear that the next decade is going to be pivotal to securing the future of our planet. We know what must be done to limit global warming -- consign coal to history and shift to clean energy sources, protect nature and provide climate finance for countries on the frontline."

The UK government, which has adopted a 2035 deadline for a 78% emissions cut, is due to publish its strategy on cutting UK emissions to zero overall by 2050 this autumn. Net zero means cutting carbon emissions as far as possible then balancing out any remaining releases, for example by tree planting. "The UK is leading the way, decarbonizing our economy faster than any country in the G20 over the last two decades," the prime minister said. "I hope today's IPCC report will be a wake-up call for the world to take action now, before we meet in Glasgow in November for the critical COP26 summit."
"The UK has already drastically reduced the use of coal, with consumption falling from 61 million tons in 2013 to eight million tonnes last year," notes the BBC. "But the country remains dependent on other fossil fuels such as natural gas, which provides most home heating and about 40% of electricity."
Earth

Earth is Warming Faster Than Previously Thought, and the Window is Closing To Avoid Catastrophic Outcomes (cnn.com) 323

JoshuaZ writes: As the world battles historic droughts, landscape-altering wildfires and deadly floods, a landmark report from global scientists says the window is rapidly closing to cut our reliance on fossil fuels and avoid catastrophic changes that would transform life as we know it. The state-of-the-science report from the United Nations' Intergovernmental Panel on Climate Change says the world has rapidly warmed 1.1 degrees Celsius higher than pre-industrial levels, and is now careening toward 1.5 degrees -- a critical threshold that world leaders agreed warming should remain below to avoid worsening impacts.

Only by making deep cuts to greenhouse gas emissions, while also removing carbon dioxide from the atmosphere, can we halt the precipitous trend. "Bottom line is that we have zero years left to avoid dangerous climate change, because it's here," Michael E. Mann, a lead author of the IPCC's 2001 report, told CNN. Unlike previous assessments, Monday's report concludes it is "unequivocal" that humans have caused the climate crisis and confirms that "widespread and rapid changes" have already occurred, some of them irreversibly.

That is due in part to the breakneck pace at which the planet has been recently warming, faster than scientists have previously observed. Since 2018, when the panel published a special report on the significance of 1.5-degrees, greenhouse gas emissions have continued mostly unabated and have pushed global temperatures higher. Even under the IPCC's most optimistic scenario, in which the world's emissions begin to drop sharply today and are reduced to net zero by 2050, global temperature will still peak above the 1.5-degree threshold before falling. In a statement, UN Secretary-General Antanio Guterres called the report "a code red for humanity," and noted the 1.5-degree threshold is "perilously close." "The only way to prevent exceeding this threshold is by urgently stepping up our efforts, and pursuing the most ambitious path," Guterres said.

Science

Cities Have Their Own Distinct Microbial Fingerprints (sciencemag.org) 26

sciencehabit shares a report from Science Magazine: When Chris Mason's daughter was a toddler, he watched, intrigued, as she touched surfaces on the New York City subway. Then, one day, she licked a pole. "There was a clear microbial exchange," says Mason, a geneticist at Weill Cornell Medicine. "I desperately wanted to know what had happened." So he started swabbing the subway, sampling the microbial world that coexists with people in our transit systems. After his 2015 study revealed a wealth of previously unknown species in New York City, other researchers contacted him to contribute. Now, Mason and dozens of collaborators have released their study of subways, buses, elevated trains, and trams in 60 cities worldwide, from Baltimore to Bogota, Colombia, to Seoul, South Korea. They identified thousands of new viruses and bacteria, and found that each city has a unique microbial "fingerprint."

They found that about 45% didn't match any known species: Nearly 11,000 viruses and 1,302 bacteria were new to science. The researchers also found a set of 31 species present in 97% of the samples; these formed what they called a "core" urban microbiome. A further 1145 species were present in more than 70% of samples. Samples taken from surfaces that people touch -- like railings -- were more likely to have bacteria associated with human skin, compared with surfaces like windows. Other common species in the mix were bacteria often found in soil, water, air, and dust. But the researchers also found species that were less widespread. Those gave each city a unique microbiomeâ"and helped the researchers predict, with 88% accuracy, which city random samples came from, they report today in Cell.

The study's main value isn't in its findings (which are mapped here) so much as its open data, available at metagraph.ethz.ch, says Noah Fierer, a microbiologist at the University of Colorado, Boulder, who was not involved with the research. That will give other researchers the chance to delve into new questions. "Different cities have different microbial communities," Fierer says. "That's not super surprising. The question for me is, why?" Mason sees an opportunity for "awe and excitement about mass transit systems as a source of unexplored and phenomenal biodiversity." Newly discovered species have potential for drug research, he says, and wide-scale mapping and monitoring of urban microbiomes would be a boon for public health, helping researchers spot emerging pathogens early.

Transportation

Elon Musk's Boring Company Finally Unveils Las Vegas Tunnel (jalopnik.com) 233

Elon Musk's Boring Company showed off its 1.7 mile loop of tunnel underneath the Las Vegas Convention Center this week, and Electrek writes that "it proved to be, well, quite boring... The vehicles are not going faster than 35 mph, and they are not being driven autonomously."

CNET's headline even calls the tunnel "lame," complaining that the project "is quickly turning into Tesla cars driving people underground, rather than some sort of futuristic transport system."

"Detractors say that makes The Boring Company's projects little more than reinvented subways with significantly less passenger capacity," adds Business Insider: Critics also point out that The Boring Company's noble aim of building congestion-alleviating tunnels under cities worldwide ignores the phenomenon of induced demand, which says that more roadways — even underground ones — will give way to more cars.
But Jalopnik had probably the harshest reaction to the Vegas Loop, noting that the speed of the system is "about 10 mph less than the top speed of a 1908 Ford Model T," and calling it "about as exciting as a sheet of unpainted drywall discarded in a closed office park..." Musk's The Boring Company own the machines that dug the tunnels, and those machines, some of which were heavily modified by the company, are capable of using the excess dirt from the tunnel to turn into bricks, which is pretty cool, I guess. Raw, humid thrills of brick-making aside, all this really is are some Teslas driving in tunnels lined with LED lights.

Sure, it's a 45-minute walk (correction, more like 20 minutes, sorry) on the surface and only a few minutes ride underneath, but the system is still remarkably bad at moving large numbers of people per hour, the metric normally used to evaluate mass transit systems. While it was originally intended to move up to 4,400 people per hour, fire regulations will limit the system to moving between 800 and 1,200 people per hour. That said, it looks like the company still states the 4,400 number, when used with 62 cars in the tunnel, though based on the safety issues, this does not seem likely. That's in the same ballpark as normal vehicular street traffic for private cars (600 to 1,600 people per hour) and a lot less than a dedicated bus lane (4,000 to 8,000 per hour) — hell, normal 60-passenger buses can do about 1,800 per hour, if we have them going back and forth every two minutes or so.

A dumb old sidewalk can move 9,000 people an hour! But that's walking, which is what animals do, and it takes a while and has the potential to make you sweat. Proposed moving high-speed sidewalks, similar to the ThyssenKrupp ACCEL system used in the Toronto Pearson International airport, are expected to move about 7,000 people per hour, and such a system would be far cheaper and easier to build... As it stands now, we have a few Teslas driving around in long, narrow loops under the convention center, saving you a bit of walking but doing every other part of the job of moving people worse than almost any other solution.

Business Insider's report adds that the Boring Company "aims to expand the system to other Las Vegas destinations, including the airport and downtown" — and that the company also in talks with Miami officials about a similar project.
Social Networks

Mark Zuckerberg Wants Commuting Replaced with VR/AR (ibtimes.co.in) 127

Facebook founder Mark Zuckerberg wants commuting to work replaced with VR/AR telecommuting. Zuckerberg made the suggestion on a talkshow on Clubhouse, reports The International Business Times: "One of the things that [VR] will unlock is the ability to live anywhere you want and be present in another place and really feel like you are there," the Facebook CEO said."It is going to unlock a lot of economic opportunity because people will be able to live where they want and increasingly work where they want and kind of teleport into place. I am also pretty optimistic about the impact on climate, in reducing the amount of commuting that people have to do. I think the advance in electric cars in reducing emissions is great and exciting, but I tell my team that it is easier to move bits of atoms around so we should be teleporting, not driving...."

Zuckerberg suggested a combination of both VR and AR technologies to achieve the dream of teleportation... Zuckerberg said the progress is steady at his labs on foundational technologies that will revolutionize the future of travel with the help of both VR and AR. "There is getting all the graphics and visual systems to really feel like you are immersed in the space. There's a long path of technology that needs to get done to kind of get that to be as realistic as you would want on VR," he said.

Business Insider notes the three-week-old talkshow — the same one visited by Elon Musk — is hosted by a Facebook employee and her VC husband, and is "focused on optimism... Guests on the show talk about future innovations without skepticism... Unlike traditional interviewers, Krishnan and Ramamurthy, as well as their guests, do not appear to push back against the ideas discussed, instead letting them flow freely."

CNET notes the appearance drew a skeptical response on Twitter from Ellen Pao, former CEO of social media company Reddit. "FB execs going on Clubhouse shows CH is all about tight control over messaging and avoiding hard questions and accountability."

Zuckerberg summarized his position with seven words. "We should be teleporting, not transporting, ourselves."
Java

Java Geeks Discuss 'The War for the Browser' and the State of Java Modularization (frequal.com) 67

Self-described "Java geek" nfrankel writes: At the beginning of 2019, I wrote about the state of Java modularization. I took a sample of widespread libraries, and for each of them, I checked whether:

- It supports the module system i.e. it provides an automatic module name in the manifest

- It's a full-fledged module i.e. it provides a module-info

The results were interesting. 14 out of those 29 libraries supported the module system, while 2 were modules in their own right.

Nearly 2 years later, and with Java 16 looming around the corner, it's time to update the report. I kept the same libraries and added Hazelcast and Hazelcast Jet. I've checked the latest version...

Three full years after that release, 10 out of 31 libraries still don't provide a module-compatible JAR. Granted, 3 of them didn't release a new version in the meantime. That's still 7 libraries that didn't add a simple line of text in their MANIFEST.MF

Meanwhile, long-time Slashdot reader AirHog argues that "Java is in a war for the browser. Can it regain the place it once held in its heyday?" All major browsers have disabled support for Java (and indeed most non-JavaScript technologies). Web-based front-ends are usually coded in JavaScript or some wrapper designed to make it less problematic (like TypeScript). Yes, you can still make websites using Java technology. There are plenty of 'official' technologies like JSP and JSF. Unfortunately, these technologies are entirely server-side. You can generate the page using Java libraries and business logic, but once it is sent to the browser it is static and lifeless... Java client-side innovation has all but stopped, at least via the official channels....

How can Java increase its relevance? How can Java win back client-side developers? How can Java prevent other technologies from leveraging front-end dominance to win the back-end, like Java once did to other technologies?

To win the war, Java needs a strong client-side option. One that lets developers make modern web applications using Java code. One that leverages web technologies. One that supports components. One that builds quickly. One that produces fast-downloading, high performance, 100-Lighthouse-scoring apps. One that plays nicely with other JVM languages. What does Java need?

Spoiler: The article concludes that "What Java needs Is TeaVM... an ahead-of-time transpiler that compiles Java classes to JavaScript."
It's funny.  Laugh.

Scientists Rename Human Genes To Stop Microsoft Excel From Misreading Them as Dates (theverge.com) 217

There are tens of thousands of genes in the human genome: minuscule twists of DNA and RNA that combine to express all of the traits and characteristics that make each of us unique. Each gene is given a name and alphanumeric code, known as a symbol, which scientists use to coordinate research. But over the past year or so, some 27 human genes have been renamed, all because Microsoft Excel kept misreading their symbols as dates. From a report: The problem isn't as unexpected as it first sounds. Excel is a behemoth in the spreadsheet world and is regularly used by scientists to track their work and even conduct clinical trials. But its default settings were designed with more mundane applications in mind, so when a user inputs a gene's alphanumeric symbol into a spreadsheet, like MARCH1 -- short for "Membrane Associated Ring-CH-Type Finger 1" -- Excel converts that into a date: 1-Mar. This is extremely frustrating, even dangerous, corrupting data that scientists have to sort through by hand to restore. It's also surprisingly widespread and affects even peer-reviewed scientific work. One study from 2016 examined genetic data shared alongside 3,597 published papers and found that roughly one-fifth had been affected by Excel errors.
Privacy

Google Promises Privacy With Virus App But Can Still Collection Location Data (nytimes.com) 83

An anonymous reader quotes a report from The New York Times: When Google and Apple announced plans in April for free software to help alert people of their possible exposure to the coronavirus, the companies promoted it as "privacy preserving" and said it would not track users' locations. Encouraged by those guarantees, Germany, Switzerland and other countries used the code to develop national virus alert apps that have been downloaded more than 20 million times. But for the apps to work on smartphones with Google's Android operating system -- the most popular in the world -- users must first turn on the device location setting, which enables GPS and may allow Google to determine their locations.

Some government officials seemed surprised that the company could detect Android users' locations. After learning about it, Cecilie Lumbye Thorup, a spokeswoman for Denmark's Health Ministry, said her agency intended to "start a dialogue with Google about how they in general use location data." Switzerland said it had pushed Google for weeks to alter the location setting requirement. "Users should be able to use such proximity tracing apps without any bindings with other services," said Dr. Sang-Il Kim, the department head for digital transformation at Switzerland's Federal Office of Public Health, who oversees the country's virus-alert app. Latvia said it had pressed Google on the issue as it was developing its virus app. "We don't like that the GPS must be on," said Elina Dimina, head of the infectious-disease surveillance unit at Latvia's Center for Disease Prevention and Control. Google's location requirement adds to the slew of privacy and security concerns with virus-tracing apps, many of which were developed by governments before the new Apple-Google software became available. Now the Android location issue could undermine the privacy promises that governments made to the public.
Pete Voss, a Google spokesman, claims the virus alert apps that use the company's software do not use device location. "The apps use Bluetooth scanning signals to detect smartphones that come into close contact with one another â" without needing to know the devices' locations at all," reports The New York Times. "Since 2015, Google's Android system has required users to enable location on their phones to scan for other Bluetooth devices, Mr. Voss said, because some apps may use Bluetooth to infer user location. For instance, some apps use Bluetooth beacons in stores to help marketers understand which aisle a smartphone user may be in."

"Once Android users turn on location, however, Google may determine their precise locations, using Wi-Fi, mobile networks and Bluetooth beacons, through a setting called Google Location Accuracy, and use the data to improve location services. Mr. Voss said apps that did not have user permission could not gain access to a person's Android device location."

Slashdot Top Deals