The Courts

Justice Department Investigating Data Breach of Federal Court System (politico.com) 18

The Justice Department is investigating a data breach of the U.S. federal courts system dating to early 2020, a top official testified on Capitol Hill Thursday. Politico reports: House Judiciary Committee Chair Jerrold Nadler (D-N.Y.) told fellow lawmakers that there had been a "system security failure" of the U.S. Courts' document management system. He said the committee learned in March about the "startling breadth and scope" of the breach. It was the first public disclosure of the hack. Nadler said the data breach of the courts was separate from the SolarWinds hack revealed in late 2020, which involved Russian government-backed hackers infiltrating the networks of over a dozen U.S. federal agencies for much of 2020, including the federal court systems. He spoke at a committee hearing on oversight of the Justice Department's National Security Division.

Assistant Attorney General for National Security Matthew Olsen testified to the committee that NSD is "working very closely with the judicial conference and judges around the country to address this issue," and committed to updating the committee on the investigation as it progressed. A committee aide said that Nadler's questions came after the committee received a briefing on the attack, noting that "the sweeping impact it may have had on the operation of the Department of Justice is staggering." The aide was granted anonymity in order to discuss a private briefing.

Committee member Rep. Sheila Jackson Lee (D-Texas) pressed Olsen for more details on how many cases had been impacted by the breach. "I would expect your preparation and for us to be able to get that information as quickly as possible in a setting that would be appropriate, but this is a dangerous set of circumstances that has now been publicly announced, and we need to know how many... were dismissed," Jackson Lee said. Nadler questioned Olsen on whether the breach had in any way affected cases pursued by the NSD, and Olsen testified he could not "think of anything in particular."

Bitcoin

How a Fake Job Offer Took Down the World's Most Popular Crypto Game (theblock.co) 37

An anonymous reader quotes a report from The Block: Ronin, the Ethereum-linked sidechain that underpins play-to-earn game Axie Infinity, lost $540 million in crypto to an exploit in March. While the US government later tied the incident to North Korean hacking group Lazarus, full details of how the exploit was carried out have not been disclosed. The Block can now reveal that a fake job ad was Ronin's undoing. According to two people with direct knowledge of the matter, who were granted anonymity due to the sensitive nature of the incident, a senior engineer at Axie Infinity was duped into applying for a job at a company that, in reality, did not exist.

Earlier this year, staff at Axie Infinity developer Sky Mavis were approached by people purporting to represent the fake company and encouraged to apply for jobs, according to the people familiar with the matter. One source added that the approaches were made through the professional networking site LinkedIn. After what one source described as multiple rounds of interviews, a Sky Mavis engineer was offered a job with an extremely generous compensation package. The fake "offer" was delivered in the form of a PDF document, which the engineer downloaded -- allowing spyware to infiltrate Ronin's systems. From there, hackers were able to attack and take over four out of nine validators on the Ronin network -- leaving them just one validator short of total control. [...]

In its post-mortem, Sky Mavis revealed that the hackers managed to use the Axie DAO (Decentralized Autonomous Organization) -- a group set up to support the gaming ecosystem -- to complete the heist. Sky Mavis had asked the DAO for help dealing with a heavy transaction load in November 2021. [...] A month after the hack, Sky Mavis had increased the number of its validator nodes to 11, and said in the blog post that its long-term goal was to have more than 100. Sky Mavis declined to comment on how the hack was carried out when reached. Earlier today, ESET Research published an investigation showing that North Korea's Lazarus had abused LinkedIn and WhatsApp by posing as recruiters to target aerospace and defense contractors. But the report did not tie that technique to the Sky Mavis hack.
The Block notes that Axie Infinity "boasted 2.7 million daily active users and $214 million in weekly trading volume for its in-game NFTs in November last year -- although both numbers have since plummeted."

Users affected by the exploit will be reimbursed via the company's funds, along with the $150 million it raised in a round led by Binance in early April. "The company said recently that it would begin returning funds to users on June 28," adds the report.
Piracy

Broadest US Pirate Site Injunction Rewritten/Tamed By Cloudflare (torrentfreak.com) 10

An anonymous reader quotes a report from TorrentFreak: After causing outrage among online services including Cloudflare, the most aggressive pirate site injunction ever handed down in the US has undergone significant weight loss surgery. Now before the court is a heavily modified injunction that is most notable for everything that's been removed. It appears that Cloudflare drew a very clear line in the sand and refused to step over it. [...] The injunctions granted extreme powers, from residential ISP blocking to almost any other action the plaintiffs deemed fit to keep the sites offline. Almost immediately that led to friction with third-party service providers and the situation only worsened when a concerned Cloudflare found itself threatened with contempt of court for non-compliance. The CDN company fought back with support from Google and EFF and that led the parties back to the negotiating table. Filings in the case last week suggested an acceptance by the plaintiffs that the injunction cannot be enforced in its present form. The parties promised to work on a new injunction to address both sides' concerns and as a result, a new proposal now awaits the court's approval. [...]

With the contempt of court issue behind them, Cloudflare and the plaintiffs appear to have settled their differences. An entire section in the injunction dedicated to Cloudflare suggests that the CDN company is indeed prepared to help the video companies but they'll have to conform to certain standards. Before even contacting Cloudflare they'll first need to make "reasonable, good faith efforts to identify and obtain relief for the identified domains from hosting providers and domain name registries and registrars."

If the plaintiffs still need Cloudflare's assistance, Cloudflare will comply with requests against domain names listed in this injunction and future injunctions by preventing access to the following: "Pass-through security services, content delivery network (CDN) services, video streaming services, and authoritative DNS services, DNS, CDN, streaming services, and any related services." An additional note states that the plaintiffs acknowledge that Cloudflare's compliance "will not necessarily prevent the Defendants from providing users with access to Defendants' infringing services." Given the agreement on the terms, the amended injunction will likely be signed off by the court in the coming days. Service providers everywhere will breathe a sigh of relief while rightsholders will have a template for similar cases moving forward.
The proposed amended injunction documents can be found here (1, 2, 3, 4, 5 pdf).
The Courts

What Happened After Massachusetts Voters Approved a Right-to-Repair Law? (msn.com) 48

U.S. right-to-repair advocates hoped a district judge would finally rule Friday on Massachusetts' voter-approved right-to-repair referendum. But they were disappointed again, reports the Boston Globe, since instead the judge said he'd first have to consider a recent ruling by America's Supreme Court limiting the regulatory powers of the U.S. government's Environmental Protection Agency: The Massachusetts law was approved by 75 percent of voters in a 2020 referendum. But its implementation has been held up by court challenges ever since. It would require all automakers selling new cars in Massachusetts to provide buyers with access to "telematic" data â diagnostic information â via a wireless connection. That way, car owners could get their cars repaired at any independent repair shop, instead of being forced to have the work done at manufacturer-approved dealerships.

But the Alliance for Automotive Innovation, an association of the world's top carmakers, sued to overturn the law, arguing that only the federal government, not states, may enact such a rule. In addition, carmakers said that they could not redesign the digital systems of their cars in time to comply with the law's 2022 model-year deadline.

The lawsuit went to trial last summer, but the court's judgment has been repeatedly delayed. In the meantime, at least two auto manufacturers, Subaru and Kia, began selling cars in Massachusetts with their telematic features switched off, to avoid violating the law.

The state's attorney general has now granted a two-week "grace period" during which the law won't be enforced, according to the article, while the district judge "said that he expected to rule before the end of a two-week grace period."
AI

UK Decides AI Still Cannot Patent Inventions (bbc.com) 20

The UK's Intellectual Property Office has decided artificial-intelligence systems cannot patent inventions for the time being. The BBC reports: A recent IPO consultation found many experts doubted AI was currently able to invent without human assistance. Current law allowed humans to patent inventions made with AI assistance, the government said, despite "misperceptions" this was not the case. Last year, the Court of Appeal ruled against Stephen Thaler, who had said his Dabus AI system should be recognized as the inventor in two patent applications, for: a food container [and] a flashing light. The judges sided, by a two-to-one majority, with the IPO, which had told him to list a real person as the inventor. "Only a person can have rights - a machine cannot," wrote Lady Justice Laing in her judgement. "A patent is a statutory right and it can only be granted to a person." But the IPO also said it would "need to understand how our IP system should protect AI-devised inventions in the future" and committed to advancing international discussions, with a view to keeping the UK competitive.

Many AI systems are trained on large amounts of data copied from the internet. And, on Tuesday, the IPO also announced plans to change copyright law to allow anyone with lawful access - rather than only those conducting non-commercial research, as now -- to do this, to "promote the use of AI technology, and wider 'data mining' techniques, for the public good." Rights holders will still be able to control and charge for access to their works but no longer charge extra for the ability to mine them.

In the consultation, the IPO noted the UK was one of only a handful of countries to protect computer-generated works with no human creator. The "author" of a "computer-generated work" is defined as "the person by whom the arrangements necessary for the creation of the work are undertaken," it says. And protection lasts for 50 years from when the work is made. Performing-arts workers' union Equity had called for copyright law to be changed to protect actors' livelihoods from AI content such as "deepfakes," generated from images of their face or voice. The IPO took this issue seriously, it said, but "at this stage, the impacts of AI technologies on performers remain unclear." "We will keep these issues under review," it added.

The Courts

Facebook Agrees To Massive Settlement For Data Privacy Class Action Lawsuit (apnews.com) 25

Here's an announcement from lawfirm DiCello Levitt Gutzler. This week a U.S. District court "granted preliminary approval of a $90 million settlement" with Facebook's parent company, Meta Platforms, "to resolve a long-running class action accusing Facebook of tracking its subscribers' activities on non-Facebook websites — even while signed out of their Facebook accounts."

"The monetary component makes this the seventh-largest data privacy class action settlement ever to receive preliminary court approval."

Long-time Slashdot reader destinyland quotes the announcement: Individuals who, between April 22, 2010, and September 25, 2011, inclusive, were Facebook users in the United States and visited non-Facebook websites that displayed the Facebook Like button, may be eligible for a payment from the settlement fund. Email notices from the claims administrator, Angeion, have started to go out, and will continue in batches through July 15, 2022. Recipients of an email notice should note an ID and confirmation code in the top left corner, which should be use in submitting their claim.

However, even those who do not receive an email notice are still permitted to file a claim, and the administrator will determine whether they are eligible.

The correct link to the class action lawsuit website is: fbinternettrackingsettlement.com/

The deadline to submit a claim is September 22, 2022.

Komando.com adds that "While Facebook has denied any wrongdoing, it chose to settle the matter outside of court before it went to trial..."

"It's impossible to tell how much you can get at this stage in the lawsuit, as the final payout will depend on the number of claims submitted and additional fees. All settlement class members will be paid in equal amounts."
Movies

How 1982's 'Blade Runner' Defined the Sci-Fi Film Genre (esquire.com) 101

Esquire celebrates the 40th anniversary of the movie Blade Runner: Based on Philip K. Dick's 1968 novel Do Androids Dream Of Electric Sheep, Scott's film created a world so rich, so dirty and wet and worn out, so visually stunning, that imitation was an inevitability. Less gym-bro than The Terminator, less wacky than Terry Gilliam's Brazil, and less all-out apocalyptic than Mad Max, Blade Runner arguably defined not just 1980s science fiction, but in the forty years since its initial release, sci-fi films in general. From Ghost In The Shell, to Total Recall and Minority Report and even Black Panther, Blade Runner is owed a debt of gratitude.

Working from a formula he perfected in 1979's Alien, Scott brought his world of grimy industry and neon-lit shadows, rogue androids and put-upon protagonists to California, swapping Alien's body horror for the police procedural. Granted, Deckard isn't Ellen Ripley, but in its portrayal of the battered and bruised detective battling against the system, Blade Runner is a Chinatown of the future. That it was only Scott's third film as director makes it all the more impressive. (As an aside, has Harrison Ford's three film run of The Empire Strikes Back (1980), Raiders Of The Lost Ark (1981), and Blade Runner (1982) ever been beaten?).

Famously, the film was a critical and commercial flop in the U.S. with VHS sales and endless re-edits eventually leading to its cult status. (In 2004, it was even voted as the best science fiction film of all time by a panel of global scientists). Today, it's difficult to picture a sci-fi film that doesn't play homage. Would HBO's Westworld have updated its 1973 film version so successfully and stylishly without Blade Runner paving the way both visually and in terms of its musings on free will? And, decades before Elon Musk looked set to take over the world, Blade Runner's Tyrell Corporation (and indeed, Alien's Weyland-Yutani) was inspiring evil empires from Resident Evil's Umbrella Corporation to RoboCop's Omni Consumer Products and The Terminator's Cyberdyne Systems.

The article argues that Rutger Hauer's replicant character Roy Batty "delivers one of the greatest speeches in cinematic history in his 'Tears in rain' soliloquy."

And it points out that fans of Ridley Scott's prequels to Alien speculate those movies also exist in the same cinematic universe.
Technology

Blockchains Vulnerable To Tampering, a DARPA Analysis Finds (npr.org) 59

A new report finds that blockchain systems might not be working as well as many crypto enthusiasts assume. From a report: The report was commissioned by the Defense Advanced Research Projects Agency, or DARPA, and the work was done by the software security research company Trail of Bits. Trail of Bits CEO Dan Guido says blockchain -- the public ledgers that keep track of cryptocurrencies, which are replicated on computers around the world -- isn't the egalitarian tech its advocates claim. "It's been taken for granted that the blockchain is immutable and decentralized, because the community says so," says Guido. But in practice, he says, these networks have evolved in ways that concentrate power in the hands of certain people or companies, including the large pools of "miners" whose computers earn virtual currency by maintaining the blockchains.

Guido's team calls these potential situations "unintended centralities" -- situations in which someone gains leverage over the decentralized system, creating opportunities for tampering with the record of who owns what. Another example in the report of this kind of concentration is the fact that 60% of Bitcoin traffic is handled by just three internet service providers. "Let's say somebody with great top-down control of the internet in their country starts to interfere with that network," Guido says. By slowing down or stopping legitimate blockchain traffic, an attacker could become the "majority" voice in the consensus of what's written to a blockchain at that moment. "They can rewrite history. They can censor transactions. They can make it so that you can't spend your Bitcoin," says Guido. "It's definitely something people would want to do if they want to 'grief' the network."

United States

Why Rural Americans Keep Waiting for Fast Internet, Despite Billions Spent (wsj.com) 169

The U.S. government has spent billions of dollars on several rounds of programs to upgrade internet speeds in rural areas over the past decade. Despite those efforts, many residents are still stuck with service that isn't fast enough to do video calls or stream movies -- speeds that most take for granted. From a report: Many communities have been targeted for broadband upgrades at least twice already, but flaws in the programs' design have left residents wanting. The Wall Street Journal analyzed 1.4 million largely rural census blocks that were included in a series of nationwide Federal Communications Commission broadband programs over the past decade. In the latest program, the Rural Digital Opportunity Fund, rolled out in 2020, internet service providers won rights to public funding in about 750,000 census blocks, covering every state except Alaska. The Journal's analysis found that more than half of those census blocks -- areas with a combined population of 5.3 million people -- had been fully or partially covered by at least one previous federal broadband program.

Most U.S. households today have access to internet download speeds of at least 100 megabits per second and upload speeds of 10 Mbps, according to government data. Although the FCC's programs have made progress, some rural Americans still can't get 4 Mbps download and 1 Mbps upload speeds -- the level of service that was the federal standard in 2011. The broadband saga around Heavener, Okla., illustrates some of the problems. Heavener, with a population of around 3,000, is surrounded by cattle pastures and forested hills. Today some buildings on the main streets have good broadband service, but the internet deteriorates outside town, residents say. Much of the area, in Le Flore County, was slated for upgrades under the Rural Digital Opportunity Fund in 2020 -- and some of those areas had already been part of prior programs.

Privacy

Police Linked To Hacking Campaign To Frame Indian Activists (wired.com) 61

Police forces around the world have increasingly used hacking tools to identify and track protesters, expose political dissidents' secrets, and turn activists' computers and phones into inescapable eavesdropping bugs. Now, new clues in a case in India connect law enforcement to a hacking campaign that used those tools to go an appalling step further: planting false incriminating files on targets' computers that the same police then used as grounds to arrest and jail them. Wired: More than a year ago, forensic analysts revealed that unidentified hackers fabricated evidence on the computers of at least two activists arrested in Pune, India, in 2018, both of whom have languished in jail and, along with 13 others, face terrorism charges. Researchers at security firm SentinelOne and nonprofits Citizen Lab and Amnesty International have since linked that evidence fabrication to a broader hacking operation that targeted hundreds of individuals over nearly a decade, using phishing emails to infect targeted computers with spyware, as well as smartphone hacking tools sold by the Israeli hacking contractor NSO Group. But only now have SentinelOne's researchers revealed ties between the hackers and a government entity: none other than the very same Indian police agency in the city of Pune that arrested multiple activists based on the fabricated evidence.

"There's a provable connection between the individuals who arrested these folks and the individuals who planted the evidence," says Juan Andres Guerrero-Saade, a security researcher at SentinelOne who, along with fellow researcher Tom Hegel, will present findings at the Black Hat security conference in August. "This is beyond ethically compromised. It is beyond callous. So we're trying to put as much data forward as we can in the hopes of helping these victims." SentinelOne's new findings that link the Pune City Police to the long-running hacking campaign, which the company has called Modified Elephant, center on two particular targets of the campaign: Rona Wilson and Varvara Rao. Both men are activists and human rights defenders who were jailed in 2018 as part of a group called the Bhima Koregaon 16, named for the village where violence between Hindus and Dalits -- the group once known as "untouchables" -- broke out earlier that year. (One of those 16 defendants, 84-year-old Jesuit priest Stan Swamy, died in jail last year after contracting Covid-19. Rao, who is 81 years old and in poor health, has been released on medical bail, which expires next month. Of the other 14, only one has been granted bail.)

Transportation

Driverless Taxis Are Coming To the Streets of San Francisco (npr.org) 58

An anonymous reader quotes a report from NPR: California regulators on Thursday gave a robotic taxi service the green light to begin charging passengers for driverless rides in San Francisco, a first in a state where dozens of companies have been trying to train vehicles to steer themselves on increasingly congested roads. The California Public Utilities Commission unanimously granted Cruise, a company controlled by automaker General Motors, approval to launch its driverless ride-hailing service. The regulators issued the permit despite safety concerns arising from Cruise's inability to pick up and drop off passengers at the curb in its autonomous taxis, requiring the vehicles to double park in traffic lanes.

The ride-hailing service initially will consist of just 30 electric vehicles confined to transporting passengers in less congested parts of San Francisco from 10 p.m. to 6 a.m. Those restrictions are designed to minimize chances of the robotic taxis causing property damage, injuries or death if something goes awry. It will also allow regulators to assess how the technology works before permitting the service to expand.

Cruise and another robotic car pioneer, Waymo, already have been charging passengers for rides in parts of San Francisco in autonomous vehicles with a back-up human driver present to take control if something goes wrong with the technology. But now Cruise has been cleared to charge for rides in vehicles that will have no other people in them besides the passengers -- an ambition that a wide variety of technology companies and traditional automakers have been pursuing for more than a decade. The driverless vehicles have been hailed as a way to make taxi rides less expensive while reducing the traffic accidents and deaths caused by reckless human drivers.
Gil West, Cruise's chief operating officer, in a blog post hailed Thursday's vote as "a giant leap for our mission here at Cruise to save lives, help save the planet, and save people time and money." He said the company would begin rolling out its fared rides gradually.
Iphone

Cydia's Antitrust Case Against Apple Can Proceed, Judge Rules (engadget.com) 69

In 2018, Engadget described Cydia as the maker of an app store for jailbroken iPhones that shut down claiming it just wasn't profitable (after operating for nearly a decade).

But now Cydia has filed an antitrust case against Apple, Engadget reports: On Thursday, Judge Yvonne Gonzalez Rogers, the same judge that oversaw the case between Apple and Epic Games, ruled Cydia's creator, Jay "Saurik" Freeman, could present his claim against the company after rejecting a bid by Apple to dismiss the complaint. [According to a paywalled article from Reuters.]

Freeman first sued Apple at the end of 2020, alleging the company had an "illegal monopoly over iOS app distribution." Judge Gonzalez Rogers dismissed Cydia's initial complaint against Apple, ruling the suit fell outside the statute of limitations. But she also granted Freeman leave to amend his case, which is what he did. In its latest complaint, Cydia argues that iOS updates Apple released between 2018 and 2021 constituted "overt" acts that harmed distributors like itself. That's a claim Judge Gonzalez Rogers found credible enough to explore.

United States

Top Fed Official Warns About US Falling Behind in Digital Dollar Race (axios.com) 46

A top Federal Reserve official gave a stark warning to House lawmakers on Thursday: Move too slow in issuing a central bank digital currency and the dollar's global dominance could eventually be in jeopardy. From a report: "We shouldn't take the dollar's global status as the dominant payment currency for granted," Lael Brainard, the Fed's vice chair, said at a congressional hearing on central bank digital currencies (CBDCs). "If major foreign jurisdictions move to the issuance of their own digital currencies, it's important to think about whether the United States would continue to have the same kind of dominance without also issuing. I would hate for Congress to decide five years from now: 'You, Federal Reserve, you need to catch up. China's out there. The [European Central Bank] is out there.'" The Fed just wrapped a public comment period on its highly-anticipated report laying out the pros and cons of developing its own CBDC. This came amid the explosion in popularity of stablecoins, which aim to tie their value to a fiat currency (like the U.S. dollar).
Businesses

The Smoke and Mirrors of Unlimited Paid Time Off (bbc.com) 126

An anonymous reader quotes a report from the BBC: Investment-banking firm Goldman Sachs made an eye-catching move last week: it granted unlimited paid holiday to its senior staff. According to a memo seen by a number of media organizations, partners and managing directors will be able to "take time off when needed without a fixed vacation day entitlement." Junior staff were given two more annual days off, and the company said all workers had to take a minimum of 15 days holiday each year.

At first glance, this looks like a positive initiative from a company known for grueling work hours and demanding culture. Unlimited paid time off (UPTO), after all, could allow overworked staff more time to rest and improve their mental health and overall work-life balance. Plus, a generous holiday policy at the top could trickle down into the wider workforce, potentially making for happier and more productive staff on the whole. Yet what sounds like an amazing benefit comes with major caveats. Workers will likely only take a decent amount of holiday if firms create an environment that encourages them to do so. In some firms with UPTO, workers end up taking less holiday -- not more -- because of peer pressure and perceived expectations around 'acceptable' amounts of holiday.

The latest data, meanwhile, shows UPTO isn't the benefit that workers covet the most; rather than an unlimited amount of holiday, most people prize flexibility, including the option to work from home. Is this recently introduced perk the shiny new toy workers have wanted all along -- or is it the gift no one asked for?
"With UPTO, workers are not technically owed any vacation days, since there's no fixed number, and everything must be cleared by the boss on a case-by-case basis," notes the BBC. "For workers, establishing what the 'right' amount of paid time off to ask for often depends on observing the behavior of colleagues and bosses. If colleagues are only taking 10 days per year, asking for more could feel inappropriate."

Companies that adopt UPTO, says Peter Cappelli, professor of management at the University of Pennsylvania's Wharton School of Business, have "moved from a model where you accrue it -- so you're actually owed the vacation -- to one where you kind of [have to] ask. And there's nothing stopping your boss from yelling at you if you want to take additional time off -- or punishing you if you do."

The BBC adds, citing Cappelli: "UPTO also removes the safeguards that protect workers' interests if they can't take time off -- there are no leftover days workers are legally required to take by year's end, or carry over to the next year. There's also nothing for workers to cash out if they quit and have days left over, which [...] saves companies money."
United States

US Senator Introduces Bill To Strip Disney of Special Copyright Protections (yahoo.com) 406

Sen. Josh Hawley, R-Mo., is introducing legislation that would strip the Walt Disney Company of special copyright protections granted to the corporation by Congress, while also limiting the length of new copyrights. From a report: The "Copyright Clause Restoration Act of 2022" would cap the length of copyrights given corporations by Congress to 56 years and retroactively implement this change on companies, including Walt Disney. "The age of Republican handouts to Big Business is over. Thanks to special copyright protections from Congress, woke corporations like Disney have earned billions while increasingly pandering to woke activists. It's time to take away Disney's special privileges and open up a new era of creativity and innovation," Hawley told Fox News Digital in an exclusive statement. According to Hawley's office, Congress has used an old law, also known as the "Mickey Mouse Protection Act," in order to extend copyrights to corporations for up to 120 years. Instead of issuing copyright protections to create enough monopoly protection in order to foster innovation, companies are getting handouts from Congress for a much longer period than needed.
Open Source

Fedora's Lead Speaks on the Popularity of Linux and the Importance of Open Source (techrepublic.com) 68

Fedora project leader Matthew Miller spoke to TechRepublic's Jack Wallen this week, sharing some thoughts on the future of Linux — and on open source in general: Matthew Miller: I think it's a lost cause to try to "sell" our quirky technology interest to people who don't see it already. We need to take a different approach.... I think our message, at its root, has to be around open source.... [W]ith Linux, when you install an open-source distro, you're not just part of a fan community. You're part of a colossal, global effort that makes software more available to everyone, makes that software better and better, and makes the whole world better through sharing... Just by using it you're sharing in this amazing undertaking, part of a move away from scarcity to an economy based on abundance....

Jack Wallen: What's the biggest difference in Linux today vs. Linux of 10 years ago?

Matthew Miller: I think first we have to start with just the amazing ubiquity of it. Ten years ago, it was cute to find a TV that ran Linux. Now, not only is it definitely powering your TV, you've probably got Linux running on your lightbulbs! It's everywhere. And while Linux had pushed proprietary Unix from the server room, ten years ago Windows-based servers were pushing back. The cloud changed that — now, the cloud is Linux, almost completely. (Anything that isn't is a legacy app that it was too much trouble to port!) From tiny devices to the most powerful mainframes and supercomputers: Linux, Linux, Linux....

Jack Wallen: If Linux has an Achilles' heel, what is it?

Matthew Miller: Linux and the whole free and open-source software movement grew up with the rise of the internet as an open communication platform. We absolutely need that to continue in order to realize our vision, and I don't think we can take it for granted.

That's more general than an Achilles' heel, though, so right now let me highlight one thing that I think is troubling: Chrome becoming the dominant browser to the point where it's often the only way to make sites work. Chromium (the associated upstream project) is open source, but isn't really run as a community project, and, pointedly, very very few people run Chromium itself. I'd love to see that change, but I'd also like to see Firefox regain a meaningful presence.

Miller also said Fedora's next release is focused on simplicity. ("When the OS gets in the way, it drops from the conversation I want to have about big ideas to ... well, the boring technical details that people never want to deal with")

And he also shared his thoughts on what Linux needs most. "What I'd really like to see more of are more non-technical contributors. I mean, yes, we can always benefit from more packagers and coders and engineers, but I think what we really need desperately are writers, designers, artists, videographers, communicators, organizers and planners. I don't think big companies are likely to provide those things, at least, not for the parts of the Linux world which aren't their products."

"We need people who think the whole grand project I've been talking about is important, and who have the skills and interests to help make it real."
Businesses

Amazon's Twitch Seeks To Revamp Creator Pay With Focus on Profit (bloomberg.com) 28

Twitch, the Amazon-owned live-streaming website, is weighing potential changes to how it pays top talent, Bloomberg reported Wednesday, citing people familiar with the planning, an effort that would boost its profits but would also risk alienating some of its biggest stars. From a report: The updates under consideration would offer incentives for streamers to run more ads. The proposal would also reduce the proportion of subscription fees doled out to the site's biggest performers, said the people, who asked not to be identified because the discussions are private. Some changes to Twitch's monetization structure could be implemented as soon as this summer, the people said. Twitch staff is considering paring back the revenue cut of channel subscriptions granted to the top echelon of streamers in its so-called partnerships program to 50%, from 70%. Another option is to create multiple tiers and set criteria for how to qualify for each one, two of the people said. In exchange, Twitch may offer to release partners from exclusivity restrictions, allowing them to stream on Google's YouTube or Facebook.
The Courts

Zoom Agrees To 'Historic' $85 Million Payout For Graphic Zoombombing Claims (theguardian.com) 50

The Covid-19 pandemic brought on a surge of "zoom-bombing" as hackers and pranksters crashed into virtual meetings with abusive messages and imagery. Now, Zoom has agreed to a "historic" payout of $85m as part of a class-action settlement brought by its users, including church groups who said they were left traumatized by the disruptions. From a report: As part of the settlement agreement, Zoom Video Communications, the company behind the teleconference application that grew popular during the pandemic, will pay the $85m to users in cash compensation and also implement reforms to its business practices. On Thursday, federal judge Laurel Beeler of California granted final approval to the agreement which was first filed in July. The agreement was granted preliminary approval in October. The settlement stems from 14 class-action complaints filed against the San Jose-based company by users between March and May of 2020, in which they argued that the company violated their privacy and security.
Android

Android Apps on Windows 11 Review (androidpolice.com) 18

An anonymous reader shares a report: The Amazon Appstore doesn't come with Windows 11 by default, but anyone in the US can download it by heading to the Microsoft Store on their device. It's as simple as installing any other native Windows app -- a good start for potentially getting users onboard. Unfortunately, it's unclear when it'll arrive for users in regions outside the US. You'll need an Amazon account to log in, of course, but the service itself is free. It might be easy to install, but I found browsing and using the service unsurprisingly mediocre. I'm testing this app store out on a souped-up gaming laptop, yet for some reason, the Appstore felt sluggish, taking seconds to load each page and dropping frames when the home screen banner was changing slides. The storefront itself is barebones, offering just two basic categories along the left-side panel and a basic search bar along the top.

As for the app selection, it's as bad as you might've guessed from the jump. Forget Google apps, obviously -- they aren't on Fire Tablets, and they aren't here. TikTok has been predominantly featured on Microsoft's press images for the Appstore since it was announced, and for good reason: it's the only major social network with a listing. Forget Facebook, Instagram, and Twitter -- you're stuck with TikTok if you want to experience the social side of the web.

Games don't fare much better. Looking at the top paid titles, I only recognized two names -- and that was because I knew the Nickelodeon properties they were based on -- not the games themselves. Free titles didn't fare much better; you'll find Subway Surfers and the Talking Tom series, but not much more. None of our favorite free-to-play titles appeared in a search: no Among Us, Call of Duty Mobile, or Roblox. Granted, you can fill all of these absences elsewhere on Windows 11. Many of these titles have versions on Steam or the web -- you don't need the Android version of Among Us to play on Windows. The same goes for those missing apps, from Google services to social networks to recipe apps and smart home controls. It's not hard to access Gmail these days, even if it's not in a dedicated app, and that all begs the question: why does this service even exist?

Chrome

Chrome Web Store Will Show Badges For Reputable Developers and Extensions (xda-developers.com) 26

An anonymous reader quotes a report from XDA Developers: Google will start highlighting reputable developers and publishers with a special badge. Google wrote in an email to Chrome Web Store developers on Friday, "we're happy to announce two new extension badges to help us deliver on that goal: the Featured badge and the Established publisher badge. Both of these badges will appear in the store in the next few weeks. Developers who earn these badges may receive higher rankings in search and filtering, and may also see their extensions appear in special promotions both on and off Chrome Web Store." "Developers who earn these badges may receive higher rankings in search and filtering"

The first is a Featured badge, which "will be granted to extensions that follow our technical best practices and meet a high standard of user experience and design." This badge is given to extensions manually by the Chrome Web Store team, so there isn't a full (public) list of guidelines, but the email mentioned a clear store listing page and following best practices as some of the criteria. The Established publisher badge will be granted automatically to developers and publisher accounts that have been verified and "established a consistent positive track record with Google services and compliance with the Developer Program Policy." In other words, most developers that haven't broke Chrome Web Store rules will probably get the badge at some point.

Google says publishers will not be able to pay money for either badge, but the company is working on ways for developers to request consideration. Starting on April 20, developers will be able to nominate their own extensions for a Featured badge.

Slashdot Top Deals