Crime

A Computer Generated Swatting Service Is Causing Havoc Across America 97

Motherboard has discovered a swatting-as-a-service account on Telegram that uses computer generated voices to issue bomb and mass shooting threats against highschools and other locations across the country. An anonymous reader shares an excerpt from the report: Known as "Torswats" on the messaging app Telegram, the swatter has been calling in bomb and mass shooting threats against highschools and other locations across the country. Torswat's connection to these wide ranging swatting incidents has not been previously reported. The further automation of swatting techniques threatens to make an already dangerous harassment technique more prevalent. Swatting is when someone calls in a bogus threat in an attempt to direct law enforcement resources to a particular home, school, or other location. Often, swatting calls result in heavily armed police raiding an innocent victim's home. At least one case has resulted in police killing the unsuspecting occupant.

Torswats carries out these threatening calls as part of a paid service they offer. For $75, Torswats says they will close down a school. For $50, Torswats says customers can buy "extreme swattings," in which authorities will handcuff the victim and search the house. Torswats says they offer discounts to returning customers, and can negotiate prices for "famous people and targets such as Twitch streamers." Torswats says on their Telegram channel that they take payment in cryptocurrency. [...] On their Telegram channel, Torswats has uploaded at least 35 distinct recordings of calls they appear to have made. Torswats may have made many more swatting calls on others' behalf, though: each filename includes a number, with the most recent going up to 170. Torswats also recently shuttered their channel before reappearing on Telegram in February.

In all of those 35 recordings except two, Torswats appears to have used a synthesized voice. The majority of the calls are made with a fake male sounding voice; several include a woman which also appears to be computer generated. Torswats is seemingly able to change what the voice is saying in something close to real-time in order to respond to the operator's questions. These sometimes include "where are you located," "what happened," and "what is your name?" [...] Earlier this month, Torswats allegedly changed their tactics: they claimed to have made a swatting call using their own voice. In the subsequent recording, they start with much the same script as their automated voice. "I've done something really bad and want to kill myself," they tell the operator. They then claim they came out to their parents as a transgender woman, that they have an AR-15, and will shoot any police who respond. "Forgot to cut off my laugh at the end," Torswats wrote on Telegram.
Power

'Rest of World' Photo Contest Highlight's Tech and Solar's Impact (restofworld.org) 14

Since launching in 2020, the nonprofit site RestofWorld.org has been covering global tech news from 100 countries, the site announced this week. "But at Rest of World, the story of tech is as big as the world that's using it" — so they just finished their first international photography contest. We asked our readers to send us images of technology's impact in their communities — as seen from their lenses. We received 548 entries from around the world, including from Afghanistan, Mexico, Nigeria, Iraq, and Pakistan. Photographers captured a wide range of issues, from facial recognition software used at gated communities in Brazil to students studying on their phones during a power outage in India.
They recognized 10 photos in all — three winners, and seven "honorable mentions" — including one showing a surgeon implanting a venomous snake with a radio telemetry device in India "to try and mitigate human-snake conflict in the region," as well as a stunning aerial view of a vast solar park in Dubai. There's a solar-powered cooking device in India, and the face of an old man in Nepal using headphones for the first time in his life.

And the #1 photo shows children in rural Palestine watching TV "with electricity generated from solar panels at their home inside a cave," vividly illustrating the point that they'd turned to a decentralized, self-generated power technology. ("For decades, rural Palestinian communities in Masafer Yatta have lobbied for connection to the electric grid, but the Israeli state does not recognize such villages as legitimate and refuses to issue any kind of master plan for their development.")
GNU is Not Unix

FSF Awards 'Respects Your Freedom' Certification to ThinkPenguin's Gigabit Mini VPN Router (fsf.org) 6

The Free Software Foundation certifies products that meet their standards in regard to users' freedom, control over the product, and privacy. And they put out a new "Respects Your Freedom" certification on Thursday for ThinkPenguin's free software gigabit mini VPN router, the TPE-R1400.

From the FSF's announcement: This is ThinkPenguin's first device to receive RYF certification in 2023, adding to their vast catalogue of certified devices from previous years. As with previous routers from ThinkPenguin, the Free Software Gigabit Mini VPN Router ships with an FSF-endorsed fully free embedded GNU/Linux distribution called libreCMC. It also comes with a custom flavor of the U-Boot boot loader, assembled by Robert Call, the maintainer of libreCMC and a former FSF intern.

The router enables users to run their network connection through a VPN service, helping to simplify the process of keeping their communications secure and private. While ThinkPenguin offers a VPN service, users are not required to purchase a subscription to their service in order to use the router, and the device comes with detailed instructions on how to use the router with a wide variety of VPN providers.

"We're pleased to see ThinkPenguin continue with their commitment to bringing out devices that put software freedom as their first priority under the RYF program. The release of this router shows that ThinkPenguin is committed to the privacy and freedom of their users," said the FSF's executive director, Zoë Kooyman....

"The latest version of ThinkPenguin's VPN router lets its users take advantage of gigabit per second Internet connections while protecting their rights and privacy," said FSF's copyright and licensing associate, Craig Topham.

Security

Crooks Are Using CAN Injection Attacks To Steal Cars (theregister.com) 47

"Thieves has discovered new ways to steal cars by pulling off smart devices (like smart headlights) to get at and attack via the Controller Area Network (CAN) bus," writes longtime Slashdot reader KindMind. The Register reports: A Controller Area Network (CAN) bus is present in nearly all modern cars, and is used by microcontrollers and other devices to talk to each other within the vehicle and carry out the work they are supposed to do. In a CAN injection attack, thieves access the network, and introduce bogus messages as if it were from the car's smart key receiver. These messages effectively cause the security system to unlock the vehicle and disable the engine immobilizer, allowing it to be stolen. To gain this network access, the crooks can, for instance, break open a headlamp and use its connection to the bus to send messages. From that point, they can simply manipulate other devices to steal the vehicle.

"In most cars on the road today, these internal messages aren't protected: the receivers simply trust them," [Ken Tindell, CTO of Canis Automotive Labs] detailed in a technical write-up this week. The discovery followed an investigation by Ian Tabor, a cybersecurity researcher and automotive engineering consultant working for EDAG Engineering Group. It was driven by the theft of Tabor's RAV4. Leading up to the crime, Tabor noticed the front bumper and arch rim had been pulled off by someone, and the headlight wiring plug removed. The surrounding area was scuffed with screwdriver markings, which, together with the fact the damage was on the kerbside, seemed to rule out damage caused by a passing vehicle. More vandalism was later done to the car: gashes in the paint work, molding clips removed, and malfunctioning headlamps. A few days later, the Toyota was stolen.

Refusing to take the pilfering lying down, Tabor used his experience to try to figure out how the thieves had done the job. The MyT app from Toyota -- which among other things allows you to inspect the data logs of your vehicle -- helped out. It provided evidence that Electronic Control Units (ECUs) in the RAV4 had detected malfunctions, logged as Diagnostic Trouble Codes (DTCs), before the theft. According to Tindell, "Ian's car dropped a lot of DTCs." Various systems had seemingly failed or suffered faults, including the front cameras and the hybrid engine control system. With some further analysis it became clear the ECUs probably hadn't failed, but communication between them had been lost or disrupted. The common factor was the CAN bus.

Security

IRS-Authorized eFile.com Tax Return Software Caught Serving JS Malware (bleepingcomputer.com) 32

eFile.com, an IRS-authorized e-file software service provider used by many for filing their tax returns, has been caught serving JavaScript malware. BleepingComputer reports: eFile.com was caught serving malware, as spotted by multiple users and researchers. The malicious JavaScript file in question is called 'popper.js'. The development comes at a crucial time when U.S. taxpayers are wrapping up their IRS tax returns before the April 18th due date. BleepingComputer can confirm, the malicious JavaScript file 'popper.js' was being loaded by almost every page of eFile.com, at least up until April 1st. As of today, the file is no longer seen serving the malicious code.

On March 17th, a Reddit thread surfaced where multiple eFile.com users suspected the website was "hijacked." At the time, the website showed an SSL error message that, some suspected, was fake and indicative of a hack. Turns out that's indeed the case. [...] The malicious JavaScript file 'update.js', further attempts to prompt users to download next stage payload, depending on whether they are using Chrome [update.exe - VirusTotal] or Firefox [installer.exe - VirusTotal]. Antivirus products have already started flagging these executables as trojans.

BleepingComputer has independently confirmed these binaries establish a connection to a Tokyo-based IP address, 47.245.6.91, that appears to be hosted with Alibaba. The same IP also hosts the illicit domain, infoamanewonliag[.]online associated with this incident. Security research group, MalwareHunterTeam further analyzed these binaries, and stated that these contain Windows botnets written in PHP -- a fact that the research group mocked. Additionally, the group called out eFile.com for leaving the malicious code on its website for weeks: "So, the website of [efile.com]... got compromised at least around middle of March & still not cleaned," writes MalwareHunterTeam.

Apple

Apple's Tim Cook Says AR and VR Are For 'Connection' and 'Communication' (theverge.com) 44

Tim Cook's vision for AR and VR hasn't changed. "For almost a decade, Apple's CEO has been banging the drum that AR is more important than VR and that AR is fundamentally about bringing people together," reports The Verge. "And he's still at it." From the report: "If you think about the technology itself with augmented reality, just to take one side of the AR/VR piece, the idea that you could overlay the physical world with things from the digital world could greatly enhance people's communication, people's connection," Cook told GQ's Zach Baron in a long and very interesting profile just published by the magazine. Cook told Baron that he's interested in collaboration; he said something about measuring glass walls; he said his thinking on glasses-as-gadget has changed over the years.

None of this is a product announcement, of course, only the latest in a long string of hints about what Apple sees in this space. Cook's been on this particular line since at least 2016, when he said on Good Morning America that AR "gives the capability for both of us to sit and be very present, talking to each other, but also have other things -- visually -- for both of us to see." [...] At various times over the years, Cook has said AR is a powerful technology for education, that he thinks it'll be as common as "eating three meals a day," and that he thinks AR is as big an idea as the smartphone. But he keeps coming back to the idea that AR should be meant to bring people together in the real world, not keep them apart or transport them to another universe entirely.

Cook also offered what sounds like an explanation for why the headset, which has been heavily rumored over the last couple of years, has taken so long to come out. "I'm not interested in putting together pieces of somebody else's stuff," he told GQ. "Because we want to control the primary technology. Because we know that's how you innovate." Maybe the most revealing thing in the story is the way Cook explains Apple -- or at least explains the way he hopes you'll see Apple. He talks frequently about Apple's environmental commitments, its loud fight against "the data-industrial complex," and the way Apple is trying to help people have better relationships with technology. (Conveniently ignoring that Apple is perhaps more responsible for our phone addictions than any other company, of course.) "Because my philosophy is, if you're looking at the phone more than you're looking in somebody's eyes, you're doing the wrong thing."
Apple plans to unveil a mixed-reality headset on June 5th at its annual Worldwide Developers Conference (WWDC).
Moon

Lockheed Martin Is Building a Moon-To-Earth Satellite Communications Network (engadget.com) 31

Lockheed Martin has created a spinoff devoted to lunar infrastructure, Crescent Space, whose first project is a Moon-to-Earth satellite network. Engadget reports: Parsec, as it's called, uses a constellation of small lunar satellites to provide a non-stop connection between astronauts, their equipment and the people back home. The system will also provide navigation help. The technology should help explorers keep in touch, and assist with spacecraft course changes. As Lockheed Martin explains, though, it could prove vital to those on lunar soil. Parsec's nodes create a lunar equivalent to GPS, giving astronauts their exact positions and directions back to base. A rover crew might know how to return home without driving into a dangerous crater, for instance.

Crescent's first Parsec nodes should be operational by 2025, with Lockheed Martin providing the satellites. And before you ask: yes, the company is clearly hoping for some big customers. CEO Joe Landon (formerly a Lockheed Martin Space VP) claims Crescent is "well positioned" to support NASA's Artemis Moon landings and other exploratory missions.

Crime

Terraform Labs Founder Do Kwon Arrested In Montenegro (coindesk.com) 20

The founder of Terraform Labs, Do Kwon, appears to have been arrested in Montenegro, according to a tweet by the country's minister of interior, Filip Adzic. CoinDesk reports: "Montenegrin police have detained a person suspected of being one of the most wanted fugitives, South Korean citizen Do Kwon, co-founder and CEO of Singapore-based Terraform Labs," Adzic tweeted. Kwon has been the target of several investigations and was even on Interpol's red notice after stablecoin terraUSD (UST) and its $40 billion ecosystem imploded last year, sending shockwaves across the crypto markets. The suspect was detained at the Podgorica airport with falsified documents, Adzic added, saying he was still waiting for official confirmation of identity.

The Korean National Police Agency said that it had confirmed the suspect appeared to be Kwon based on checking age, name, and nationality of his ID card, according to a report by the Yonhap news agency. The unverified account of Adzic is followed by the official account of the prime minister of Montenegro, Dritan Abazovic. The tweet announcing Kwon's arrest was also retweeted by Abazovic's account. Adzic's account has previously been cited in official tweets.

Businesses

Credit Suisse, the Risk-Taking Swiss Banking Giant, Succumbs To Crisis (wsj.com) 59

Credit Suisse, the Swiss banking giant that liked to live dangerously, has run out of road. From a report: The bank struck a deal this weekend to be bought by rival UBS Group after an uncontrolled slide in its stock and bonds. The agreement marks the end of 167 years as an independent institution, a humbling comedown for a bank that once went toe-to-toe with U.S. giants on Wall Street and boasted a market value greater than that of Goldman Sachs Group. The bank's downfall has roots in the way it exited the last financial crisis flush with confidence.

When the financial system seized up in 2008, Credit Suisse emerged in better shape than many rivals. It was then slow to adjust to how the crisis changed banking. The lender relied on a freewheeling investment bank, dawdled in its pivot to more stable lines of business and above all failed to shake its predilection for risk. "They felt, 'We are the winner from the financial crisis, and everyone else is hurt,''' said Andreas Venditti, a banking analyst at Vontobel. "So they doubled down on these kinds of businesses and on investment-banking exposure in general." The result was 15 years of scandal, litigation and strategic zigzags while other major banks became more focused, more regulated and more free of drama. A spying imbroglio, a $5.5 billion loss on a single client, executive turnover, fines in connection with tax and sanctions evasion and a fraud settlement over Mozambican loan sales weakened the bank financially while eroding the confidence of investors.

China

TikTok Whistleblower Tells Congress Data Protections Don't Stop Chinese Access (gizmodo.com) 48

An anonymous reader quotes a report from Gizmodo: A former TikTok employee turned whistleblower has reportedly met with multiple U.S. senators expressing concerns TikTok's plan to secure U.S. user data won't go far enough to stop possible Chinese espionage. The whistleblower told The Washington Post in an interview that the company's policy plan, dubbed Project Texas, doesn't go far enough and that properly ensuring U.S. data is secured from Chinese employees requires nothing short of a "complete re-engineering" of the way the app works. Those allegations come just days after another whistleblower raised concerns regarding TikTok's U.S. user controls. Combined, the comments could fan the flames for what looks like growing bipartisan support for a full-on nationwide TikTok ban.

The former TikTok employee turned whistleblower told the Post he worked at the company for around six months ending in early 2022 as a risk manager and head of a unit in TikTok's Safety Operations team. Part of that job, he claims, put him in charge of knowing which employees had access to certain tools and user data. He claims he was fired after speaking up about his data privacy concerns. Though he left TikTok prior to its finalization of the so-called Project Texas policy, he maintains he saw enough evidence to suggest the guardrails put in place to placate U.S. regulators fearful of Chinese employees viewing U.S. user data were insufficient. The whistleblower has reportedly already met with staffers from Iowa Sen. Chuck Grassley and Virginia Sen. Mark Warner's offices.

Specifically, the whistleblower shared a snippet of code with the Post which they say shows TikTok's code connecting with Toutiao, a Chinese news app also run by TikTok's parent company, ByteDance. The whistleblower alleges that connection could let Chinese employees intercept and potentially view U.S. user data. Gizmodo could not independently confirm those claims. The whistleblower, meanwhile reportedly did not advocate for an outright nationwide ban. Instead, he said the problems could be solved but would require further steps than what is included in the Project Texas proposal.
Another alleged whistleblower came forward just days before the Post interview, alleging TikTok's access controls on U.S. data were "superficial" at best. "TikTok and ByteDance employees, he alleged, possess the ability to 'switch between Chinese and U.S. data with nothing more than the click of a button,'" reports Gizmodo.

The whistleblower alleged in a letter sent to ByteDance by Republican Missouri Rep. Josh Hawley: "I have seen first-hand China-based engineers flipping over to non-China datasets and creating scheduled tasks to backup, aggregate, and analyze data. TikTok and ByteDance are functionally the same company."
Medicine

People Were Unwittingly Implanted With Fake Devices In Medical Scam, FBI Alleges (vice.com) 55

Chronic pain patients were implanted with "dummy" pieces of plastic and told it would ease their pain, according to an indictment charging the former CEO of the firm that made the fake devices with fraud. Motherboard reports: Laura Perryman, the former CEO of Stimwave LLC, was arrested in Florida on Thursday. According to an FBI press release, Perryman was indicted "in connection with a scheme to create and sell a non-functioning dummy medical device for implantation into patients suffering from chronic pain, resulting in millions of dollars in losses to federal healthcare programs." According to the indictment, patients underwent unnecessary implanting procedures as a result of the fraud. Perryman was charged with one count of conspiracy to commit wire fraud and health care fraud, and one count of healthcare fraud. Stimwave received FDA approval in 2014, according to Engadget, and was positioned as an alternative to opioids for pain relief.

The Stimwave "Pink Stylet" system consisted of an implantable electrode array for stimulating the target nerve, a battery worn externally that powered it, and a separate, 9-inch long implantable receiver. When doctors told Stimwave that the long receiver was difficult to place in some patients, Perryman allegedly created the "White Stylet," a receiver that doctors could cut to be smaller and easier to implant -- but was actually just a piece of plastic that did nothing. "To perpetuate the lie that the White Stylet was functional, Perryman oversaw training that suggested to doctors that the White Stylet was a 'receiver,' when, in fact, it was made entirely of plastic, contained no copper, and therefore had no conductivity," the FBI stated. "In addition, Perryman directed other Stimwave employees to vouch for the efficacy of the White Stylet, when she knew that the White Stylet was actually non-functional." Stimwave charged doctors and medical providers approximately $16,000 for the device, which medical insurance providers, including Medicare, would reimburse the doctors' offices for.

Science

Scientists Managed To Completely Map a Baby Fruit Fly's Brain (popularmechanics.com) 34

An anonymous reader quotes a report from Popular Mechanics: [S]cientists from the University of Cambridge and Johns Hopkins University announced that they'd finally mapped every single neuron and all the connections between them housed inside the brain of a fruit fly larva. The team's research was published this week in the journal Science. "If we want to understand who we are and how we think, part of that is understanding the mechanism of thought," says Johns Hopkins biomedical engineer Joshua T. Vogelstein in a press release. "And the key to that is knowing how neurons connect with each other."

And there are a lot of neurons and connections to sort through. To complete this neurological map, scientists had to identify 3,016 neurons. But that pales in comparison to the number of connections between these neurons, which comes to a grand total of 548,000. They also identified 93 distinct neurons that differed in shape, function, and neurological connection. If this all sounds difficult, that's because it is. For 12 years, scientists had to painstakingly slice a brain into thousands of tissue samples, image them with an high-resolution electron microscope, and then piece them back together -- neuron by neuron.

Understanding the inner workings of a fruit fly's brain may seem unrelated to the human mind, but scientists didn't choose this particular species based on its size or perceived simplicity -- rather, fruit flies actually share fundamental biology and a comparable genetic foundation with humans. This makes the map a perfect cornerstone upon which to explore some of the many mysteries of the human mind. "All brains are similar -- they are all networks of interconnected neurons," Marta Zaltic, a co-author on the study, told the BBC. "All brains of all species have to perform many complex behaviors: they all need to process sensory information, learn, select actions, navigate their environments, choose food, etc."

AI

Stable Diffusion AI Art Generator Now Has an Official Blender Plug-In 23

A popular app for 3D artists just received an accessible way to experiment with generative AI: Stability AI has released Stability for Blender, an official Stable Diffusion plug-in that introduces a suite of generative AI tools to Blender's free 3D modeling software. The Verge reports: The add-on allows Blender artists to create images using text descriptions directly within the software -- just like the Stable Diffusion text-to-image generator. You can also create images using existing renders, allowing you to experiment with various styles for a project without having to completely remodel the scene you're working on. Textures can similarly be generated using text prompts alongside reference images, and there's also the function to create animations from existing renders. The results for the latter are... questionable, even in Stability's own examples, but it's fun to play around with crudely transforming your projects into a video format.

Stability for Blender is completely free and doesn't require any additional software or even a dedicated GPU to run. Providing you have the latest version of Blender installed, all you need to get Stable Diffusion running inside it is an internet connection and a Stability API key (which you can get directly from Stability AI). Installing the plug-in is relatively straightforward, and Stability has provided several tutorials to walk through how to use its various features.
Transportation

Future Fords Could Repossess Themselves, Drive Away If You Miss Payments (thedrive.com) 180

An anonymous reader quotes a report from The Drive: Ford applied for a patent to make the repossession process go smoother. For the bank, that is. The patent document was submitted to the United States Patent Office in August 2021 but it was formally published Feb. 23. It's titled "Systems and Methods to Repossess a Vehicle." It describes several ways to make the life of somebody who has missed several car payments harder.

It explicitly says the system, which could be installed on any future vehicle in the automaker's lineup with a data connection would be capable of "[disabling] a functionality of one or more components of the vehicle." Everything from the engine to the air conditioning. For vehicles with autonomous or semi-autonomous driving capability, the system could "move the vehicle from a first spot to a second spot that is more convenient for a tow truck to tow the vehicle... move the vehicle from the premises of the owner to a location such as, for example, the premises of the repossession agency," or, if the lending institution considers the "financial viability of executing a repossession procedure" to be unjustifiable, the vehicle could drive itself to the junkyard.

No other automakers have recently attempted to patent a similar system, and indeed the Ford patent doesn't reference any other legal document for the sake of clarifying its idea. All of this being said, patent documents, especially applications like this one, do not necessarily represent an automaker's intent to introduce the described feature, process, or technology to its vehicles. Ford might just be attempting to protect this idea for the sake of doing so. The document does go into a lot of detail as to how such a system might work, though.

Submission + - Future Fords Could Repossess Themselves, Drive Away If You Miss Payments (thedrive.com)

An anonymous reader writes: Ford applied for a patent to make the repossession process go smoother. For the bank, that is. The patent document was submitted to the United States Patent Office in August 2021 but it was formally published Feb. 23. It's titled "Systems and Methods to Repossess a Vehicle." It describes several ways to make the life of somebody who has missed several car payments harder.

It explicitly says the system, which could be installed on any future vehicle in the automaker's lineup with a data connection would be capable of "[disabling] a functionality of one or more components of the vehicle." Everything from the engine to the air conditioning. For vehicles with autonomous or semi-autonomous driving capability, the system could "move the vehicle from a first spot to a second spot that is more convenient for a tow truck to tow the vehicle... move the vehicle from the premises of the owner to a location such as, for example, the premises of the repossession agency," or, if the lending institution considers the "financial viability of executing a repossession procedure" to be unjustifiable, the vehicle could drive itself to the junkyard.

No other automakers have recently attempted to patent a similar system, and indeed the Ford patent doesn't reference any other legal document for the sake of clarifying its idea. All of this being said, patent documents, especially applications like this one, do not necessarily represent an automaker's intent to introduce the described feature, process, or technology to its vehicles. Ford might just be attempting to protect this idea for the sake of doing so. The document does go into a lot of detail as to how such a system might work, though.

Earth

New Wind and Solar Energy Projects Are Now Overwhelming America's Antiquated Electrical Grids (msn.com) 170

An explosion in proposed clean energy ventures in America "has overwhelmed the system for connecting new power sources to homes and businesses," reports the New York Times: So many projects are trying to squeeze through the approval process that delays can drag on for years, leaving some developers to throw up their hands and walk away.

More than 8,100 energy projects — the vast majority of them wind, solar and batteries — were waiting for permission to connect to electric grids at the end of 2021, up from 5,600 the year before, jamming the system known as interconnection.... PJM Interconnection, which operates the nation's largest regional grid, stretching from Illinois to New Jersey, has been so inundated by connection requests that last year it announced a freeze on new applications until 2026, so that it can work through a backlog of thousands of proposals, mostly for renewable energy.

It now takes roughly four years, on average, for developers to get approval, double the time it took a decade ago. And when companies finally get their projects reviewed, they often face another hurdle: the local grid is at capacity, and they are required to spend much more than they planned for new transmission lines and other upgrades. Many give up. Fewer than one-fifth of solar and wind proposals actually make it through the so-called interconnection queue, according to research from Lawrence Berkeley National Laboratory. "From our perspective, the interconnection process has become the No. 1 project killer," said Piper Miller, vice president of market development at Pine Gate Renewables, a major solar power and battery developer....

A potentially bigger problem for solar and wind is that, in many places around the country, the local grid is clogged, unable to absorb more power. That means if a developer wants to build a new wind farm, it might have to pay not just for a simple connecting line, but also for deeper grid upgrades elsewhere.... These costs can be unpredictable. In 2018, EDP North America, a renewable energy developer, proposed a 100-megawatt wind farm in southwestern Minnesota, estimating it would have to spend $10 million connecting to the grid. But after the grid operator completed its analysis, EDP learned the upgrades would cost $80 million. It canceled the project.

That creates a new problem: When a proposed energy project drops out of the queue, the grid operator often has to redo studies for other pending projects and shift costs to other developers, which can trigger more cancellations and delays. It also creates perverse incentives, experts said. Some developers will submit multiple proposals for wind and solar farms at different locations without intending to build them all. Instead, they hope that one of their proposals will come after another developer who has to pay for major network upgrades. The rise of this sort of speculative bidding has further jammed up the queue.

IT

10,000 Dogs are Registered for Workplace Visits at Amazon (aboutamazon.com) 64

Long-time Slashdot reader theodp writes: In what might be mistaken for an early April Fools' joke, one month after Amazon confirmed it would layoff 18,000+ employees, Amazon News last week put out a whimsical story about 10,000+ of its employees' dogs who are registered to "work" at corporate offices as part of Amazon's Dogs at Work program. "This unique program," Amazon explains," pulls out all the stops to make sure dogs have everything they need for a successful work day, including decked out dog parks, unlimited treats from the reception desk, and regular events where dogs and their owners can get to know their colleagues."

Amazon employees also received a back-to-the office edict last week from CEO Andy Jassy, who cited the need for "serendipitous interactions" between team members, which Amazon has at times suggested would be facilitated if its employees' dogs return to the workplace, too. "The dog-friendly policy also contributes to the company's culture of collaboration," Amazon reported last year. "Dogs in the workplace are an unexpected mechanism for connection, an Amazon manager added. "I see employees meeting each other in our lobbies or elevators every day because of their dogs."

Amazon News offers profiles of "11 Amazing Pups" who didn't need obedience school to be convinced to return to the office, including Murray and Ripley. "Working from home certainly has its perks," Amazon reports, "but Murray LOVES coming into the office. He gets to see his favorite colleagues-both human and canine-and brighten everyone's day." And "Ripley starts each workday with a greeting from her best friend Lisa at the Culver Studios gate. From there, she promptly reports for duty, doling out kisses to anyone who needs a little pick-me-up."

Earth

As Cold Fronts Hit America, Half a Million Lose Power (go.com) 127

More than 126,000 Californians are without electricity, reports ABC News. But Reuters notes that meanwhile "more than 400,000 customers of Detroit based DTE Energy remained without power on Saturday, the Detroit News reported," suffering through "a separate storm that clobbered the U.S. Plains, Midwest and Great Lakes regions earlier this week" that finally moved over the Atlantic.

And ABC News notes that as of Saturday morning, "more than 30 million Americans are under weather alerts in the West" — roughly 1 in 11 Americans — "ranging from blizzard warnings in the mountains near Los Angeles to wind chill alerts in the Northern Plains" near Wyoming. But California's problems came from its own major storm that delivered heavy snow, record rainfall, and damaging winds — a storm that "will be moving from southern California across the entire country over the next few days, eventually moving northeast by Tuesday." The Los Angeles area saw record rainfall on Friday, and it came along with 50- to 70-mile-per-hour winds. Burbank, California, saw 4.6 inches of rain Friday — stranding cars in floods and causing dozens of flight delays and cancellations. Records for daily rainfall were also set at the Los Angeles International Airport and the cities of Fresno, Bakersfield, Modesto and Oxnard.... Multiple stretches of I-5 in Los Angeles County were shuttered on Saturday due to rain and snow.
Snowflakes even fell around the "Hollywood" sign, reports Reuters. But bad weather wasn't just hitting southern California: In Northern California, San Francisco was expected to experience record cold temperatures on Saturday, and the National Weather Service warned residents of the state capital of Sacramento to avoid travel from Sunday through Wednesday as rain and snow started up again after a reprieve on Saturday. "Extreme impacts from heavy snow & winds will cause extremely dangerous to impossible driving conditions & likely widespread road closures & infrastructure impacts!" the agency said on Twitter. The next set of storms, expected to hit on Sunday, will bring wind gusts of up to 50 miles per hour (80 kph) in the Sacramento Valley, and up to 70 miles per hour in the nearby Sierra Nevada mountains....

A massive low-pressure system driven from the Arctic was responsible for the unusual conditions, said Bryan Jackson, a forecaster at the NWS Weather Prediction Center in College Park, Maryland.

This week one political cartoonist suggested a connection between "crazy weather" and climate change.
The Courts

SEC Charges Do Kwon, Terraform With Fraud In Connection With Terra Collapse (cnbc.com) 13

The Securities and Exchange Commission charged Terraform Labs and its CEO, Do Kwon, with fraud, alleging that they orchestrated a multibillion dollar "crypto asset securities fraud," the SEC said Thursday. CNBC reports: Kwon and Terraform allegedly schemed from Apr. 2018 until the collapse of TerraUSD, also known as UST, and its sister coin luna in May 2022 to raise billions of dollars from investors through the offer and sale of an "inter-connected suite" of crypto asset securities, including securities-based swaps that mirrored U.S. equities, and most famously, the so-called "algorithmic stablecoin" Terra USD. The company advertised UST as a "yield-bearing" coin, offering to pay interest of up to 20 percent, according to the complaint.

Like many stablecoins, UST was pegged at a 1-to-1 ratio with the dollar. Minting one new UST required "burning," or destroying, one luna. This structure allowed for arbitrage opportunities that were key to maintaining the peg: Users could always swap one luna for UST and vice versa at a guaranteed price of $1, regardless of the market price of either token at the time. But the price of luna grew unstable and forced UST to break its $1 peg, an effort which sent both terra and luna spiraling.

The complaint against Kwon and Terraform was filed in federal court for the Southern District of New York in Manhattan, and charges both with violating the registration and anti-fraud provisions of both the Securities and Exchange Acts. The SEC alleges that Kwon marketed those assets, including those mAsset swaps and Terra, as profit-bearing securities, "repeatedly claiming" the tokens would increase in value. [...] Kwon's current whereabouts are unknown, but the Terra co-founder was recently believed to be in Serbia, according to South Korean intelligence. Kwon is wanted in South Korea for his involvement in the collapse of TerraUSD.

Crime

US, UK Sanction 7 Men Tied To Trickbot Hacking Group (krebsonsecurity.com) 5

An anonymous reader quotes a report from KrebsOnSecurity: Authorities in the United States and United Kingdom today levied financial sanctions against seven men accused of operating "Trickbot," a cybercrime-as-a-service platform based in Russia that has enabled countless ransomware attacks and bank account takeovers since its debut in 2016. The U.S. Department of the Treasury says the Trickbot group is associated with Russian intelligence services, and that this alliance led to the targeting of many U.S. companies and government entities. Initially a stealthy trojan horse program delivered via email and used to steal passwords, Trickbot evolved into "a highly modular malware suite that provides the Trickbot Group with the ability to conduct a variety of illegal cyber activities, including ransomware attacks," the Treasury Department said.

"During the height of the COVID-19 pandemic in 2020, Trickbot targeted hospitals and healthcare centers, launching a wave of ransomware attacks against hospitals across the United States," the sanctions notice continued. "In one of these attacks, the Trickbot Group deployed ransomware against three Minnesota medical facilities, disrupting their computer networks and telephones, and causing a diversion of ambulances. Members of the Trickbot Group publicly gloated over the ease of targeting the medical facilities and the speed with which the ransoms were paid to the group."

Only one of the men sanctioned today is known to have been criminally charged in connection with hacking activity. According to the Treasury Department, the alleged senior leader of the Trickbot group is 34-year-old Russian national Vitaly "Bentley" Kovalev. A New Jersey grand jury indicted Kovalev in 2012 after an investigation by the U.S. Secret Service determined that he ran a massive "money mule" scheme, which used phony job offers to trick people into laundering money stolen from hacked small to mid-sized businesses in the United States. The 2012 indictment against Kovalev relates to cybercrimes he allegedly perpetrated prior to the creation of Trickbot.
A copy of the now-unsealed 2012 indictment of Kovalev is here (PDF).

Slashdot Top Deals