Communications

FCC Showers Schools Across the US With $1.2 Billion From Emergency Connectivity Fund (techcrunch.com) 37

The FCC has sent out the first checks from its Emergency Connectivity Fund, an effort to help close the "homework gap" at schools by covering the cost of computers and internet services. From a report: Thousands of school districts, in every state plus D.C., Guam and Puerto Rico, will split this first $1.2 billion distribution, and there's still lots more to come. The problem they are looking to mitigate is the large number of students who, in an age when studying, homework and now even classes are all done online, lack a device or adequate internet connection to participate. This exacerbates an existing inequality, for these students often lack access to other resources and end up falling behind through no fault of their own. The ECF was conceived to combat this, and funded earlier this year as part of the big pandemic recovery bill. It's a $7 billion program in total, but the money is being distributed over time as schools and libraries make their formal requests, saying they need to cover the cost of this many tablets, or wireless hotspots, or broadband connections. The FCC seems to be picking up the bill as long as the request is reasonable and the paperwork is in order.
PlayStation (Games)

PS5 Software Update Brings SSD Installation, 3D Audio Wednesday (cnet.com) 10

Sony has released a new software update for the PlayStation 5 that will let you expand the console's internal storage and use the PS5's 3D audio effects on external speakers. CNET reports: The PS5 update will also let you view PS4 and PS5 versions of the same game separately -- particularly useful after you upgrade to a next-gen version -- plus it gives you more options for customizing the Control Center and lets you use it to write messages to other players. PlayStation Now subscribers will also get the ability to choose between 720p and 1080p streaming options, or use a streaming connection test to identify and fix connection issues. The PS4 is also getting a software update, letting you see PS5 trophies on your profile and those of other players.
Robotics

Astronauts In Space Will Soon Resurrect An AI Robot Friend Called CIMON (space.com) 17

A robot called CIMON-2 (short for Crew Interactive Mobile Companion) has received a software update that will enable it to perform more complex tasks with a new human crewmate later this year. Space.com reports: The cute floating sphere with a cartoon-like face has been stored at the space station since the departure of the European Space Agency's (ESA) astronaut Luca Parmitano in February 2020. The robot will wake up again during the upcoming mission of German astronaut Matthias Maurer, who will arrive at the orbital outpost with the SpaceX Crew-3 Dragon mission in October. In the year and a half since the end of the last mission, engineers have worked on improving CIMON's connection to Earth so that it could provide a more seamless service to the astronauts, CIMON project manager Till Eisenberg at Airbus, which developed the intelligent robot together with the German Aerospace Centre DLR and the LMU University in Munich, told Space.com.

"The sphere is just the front end," Eisenberg said. "All the voice recognition and artificial intelligence happens on Earth at an IBM data centre in Frankfurt, Germany. The signal from CIMON has to travel through satellites and ground stations to the data centre and back. We focused on improving the robustness of this connection to prevent disruptions." CIMON relies on IBM's Watson speech recognition and synthesis software to converse with astronauts and respond to their commands. The first generation robot flew to the space station with Alexander Gerst in 2018. That robot later returned to Earth and is now touring German museums. The current robot, CIMON-2, is a second generation. Unlike its predecessor, it is more attuned to the astronauts' emotional states (thanks to the Watson Tone Analyzer). It also has a shorter reaction time.

Airbus and DLR have signed a contract with ESA for CIMON-2 to work with four humans on the orbital outpost in the upcoming years. During those four consecutive missions, engineers will first test CIMON's new software and then move on to allowing the sphere to participate in more complex experiments. During these new missions CIMON will, for the first time, guide and document complete scientific procedures, Airbus said in a statement. "Most of the activities that astronauts perform are covered by step by step procedures," Eisenberg said. "Normally, they have to use clip boards to follow these steps. But CIMON can free their hands by floating close by, listening to the commands and reading out the procedures, showing videos, pictures and clarifications on its screen." The robot can also look up additional information and document the experiments by taking videos and pictures. The scientists will gather feedback from the astronauts to see how helpful the sphere really was and identify improvements for CIMON's future incarnations.

China

Chinese Hackers Behind July 2021 SolarWinds Zero-day Attacks (therecord.media) 13

In mid-July this year, Texas-based software provider SolarWinds released an emergency security update to patch a zero-day in its Serv-U file transferring technology that was being exploited in the wild. From a report: At the time, SolarWinds did not share any details about the attacks and only said that it learned of the bug from Microsoft's security team. In a blog post on Thursday, Microsoft revealed more details about the July attacks. The company said the zero-day was the work of a new threat actor the company was tracking as DEV-0322, which Microsoft described as "a group operating out of China, based on observed victimology, tactics, and procedures." Microsoft said the group targeted SolarWinds Serv-U servers "by connecting to the open SSH port and sending a malformed pre-auth connection request," which allowed DEV-0322 operators to run malicious code on the targeted system and take over vulnerable devices. The OS maker did not go into details about what the intruders did once they breached a target. It is unclear if the hackers were interested in cyber-espionage and intelligence collection or if DEV-0322 was a run-of-the-mill crypto-mining gang.
Apple

Apple's Upcoming AR/VR Headset To Require Connection To iPhone (macrumors.com) 60

The first AR/VR headset that Apple has been in development will need to be wirelessly tethered to an iPhone or another Apple device to unlock full functionality, reports The Information. MacRumors: It will be similar to the WiFi-only version of the Apple Watch, which requires an iPhone connection to work. The headset is meant to wirelessly communicate with another Apple device, which will handle most of the powerful computing. According to The Information, Apple recently completed work on the 5-nanometer custom chips that are set to be used in the headset, and that's where the connectivity detail comes from. Apple has completed the key system on a chip (SoC) that will power the headset, along with two additional chips. All three chips have hit the tape-out stage, so work on the physical design has wrapped up and it's now time for trial production.
Software

Car Owners' New Gripe: Lousy Wireless Service (axios.com) 84

The biggest frustration among new car owners is that they can't get their car and smartphone to talk to one another, a new J.D. Power study finds. From a report: Consumers want their digital lives to follow them seamlessly in the car, which is why Apple CarPlay and Android Auto have become so popular. But if the wireless connection is glitchy, such features don't work, leaving car owners unhappy. "Owners are caught in the middle when vehicle and phone technologies don't properly connect," says Dave Sargent, vice president of automotive quality at J.D. Power.

1 in 4 problems cited by car buyers in the first 90 days of ownership involves infotainment, according to the J.D. Power 2021 Initial Quality Study (IQS), released Tuesday. For the first time in a decade, voice recognition is not the top problem; instead, it's Apple CarPlay/Android Auto connectivity, which worsened significantly, especially for those trying to connect wirelessly. About one-third of new cars now come with a built-in WiFi hub, which may or may not be compatible with a phone's operating system.

Iphone

Apple Plans To Add Satellite Features To iPhones for Emergencies (bloomberg.com) 57

Apple's push to bring satellite capabilities to the iPhone will be focused on emergency situations, allowing users to send texts to first responders and report crashes in areas without cellular coverage. From a report: The company is developing at least two related emergency features that will rely on satellite networks, aiming to release them in future iPhones, according to a person with knowledge of the situation. Apple has been working on satellite technology for years, with a team exploring the concept since at least 2017, Bloomberg has reported. Speculation that the next iPhone will have satellite capabilities ramped up this week after TF International Securities analyst Ming-Chi Kuo said the phone will probably work with spectrum owned by Globalstar. That's led to conjecture that the iPhone will become something akin to a satellite phone, freeing users from having to rely on cell networks. But Apple's plan is initially more limited in scope, according to the person, with the focus on helping customers handle crisis scenarios.
Iphone

Apple iPhone 13 Rumors Go Sky-High With Satellite Connection (fiercewireless.com) 70

With Apple's latest iPhone just around the corner, reports suggest that it will include support for satellite communications, which consumers could use when terrestrial-based 4G and 5G are not available. The one getting most of the glory: Globalstar, the once-embattled satellite company. From a report: Globalstar shares shot up more than 40% at one point today. Shares in satellite companies Iridium and AST SpaceMobile also rose, more than 9% and 4%, respectively. One report tracks to TF International Securities analyst Ming-Chi Kuo, who, as MacRumors explained, discussed how the iPhone 13 lineup will feature hardware that is able to connect to low earth orbit (LEO) satellites, which could allow iPhone 13 users to make calls and send messages. The MacRumors report notes that the upcoming iPhone 13 supposedly features a customized Qualcomm X60 baseband chip that supports satellite communications; other smartphone brands reportedly are waiting until 2022 for the X65 baseband chip for turning on satellite communications functionality. While there are ample ways to support LEO connectivity in handsets, the bottom line is: The "simplest scenario" for providing LEO communications to users is if network operators work with Globalstar, according to the Kuo-based report. That raised some eyebrows, rightly so.
Science

Your Sense of Smell May Be the Key To a Balanced Diet (phys.org) 38

Scientists at Northwestern University found that people became less sensitive to food odors based on the meal they had eaten just before. These findings show that just as smell regulates what we eat, what we eat -- in turn -- regulates our sense of smell. Phys.Org reports: The study found that participants who had just eaten a meal of either cinnamon buns or pizza were less likely to perceive "meal-matched" odors, but not non-matched odors. The findings were then corroborated with brain scans that showed brain activity in parts of the brain that process odors was altered in a similar way.

Feedback between food intake and the olfactory system may have an evolutionary benefit, said senior and corresponding study author Thorsten Kahnt, an assistant professor of neurology and psychiatry and behavioral sciences at Northwestern University Feinberg School of Medicine. "If you think about our ancestors roaming the forest trying to find food, they find and eat berries and then aren't as sensitive to the smell of berries anymore," Kahnt said. "But maybe they're still sensitive to the smell of mushrooms, so it could theoretically help facilitate diversity in food and nutrient intake."

Kahnt said while we don't see the hunter-gatherer adaptation come out in day-to-day decision-making, the connection between our nose, what we seek out and what we can detect with our nose may still be very important. If the nose isn't working right, for example, the feedback loop may be disrupted, leading to problems with disordered eating and obesity. There may even be links to disrupted sleep, another tie to the olfactory system the Kahnt lab is researching. Kahnt said with a better understanding of the feedback loop between smell and food intake, he's hoping to take the project full circle back to sleep deprivation to see if lack of sleep may impair the loop in some way. He added that with brain imaging, there are more questions about how the adaptation may impact sensory and decision-making circuits in the brain.
The study has been published in the journal PLOS Biology.
Iphone

'No Service' Bug Hits Some IOS 14.7.1 Users After Updating Their IPhones (zdnet.com) 26

"What seemed like a small update has, for some, turned into a huge headache," reports ZDNet: Over on Apple's support forum, there are several threads from users complaining that iOS 14.7.1 broke their iPhones, causing a "no service" problem where users are unable to connect to cell service. Ther">e are similar threads on Apple's developer forums as well.

While there doesn't seem to be a pattern to which phones are affected, I've seen reports of everything from the iPhone 6 to iPhone 12 affected, and the cause is clear — upgrading to iOS 14.7.1.

"Users are saying that restarting the phone, removing the SIM, and even resetting network settings didn't help," according to 9to5Mac (in an article shared by long-time Slashdot reader antdude).

Forbes reports the bug appears to happen when you lose your cellular connection and switch to WiFi calling, "so those living in areas with good reception may never see it. Of course, this scenario also helps to mask the scale of iPhones which might be affected." If you haven't upgraded to iOS 14.7.1 yet, this potentially crippling flaw could (understandably) put you off upgrading. The problem is that the release also contains a critical fix for a new zero-day security flaw...
Security

Cloudflare Says It Mitigated a Record-Breaking 17.2 Million HTTP RPS DDoS Attack (therecord.media) 10

Internet infrastructure company Cloudflare disclosed today that it mitigated the largest volumetric distributed denial of service attack that was recorded to date. From a report: The attack, which took place last month, targeted one of Cloudflare's customers in the financial industry. Cloudflare said that a threat actor used a botnet of more than 20,000 infected devices to flung HTTP requests at the customer's network in order to consume and crash server resources.

Called a volumetric DDoS, these are different from classic bandwidth DDoS attacks where threat actors try to exhaust and clog up the victim's internet connection bandwidth. Instead, attackers focus on sending as many junk HTTP requests to a victim's server in order to take up precious server CPU and RAM and prevent legitimate users from using targeted sites. Cloudflare said this attack peaked at 17.2 million HTTP requests/second (rps), a figure that the company described as almost three times larger than any previous volumetric DDoS attack that was ever reported in the public domain.

Security

Critical Bug Impacting Millions of IoT Devices Lets Hackers Spy On You (bleepingcomputer.com) 42

An anonymous reader quotes a report from BleepingComputer: Security researchers are sounding the alarm on a critical vulnerability affecting tens of millions of devices worldwide connected via ThroughTek's Kalay IoT cloud platform. The security issue impacts products from various manufacturers providing video and surveillance solutions as well as home automation IoT systems that use the Kalay network for easy connectin and communication with a corresponding app. A remote attacker could leverage the bug to gain access to the live audio and video streams, or to take control of the vulnerable device. Researchers at Mandiant's Red Team discovered the vulnerability at the end of 2020 and worked with the U.S. Cybersecurity and Infrastructure Security Agency and ThroughTek to coordinate the disclosure and create mitigation options.

Tracked as CVE-2021-28372, the issue is a device impersonation vulnerability that received a severity score of 9.6 out of 10. It affects the Kalay protocol that is implemented as a software development kit (SDK) that is built into mobile and desktop applications. Mandiant's Jake Valletta, Erik Barzdukas, and Dillon Franke looked at ThroughTek's Kalay protocol and found that registering a device on the Kalay network required only the device's unique identifier (UID). Following this lead, the researchers discovered that a Kalay client, such as a mobile app, usually receives the UID from a web API hosted by the vendor of the IoT device. An attacker with the UID of a target system could register on the Kalay network a device they control and receive all client connection attempts. This would allow them to obtain the login credentials that provide remote access to the victim device audio-video data. The researchers say that this type of access combined with vulnerabilities in device-implemented RPC (remote procedure call) interface can lead to complete device compromise. By the latest data from ThroughTek, its Kalay platform has more than 83 million active devices and manages over 1 billion connections every month.
The best way to protect yourself from this vulnerability is to keep your device software and applications updated to the latest version, as well as create complex, unique login passwords. The report also recommends you avoid connecting to IoT devices from an untrusted network.
Transportation

Sportscar Manufacturer Debuts World's First All-Electric High-Performance Hypercar (newsweek.com) 99

There's something new in the world of expensive high-performance sportscars (or "hypercars".) Italian carmaker Automobili Pininfarina "has debuted the Battista, the first pure-electric hyper GT, on the streets of California as part of Monterey Car Week," reports Newsweek. (Alternate URL here.) The debut will give U.S. clients the chance to experience the 1,900 horsepower hypercar... [In a video] the Battista, crafted at Automobili Pininfarina's manufacturing facility in Italy, glides smoothly and quickly through California roads at speeds of over 100 miles per hour. The drive shows off the agility of the polished Impulso forged aluminum alloy wheels and exposed bodywork. Pulling off the road, the scissor doors swing open, highlighting the Black Exposed Signature Carbon bodywork.

Supplying the 1,900 hp is a 120-kilowatt-hour battery that powers four electric motors, one in each wheel, that gets about 1696 pound-feet of torque. On a single charge, the car is expected to get a range of over 310 miles.

With an emphasis on the company's "Pure Sound" philosophy and drawing from music theory, the bespoke design of the car is built to have a core frequency of 54 hertz (hz). Wanting to provide an emotional experience for the driver, the organic frequency will rise in multiples of 54 hz as the speed increases.

The company's product platform director of sports cars explains on their web site that "Every driver has an emotional bond with a car and the sound of Battista will nurture this connection, not by replicating a familiar car sound, but with one that radiates the beauty of Battista's design both inside and out. This way, the Battista will not only impress with its aesthetic appeal and performance, but also on a new emotional level enhanced through the sound."

The company's web site also calls it "the most powerful road-legal Italian sports car ever produced."
Facebook

Facebook Engineers Develop New Open Source Time Keeping Appliance (techcrunch.com) 99

Ron Miller, writing for TechCrunch: Most people probably don't realize just how much our devices are time driven, whether it's your phone, your laptop or a network server. For the most part, time keeping has been an esoteric chore, taken care of by a limited number of hardware manufacturers. While these devices served their purpose, a couple of Facebook engineers decided there had to be a better way. So they built a new more accurate time keeping device that fits on a PCI Express (PCIe) card, and contributed it to the Open Compute Project as an open source project. At a basic level, says Olag Obleukhov, a production engineer at Facebook, it's simply pinging this time-keeping server to make sure each device is reporting the same time.

"Almost every single electronic device today uses NTP -- Network Time Synchronization Protocol -- which you have on your phone, on your watch, on your laptop, everywhere, and they all connect to these NTP servers where they just go and say, 'what time is it's and the NTP server provides the time," he explained. Before Facebook developed a new way of doing this, there were basically two ways to check the time. If you were a developer, you probably used something like Facebook.com as a time checking mechanism, but a company like Facebook, working at massive scale, needed something that worked even when there wasn't an internet connection.

Companies running data centers have a hardware device called Stratum One, which is a big box that sits in the data center, and has no other job than acting as the time keeper. Because these time-keeping boxes were built by a handful of companies over years, they were solid and worked, but it was hard to get new features. What's more, companies like Facebook couldn't control the boxes because of their proprietary nature. Obleukhov and his colleague research scientist, Ahmad Byagowi began to attack the problem by looking for a way to create these devices by building a PCIe card with off-the-shelf parts that you could stick into any PC with an open slot.

Microsoft

Microsoft To Require Admin Rights Before Using Windows Point and Print Feature (therecord.media) 53

Microsoft has released today a security update that will change the default behavior of the "Point and Print" feature to mitigate a severe security issue disclosed last month. From a report: First added in Windows 2000, the Point and Print feature works by connecting to a print server to download and install necessary print drivers every time a user creates a connection to a remote printer without providing installation media. Earlier this year, Jacob Baines, a reverse engineer for Dark Wolf Solutions, found that threat actors inside a company's network could abuse the Point and Print feature to run a malicious print server and force Windows systems to download and install malicious drivers.

Since Point and Print ran with SYSTEM privileges, the feature effectively provided threat actors with an easy way to gain admin rights inside any large corporate or government network. Microsoft initially tried to patch the issue -- tracked as CVE-2021-34481 -- last month, but the patches were deemed incomplete. Today, the company took another approach. Since the vulnerability is exploiting a design flaw, Microsoft chose today to change the default behavior of the Point and Print feature.

Businesses

Salesforce Enters the Streaming Wars (axios.com) 17

Salesforce is the latest tech giant to venture into video streaming with the launch of a new service aimed at business professionals called Salesforce+, the company's chief marketing officer Sarah Franklin tells Axios. From the report: The service is part of a greater effort to transition Salesforce's marketing approach from paid customer acquisition to owned and operated media. Franklin says the hope is that the content will help people refine their skills, while also creating an emotional connection to Salesforce, driving users to "want to use our products and want to engage more with us." Salesforce+, which will debut globally during Salesforce's annual mega-conference Dreamforce in September, is a free service that will feature original programming from Salesforce and eventually, content created by its clients. The content will be available on-demand 24/7, but it will also feature live event programming, starting with Dreamforce.
Chrome

Google Chrome To No Longer Show Secure Website Indicators (bleepingcomputer.com) 68

Google Chrome will no longer show whether a site you are visiting is secure and only show when you visit an insecure website. Bleeping Computer reports: To further push web developers into only using HTTPS on their sites, Google introduced the protocol as a ranking factor. Those not hosting a secure site got a potentially minor hit in their Google search results rankings. It has appeared to have worked as according to the 'HTTPS encryption on the web' of Google's Transparency Report, over 90% of all browser connections in Google Chrome currently use an HTTPS connection.

Currently, when you visit a secure site, Google Chrome will display a little locked icon indicating that your communication with the site is encrypted, as shown below. As most website communication is now secure, Google is testing a new feature that removes the lock icon for secure sites. This feature is available to test in Chrome 93 Beta, and Chrome 94 Canary builds by enabling the 'Omnibox Updated connection security indicators' flag. With this feature enabled, Google Chrome will only display security indicators when the site is not secure. For businesses who wish to have continued HTTPS security indicators, Google has added an enterprise policy for Chrome 93 named 'LockIconInAddressBarEnabled' that can be used to enable the lock icon again on the address bar.

Desktops (Apple)

Mac Pro Gets a Graphics Update (sixcolors.com) 23

On Tuesday, Apple rolled out three new graphics card modules for the Intel-based Mac Pro, all based on AMD's Radeon Pro W6000 series GPU. From a report: (Apple posted a Mac Pro performance white paper [PDF] to celebrate.) The new modules (in Apple's MPX format) come in three variants, with a Radeon Pro W6800X, two W6800X GPUs, and the W6900X. Each module also adds four Thunderbolt 3 ports and an HDMI 2 port to the Mac Pro. The Mac Pro supports two MPX modules, so you could pop in two of the dual-GPU modules to max out performance. They can connect using AMD's Infinity Fabric Link, which can connect up to four GPUs to communicate with one another via a super-fast connection with much more bandwidth than is available via the PCIe bus.
Intel

Intel Executive Posts Thunderbolt 5 Photo Then Deletes It (anandtech.com) 22

AnandTech: An executive visiting various research divisions across the globe isn't necessarily new, but with a focus on social media driving named individuals at each company to keep their followers sitting on the edge of their seats means that we get a lot more insights into how these companies operate. The downside of posting to social media is when certain images exposing unreleased information are not vetted by PR or legal, and we get a glimpse into the next generation of technology. That is what happened over the weekend.

EVP and GM of Intel's Client Computing Group, Gregory Bryant, last week spent some time at Intel's Israel R&D facilities in his first overseas Intel trip in of 2021. An early post on Sunday morning, showcasing Bryant's trip to the gym to overcome jetlag, was followed by another later in the day with Bryant being shown the offices and the research. The post contained four photos, but was rapidly deleted and replaced by a photo with three. The photo removed showcases some new information about next-generation Thunderbolt technology. In this image we can see a poster on the wall showcasing '80G PHY Technology,' which means that Intel is working on a physical layer (PHY) for 80 Gbps connections. Off the bat this is double the bandwidth of Thunderbolt 4, which runs at 40 Gbps.

The second line confirms that this is 'USB 80G is targeted to support the existing USB-C ecosystem,' which follows along that Intel is aiming to maintain the USB-C connector but double the effective bandwidth. The third line is actually where it gets technically interesting. 'The PHY will be based on novel PAM-3 modulation technology.' This is talking about how the 0 and 1s are transmitted -- traditionally we talk about NRZ encoding, which just allows for a 0 or a 1 to be transmitted, or a single bit. The natural progression is a scheme allowing two bits to be transferred, and this is called PAM-4 (Pulse Amplitude Modulation), with the 4 being the demarcation for how many different variants two bits could be seen (either as 00, 01, 10, or 11). PAM-4, at the same frequency, thus has 2x the bandwidth of an NRZ connection.

Crime

Former eBay Supervisor Sentenced To 18 Months in Prison For Cyberstalking Case Targeting Natick Couple (bostonglobe.com) 14

A former security supervisor at eBay received an 18-month federal prison sentence Tuesday for his role in a bizarre campaign of cyberstalking aimed at a Natick couple that ran an online newsletter often critical of the e-commerce giant, authorities said. The Boston Globe: The ex-supervisor, Philip Cooke, 56, of San Jose, Cali., had pleaded guilty in US District Court in Boston in October 2020 to conspiracy to commit cyberstalking and conspiracy to tamper with a witness, legal filings show. On Tuesday, prosecutors said, he was sentenced to 18 months in prison, as well as three years of supervised release including a 12-month period of home detention. He was also ordered to pay a $15,000 fine and perform 100 hours of community service, according to the US attorney's office.

Cooke was one of seven former eBay employees charged in connection with the stalking, which authorities said targeted Ina and David Steiner, a Natick couple who recently filed a federal lawsuit against the company and other parties linked to the harrassment. Rosemary Scapicchio, a prominent Boston attorney representing the couple in their civil suit, said via phone after Monday's hearing that her clients "were relieved" that Cooke received time behind bars, calling it "the first step in their pursuit of accountability" for all those involved. "There needs to be corporate accountability" as well, Scapicchio said.

Slashdot Top Deals