Security

After Six Years, Two Pentesters Arrested in Iowa Receive $600,000 Settlement (desmoinesregister.com) 66

"They were crouched down like turkeys peeking over the balcony," the county sheriff told Ars Technica. A half hour past midnight, they were skulking through a courthouse in Iowa's Dallas County on September 11 "carrying backpacks that remind me and several other deputies of maybe the pressure cooker bombs." More deputies arrived... Justin Wynn, 29 of Naples, Florida, and Gary De Mercurio, 43 of Seattle, slowly proceeded down the stairs with hands raised. They then presented the deputies with a letter that explained the intruders weren't criminals but rather penetration testers who had been hired by Iowa's State Court Administration to test the security of its court information system. After calling one or more of the state court officials listed in the letter, the deputies were satisfied the men were authorized to be in the building.
But Sheriff Chad Leonard had the men arrested on felony third-degree burglary charges (later reduced to misdemeanor trespassing charges). He told them that while the state government may have wanted to test security, "The State of Iowa has no authority to allow you to break into a county building. You're going to jail."

More than six years later, the Des Moines Register reports: Dallas County is paying $600,000 to two men who sued after they were arrested in 2019 while testing courthouse security for Iowa's Judicial Branch, their lawyer says.

Gary DeMercurio and Justin Wynn were arrested Sept. 11, 2019, after breaking into the Dallas County Courthouse. They spent about 20 hours in jail and were charged with burglary and possession of burglary tools, though the charges were later dropped. The men were employees of Colorado-based cybersecurity firm Coalfire Labs, with whom state judicial officials had contracted to perform an analysis of the state court system's security. Judicial officials apologized and faced legislative scrutiny for how they had conducted the security test.

But even though the burglary charges against DeMercurio and Wynn were dropped, their attorney previously said having a felony arrest on their records made seeking employment difficult. Now the two men are to receive a total of $600,000 as a settlement for their lawsuit, which has been transferred between state and federal courts since they first filed it in July 2021 in Dallas County. The case had been scheduled to go to trial Monday, Jan. 26 until the parties notified the court Jan. 23 of the impending deal...

"The settlement confirms what we have said from the beginning: our work was authorized, professional, and done in the public interest," DeMercurio said in a statement. "What happened to us never should have happened. Being arrested for doing the job we were hired to do turned our lives upside down and damaged reputations we spent years building...."

"This incident didn't make anyone safer," Wynn said. "It sent a chilling message to security professionals nationwide that helping government identify real vulnerabilities can lead to arrest, prosecution, and public disgrace. That undermines public safety, not enhances it."

County Attorney Matt Schultz said dismissing the charges was the decision of his predecessor, according to the newspaper, and that he believed the sheriff did nothing wrong.

"I am putting the public on notice that if this situation arises again in the future, I will prosecute to the fullest extent of the law."
AI

Tesla Begins Driverless Robotaxi Service in Austin, Texas (theguardian.com) 110

With no one behind the steering wheel, a Tesla robotaxi passes Guero's Taco Bar in Austin Texas, making a right turn onto Congress Avenue.

Today is the day Austin became the first city in the world to see Tesla's self-driving robotaxi service, reports The Guardian: Some analysts believe that the robotaxis will only be available to employees and invitees initially. For the CEO, Tesla's rollout is slow. "We could start with 1,000 or 10,000 [robotaxis] on day one, but I don't think that would be prudent," he told CNBC in May. "So, we will start with probably 10 for a week, then increase it to 20, 30, 40."

The billionaire has said the driverless cars will be monitored remotely... [Posting on X.com] Musk said the date was "tentatively" 22 June but that this launch date would be "not real self-driving", which would have to wait nearly another week... Musk said he planned to have one thousand Tesla robotaxis on Austin roads "within a few months" and then he would expand to other cities in Texas and California.

Musk posted on X that riders on launch day would be charged a flat fee of $4.20, according to Reuters. And "In recent days, Tesla has sent invites to a select group of Tesla online influencers for a small and carefully monitored robotaxi trial..." As the date of the planned robotaxi launch approached, Texas lawmakers moved to enact rules on autonomous vehicles in the state. Texas Governor Greg Abbott, a Republican, on Friday signed legislation requiring a state permit to operate self-driving vehicles. The law does not take effect until September 1, but the governor's approval of it on Friday signals state officials from both parties want the driverless-vehicle industry to proceed cautiously... The law softens the state's previous anti-regulation stance on autonomous vehicles. A 2017 Texas law specifically prohibited cities from regulating self-driving cars...

The law requires autonomous-vehicle operators to get approval from the Texas Department of Motor Vehicles before operating on public streets without a human driver. It also gives state authorities the power to revoke permits if they deem a driverless vehicle "endangers the public," and requires firms to provide information on how police and first responders can deal with their driverless vehicles in emergency situations. The law's requirements for getting a state permit to operate an "automated motor vehicle" are not particularly onerous but require a firm to attest it can safely operate within the law... Compliance remains far easier than in some states, most notably California, which requires extensive submission of vehicle-testing data under state oversight.

Tesla "planned to operate only in areas it considered the safest," according to the article, and "plans to avoid bad weather, difficult intersections, and will not carry anyone below the age of 18."

More details from UPI: To get started using the robotaxis, users must download the Robotaxi app and use their Tesla account to log in, where it then functions like most ridesharing apps...

"Riders may not always be delivered to their intended destinations or may experience inconveniences, interruptions, or discomfort related to the Robotaxi," the company wrote in a disclaimer in its terms of service. "Tesla may modify or cancel rides in its discretion, including for example due to weather conditions." The terms of service include a clause that Tesla will not be liable for "any indirect, consequential, incidental, special, exemplary, or punitive damages, including lost profits or revenues, lost data, lost time, the costs of procuring substitute transportation services, or other intangible losses" from the use of the robotaxis.

Their article includes a link to the robotaxi's complete Terms of Service: To the fullest extent permitted by law, the Robotaxi, Robotaxi app, and any ride are provided "as is" and "as available" without warranties of any kind, either express or implied... The Robotaxi is not intended to provide transportation services in connection with emergencies, for example emergency transportation to a hospital... Tesla's total liability for any claim arising from or relating to Robotaxi or the Robotaxi app is limited to the greater of the amount paid by you to Tesla for the Robotaxi ride giving rise to the claim, and $100... Tesla may modify these Terms in our discretion, effective upon posting an updated version on Tesla's website. By using a Robotaxi or the Robotaxi app after Tesla posts such modifications, you agree to be bound by the revised Terms.
Businesses

Ex-OpenAI Director Says Board Learned of ChatGPT Launch on Twitter 57

Helen Toner, a former OpenAI board member, said that the board didn't know about the company's 2022 launch of its chatbot ChatGPT until afterward -- and only found out about it on Twitter. From a report: In a podcast, Toner gave her fullest account to date of the events that prompted her and other board members to fire Sam Altman in November of last year. In the days that followed Chief Executive Officer Sam Altman's sudden ouster, employees threatened to quit, Altman was reinstated, and Toner and other directors left the board. "When ChatGPT came out in November 2022, the board was not informed in advance about that," Toner said on the podcast. "We learned about ChatGPT on Twitter."

In a statement provided to the TED podcast, OpenAI's current board chief, Bret Taylor said, "We are disappointed that Ms. Toner continues to revisit these issues." He also said that an independent review of Altman's firing "concluded that the prior board's decision was not based on concerns regarding product safety or security, the pace of development, OpenAI's finances, or its statements to investors, customers, or business partners." [...] In the podcast, Toner also said that Altman didn't disclose his involvement with OpenAI's startup fund. And she criticized his leadership on safety. "On multiple occasions, he gave us inaccurate information about the formal safety processes that the company did have in place," she said,"meaning that it was basically impossible for the board to know how well those safety processes were working or what might need to change."
Businesses

VMware By Broadcom Plots Pair of Cloud Foundation Releases (theregister.com) 23

An anonymous reader quotes a report from The Register: VMware by Broadcom will deliver a significant update to its flagship Cloud Foundation bundle in the middle of this year and follow it up with a major update early in 2025. Both releases will show off Broadcom's plan to make the package easier to implement and operate, and hopefully assuage customer concerns about price rises. More on that later. First, the updates. One release is currently scheduled to debut in July, according to Paul Turner, vice-president of product management and the leader of the VMware Cloud Foundation (VCF) team. The release will allow use of a single license key for all the components of Cloud Foundation, improve OAuth support as a step towards single sign-on across the VMware range, and add an NSX overlay that will allow implementation of software-defined networks without requiring IP address changes.

Turner explained those features as exemplifying the sort of simplification VMware by Broadcom thinks is needed to make Cloud Foundation easier to implement. A bigger release Turner hopes will debut in early 2025 -- though he would commit to only a H1 launch -- will be a "unified" release in which more of VCF is better integrated. Today, Turner admitted, VMware customers may have implemented vSphere and the Aria management suite, but might still need or choose discrete storage for each. Future VCF releases will increasingly unify the products so that silos aren't needed. Prashanth Shenoy, vice president for VMware by Broadcom's cloud platform, infrastructure, and solutions marketing, told The Register the release will be called VCF 9 and will represent "the fullest expression of Broadcom's vision for product integration." "When customers deploy VCF there are seams -- when they deploy networking and storage, they feel like they do not have a unified developer or operator experience," Shenoy admitted. VCF 9 will tidy that sort of thing up and make the process "seamless." Buyers can also expect improved log file analysis, the ability to acquire templates from a marketplace and adopt them as PaaS, and plenty more.

Turner and Shenoy told The Register that the two releases are hoped to make VCF adoption easier, and by doing so demonstrate the value of the bundle. Today, they argue, would-be hybrid cloud adopters using VCF are in reality integrating siloed products -- which doesn't prove the value of the vStack well. VCF 9's planned integrations, they argue, should demonstrate the power of the stack and the wisdom of Broadcom's decision to create a VMware unit dedicated to VCF. That team, they explained, means developers for each of the bundle's components work together on a unified experience, rather than to create their own product. It may also demonstrate the value of VMware by Broadcom's new licenses – which some users have complained are considerably more expensive now that subscriptions are required, and products are only sold in bundles.
Sylvain Cazard, president of Broadcom Software for Asia-Pacific, told The Register that complaints about higher prices are unwarranted since customers using at least two components of VMware's flagship Cloud Foundation will end up paying less. He also noted that the new pricing includes support, which VMware didn't include previously.
China

China's Balloon Was Capable of Spying on Communications, US Says (bloomberg.com) 152

The alleged Chinese spy balloon that flew over the US was capable of collecting communications signals and was part of a broader People's Liberation Army intelligence-gathering effort that spanned more than 40 countries, a State Department official said Thursday. From a report: High-resolution imagery provided by U-2 spy planes that flew past the balloon revealed an array of surveillance equipment that was inconsistent with Beijing's claim that it was a weather device blown off course, the official said in a statement provided on condition of anonymity. The statement, released before State and Defense Department officials appeared before Congress in open hearings and closed briefings on Thursday, marks the fullest accounting yet for the Biden administration's insistence over the course of a week-long drama that the balloon was meant to spy on the US. Defense Secretary Lloyd Austin said in an interview with CBS News that the Pentagon acted to limit what the balloon could learn about US nuclear capabilities.
United States

Biden Admin Report Criticizes Apple, Google App Stores (axios.com) 63

A new Biden administration report describes Apple and Google as "gatekeepers" of mobile app stores and suggests legislation is needed to spur competition and give app makers and consumers more choices. From a report: The White House is pushing for tech antitrust action in the new Congress, with a new Department of Commerce report laying out what it sees as a harmful app store environment for both consumers and app makers. The report, from the National Telecommunications and Information Administration, is the Biden administration's fullest effort to lay out concerns about the app store ecosystem.

There is "real potential harm for consumers" in the way Apple and Google run their app stores, with the companies "inflating prices and reducing innovation," Alan Davidson, NTIA administrator, said in a call with reporters. "We're looking forward to seeing what legislation gets introduced on Capitol Hill.... Our hope is that this analysis can inform how people are thinking about these issues," he said. "We have a real opportunity to make progress on tech and competition in this Congress," said Bharat Ramamurti, deputy director of the National Economic Council. "We're highly committed to reform in this space and we will work closely with Congress to see whatever is possible."

Crime

Boeing Pleads Not Guilty To Fraud In Criminal Case Over Deadly 737 Max Crashes (npr.org) 42

An anonymous reader quotes a report from NPR: Aerospace giant Boeing entered a plea of not guilty to a criminal charge at an arraignment in federal court in Texas Thursday. The company is charged with felony fraud related to the crashes of two of its 737 Max airplanes that killed a total of 346 people. About a dozen relatives of some of those who were killed in the crashes gave emotional testimony during the three-hour arraignment hearing about how they've been affected by what they call "the deadliest corporate crime in U.S. history." They testified after Boeing's chief aerospace safety officer Mike Delaney entered a plea of not guilty on behalf of the airplane manufacturer to the charge of conspiracy to commit fraud. The company is accused of deceiving and misleading federal regulators about the safety of a critical automated flight control system that investigators found played a major role in causing the crashes in Indonesia in 2018 and in Ethiopia in 2019.

Boeing and the Justice Department had entered into a deferred prosecution agreement to settle the charge two years ago but many of the families of the crash victims objected to the agreement, saying that they were not consulted about what they called a "secret, sweetheart deal." Under the terms of the agreement, Boeing admitted to defrauding the FAA by concealing safety problems with the 737 Max, but pinned much of the blame on two technical pilots who they say misled regulators while working on the certification of the aircraft. Only one of those pilots was prosecuted and a jury acquitted him at trial last year. Boeing also agreed to pay $2.5 billion, including $1.7 billion in compensation to airlines that had purchased 737 Max planes but could not use them while the plane was grounded for 20 months after the second plane crashed. The company also agreed to pay $500 million in compensation to the families of those killed in the two Max plane crashes, and to pay a $243 million fine. The agreement also required Boeing to make significant changes to its safety policies and procedures, as well as to the corporate culture, which many insiders have said had shifted in recent years from a safety first focus to one that critics say put profits first.

After three years, if the aerospace giant and defense contractor lived up to the terms of the deferred prosecution agreement, the criminal charge against Boeing would be dismissed and the company would be immune from further prosecution. But last fall, U.S. District Court Judge Reed O'Connor agreed that under the Crime Victims' Rights Act, the relatives' rights had been violated and they should have been consulted before the DOJ and Boeing reached the agreement. Last week, he ordered Boeing to appear Thursday to be arraigned. On Thursday, the families asked Judge O'Connor to impose certain conditions on Boeing as a condition of release, including appointing an independent monitor to oversee Boeing's compliance with the terms of the previous deferred prosecution agreement, and that the company's compliance efforts "be made public to the fullest extent possible." O'Connor did not rule on whether to impose those conditions yet, as Boeing and the Justice Department opposed the request. But he did impose a standard condition that Boeing commit no new crimes.

Transportation

To Pursue Climate Goals, JetBlue Switches from Carbon Offsets to Sustainable Aviation Fuels (theverge.com) 41

"JetBlue is giving up carbon offsets for its domestic flights," reports the Verge, "shifting its focus instead to sustainable aviation fuels.

"It's a step that could help the airline actually reduce its emissions rather than relying primarily on controversial carbon offsets to counteract its fossil fuel use." Back in 2020, JetBlue became the first U.S. airline to voluntarily offset greenhouse gas emissions from all of its domestic flights. That effort ends in 2023, the company announced this week. The airline now plans to effectively cut its per-seat emissions in half by 2035. For flights to take off without generating as much pollution, JetBlue says its planes will need to run on sustainable aviation fuels.
JetBlue's announcement calls the move "a science-based target approved by the Science Based Targets initiative, a coalition that defines and promotes best practices in emissions reduction targets....

"[T]his science-based target aligns with the goals of the Paris Agreement and the growing airline's own goal to reach net zero carbon emissions by 2040 — 10 years ahead of broader airline industry targets." JetBlue also recognizes how critical external partners are to decarbonizing the aviation industry and is committed to encouraging and supporting efforts by aircraft and engine manufacturers, governments, regulatory agencies, and fuel suppliers to realize their own greenhouse gas emission reduction goals. "Effectively cutting our per-seat emissions in half will require substantial change to the way we run our business today," said Robin Hayes chief executive officer, JetBlue.

"Our team is fully committed to hitting the goal, but we can't do it alone. We are calling on governments, aircraft and engine manufacturers, and fuel producers to support the development of the products and solutions that airlines need to achieve our ambitious goals...."

"The aviation industry is at a critical time in our push towards net zero. Many of these lower carbon solutions are proven, but still haven't achieved the scale needed to make a meaningful impact," said Sara Bogdan, director of sustainability and environmental social governance, JetBlue. "Encouragement of these maturing technologies is needed and the investments we make today will help shape the trajectory of these solutions as they grow to realize their fullest potential."

Linux

Fedora Sours On Creative Commons 'No Rights Reserved' License (theregister.com) 29

waspleg writes: Fedora, the popular Linux distribution, will no longer incorporate software licensed under CC0, the Creative Commons "No Rights Reserved" license. In order to support the wide re-use of copyrighted content in new works, CC0 provides authors "a way to waive all their copyright and related rights in their works to the fullest extent allowed by law." The license arose in response to the 1998 Sonny Bono Copyright Term Extension Act (CTEA), which extended the duration of copyright by 20 years at the expense of the public domain. But CC0 explicitly says the licensor does not waive patent rights, which for free and open source software (FOSS) is a potential problem. That means, for instance as described here, if you use CC0-licensed code in your project, and the author of that code later claims your project is infringing a patent they own regarding that code, your defense will be limited. Avoiding the use of CC0-licensed code is one way to steer clear of these so-called submarine patents that could years later torpedo you.

In a message to The Fedora Project's mailing list for legal issues, Richard Fontana, a technology lawyer for Red Hat (which sponsors Fedora), explained that while CC0 is cited as a "good license," it won't be for much longer. "We plan to classify CC0 as allowed-content only, so that CC0 would no longer be allowed for code," said Fontana. "This is a fairly unusual change and may have an impact on a nontrivial number of Fedora packages (that is not clear to me right now), and we may grant a carveout for existing packages that include CC0-covered code." Fontana said there's a growing consensus in the FOSS community that licenses without any form of patent licensing or forbearance aren't suitable. CC0, he said, like other Creative Commons licenses, includes a clause that explicitly states no patent rights are waived by the licensor.

Databases

Google Cloud Launches AlloyDB, a New Fully-Managed PostgreSQL Database Service (techcrunch.com) 19

An anonymous reader quotes a report from TechCrunch: Google today announced the launch of AlloyDB, a new fully-managed PostgreSQL-compatible database service that the company claims to be twice as fast for transactional workloads as AWS's comparable Aurora PostgreSQL (and four times faster than standard PostgreSQL for the same workloads and up to 100 times faster for analytical queries). [...] AlloyDB is the standard PostgreSQL database at its core, though the team did modify the kernel to allow it to use Google's infrastructure to its fullest, all while allowing the team to stay up to date with new versions as they launch.

Andi Gutmans, who joined Google as its GM and VP of Engineering for its database products in 2020 after a long stint at AWS, told me that one of the reasons the company is launching this new product is that while Google has done well in helping enterprise customers move their MySQL and PostgreSQL servers to the cloud with the help of services like CloudSQL, the company didn't necessarily have the right offerings for those customers who wanted to move their legacy databases (Gutmans didn't explicitly say so, but I think you can safely insert 'Oracle' here) to an open-source service.

"There are different reasons for that," he told me. "First, they are actually using more than one cloud provider, so they want to have the flexibility to run everywhere. There are a lot of unfriendly licensing gimmicks, traditionally. Customers really, really hate that and, I would say, whereas probably two to three years ago, customers were just complaining about it, what I notice now is customers are really willing to invest resources to just get off these legacy databases. They are sick of being strapped and locked in." Add to that Postgres' rise to becoming somewhat of a de facto standard for relational open-source databases (and MySQL's decline) and it becomes clear why Google decided that it wanted to be able to offer a dedicated high-performance PostgreSQL service.
The report also says Google spent a lot of effort on making Postgres perform better for customers that want to use their relational database for analytics use cases.

"The changes the team made to the Postgres kernel, for example, now allow it to scale the system linearly to over 64 virtual cores while on the analytical side, the team built a custom machine learning-based caching service to learn a customer's access patterns and then convert Postgres' row format into an in-memory columnar format that can be analyzed significantly faster."
The Almighty Buck

US Regulators Exploring How Banks Could Hold Crypto Assets (reuters.com) 43

A top U.S. bank regulator said U.S. officials are looking to provide a clearer path for banks and their clients that are looking to hold cryptocurrencies, in order to keep control over the fast-developing asset. Reuters reports: Jelena McWilliams, who chairs the Federal Deposit Insurance Corporation, told Reuters in an interview on Monday that a team of U.S. bank regulators is trying to provide a roadmap for banks to engage with crypto assets. That could include clearer rules over holding cryptocurrency in custody to facilitate client trading, using them as collateral for loans, or even holding them on their balance sheets like more traditional assets.

"I think that we need to allow banks in this space, while appropriately managing and mitigating risk," she said in an interview on the sidelines of a fintech conference. "If we don't bring this activity inside the banks, it is going to develop outside of the banks. ... The federal regulators won't be able to regulate it." McWilliams' comments provide the fullest picture yet of what regulators are exploring as part of a cryptocurrency "sprint" team first announced in May. The goal of the team was to ensure cryptocurrency policy coordination among the three main U.S. bank regulators - FDIC, Federal Reserve and Office of the Comptroller of the Currency.

The Internet

The 'Dead Internet' Theory Posits Forums are Now Almost Entirely Overrun By AI (theatlantic.com) 147

Ideas from 4chan (including its paranormal section) have percolated into the "dead internet" theory, writes the Atlantic, with a seminal post on another forum by "IlluminatiPirate" now arguing that the internet is almost entirely overrun by artificial intelligence: Like lots of other online conspiracy theories, the audience for this one is growing because of discussion led by a mix of true believers, sarcastic trolls, and idly curious lovers of chitchat... Peppered with casually offensive language, the post suggests that the internet died in 2016 or early 2017, and that now it is "empty and devoid of people," as well as "entirely sterile." Much of the "supposedly human-produced content" you see online was actually created using AI, IlluminatiPirate claims, and was propagated by bots, possibly aided by a group of "influencers" on the payroll of various corporations that are in cahoots with the government. The conspiring group's intention is, of course, to control our thoughts and get us to purchase stuff... He argues that all modern entertainment is generated and recommended by an algorithm; gestures at the existence of deepfakes, which suggest that anything at all may be an illusion; and links to a New York story from 2018 titled "How Much of the Internet Is Fake? Turns Out, a Lot of It, Actually."

"I think it's entirely obvious what I'm subtly suggesting here given this setup," the post continues. "The U.S. government is engaging in an artificial intelligence powered gaslighting of the entire world population." So far, the original post has been viewed more than 73,000 times...

The theory has become fodder for dramatic YouTube explainers, including one that summarizes the original post in Spanish and has been viewed nearly 260,000 times. Speculation about the theory's validity has started appearing in the widely read Hacker News forum and among fans of the massively popular YouTube channel Linus Tech Tips. In a Reddit forum about the paranormal, the theory is discussed as a possible explanation for why threads about UFOs seem to be "hijacked" by bots so often. The theory's spread hasn't been entirely organic. IlluminatiPirate has posted a link to his manifesto in several Reddit forums that discuss conspiracy theories... Anyway ... dead-internet theory is pretty far out-there. But unlike the internet's many other conspiracy theorists, who are boring or really gullible or motivated by odd politics, the dead-internet people kind of have a point... [Y]ou could even say that the point of the theory is so obvious, it's cliché — people talk about longing for the days of weird web design and personal sites and listservs all the time. Even Facebook employees say they miss the "old" internet. The big platforms do encourage their users to make the same conversations and arcs of feeling and cycles of outrage happen over and over, so much so that people may find themselves acting like bots, responding on impulse in predictable ways to things that were created, in all likelihood, to elicit that very response.

That 2018 article in New York magazine had argued that (at that time) a majority of web traffic was probably coming from bots — including especially high bot traffic on YouTube — while even the engagement metrics for major sites like Facebook had been gamed or inflated.

But whether or not that's changed, the Atlantic shares a compelling argument from a forum poster arguing that their very presence in this discussion proves they must be a bot. "If I was real I'm pretty sure I'd be out there living each day to the fullest and experiencing everything I possibly could with every given moment of the relatively infinitesimal amount of time I'll exist for instead of posting on the internet about nonsense."
Communications

T-Mobile Says Hacker Used Specialized Tools, Brute Force (bloomberg.com) 20

T-Mobile said a cyberattack earlier this month that exposed millions of customer records was carried out using specialized tools to gain entry to the network, followed by brute force-style hacking techniques to access user data. From a report: "In short, this individual's intent was to break in and steal data, and they succeeded," Chief Executive Officer Mike Sievert said Friday in a statement, the company's fullest account yet of what happened. The company has hired cybersecurity provider Mandiant and consulting firm KPMG to improve its defenses, he said. The breach, the fourth that has compromised T-Mobile customer records in as many years, involved personal information including names, dates of birth, Social Security numbers and driver's license information. Sievert said the company is working with law enforcement and can't share further details of what happened. Further reading: T-Mobile Hacker Explains How He Breached Carrier's Security.
Classic Games (Games)

After 35 Years, Classic Shareware Game 'Cap'n Magneto' Finally Fully Resurrected (statesman.com) 23

A newspaper in Austin, Texas shares the story behind a cult-classic videogame, the 1985 Macintosh shareware game "Cap'n Magneto."

It was the work of Al Evans, who'd "decided to live life to the fullest after suffering severe burn injuries in 1963" at the age of 17. Beneath the surface, "Cap'n Magneto" is a product of its creator's own quest to overcome adversity after a terrible car crash — an amalgamation of hard-earned lessons on the value of relationships, being an active participant in shaping the world and knowing how to move on... "Whether I was going to survive at all was very iffy," Evans said. "The chance of me living to the age of 28 or 30 was below 30% or something like that." Regardless of how much time he had left, Evans said he refused to let his injuries hold him back from living his life to the fullest. He would live his life with honesty, he decided, and do his best to always communicate with others truthfully. "I wasn't going to spend the next two years of my life dorking around different hospitals. So I said what's the alternative?" Evans said...

To float his many hobbies and interests, however, Evans knew he had to make money. In addition to doing work as a graphic designer and a translator, he picked up computer programming, which opened his eyes to a digital frontier that allowed for the creation of new worlds with the stroke of a keyboard. When he realized the technical capabilities of the Macintosh — the first personal computer that had a graphics-driven user interface and a built-in mouse function — Evans said he set out to build a world that could marry storytelling and graphics. With the help of his wife Cea, Evans created his one and only computer game: "Cap'n Magneto."

"I really wanted to write a good game, and I definitely think it was that," Evans said...

Australia-based gaming historian, author and journalist Richard Moss says, "What really marked it as different, though, was that the alien speech, once ungarbled by a tricorder item that players had to find, would be spoken aloud through the Mac's built-in speech synthesizer and written on-screen in comic-style speech bubbles," Moss said. "And unlike most role playing games of the time, every character you'd meet in the game could be friendly and helpful or cold and dismissive or aggressive and hostile — depending on a mix of random chance and player choice...."

With "Cap'n Magneto," Evans said he wanted to make sure that players could befriend the non-playable alien characters that the hero encounters. Though the game is beatable without their help, it is significantly easier with the help of allies. A reality in which everyone was an enemy, to Evans, was simply dishonest.

"That doesn't reflect the game of life, you know? Some people, well, most people actually, are probably pretty friendly," he said.

35 years after its release, Evans — now 75 years old — received a message on Facebook informing him that the game was still being played — but no one could finish it because the built-in "nagware" required payments that couldn't be completed.

That problem has finally been fixed, and long-time Slashdot reader shanen now shares the web site where the full game can finally be downloaded.
Businesses

Wisconsin Report Confirms Foxconn's So-Called LCD Factory Isn't Real (theverge.com) 109

According to a report from Wisconsin's Division of Executive Budget and Finance, Foxconn has not built the enormous Gen 10.5 LCD factory in Wisconsin that it specified in its contract with the state. "It also says that the building the company claims is a smaller Gen 6 LCD factory shows no signs of manufacturing LCDs in the foreseeable future and 'may be better suited for demonstration purposes,'" reports The Verge. From the report: The report notes that Foxconn received a permit to use its so-called "Fab" for storage, which The Verge first reported this week. Furthermore, according to an industry expert consulted by the state, Foxconn has not ordered the equipment that would be needed to make LCDs. If the building were to be used as an LCD manufacturing facility, the expert notes it would be the smallest Gen 6 in the world and "would appear to be more of a showcase than a business viable for the long term." If any LCD-related manufacturing were to take place in the building, the analysis says, it would likely only be the final assembly of components produced elsewhere and imported to Wisconsin. Such a project would have a vastly smaller impact on local supply chains and employ nowhere near the 13,000 workers anticipated in Foxconn's contract with the state.

Wisconsin Secretary of the Department of Administration Joel Brennan said in an interview with The Verge today that "clearly the Gen 6 that's been discussed and built in Mount Pleasant is not similar to other Gen 6 fabs around the world." Brennan said the memo was an effort to consult industry experts to better understand the scope of Foxconn's current project and its potential impact on the state. "There was justified criticism of the [former Governor Scott] Walker administration for entering into this contract, and not really getting any outside experts for an industry that was new to Wisconsin," Brennan said. "This is about making sure that we can use the best expertise that we have inside and outside state government so that we can make the best decisions possible." The report provides the fullest articulation of the state's reason for rejecting Foxconn's subsidy payments so far. Last week, the Wisconsin Economic Development Corporation (WEDC), which oversees the deal, denied the company its first installment of the nearly $3 billion refundable tax credits because it hasn't built the "Gen 10.5 Fab" specified in its contract.

The project Foxconn has pursued instead, the new analysis says, would not have warranted the record-breaking subsidy package passed by then-Gov. Scott Walker, nor required the infrastructure state and local governments have built to support it. "Taxpayers fully performed their side of the agreement to date, while the Recipients have not," the report says. In fact, "state taxpayers have spent as much if not more than" Foxconn has on improvements to the company's supposed manufacturing campus. The Verge previously reported that state and local governments spent at least $400 million on the project, mostly on land and infrastructure the company will likely never need. Foxconn listed approximately $300 million in capital expenses at the end of 2019.

Robotics

Should We Be Allowed To Kick Robots? (wired.com) 126

"Seen in the wild, robots often appear cute and nonthreatening. This doesn't mean we shouldn't be hostile," argues a new article in Wired, reporting on what appears to be a pre-meditated kicking of a Knightscope K5 patrol robot in a parking lot in California: K5's siblings, it turns out, don't fare much better. In 2017 a drunk man attacked a K5 in a Mountain View parking lot. A few months later a group of angry protestors in San Francisco covered another one in a tarp, pushed it to the ground, and smeared barbecue sauce on it. Stacey Stephens, Knightscope's executive vice president, wouldn't say how many have been seriously damaged. "I don't want to challenge people," he says, afraid any number will inspire -- perhaps compel -- more miscreants to seek out K5s. (Stephens did specify that Knightscope prosecutes "to the fullest extent of the law," often pursuing felony charges for damaged K5s.)

Hard numbers or not, the assaults will continue -- that's not the question... The question is: Do we care...? [A]s an otherwise law-abiding citizen...all I could think as I watch and rewatch the security video from August 3 is: Way to go, dude. Because K5 is not a friendly robot, even if the cutesy blue lights are meant to telegraph that it is. It's not there to comfort senior citizens or teach autistic children. It exists to collect data -- data about people's daily habits and routines. While Knightscope owns the robots and leases them to clients, the clients own the data K5 collects. They can store it as long as they want and analyze it however they want. K5 is an unregulated security camera on wheels, a 21st-century panopticon.

The true power of K5 isn't to watch you -- it's to make you police yourself. It's designed to be at eye level, to catch your attention. Stephens likens it to a police car sitting on the side of the road: It makes everyone hyperaware of their surroundings. Even if you aren't speeding, you break, turn down the radio, and put your hands at 10 and 2. The debate over the proper treatment of robots can sometimes sound like the debate over violent videogames. Perhaps acting on violent impulses without hurting real-life humans is healthy, cathartic. Or it might be turning us into a race of psychopaths. Unlike the characters in videogames, though, robots don't exist virtually. In the case of K5 bots, they intrude, without permission, into the most mundane of activities: walking down the sidewalk, parking your car...

It is a sham, an ersatz impression of power that should be pushed to its limits -- right down onto the hard parking lot floor.

Desktops (Apple)

BBEdit Returns To the Mac App Store (barebones.com) 22

Bare Bones Software this week announced the return of BBEdit, a popular text, code, and markup editor, to the Mac App Store after a nearly five year hiatus. Bare Bones Software: When the Mac App Store debuted in 2011, BBEdit was one of its first products available for sale. However, due to technical and business constraints we encountered in the store, we decided to withdraw BBEdit from the Mac App Store in 2014. Following BBEdit's exit from the Mac App Store, we had many conversations with our customers, and with Apple, regarding the issues that we had encountered with the store. In the spring of 2018, Bare Bones and Apple announced that, subsequent to the release of macOS Mojave (10.14) and the accompanying refresh of the Mac App Store, BBEdit would be returning to the store.

This was made possible by changes to the OS itself which allow Mac App Store versions of BBEdit to function to their fullest extent while complying with Mac App Store rules; as well as changes to the Mac App Store business mechanics which make it possible for us to distribute our software through the Mac App Store as part of a sustainable business model.
A limited features version of BBEdit is free to download and use, while the suite with all the features is priced at $3.99 a month or $39.99 a year. BBEdit remains available on a perpetual license basis for $49.99 via Bare Bones Software's online store and at participating resellers.

Further reading: The Old Guard of Mac Indy Apps Has Thrived For More Than 25 Years.
The Internet

Is this the End of Typing? The Internet's Next Billion Users Want Video and Voice (foxnews.com) 230

An anonymous reader shares a WSJ article: The internet's global expansion is entering a new phase, and it looks decidedly unlike the last one. Instead of typing searches and emails, a wave of newcomers -- "the next billion," the tech industry calls them -- is avoiding text, using voice activation and communicating with images. They are a swath of the world's less-educated, online for the first time thanks to low-end smartphones, cheap data plans and intuitive apps that let them navigate despite poor literacy. Incumbent tech companies are finding they must rethink their products for these newcomers and face local competitors that have been quicker to figure them out. "We are seeing a new kind of internet user," said Ceasar Sengupta, who heads a group at Alphabet's Google trying to adapt to the new wave. "The new users are very different from the first billion." A look at Megh Singh's smartphone suggests how the next billion might determine a new set of winners and losers in tech. Mr. Singh, 36, balances suitcases on his head in New Delhi, earning less than $8 a day as a porter in one of India's biggest railway stations. He isn't comfortable reading or using a keyboard. That doesn't stop him from checking train schedules, messaging family and downloading movies. "We don't know anything about emails or even how to send one," said Mr. Singh, who went online only in the past year. "But we are enjoying the internet to the fullest." Mr. Singh squatted under the station stairwell, whispering into his phone using speech recognition on the station's free Wi-Fi. It is a simple affair, a Sony Corp. model with 4GB of storage, versus the 32GB that is typically considered minimal in the developed world. On his screen are some of the world's most popular apps -- Google's search, Facebook's WhatsApp -- but also many that are unfamiliar in the developed world, including UC Browser, MX Player and SHAREit, that have been tailored for slow connections and skimpy data storage.
Government

US Intelligence Community Has Lost Credibility Due To Leaks (bloomberg.com) 339

Two anonymous readers and Mi share an article: U.K. police investigating the Manchester terror attack say they have stopped sharing information with the U.S. after a series of leaks that have so angered the British government that Prime Minister Therese May wants to discuss them with President Donald Trump during a North Atlantic Treaty Organization meeting in Brussels. What can Trump tell her, though? The leaks drive him nuts, too. Since the beginning of this century, the U.S. intelligence services and their clients have acted as if they wanted the world to know they couldn't guarantee the confidentiality of any information that falls into their hands. At this point, the culture of leaks is not just a menace to intelligence-sharing allies. It's a threat to the intelligence community's credibility. [...] If this history has taught the U.S. intelligence community anything, it's that leaking classified information isn't particularly dangerous and those who do it largely enjoy impunity. Manning spent seven years in prison (though she'd been sentenced to 35), but Snowden, Assange, Petraeus, the unknown Chinese mole, the people who stole the hacking tools and the army of recent anonymous leakers, many of whom probably still work for U.S. intelligence agencies, have escaped any kind of meaningful punishment. President Donald Trump has just now announced that the administration would "get to the bottom" of leaks. In a statement, he said: "The alleged leaks coming out of government agencies are deeply troubling. These leaks have been going on for a long time and my Administration will get to the bottom of this. The leaks of sensitive information pose a grave threat to our national security. I am asking the Department of Justice and other relevant agencies to launch a complete review of this matter, and if appropriate, the culprit should be prosecuted to the fullest extent of the law. There is no relationship we cherish more than the Special Relationship between the United States and the United Kingdom.

Slashdot Top Deals