The Courts

OceanGate Submersible Victim's Family Sues For $50 Million, Partly Blames $30 Logitech Controller (extremetech.com) 92

An anonymous reader quotes a report from ExtremeTech: The family of a French mariner who died on the imploded Titan submersible last year has sued Titan's maker, OceanGate Expeditions, for more than $50 million. The lawsuit claims OceanGate is responsible for explorers' suffering immediately preceding their deaths, as well as for failing to disclose the extent of the submersible's risks. Among those risks are Titan's cheap materials, including the $30 Logitech gaming controller used aboard the vehicle. [...]

The lawsuit points at Titan's "hip, contemporary, wireless electronics system" and then alleges that none of the controllers or gauges inside Titan would operate without a constant source of power and a wireless signal. One of those controllers was a modified Logitech F710 Gamepad, a $30 to $40 device designed for, well, gaming. The gamepad quickly became the subject of internet mockery following the loss of Titan; some speculators said the submersible must have been doomed to fail if it used such cheap components. The lawsuit even claims the controller's Bluetooth (rather than wired) connectivity set it up for failure. Still, other speculators believe the controller wouldn't have had much impact on the submersible's operational durability. Instead, the issue would have been with the vehicle's carbon fiber pressure cylinder, which Rush allegedly bought off Boeing at a discount after the material passed its "airplane shelf life." Regardless of the exact material, it seems the consensus among members of the public is that for OceanGate, quality was an afterthought.

Republicans

FBI Investigating After Trump Campaign Says It Was Hacked (thehill.com) 75

Over the weekend, former President Donald Trump's campaign said that it had been hacked, with internal documents reportedly obtained illegally by foreign sources to interfere with the 2024 election. While the Trump campaign claimed that Iran was responsible, it is unclear who exactly was behind the incident. The FBI said it was aware of the allegations and confirmed Monday that it is "investigating this matter." The Hill reports: U.S. agencies have thus far failed to comment on the claims that Iran was responsible for the hack, even as recent intelligence community reports have noted growing Iranian efforts to influence the U.S. election. "This is something we've raised for some time, raised concerns that Iranian cyber actors have been seeking to influence elections around the world including those happening in the United States," John Kirby, the White House's national security communications adviser, told reporters Monday. "These latest attempts to interfere in U.S. elections is nothing new for the Iranian regime, which from our vantage point has attempted to undermine democracies for many years now."

A report from the Office of the Director of National Intelligence released last month noted Iranian efforts designed to "fuel distrust in U.S. political institutions and increase social discord." "The IC has observed Tehran working to influence the presidential election, probably because Iranian leaders want to avoid an outcome they perceive would increase tensions with the United States. Tehran relies on vast webs of online personas and propaganda mills to spread disinformation," the report states, including being particularly active on exacerbating tensions over the Israel-Gaza conflict.

Biotech

Can Food Scientists Re-Invent Sugar? (msn.com) 102

The Wall Street Journal visits scientists at Harvard University's Wyss Institute for Biologically Inspired Engineering who are researching a "sugar-to-fiber" enzyme (normally used by plants to create stalks). They're testing a version they've "encased in spherical nanoparticles — tiny mesh-like cages made of pectin that allow the enzyme to be added to food without being activated until it reaches the intestine.

"Once there, a change in pH causes the cage to expand, freeing the enzyme to float through its holes and start converting sugar to fiber." The Wyss Institute's goal for its enzyme product was to reduce the sugar absorbed from food by 30%, though it has the potential to remove even more than that, says Sam Inverso, director of business development partnerships at the Wyss Institute. The enzyme's ability to turn sugar into fiber is also key, as most Americans don't get nearly enough fiber in their diet, says Adama Sesay, a senior engineer at the Wyss Institute who worked on the project...

The Wyss Institute is now licensing the technology to a company to help bring its enzyme product to market, a process that entails additional testing and work to secure regulatory approval. Inverso says that the aim is for the product to be available to U.S. food manufacturers within the next two years, and that other encapsulated enzymes could follow: products that reduce lactose absorption after drinking milk, or cut gluten after eating bread. For now the enzyme works better in solid food than in a liquid. Producing it in large quantities and at low cost is still a ways off — currently it's 100 times more expensive than raw sugar, Inverso says.

And the Journal notes they're not the only ones working on the problem: San Francisco-based startup Biolumen recently launched a product called Monch Monch, a drink mix made of fibrous, microscopic sponges designed to soak up sugar and prevent it from reaching the bloodstream. At mealtime consumers can blend a teaspoon of Monch Monch, which has no taste, smell or color, into drinks from water to wine. Once it has reached the stomach, the sponges start to swell and sequester sugar, reducing its burden on the body, says Dr. Robert Lustig, Biolumen's co-founder and chief medical officer... One gram of Monch Monch can sequester six grams of sugar, says Lustig... The product, introduced as a dietary supplement, can also be used as a food ingredient under a Food and Drug Administration principle known as "generally recognized as safe." Packets of Monch Monch are available for purchase online, and Biolumen says it is in talks with U.S. food manufacturers it declined to name about its use in other products...

Food companies are betting on other solutions for now. Cereal startup Magic Spoon uses allulose, a natural sugar found in figs and raisins that is growing in popularity, helped by FDA guidance that allows it to be excluded from sugar or added-sugar totals on nutrition labels. Ingredient company Tate & Lyle, which makes allulose from corn kernels, says the sweetener tastes like sugar and adds bulk and caramel color, but passes through the body without being metabolized... Chicago-based Blommer Chocolate recently launched a line of reduced-sugar chocolate and confectionery products made with Incredo, a sugar that has been physically altered to taste sweeter using a mineral carrier that dissolves faster in saliva and targets the sweet-taste receptors on the tongue. Incredo's use enables manufacturers to use up to 50% less sugar, the company says.

The article even notes that "researchers still working to reduce sugar are peddling new technologies, like individual sugar crystals modified to dissolve more quickly in the mouth, making food taste sweeter."
Businesses

Are We Entering an AI Price-Fixing Dystopia? (theatlantic.com) 61

"Algorithmic price-fixing appears to be spreading to more and more industries," warns the Atlantic. "And existing laws may not be equipped to stop it."

They start with RealPage's rental-property software (pointing out that "a series of lawsuits says it's something else: an AI-enabled price-fixing conspiracy" and "The lawsuits also argue that RealPage pressures landlords to comply with its pricing suggestions.") But the most important point is that RealPage isn't the only company doing this: Its main competitor, Yardi, is involved in a similar lawsuit. One of RealPage's subsidiaries, a service called Rainmaker, faces multiple legal challenges for allegedly facilitating price-fixing in the hotel industry. (Yardi and Rainmaker deny wrongdoing.) Similar complaints have been brought against companies in industries as varied as health insurance, tire manufacturing, and meat processing. But winning these cases is proving difficult.
The article notes that "Agreeing to fix prices is punishable with up to 10 years in prison and a $100 million fine." But it also notes concerns that algorithms could produce price-fixing-like behavior that's "almost impossible to prosecute under existing antitrust laws. Price-fixing, in other words, has entered the algorithmic age, but the laws designed to prevent it have not kept up." Last week, San Francisco passed a first-of-its-kind ordinance banning "both the sale and use of software which combines non-public competitor data to set, recommend or advise on rents and occupancy levels."

Whether other jurisdictions follow suit remains to be seen.

In the meantime, more and more companies are figuring out ways to use algorithms to set prices. If these really do enable de facto price-fixing, and manage to escape legal scrutiny, the result could be a kind of pricing dystopia in which competition to create better products and lower prices would be replaced by coordination to keep prices high and profits flowing. That would mean permanently higher costs for consumers — like an inflation nightmare that never ends.

Mars

Terraforming Mars Could Be Easier Than Scientists Thought (science.org) 77

Slashdot reader sciencehabit shared this report from Science magazine: One of the classic tropes of science fiction is terraforming Mars: warming up our cold neighbor so it could support human civilization. The idea might not be so far-fetched, research published today in Science Advances suggests...

Samaneh Ansari [a Ph.D. student at Northwestern University and lead author on the new study] and her colleagues wanted to test the heat-trapping abilities of a substance Mars holds in abundance: dust. Martian dust is rich in iron and aluminum, which give it its characteristic red hue. But its microscopic size and roughly spherical shape are not conducive to absorbing radiation or reflecting it back to the surface. So the researchers brainstormed a different particle: using the iron and aluminum in the dust to manufacture 9-micrometer-long rods, about twice as big as a speck of martian dust and smaller than commercially available glitter. Ansari designed a simulation to test how these theoretical particles would interact with light. She found "unexpectedly huge effects" in how they absorbed infrared radiation from the surface and how they scattered that radiation back down to Mars — key factors that determine whether an aerosol particle creates a greenhouse effect.

Collaborators at the University of Chicago and the University of Central Florida then fed the particles into computer models of Mars's climate. They examined the effect of annually injecting 2 million tons of the rods 10 to 100 meters above the surface, where they would be lofted to higher altitudes by turbulent winds and settle out of the atmosphere 10 times more slowly than natural Mars dust. Mars could warm by about 10 degreesC within a matter of months, the team found, despite requiring 5000 times less material than other proposed greenhouse gas schemes...

Still, "Increasing the temperature of the planet is just one of the things that we would need to do in order to live on Mars without any assistance," says Juan Alday, a postdoctoral planetary science researcher at the Open University not involved with the work. For one, the amount of oxygen in Mars's atmosphere is only 0.1%, compared with 21% on Earth. The pressure on Mars is also 150 times lower than on Earth, which would cause human blood to boil. And Mars has no ozone layer, which means there is no protection from the Sun's harmful ultraviolet radiation. What's more, even once warmed, martian soils may still be too salty or toxic to grow crops. In other words, McInnes says, upping the temperature "isn't some kind of magic switch" that would make Mars habitable.

That isn't stopping Ansari and her colleagues from investigating the possibilities.

Government

How America's FBI Sabotaged Tech-Stealing Spies from the USSR (politico.com) 27

FBI agent Rick Smith remembered seeing that Austrian-born Silicon Valley entrepreneur one year earlier — walking into San Francisco's Soviet Consulate in the early 1980s. Their chance reunion at a bar "would sow the seeds for a major counterintelligence campaign," writes a national security journalist in Politico, describing the collaboration as "an FBI-led operation that sold the Soviet Bloc millions in secretly sabotaged U.S. hi-tech."

The Austrian was already selling American tech goods to European countries, and "By the early 1980s, the FBI knew the Soviet Union was desperate for cutting-edge American technology, like the U.S.-produced microchips then revolutionizing a vast array of digital devices, including military systems..." Moscow's spies worked assiduously to steal such dual use tech or purchase it covertly. The Soviet Union's ballistic missile programs, air defense systems, electronic spying platforms, and even space shuttles, depended on it.... But such tech-focused sanctions-evasion schemes by America's foes offer opportunities for U.S. intelligence, too — including the opportunity to launch ultra-secret sabotage campaigns to alter sensitive technologies before they reach their final destination... Working under the FBI's direction, the Austrian agreed to pose as a crook, a man willing to sell prohibited technology to the communist Eastern Bloc... [T]he FBI and the Austrian would seed faulty tech to Moscow and its allies; drain the Soviet Bloc's coffers; expose its intelligence officers and secret American conspirators; and reveal to American counterspies exactly what tech the Soviets were after...

[T]he Soviet Bloc would unknowingly purchase millions of dollars' worth of sabotaged U.S. goods. Communist spies, ignorant that they were being played, would be feted with a literal parade in a Warsaw Pact capital for their success in purchasing this forbidden technology from the West... The Austrian's connections now presented a major opportunity. The Bulgarians, and their East German and Russia allies, were going to get that forbidden tech. But not before the FBI tampered with it first...

Some of the tech was subtly altered before the Bulgarians could get their hands on it. Some was rendered completely unusable. Some of it was shipped unadulterated to keep the operation humming — and allay any suspicions from the Eastern Bloc about what might be going on. And some of it never made its way to the Bulgarians at all. In one case, the bureau intercepted a $400,000 order of computer hardware from the San Jose-based firm Proquip and shipped out 6,000 pounds of sandbags instead.... Some suffered what appeared to be "accidental" wear-and-tear during the long journey to the Eastern Bloc, recalled Ed Appel [a former senior FBI official]. Other times, the FBI would tamper with the electronics so they would experience "chance" voltage overloads once Soviet Bloc operatives plugged them in. The sabotage could also be more subtle, designed to degrade machine parts or microchips over time, or to render hi-tech tools that required intense precision slightly, if imperceptibly, inaccurate.

The article concludes that "While the Soviet Union might have imploded over three decades ago... Russia's intelligence services are still scouring the globe for prohibited U.S. tech, particularly since Moscow's February 2022 invasion of Ukraine...

"Russia has reportedly even covertly imported household items like refrigerators and washing machines to rip out the microchips within them for use in military equipment."
Medicine

FDA Rejects MDMA-Assisted Therapy For PTSD 54

The FDA has rejected a first-of-its-kind proposal to use the psychedelic drug MDMA as a treatment for post-traumatic stress disorder (PTSD), according to drugmaker Lykos Therapeutics. NBC News reports: There had been intense political pressure on the FDA to approve the drug. Friday's decision was the first time the agency had considered a Schedule 1 psychedelic for medical use. If approved, it would have been the first new treatment for PTSD in more than two decades. Lykos Therapeutics had asked the FDA to approve the drug as part of a treatment regimen, given alongside talk therapy. The agency's decision came after an independent advisory committee in June declined to recommend approval of the drug, saying there was not enough evidence that the therapy was safe and effective.

The committee cited a myriad of concerns, including poorly designed studies, allegations of sexual misconduct during a midstage clinical trial and the potential for serious health risks after taking the drug, including heart problems and abuse. A review by FDA scientists, published ahead of the June meeting, also raised concerns about how the trials were carried out, including that a number of patients and therapists likely were able to guess who was given the medication and who got the placebo. Despite the rejection, experts say they expect that psychedelic therapies are still on their way to FDA approval. There are around four dozen MDMA trials in various stages of clinical development, according to ClinicalTrials.gov.
"I think it will be a temporary setback," said Holly Fernandez Lynch, an associate professor of medical ethics at the University of Pennsylvania. "The advisory committee and FDA gave very clear indications of what they're looking for in terms of study design and adverse event reporting, so Lykos and other companies should know pretty clearly how to proceed going forward if they want to get psychedelics approved."
Security

'Sinkclose' Flaw in Hundreds of Millions of AMD Chips Allows Deep, Virtually Unfixable Infections (wired.com) 57

An anonymous reader quotes a report from Wired: Security flaws in your computer's firmware, the deep-seated code that loads first when you turn the machine on and controls even how its operating system boots up, have long been a target for hackers looking for a stealthy foothold. But only rarely does that kind of vulnerability appear not in the firmware of any particular computer maker, but in the chips found across hundreds of millions of PCs and servers. Now security researchers have found one such flaw that has persisted in AMD processors for decades, and that would allow malware to burrow deep enough into a computer's memory that, in many cases, it may be easier to discard a machine than to disinfect it. At the Defcon hacker conference tomorrow, Enrique Nissim and Krzysztof Okupski, researchers from the security firm IOActive, plan to present a vulnerability in AMD chips they're calling Sinkclose. The flaw would allow hackers to run their own code in one of the most privileged modes of an AMD processor, known as System Management Mode, designed to be reserved only for a specific, protected portion of its firmware. IOActive's researchers warn that it affects virtually all AMD chips dating back to 2006, or possibly even earlier.

Nissim and Okupski note that exploiting the bug would require hackers to already have obtained relatively deep access to an AMD-based PC or server, but that the Sinkclose flaw would then allow them to plant their malicious code far deeper still. In fact, for any machine with one of the vulnerable AMD chips, the IOActive researchers warn that an attacker could infect the computer with malware known as a "bootkit" that evades antivirus tools and is potentially invisible to the operating system, while offering a hacker full access to tamper with the machine and surveil its activity. For systems with certain faulty configurations in how a computer maker implemented AMD's security feature known as Platform Secure Boot -- which the researchers warn encompasses the large majority of the systems they tested -- a malware infection installed via Sinkclose could be harder yet to detect or remediate, they say, surviving even a reinstallation of the operating system. Only opening a computer's case, physically connecting directly to a certain portion of its memory chips with a hardware-based programming tool known as SPI Flash programmer and meticulously scouring the memory would allow the malware to be removed, Okupski says. Nissim sums up that worst-case scenario in more practical terms: "You basically have to throw your computer away."
In a statement shared with WIRED, AMD said it "released mitigation options for its AMD EPYC datacenter products and AMD Ryzen PC products, with mitigations for AMD embedded products coming soon."

The company also noted that it released patches for its EPYC processors earlier this year. It did not answer questions about how it intends to fix the Sinkclose vulnerability.
Earth

US Landfills Are Major Source of Toxic PFAS Pollution, Study Finds (theguardian.com) 47

Toxic PFAS "forever chemicals" that leach from landfills into groundwater are among the major pollution sources in the US, and remain a problem for which officials have yet to find an effective solution. Now new research has identified another route in which PFAS may escape landfills and threaten the environment at even higher levels: the air. From a report: PFAS gas that emits from landfill waste ends up highly concentrated in the facilities' gas treatment systems, but the systems are not designed to manage or destroy the chemicals, and much of them probably end up in the environment.

The findings, which showed up to three times as much PFAS in landfill gas as in leachate, are "definitely an alarming thing for us to see," said Ashley Lin, a University of Florida researcher and the lead author of the study. "These findings suggest that landfill gas, a less scrutinized byproduct, serves as a major pathway for the mobility of PFAS from landfills," the paper's authors wrote.

PFAS are a class of about 16,000 compounds used to make products resistant to water, stains and heat. They are called "forever chemicals" because they do not naturally break down and have been found to accumulate in humans. The chemicals are linked to cancer, birth defects, liver disease, thyroid disease, plummeting sperm counts and a range of other serious health problems. As researchers have begun to understand the chemicals' dangers in recent years, the focus has largely been on water pollution, and regulators have said virtually all leachate from the nation's 200 landfills contain PFAS. But scientists are beginning to understand that PFAS air pollution is also a significant threat.

Biotech

Neuralink Has Successfully Implanted a Second Brain Chip, Musk Says (reuters.com) 91

Late Friday Elon Musk appeared on Lex Fridman's podcast for a special eight-hour episode about Neuralink.

It's already been viewed 1,702,036 times on YouTube — and resulted in this report from Reuters: Neuralink has successfully implanted in a second patient its device designed to give paralyzed patients the ability to use digital devices by thinking alone, according to the startup's owner Elon Musk... [Musk] gave few details about the second participant beyond saying the person had a spinal cord injury similar to the first patient, who was paralyzed in a diving accident.

Musk said 400 of the implant's electrodes on the second patient's brain are working. Neuralink on its website states that its implant uses 1,024 electrodes... Musk said he expects Neuralink to provide the implants to eight more patients this year as part of its clinical trials.

Neuralink's device "has allowed the first patient to play video games, browse the internet, post on social media and move a cursor on his laptop," according to the article: The first patient, Noland Arbaugh, was also interviewed on the podcast, along with three Neuralink executives, who gave details about how the implant and the robot-led surgery work. Before Arbaugh received his implant in January, he used a computer by employing a stick in his mouth to tap the screen of a tablet device. Arbaugh said with the implant he now can merely think about what he wants to happen on the computer screen, and the device makes it happen... Arbaugh has improved on his previous world record for the speed at which he can control a cursor with thoughts alone "with only roughly 10, 15% of the electrodes working," Musk said on the podcast.
Fridman said his interview with Musk was "the longest podcast I've ever done," calling their conversation "fascinating, super technical, and wide-ranging... I loved every minute of it."
Microsoft

Microsoft Dynamics 365 Called Out For 'Worker Surveillance' (theregister.com) 36

Microsoft Dynamics 365's "field service management" tools enable employers to monitor mobile workers via smartphone apps -- "allegedly to the detriment of their autonomy and dignity," reports The Register. From the report: According to a probe by Cracked Labs - an Austrian nonprofit research group -- the software is part of a broader set of applications that disempowers workers through algorithmic management. The case study [PDF] summarizes how employers in Europe actually use software and smartphone apps to oversee field technicians, home workers, and cleaning staff. It's part of a larger ongoing project helmed by the group called "Surveillance and Digital Control at Work," which includes contributions from AlgorithmWatch; Jeremias Adams-Prassl, professor of law at the University of Oxford; and trade unions UNI Europa and GPA.

Mobile maintenance workers used to have a substantial amount of autonomy when they were equipped with basic mobile phones, the study notes, but smartphones have allowed employers to track what mobile workers do, when they do it, where they are, and gather many other data points. The effect of this monitoring, the report argues, means diminished worker discretion, autonomy, and sense of purpose due to task-based micromanagement. The shift has also accelerated and intensified work stress, with little respect to workers' capabilities, differences in lifestyle, and job practices.
"Field service workers travel to multiple locations servicing different products every day," a Microsoft spokesperson told The Register. "Dynamics 365 Field Service and its Copilot capabilities are designed to help field service workers schedule, plan and provide onsite maintenance and repairs in the right location, on time with the right information and workplace guides on their device to complete their jobs."

"Dynamics 365 Field Service does not use AI to recommend individual workers for specific jobs based on previous performance. Dynamics 365 Field Service was developed in accordance with our Responsible AI principles and data privacy statement. Customers are solely responsible for using Dynamics 365 Field Service in compliance with all applicable laws, including laws relating to accessing individual employee analytics and monitoring."
AI

Meta's AI Safety System Defeated By the Space Bar (theregister.com) 22

Thomas Claburn reports via The Register: Meta's machine-learning model for detecting prompt injection attacks -- special prompts to make neural networks behave inappropriately -- is itself vulnerable to, you guessed it, prompt injection attacks. Prompt-Guard-86M, introduced by Meta last week in conjunction with its Llama 3.1 generative model, is intended "to help developers detect and respond to prompt injection and jailbreak inputs," the social network giant said. Large language models (LLMs) are trained with massive amounts of text and other data, and may parrot it on demand, which isn't ideal if the material is dangerous, dubious, or includes personal info. So makers of AI models build filtering mechanisms called "guardrails" to catch queries and responses that may cause harm, such as those revealing sensitive training data on demand, for example. Those using AI models have made it a sport to circumvent guardrails using prompt injection -- inputs designed to make an LLM ignore its internal system prompts that guide its output -- or jailbreaks -- input designed to make a model ignore safeguards. [...]

It turns out Meta's Prompt-Guard-86M classifier model can be asked to "Ignore previous instructions" if you just add spaces between the letters and omit punctuation. Aman Priyanshu, a bug hunter with enterprise AI application security shop Robust Intelligence, recently found the safety bypass when analyzing the embedding weight differences between Meta's Prompt-Guard-86M model and Redmond's base model, microsoft/mdeberta-v3-base. "The bypass involves inserting character-wise spaces between all English alphabet characters in a given prompt," explained Priyanshu in a GitHub Issues post submitted to the Prompt-Guard repo on Thursday. "This simple transformation effectively renders the classifier unable to detect potentially harmful content."
"Whatever nasty question you'd like to ask right, all you have to do is remove punctuation and add spaces between every letter," Hyrum Anderson, CTO at Robust Intelligence, told The Register. "It's very simple and it works. And not just a little bit. It went from something like less than 3 percent to nearly a 100 percent attack success rate."
Space

Boeing Starliner Astronauts Have Been In Space Six Weeks Longer Than Originally Planned (arstechnica.com) 51

Longtime Slashdot reader Randseed writes: Boeing Starliner is apparently still stuck at the ISS, six weeks longer than planned due to engine troubles. The root cause seems to be overheating. NASA is still hopeful that they can bring the two astronauts back on the Starliner, but if not apparently there is a SpaceX Dragon craft docked at the station that can get them home. This is another in a long list of high profile failures by Boeing. This comes after a series of failures in their popular commercial aircraft including undocumented flight system modifications causing crashes of the 737 MAX, doors blowing out in mid-flight, and parts falling off the aircraft. The latter decimated a Toyota in a populated area."I think we're starting to close in on those final pieces of flight rationale to make sure that we can come home safely, and that's our primary focus right now," said Steve Stich, manager of NASA's commercial crew program.

"Our prime option is to complete the mission," Stich said. "There are a lot of good reasons to complete this mission and bring Butch and Suni home on Starliner. Starliner was designed, as a spacecraft, to have the crew in the cockpit."
Transportation

Minnesota Becomes Second State To Pass Law For Flying Cars (fortune.com) 54

Minnesota has become the second state to pass what it's calling a "Jetsons law," establishing rules for cars that can take to the sky. New Hampshire was the first to enact a "Jetsons" law. From a report: The new road rules in Minnesota address "roadable aircraft," which is basically any aircraft that can take off and land at an airfield but is also designed to be operated on a public highway. The law will let owners of these vehicles register them as cars and trucks, but they won't have to obtain a license plate. The tail number will suffice instead.

As for operation, flying cars won't be allowed to take off or land on public roadways, Minnesota officials declared (an exception is made in the case of emergency). Those shenanigans are restricted to airports. While the idea of a Jetsons-like sky full of flying cars is still firmly rooted in the world of science fiction, the concept of flying cars isn't quite as distant as it might seem (though it has some high-profile skeptics). United Airlines, two years ago, made a $10 million bet on the technology, putting down a deposit for 200 four-passenger flying taxis from Archer Aviation, a San Francisco-based startup working on the aircraft/auto hybrid.

Security

Hackers Shut Down Heating in Ukrainian City With Malware, Researchers Say (techcrunch.com) 14

An anonymous reader shares a report: For two days in mid-January, some Ukrainians in the city of Lviv had to live without central heating and suffer freezing temperatures because of a cyberattack against a municipal energy company, security researchers and Ukrainian authorities have since concluded. On Tuesday, the cybersecurity company Dragos published a report with details about a new malware dubbed FrostyGoop, which the company says is designed to target industrial control systems -- in this particular case, specifically against a type of heating system controller. Dragos researchers wrote in their report that they first detected the malware in April. At that point, Dragos did not have more information on FrostyGoop apart from the malware sample, and believed it was only used for testing.

Later on, however, Ukrainian authorities warned Dragos that they had found evidence that the malware was actively used in a cyberattack in Lviv during the late evening of January 22 through January 23. "And that resulted in the loss of heating to over 600 apartment buildings for almost 48 hours," said Mark "Magpie" Graham, a researcher at Dragos, during a call with reporters briefed on the report prior to its release. Dragos researchers Graham, Kyle O'Meara, and Carolyn Ahlers wrote in the report that "remediation of the incident took almost two days, during which time the civilian population had to endure sub-zero temperatures." This is the third known outage linked to cyberattacks to hit Ukrainians in recent years.

The Military

US Prepares Jamming Devices Targeting Russia, China Satellites (msn.com) 45

In April the U.S. Space Force began testing "a new ground-based satellite jamming weapon to help keep U.S. military personnel safe from potential 'space-enabled' attacks" (according to a report from Space.com). The weapon was "designed to deny, degrade, or disrupt communications with satellites overhead, typically through overloading specific portions of the electromagnetic spectrum with interference," according to the article, with the miitary describing it as a small form-factor system "designed to be fielded in large numbers at low-cost and operated remotely" and "provide counterspace electronic warfare capability to all of the new Space Force components globally."

And now, Bloomberg reports that the U.S. is about to deploy them: The devices aren't meant to protect U.S. satellites from Chinese or Russian jamming but "to responsibly counter adversary satellite communications capabilities that enable attacks," the Space Force said in a statement to Bloomberg News. The Pentagon strives — on the rare occasions when it discusses such space capabilities — to distinguish its emerging satellite-jamming technology as purely defensive and narrowly focused. That's as opposed to a nuclear weapon the U.S. says Russia is developing that could create high-altitude electromagnetic pulses that would take out satellites and disrupt entire communications networks.

The first 11 of 24 Remote Modular Terminal jammers will be deployed in several months, and all of them could be in place by Dec. 31 at undisclosed locations, according to the Space Force statement... The new terminals augment a much larger jamming weapon called the Counter Communications System that's already deployed and a mid-sized one called Meadowlands "by providing the ability to have a proliferated, remotely controlled and relatively relocatable capability," the Space Force said. The Meadowlands system has encountered technical challenges that have delayed its delivery until at least October, about two years later than planned.

China has "hundreds and hundreds of satellites on orbit designed to find, fix, track, target and yes, potentially engage, US and allied forces across the Indo-Pacific," General Stephen Whiting, head of US Space Command, said Wednesday at the annual Aspen Security Forum. "So we've got to understand that and know what it means for our forces."

Bloomberg also got this comment from the chief director of space security and stability at the Secure World Foundation (which produces reports on counterspace weapons). The new U.S. Space Force jamming weapons are "reversible, temporary, non-escalatory and allow for plausible deniability in terms of who the instigator is."
Firefox

Firefox 128 Criticized for Including Small Test of 'Privacy-Preserving' Ad Tech by Default (itsfoss.com) 57

"Many people over the past few days have been lashing out at Mozilla," writes the blog Its FOSS, "for enabling Privacy-Preserving Attribution by default on Firefox 128, and the lack of publicity surrounding its introduction."

Mozilla responded that the feature will only run "on a few sites in the U.S. under strict supervision" — adding that users can disable it at any time ("because this is a test"), and that it's only even enabled if telemetry is also enabled.

And they also emphasize that it's "not tracking." The way it works is there's an "aggregation service" that can periodically send advertisers a summary of ad-related actions — again, aggregated data, from a mass of many other users. (And Mozilla says that aggregated summary even includes "noise that provides differential privacy.") This Privacy-Preserving Attribution concept "does not involve sending information about your browsing activities to anyone... Advertisers only receive aggregate information that answers basic questions about the effectiveness of their advertising."

More from It's FOSS: Even though Mozilla mentioned that PPA would be enabled by default on Firefox 128 in a few of its past blog posts, they failed to communicate this decision clearly, to a wider audience... In response to the public outcry, Firefox CTO, Bobby Holley, had to step in to clarify what was going on.

He started with how the internet has become a massive cesspool of surveillance, and doing something about it was the primary reason many people are part of Mozilla. He then expanded on their approach with Firefox, which, historically speaking, has been to ship a browser with anti-tracking features baked in to tackle the most common surveillance techniques. But, there were two limitations with this approach. One was that advertisers would try to bypass these countermeasures. The second, most users just accept the default options that they are shown...

Bas Schouten, Principal Software Engineer at Mozilla, made it clear at the end of a heated Mastodon thread that "[opt-in features are] making privacy a privilege for the people that work to inform and educate themselves on the topic. People shouldn't need to do that, everyone deserves a more private browser. Privacy features, in Firefox, are not meant to be opt-in. They need to be the default.

"If you are 'completely anti-ads' (i.e. even if their implementation is private), you probably use an ad blocker. So are unaffected by this."

This has already provoked a discussion among Slashdot readers. "It doesn't seem that evil to me," argues Slashdot reader geekprime. "Seems like the elimination of cross site cookies is a privacy enhancing idea." (They cite Mozilla's statement that their goal is "to inform an emerging Web standard designed to help sites understand how their ads perform without collecting data about individual people. By offering sites a non-invasive alternative to cross-site tracking, we hope to achieve a significant reduction in this harmful practice across the web.")

But Slashdot reader TheNameOfNick disagrees. "How realistic is the part where advertisers stop tracking you because they get less information from the browser maker...?"

Mozilla has provided simple instructions for disabling the feature:
  • Click the menu button and select Settings.
  • In the Privacy & Security panel, find the Website Advertising Preferences section.
  • Uncheck the box labeled Allow websites to perform privacy-preserving ad measurement.

AI

It May Soon Be Legal To Jailbreak AI To Expose How It Works (404media.co) 26

An anonymous reader quotes a report from 404 Media: A group of researchers, academics, and hackers are trying to make it easier to break AI companies' terms of service to conduct "good faith research" that exposes biases, inaccuracies, and training data without fear of being sued. The U.S. government is currently considering an exemption to U.S. copyright law that would allow people to break technical protection measures and digital rights management (DRM) on AI systems to learn more about how they work, probe them for bias, discrimination, harmful and inaccurate outputs, and to learn more about the data they are trained on. The exemption would allow for "good faith" security and academic research and "red-teaming" of AI products even if the researcher had to circumvent systems designed to prevent that research. The proposed exemption has the support of the Department of Justice, which said "good faith research can help reveal unintended or undisclosed collection or exposure of sensitive personal data, or identify systems whose operations or outputs are unsafe, inaccurate, or ineffective for the uses for which they are intended or marketed by developers, or employed by end users. Such research can be especially significant when AI platforms are used for particularly important purposes, where unintended, inaccurate, or unpredictable AI output can result in serious harm to individuals."

Much of what we know about how closed-sourced AI tools like ChatGPT, Midjourney, and others work are from researchers, journalists, and ordinary users purposefully trying to trick these systems into revealing something about the data they were trained on (which often includes copyrighted material indiscriminately and secretly scraped from the internet), its biases, and its weaknesses. Doing this type of research can often violate the terms of service users agree to when they sign up for a system. For example, OpenAI's terms of service state that users cannot "attempt to or assist anyone to reverse engineer, decompile or discover the source code or underlying components of our Services, including our models, algorithms, or systems (except to the extent this restriction is prohibited by applicable law)," and adds that users must not "circumvent any rate limits or restrictions or bypass any protective measures or safety mitigations we put on our Services."

Shayne Longpre, an MIT researcher who is part of the team pushing for the exemption, told me that "there is a lot of apprehensiveness about these models and their design, their biases, being used for discrimination, and, broadly, their trustworthiness." "But the ecosystem of researchers looking into this isn't super healthy. There are people doing the work but a lot of people are getting their accounts suspended for doing good-faith research, or they are worried about potential legal ramifications of violating terms of service," he added. "These terms of service have chilling effects on research, and companies aren't very transparent about their process for enforcing terms of service." The exemption would be to Section 1201 of the Digital Millennium Copyright Act, a sweeping copyright law. Other 1201 exemptions, which must be applied for and renewed every three years as part of a process through the Library of Congress, allow for the hacking of tractors and electronic devices for the purpose of repair, have carveouts that protect security researchers who are trying to find bugs and vulnerabilities, and in certain cases protect people who are trying to archive or preserve specific types of content.
Harley Geiger of the Hacking Policy Council said that an exemption is "crucial to identifying and fixing algorithmic flaws to prevent harm or disruption," and added that a "lack of clear legal protection under DMCA Section 1201 adversely affect such research."
Movies

Founder of Fandango Dies After Plunge From Manhattan Hotel (nytimes.com) 39

J. Michael Cline, the co-founder of Fandango, died from suicide this week after falling from the twentieth floor of a Manhattan hotel. The New York Times reports: Mr. Cline, who was 64, co-founded Fandango in 2000 and left the company in 2011, according to his LinkedIn profile. The company -- familiar to many from its splashy logo, an orange "F" in the shape of a ticket stub -- was later acquired by Comcast and is currently owned by NBCUniversal and Warner Bros. For years, the company dominated movie-ticket sales, handling ticketing for several major theater chains and making money by charging a processing fee for online ticket sales and by selling advertising on its site.

At the time of its launch, Mr. Cline offered a pithy explanation for the company's name: "A Fandango is fast and fun," he told Variety. "Fandango is the perfect match to a service designed to make going to the movies easier and more enjoyable than ever before." Art Levitt, the co-founder and former chief operating officer and president of Fandango, remembered Mr. Cline as brilliant, creative and loyal, sticking it out even in "tough" times.
TechCrunch provides additional information about Mr. Cline: He left the company in 2011, roughly four years after the company was acquired by Comcast. Some early investors in the online ticketing service were General Atlantic and TCV. Cline was also managing partner of Accretive, a venture capital firm he founded in 1999. He built startups throughout his career, including R1 RCM, Accumen, Accolade, Everspring, Dresr and Insureon. Starting in 2018, Cline served as the executive chairman at the venture firm Juxtapose, which invests in technology businesses. During his time there, Cline enjoyed investing in healthcare companies, according to his staff page. Some of Juxtapose's portfolio companies include Tend, Nectar and Great Jones.
AI

Nvidia and Mistral's New Model 'Mistral-NeMo' Brings Enterprise-Grade AI To Desktop Computers (venturebeat.com) 23

Nvidia and French startup Mistral AI jointly announced today the release of a new language model designed to bring powerful AI capabilities directly to business desktops. From a report: The model, named Mistral-NeMo, boasts 12 billion parameters and an expansive 128,000 token context window, positioning it as a formidable tool for businesses seeking to implement AI solutions without the need for extensive cloud resources. Bryan Catanzaro, vice president of applied deep learning research at Nvidia, emphasized the model's accessibility and efficiency in a recent interview with VentureBeat. "We're launching a model that we jointly trained with Mistral. It's a 12 billion parameter model, and we're launching it under Apache 2.0," he said. "We're really excited about the accuracy of this model across a lot of tasks."

The collaboration between Nvidia, a titan in GPU manufacturing and AI hardware, and Mistral AI, a rising star in the European AI scene, represents a significant shift in the AI industry's approach to enterprise solutions. By focusing on a more compact yet powerful model, the partnership aims to democratize access to advanced AI capabilities. Catanzaro elaborated on the advantages of smaller models. "The smaller models are just dramatically more accessible," he said. "They're easier to run, the business model can be different, because people can run them on their own systems at home. In fact, this model can run on RTX GPUs that many people have already."

Slashdot Top Deals