Earth

A New Population of Blue Whales Was Discovered Hiding in the Indian Ocean (nytimes.com) 45

Weighing up to 380,000 pounds and stretching some 100 feet long, the blue whale -- the largest creature to have ever lived on Earth -- might at first seem difficult for human eyes and ears to miss. But a previously unknown population of the leviathans has long been lurking in the Indian Ocean, leaving scientists none the wiser, new research suggests. From a report: The covert cadre of whales, described in a paper published last week in the journal Endangered Species Research, has its own signature anthem: a slow, bellowing ballad that's distinct from any other whale song ever described. It joins only a dozen or so other blue whale songs that have been documented, each the calling card of a unique population. "It's like hearing different songs within a genre -- Stevie Ray Vaughan versus B. B. King," said Salvatore Cerchio, a marine mammal biologist at the African Aquatic Conservation Fund in Massachusetts and the study's lead author. "It's all blues, but you know the different styles."

The find is "a great reminder that our oceans are still this very unexplored place," said Asha de Vos, a marine biologist who has studied blue whales in the Indian Ocean but was not involved in the new study. Dr. Cerchio and his colleagues first tuned into the whales' newfound song while in scientific pursuit of a pod of Omura's whales off the coast of Madagascar several years ago. After hearing the rumblings of blue whales via a recorder planted on the coastal shelf, the researchers decided to drop their instruments into deeper water in the hopes of eavesdropping further. A number of blue whale populations, each with its own characteristic croon, have long been known to visit this pocket of the Indian Ocean, Dr. Cerchio said. But one of the songs that crackled through the team's Madagascar recordings was unlike any the researchers had heard.

Electronic Frontier Foundation

ExamSoft Flags One-Third of California Bar Exam Test Takers For Cheating (eff.org) 82

The California Bar released data last week confirming that during its use of ExamSoft for the October Bar exam, over one-third of the nearly nine-thousand online examinees were flagged by the software. The Electronic Frontier Foundation is concerned that the exam proctoring software is incorrectly flagging students for cheating "due either to the software's technical failures or to its requirements that students have relatively new computers and access to near-broadband speeds." From the report: This is outrageous. It goes without saying that of the 3,190 applicants flagged by the software, the vast majority were not cheating. Far more likely is that, as EFF and others have said before, remote proctoring software is surveillance snake oil -- you simply can't replicate a classroom environment online, and attempting to do so via algorithms and video monitoring only causes harm. In this case, the harm is not only to the students who are rightfully upset about the implications and the lack of proper channels for redress, but to the institution of the Bar itself. While examinees have been searching for help from other examinees as well as hiring legal counsel in their attempt to defend themselves from potentially baseless claims of cheating, the California Committee of Bar Examiners has said "everything is going well" and called these results "a good thing to see" (13:30 into the video of the Committee meeting).

That is not how we see it. These flags have triggered concern for hundreds, if not thousands, of test takers, most of whom had no idea that they were flagged until recently. Many only learned about the flag after receiving an official "Chapter 6 Notice" from the Bar, which is sent when an applicant is observed (supposedly) violating exam conduct rules or seen or heard with prohibited items, like a cell phone, during the exam. In a depressingly ironic introduction to the legal system, the Bar has requested that students respond to the notices within 10 days, but it would appear that none of them have been given enough information to do so, as Chapter 6 Notices contain only a short summary of the violation. These summaries are decidedly vague: "Facial view of your eyes was not within view of the camera for a prolonged period of time"; "No audible sound was detected"; "Leaving the view of the webcam outside of scheduled breaks during a remote-proctored exam." Examinees do not currently have access to the flagged videos themselves, and are not expected to receive access to them, or any other evidence against them, before they are required to submit a response.
The report goes on to say that some of these flags are technical issues with ExamSoft. For example, Lenovo laptops appear to have been flagged en masse for an issue with the software's inability to access the internal microphone.

Other flags are likely due to the inability of the software to correctly recognize the variability of examinees' demeanors and expressions. "We implore the California Bar to rethink its plans for remotely-proctored future exams, and to work carefully to offer clearer paths for examinees who have been flagged by these inadequate surveillance tools," the EFF says in closing. "Until then, the Bar must provide examinees who have been flagged with a fair appeals process, including sharing the videos and any other information necessary for them to defend themselves before requiring a written response."
Ruby

RubyGems Catches Two Packages Trying to Steal Cryptocurrency with Clipboard Hijacking (bleepingcomputer.com) 14

One day after they were uploaded, RubyGems discovered and removed two malicious packages that had been designed to steal cryptocurrency from unsuspecting users by installing a clipboard hijacker, reports Bleeping Computer, citing research by open-source security firm Sonatype.

Fortunately, while the packages were downloaded a total of 142 times, "At this time, none of the cryptocurrency addresses have received any funds." These packages were masquerading as a bitcoin library and a library for displaying strings with different color effects. A clipboard hijacker monitored the Windows clipboard for cryptocurrency addresses, and if one is detected, replaces it with an address under the attacker's control. Unless a user double-checks the address after they paste it, the sent coins will go to the attacker's cryptocurrency address instead of the intended recipient...

The base64 encoded string is a VBS file that is executed to create another malicious VBS file and configure it to start automatically when a user logs into Windows. This VBS script is the clipboard hijacker and is stored at C:\ProgramData\Microsoft Essentials\Software Essentials.vbs to impersonate the old Microsoft Security Essentials security software. The clipboard hijacking script monitors the Windows clipboard every second and check if it contains a Bitcoin address, an Ethereum address, or a raw Monero address.

Businesses

'Will Remote Work Kill Innovation?' Ask Silicon Valley Experts (mercurynews.com) 110

Remote work "is here to stay," argues a new article in Silicon Valley's newspaper The Mercury News (also re-published in the East Bay Times). But they've also asked industry professionals around Silicon Valley whether this will hurt our ability to innovate.

Software engineer/entrepreneur Joyce Park (who's worked in Silicon Valley over 20 years): "Fast feedback is what we're all about in this town. That's what's gone away... If you have a dumb idea or people hate your idea then you don't have to spend more time fleshing it out, and that means you don't have to spend more time defending it. When you're trying to do really innovative work, it takes so many meetings. Zoom meetings are different than normal meetings because they're much more performative. Most engineers aren't really in the putting-on-a-show business... Pretty is the death of innovation."

Park also worries about young tech workers, who represent the future of innovation and aren't in offices absorbing knowledge. "Who's going to mentor them, who's going to make them successful? A lot of the craft is just seeing problems and seeing how they were successfully or unsuccessfully solved."

Tarun Wadhwa, who's taught new innovation methods at Carnegie Mellon University's Silicon Valley outpost, most recently this spring: "The sparks wouldn't fly," Wadhwa said. "The students were just as brilliant as they've always been but the class wasn't as able to help them advance that brilliance as it once was." What was missing, Wadhwa suspects, was the free-flowing, back-and-forth-and-sideways exchange of ideas that happens in person, especially during extra-curricular gatherings such as when students from different teams and different backgrounds go out for coffee together after class...
Another perspective from a long-time Silicon Valley veteran: Mike Strasser, whose mechanical engineering career and current employment as general manager of Campbell med-tech startup Imperative Care straddle the hardware and software worlds, believes a reduced ability to develop a rapport with colleagues when working apart poses problems across both sectors. However, the problem is worse in hardware, where teams can't pass a prototype around a table, and easier in software, especially with collaboration apps supplementing video meetings.

The move to remote work has forced technologists to find new solutions, Strasser noted, such as relatively inexpensive 3D printers that can make prototypes at home.

Bay Area venture capitalist Peter Rojas, a partner at Betaworks Ventures: "We have this historic opportunity to reorganize working life and to rethink where people live and where they work...." Successful companies will be those that can nurture talent and build a strong culture while taking advantage of the opportunities remote work presents, he said. "This idea that you can only get a sense of a person in person, I think we're really getting away from that now," Rojas said.

He said his firm has money in more than 100 companies — including one that makes video-conferencing collaboration software — and none appear hurt by the shift to remote. "Everybody adjusted," he said, "and figured out how to get their stuff done."

Transportation

Electric-Car Companies Now Comprise Half the Worth of the World's 10 Most Valuable Automakers (bloomberg.com) 159

An anonymous reader quotes a report from Bloomberg: Electric-car companies are suddenly worth half of the total market capitalization of the world's 10 most valuable automakers. That's because money managers sized up the convergence of government policies and people's preferences combating climate change and made alternative energy their biggest bet. Much was achieved by Tesla Inc., the Palo Alto maker of the S, X, Y and 3 model vehicles, giving it a market capitalization of $539 billion, or more than Japan's Toyota Motor Corp., Germany's Volkswagen AG and Detroit's General Motors Co. combined. Tesla was barely 26% of Toyota's value at this point last year. None of the industry's Top 10 exclusively manufactured EVs in 2015; this year the list included Shanghai-based Nio Inc. and Guangzhou-based XPeng Inc., EV upstarts in the world's largest market.

Tesla and its Chinese competitors accounted for only 8% of the value of the Top 10 in 2019 -- still a huge leap from zero percent in 2016. The three EV makers reported annual sales of $30.5 billion, or about 3% of total sales for the 10 largest companies, according to data compiled by Bloomberg. Commentators and short sellers, who profit when a security's price declines, predict that the companies' shares will plummet before long because the companies' values are far out of proportion to their more modest profits and revenues. Since its initial public offering in June 2010, Tesla revenue increased 241 times as revenue for the rest of the industry rose 19%, according to data compiled by Bloomberg. Tesla shares appreciated 170 times when the comparable figure was three times for global peers. None of which persuades numerous Tesla detractors, who insist the company will fail as soon as the legacy automakers determine that EVs are profitable. That moment arrives this month when Tesla joins the S&P 500 as its record-breaking largest new member.

In China, where EV incentives are part of the government's goal to become carbon neutral by 2060, Nio's annual revenues have tripled since its September 2018 IPO. Nio shares surged 665% during the same period as global peers were gaining 47%, according to data compiled by Bloomberg. XPeng's 2020 third-quarter revenue is 4.4 times the amount during the same period a year ago. After the company's August IPO, the shares rose 269% when global peers gained 29%. These unprecedented valuations come at a point when the fossil fuel industry is reporting record losses, including Exxon Mobil Corp.'s $20 billion write-down this month. The market for zero-emission electric vehicles, meanwhile, is poised to become explosive, according to data compiled by Bloomberg. In 2019, 2.1 million cars, or 2.5% of the cars sold worldwide were electric. By 2030, 26 million EVs will be sold, or 28% of total sales worldwide, according to analyst estimates compiled by Bloomberg. By 2040, 54 million EVs will be sold, or 58% of the global market, the analysts predict.

Transportation

More Than 500,000 Full Electric Cars Sold So Far This Year In Europe (theguardian.com) 314

An anonymous reader quotes a report from The Guardian: Carmakers have sold more than 500,000 battery electric cars in Europe during 2020, a milestone in the automotive industry's move away from fossil fuels. Sales of all plug-in cars, including hybrids, have surpassed 1m during the year in the UK and the largest 17 European markets, according to data collated by Schmidt Automotive Research. During the whole of last year only 354,000 battery electric sales were recorded across the region.

In the UK, the sale of new cars that run solely on petrol or diesel will be banned in 2030 -- although new hybrids will be legal until 2035. Other countries including France and Norway have also introduced plans to ban new internal combustion engines over varying timeframes. However, the car industry still faces a steep uphill journey away from fossil fuels. Total UK and European new car sales in the year to October were 13.3m, the vast majority of which had petrol and diesel engines, which are expected to be more profitable than battery cars until about 2024.

British consumers bought more than 75,000 electric cars in the year to October, well over double the sales in the previous year, plus another 50,000 plug-in hybrids, but the UK market share of battery electric cars was still only 5.5%. Data for the whole of November will be published on Friday. None of the 10 most popular cars in the UK in 2020 have been electric, although some are available as hybrid or plug-in hybrid models, such as the Mercedes A-Class.

Privacy

US Used Patriot Act To Gather Logs of Website Visitors (nytimes.com) 34

An anonymous reader quotes a report from The New York Times: The government has interpreted a high-profile provision of the Patriot Act as empowering F.B.I. national security investigators to collect logs showing who has visited particular web pages, documents show. But the government stops short of using that law to collect the keywords people submit to internet search engines because it considers such terms to be content that requires a warrant to gather, according to letters produced by the Office of the Director of National Intelligence. The disclosures come at a time when Congress is struggling with new proposals to limit the law, known as Section 215 of the Patriot Act. The debate ran aground in the spring amid erratic messages from President Trump, but is expected to resume after President-elect Joseph R. Biden Jr. takes the oath of office in January.

In May, 59 senators voted to bar the use of Section 215 to collect internet search terms or web browsing activity, but negotiations broke down in the House. During that period, Senator Ron Wyden, Democrat of Oregon and one of the sponsors of the proposal ban, wrote to the director of national intelligence seeking clarity about any such use. Six months later, the Trump administration finally replied -- initially, it turned out, in a misleading way. In a Nov. 6 letter to Mr. Wyden, John Ratcliffe, the intelligence director, wrote that Section 215 was not used to gather internet search terms, and that none of the 61 orders issued last year under that law by the Foreign Intelligence Surveillance Court involved collection of "web browsing" records. Mr. Wyden's office provided that letter to The New York Times, arguing that it meant Mr. Wyden's proposal in May -- which he sponsored with Senator Steve Daines, Republican of Montana -- could be enacted into law without any operational costs.

But The Times pressed Mr. Ratcliffe's office and the F.B.I. to clarify whether it was defining "web browsing" activity to encompass logging all visitors to a particular website, in addition to a particular person's browsing among different sites. The next day, the Justice Department sent a clarification to Mr. Ratcliffe's office, according to a follow-up letter he sent to Mr. Wyden on Nov. 25. In fact, "one of those 61 orders resulted in the production of information that could be characterized as information regarding browsing," Mr. Ratcliffe wrote in the second letter. Specifically, one order had approved collection of logs revealing which computers "in a specified foreign country" had visited "a single, identified U.S. web page." Mr. Ratcliffe expressed regret "that this additional information was not included in my earlier letter" to the senator, and suggested his staff might take further "corrective action." In a statement, Mr. Wyden said the letters raise "all kinds of new questions, including whether, in this particular case, the government has taken steps to avoid collecting Americans' web browsing information." "More generally," Mr. Wyden continued, "the D.N.I. has provided no guarantee that the government wouldn't use the Patriot Act to intentionally collect Americans' web browsing information in the future, which is why Congress must pass the warrant requirement that has already received support from a bipartisan majority in the Senate."

Medicine

UK Becomes the First Country To Approve Pfizer/BioNTech Coronavirus Vaccine, Roll Out To Start Next Week (bbc.com) 109

Hope Thelps shares a report: The UK has become the first country in the world to approve the Pfizer/BioNTech coronavirus vaccine, paving the way for mass vaccination. Britain's medicines regulator, the MHRA, says the jab, which offers up to 95% protection against Covid-19 illness, is safe to be rolled out. The first doses are already on their way to the UK, with 800,000 due in the coming days, Pfizer said. Health Secretary Matt Hancock said the NHS will contact people about jabs. Elderly people in care homes and care home staff have been placed top of the priority list, followed by over-80s and health and care staff. But because hospitals already have the facilities to store the vaccine at -70C, as required, the very first vaccinations are likely to take place there -- for care home staff, NHS staff and patients -- so none of the vaccine is wasted. The Pfizer/BioNTech jab is the fastest vaccine to go from concept to reality, taking only 10 months to follow the same steps that normally span 10 years. The UK has already ordered 40 million doses of the jab - enough to vaccinate 20 million people. The doses will be rolled out as quickly as they can be made by Pfizer in Belgium, Mr Hancock said, with the first load next week and then "several millions" throughout December. Scottish First Minister Nicola Sturgeon said the first people in Scotland will be immunised on Tuesday.
Social Networks

Reddit Reveals Daily Active User Count For the First Time: 52 Million (theverge.com) 78

According to The Wall Street Journal, Reddit says it now has 52 million daily users, with daily usage growing 44 percent year over year for October. The Verge reports: The number is small compared to other social media rivals, though. Twitter has 187 million daily users, Snap has 249 million, and Facebook has 1.82 billion. But at their larger sizes, none of those services are seeing daily usage grow as rapidly as Reddit. In their most recent quarters, Twitter reported 29 percent year-over-year growth, Snap reported 18 percent, and Facebook reported 12 percent.

Daily usage of Reddit is being shared for the first time "as a more accurate reflection of our user growth and to be more in-line with industry reporting," the company told the Journal. (It is true that social media companies tend to use daily users as their preferred metric; though Twitter, for instance, only switched away from reporting monthly users because that number was dipping, while daily users was growing.) The other reason for the change was to focus on a number that would better help to grow Reddit's advertising business. Reddit has focused on monthly usage in the past. This time last year, the company said it had 430 million monthly users, with 30 percent year-over-year growth.

The Internet

Email and Web Traffic Redirected for Multiple Cryptocurrency Sites After GoDaddy Attack (krebsonsecurity.com) 10

"Fraudsters redirected email and web traffic destined for several cryptocurrency trading platforms over the past week," reports security researcher Brian Krebs: The attacks were facilitated by scams targeting employees at GoDaddy, the world's largest domain name registrar, KrebsOnSecurity has learned...

This latest campaign appears to have begun on or around Nov. 13, with an attack on cryptocurrency trading platform liquid.com. "A domain hosting provider 'GoDaddy' that manages one of our core domain names incorrectly transferred control of the account and domain to a malicious actor," Liquid CEO Kayamori said in a blog post. "This gave the actor the ability to change DNS records and in turn, take control of a number of internal email accounts. In due course, the malicious actor was able to partially compromise our infrastructure, and gain access to document storage."

In the early morning hours of Nov. 18 Central European Time (CET), cyptocurrency mining service NiceHash disclosed that some of the settings for its domain registration records at GoDaddy were changed without authorization, briefly redirecting email and web traffic for the site. NiceHash froze all customer funds for roughly 24 hours until it was able to verify that its domain settings had been changed back to their original settings. "At this moment in time, it looks like no emails, passwords, or any personal data were accessed, but we do suggest resetting your password and activate 2FA security," the company wrote in a blog post. NiceHash founder Matjaz Skorjanc said the unauthorized changes were made from an Internet address at GoDaddy, and that the attackers tried to use their access to its incoming NiceHash emails to perform password resets on various third-party services, including Slack and Github. But he said GoDaddy was impossible to reach at the time because it was undergoing a widespread system outage in which phone and email systems were unresponsive. "We detected this almost immediately [and] started to mitigate [the] attack," Skorjanc said in an email to this author. "Luckily, we fought them off well and they did not gain access to any important service. Nothing was stolen...."

[S]everal other cryptocurrency platforms also may have been targeted by the same group, including Bibox.com, Celcius.network, and Wirex.app. None of these companies responded to requests for comment.

In response to questions from KrebsOnSecurity, GoDaddy acknowledged that "a small number" of customer domain names had been modified after a "limited" number of GoDaddy employees fell for a social engineering scam.

Cellphones

The US Could Soon Ban the Selling of Carrier-Locked Phones (wired.com) 62

An anonymous reader quotes a report from Wired: In the U.S., a complicated combination of corporate interests and pre-smartphone era legislation has resulted in more than two decades of back and forth about the legality of phone locking. It's looking like that battle could ramp up again next year. The transition to a Biden administration could shake up the regulatory body that governs these rules. The timing also coincides with a congressional proceeding that takes place every three years to determine what tweaks should be made to digital rights laws. 2021 could be the year of the truly unlocked phone. For some activists, it's a glimmer of light at the end of a very long tunnel.

[H]ow could carriers be forced to provide phones that are unlocked by default? There are a couple of promising avenues, though neither are a given. The "agenda" here meaning something to be decided by a regulating body. In the UK, the regulator Ofcom made that call. The US Ofcom equivalent is the Federal Communications Commission. Under its current leadership of Trump appointee Ajit Pai, the FCC has been staunchly pro-business, passing legislation like the repeal of net neutrality at the behest of companies like AT&T. "Getting this done in an Ajit Pai FCC would be extremely difficult and very unlikely, given how friendly that FCC has been toward private companies and broadband providers," Sheehan says. "Whether or not that could happen in a Biden administration, we don't know. I think it would be much more possible."

Another route would be to take the problem back to its source: Section 1201 itself. Every three years, the US Library of Congress and Copyright Office hold a rulemaking proceeding that takes public comment. It's a chance for advocates to make their case for amending Section 1201, assuming they can afford the legal fees necessitated by such an involved, drawn out process. It's a less overtly political process, as the key decisionmakers at the two institutions don't come and go with each presidential administration like they usually do at the FCC. These sessions have already yielded positive outcomes for fans of repairability, like an exemption that took effect in 2016 that made it legal to hack car computers and other devices. The next proceeding is currently underway. If citizens want to urge the government to amend Section 1201, the first round of comments are required to be in by December 14. Responses and additional proposals will go back and forth through the spring of 2021, until the Copyright Office ultimately decides which changes to implement. Both Sheehan and Wiens are working with other advocates to make their case for a future of unlockability.

Japan

Japan To Begin Experiments Issuing Digital Yen (reuters.com) 20

More than 30 major Japanese firms will begin experiments next year towards issuing a common, private digital currency to promote digitalisation in one of the world's most cash-loving countries, the group's organising body said on Thursday. From a report: The move follows the Bank of Japan's recently announced plan to experiment with issuing a digital yen, underscoring a growing awareness of the need for Japan to catch up to rapid global advances in financial technology. The group, consisting of Japan's three biggest banks as well as brokerages, telecommunication firms, utilities and retailers, will conduct experiments for issuing a digital currency that will use a common settlement platform. "Japan has many digital platforms, none of which are big enough to beat cash payments," Hiromi Yamaoka, a former BOJ executive who chairs the group, told an online briefing. "We don't want to create another silo-type platform. What we want to do is to create a framework that can make various platforms mutually compatible," Yamaoka said.
Businesses

Marissa Mayer Wants To Clean Up Your Contacts, and That's Just For Starters (fastcompany.com) 73

An anonymous reader shares a report: Marissa Mayer shoves her iPhone toward her MacBook's webcam until it overwhelms the screen on the Google Meet video call we are sharing. "I admire Apple," she declares. "They are the best at what they do. But the fact that the biggest and most successful company on Earth by some measures -- and certainly the best at design, bar none -- thinks that when you meet someone new, that this is an ideal interface is mind-blowing. It's like bad nerd humor." What Mayer is critiquing is the New Contact feature in iOS's Contacts app -- an exceedingly generic screen with fields for you to type first and last names, phone numbers, and other information. It's not uniquely uninspired. Actually, it's comparable to Google's equivalent on an Android phone -- and reminiscent of nearly every other piece of software for managing contacts we've seen throughout the history of smartphones and PCs.

[...] Now Mayer is back in the product business -- and as you may have already guessed, she thinks she has a better way to wrangle contacts. That would be Sunshine Contacts, the new iPhone app (Android is in the works) from her latest company, Sunshine. If you've previously heard of the largely stealthy startup, it was under the name Lumi Labs, which Mayer, its CEO, says was a placeholder all along. The app is launching as an invite-only closed beta; you can download it from the App Store and sign up for an alert when it's ready to let you in. Joining Mayer as cofounder and president is Enrique Munoz Torres, whose entire career has been intertwined with hers. An MIT senior when Mayer hired him as a Google associate product manager in 2004, he left that company in 2013 to join her at Yahoo, where he eventually led the advertising and search businesses. Though both Mayer and Munoz Torres have copious experience creating and ramping up successful products, they are first-time founders. Their company currently has about 20 employees, making it the same size as Google was when Mayer joined it.

Google

Google Sued After Mobile Allowances Eaten Up By Hidden Data Transfers (theregister.com) 54

A Slashdot reader shared this report from the Register: Google on Thursday was sued for allegedly stealing Android users' cellular data allowances though unapproved, undisclosed transmissions to the web giant's servers...

The complaint contends that Google is using Android users' limited cellular data allowances without permission to transmit information about those individuals that's unrelated to their use of Google services... What concerns the plaintiffs is data sent to Google's servers that isn't the result of deliberate interaction with a mobile device — we're talking passive or background data transfers via cell network, here. "Google designed and implemented its Android operating system and apps to extract and transmit large volumes of information between Plaintiffs' cellular devices and Google using Plaintiffs' cellular data allowances," the complaint claims...

Android users have to accept four agreements to participate in the Google ecosystem: Terms of Service; the Privacy Policy; the Managed Google Play Agreement; and the Google Play Terms of Service. None of these, the court filing contends, disclose that Google spends users' cellular data allowances for these background transfers. To support the allegations, the plaintiff's counsel tested a new Samsung Galaxy S7 phone running Android, with a signed-in Google Account and default setting, and found that when left idle, without a Wi-Fi connection, the phone "sent and received 8.88 MB/day of data, with 94 per cent of those communications occurring between Google and the device." The device, stationary, with all apps closed, transferred data to Google about 16 times an hour, or about 389 times in 24 hours. Assuming even half of that data is outgoing, Google would receive about 4.4MB per day or 130MB per month in this manner per device subject to the same test conditions...

An iPhone with Apple's Safari browser open in the background transmits only about a tenth of that amount to Apple, according to the complaint... Vanderbilt University Professor Douglas C. Schmidt performed a similar study in 2018 — except that the Chrome browser was open — and found that Android devices made 900 passive transfers in 24 hours...

The complaint charges that Google conducts these undisclosed data transfers for further its advertising business, sending "tokens" that identify users for targeted advertising and preload ads that generate revenue even if they're never displayed.

Graphics

Apple's New M1 Macs Won't Work With External GPUs (engadget.com) 103

Today, Apple showed off the first Macs powered by its new M1 CPU, delivering impressive performance and excellent battery life, however they won't come without any compromises. According to Engadget, citing Paul Gerhardt's tweet, "tech spec pages for the new machines reveal that none of them are compatible with external GPUs that connect via Thunderbolt." From the report: Only some people would require add-on oomph in any case, but Apple's support for external graphics cards gave it some extra gaming cachet and informed creative professionals their needs would continue to be met. Now, they'll have to wait and see if things change for higher-end models as Apple Silicon spreads throughout the company's PC lineup.

There's also been some focus on the fact that the 13-inch MacBook Pro M1 models only include two USB-C ports onboard instead of four, but whether or not you think that's enough ports, it's consistent with the cheaper Intel models it replaces. A more striking limitation is the one we've already noted, that the MBP is limited to 16GB of RAM -- if you think you'll need 32GB then you'll have to opt for an Intel-powered model.

Space

Looking For Another Earth? Here Are 300 Million, Maybe (baltimoresun.com) 42

Long-time Slashdot reader fahrbot-bot shared this report from the New York Times: A decade ago, a band of astronomers set out to investigate one of the oldest questions taunting philosophers, scientists, priests, astronomers, mystics and the rest of the human race: How many more Earths are out there, if any? How many far-flung planets exist that could harbor life as we know it?

Their tool was the Kepler spacecraft, which was launched in March 2009 on a three-and-a-half year mission to monitor 150,000 stars in a patch of sky in the Milky Way. It looked for tiny dips in starlight caused by an exoplanet passing in front of its home star. "It's not E.T., but it's E.T.'s home," said William Borucki when the mission was launched in March 2009. It was Dr. Borucki, an astronomer now retired from NASA's Ames Research Center, who dreamed up the project and spent two decades convincing NASA to do it. Before the spacecraft finally gave out in 2018, it had discovered more than 4,000 candidate worlds among those stars. So far, none have shown any sign of life or habitation. (Granted, they are very far away and hard to study.) Extrapolated, that figure suggests that there are billions of exoplanets in the Milky Way galaxy. But how many of those are potentially habitable?

After crunching Kepler's data for two years, a team of 44 astronomers led by Steve Bryson of NASA Ames has landed on what they say is the definitive answer, at least for now. Their paper has been accepted for publication in the Astronomical Journal... The team calculated that at least one-third, and perhaps as many as 90 percent, of stars similar in mass and brightness to our sun have rocks like Earth in their habitable zones, with the range reflecting the researchers' confidence in their various methods and assumptions. That is no small bonanza, however you look at it.

According to NASA estimates there are at least 100 billion stars in the Milky Way, of which about 4 billion are sunlike. If only 7 percent of those stars have habitable planets — a seriously conservative estimate — there could be as many as 300 million potentially habitable Earths out there in the whole Milky Way alone.

On average, the astronomers calculated, the nearest such planet should be about 20 light-years away, and there should be four of them within 30 light-years or so of the sun...

"The new result means that the galaxy is at least twice as fertile as estimated in one of the first analyses of Kepler data, in 2013."
Medicine

The T-Cell Immune Response To COVID-19 Lasts At Least Six Months (economist.com) 49

An anonymous reader quotes a report from The Economist: Over the past year, many reports have shown rapidly waning levels of covid-specific antibodies after the initial burst caused by an infection. [...] Yet antibodies tell only part of the story. Another important actor is the T-cell. Rather than attacking viruses directly, T-cells attack infected cells, to stop the virus reproducing. The balance of importance of the antibody and T-cell arms of the immune system varies with the illness in question. And, as far as this particular infection is concerned, although almost all patients who catch SARS-CoV-2 are thought to create T-cells in response, an understanding of their significance has been elusive.

This is largely because T-cells are harder to measure than antibodies, and so are less often studied. Shamez Ladhani, a consultant epidemiologist with Public Health England, a government health-protection agency, who has worked on a new, long-term investigation of these cells, says it took nearly three weeks to count them in the 100 patients his study looked at. The effort was worthwhile, though, because it has shed new light on how long-lasting this form of immunity to SARS-CoV-2 might be.

Dr Ladhani's project is part of a wider effort focused on health-care workers that Public Health England began in March. Over 2,000 people have donated blood samples every month since then. The 100 he and his colleagues have studied are a subset of these. In a paper just published as a preprint, but not yet peer reviewed, they say that six months after infection all of these patients, even those who had had only mild symptoms, or none at all, still had detectable levels of T-cells directed against the virus. Though their antibodies might have vanished, T-cells remained on the scene. These findings bode well for the idea that T-cells offer long-term protection against reinfection.

Anime

MPA Lawyers Are Trying To Shut Down Pirate Anime Giant Nyaa.si (torrentfreak.com) 40

An anonymous reader quotes a report from TorrentFreak: Documents obtained by TorrentFreak dated September reveal the MPA, acting through legal representatives, attempting to pressure individuals who they believe are important at [anime site Nyaa] and could have the ability to shut the site down. Information suggests that several people in North America, Europe, and Australia have all received similar correspondence. The letters allege massive copyright infringement via the Nyaa site and include a sample of copyrighted works, to which the MPA's members hold the rights, that were allegedly infringed via the platform.

The MPA clearly states that none of its cited members (Disney, Paramount, Universal, Columbia, Warner Bros, and Netflix, in addition to Amazon) have granted their permission for the works to be made available via Nyaa or the BitTorrent network(s) that underpin it. As a result, "significant, irreparable damage" has already been caused to the copyright owners by the site's activities. While emailed threats are still a common anti-piracy strategy, we are informed that at least two of the individuals were personally served with legal documents at their homes. Others were served with similar documents via regular mail. We are currently unable to determine exactly how many people were served in total. At the moment the suggestion is around five but that may not be the full picture. What we do know is that some or all stand accused of being part of the mysterious 'Anime Cartel' supposedly behind Nyaa.
"With immediate effect, recipients have been told to take all necessary steps to ensure that Nyaa is completely shut down," the report adds. "The MPA also wants to take control of the site's domain -- Nyaa.si -- a common tactic in other anti-piracy actions. Overall, recipients are warned that they must cease-and-desist any and all of their activities related to the site, including making available the copyrighted works of the MPA's members."

"In addition to receiving settlements, it appears that the MPA also wants information on the Nyaa service and its operations. The MPA also wants the rights to the Nyaa site and any technologies connected to it, wherever the recipient has the ability to transfer those rights. The MPA also demands that those entering into a settlement agreement should never infringe its members' rights again."
Youtube

Baby Shark Becomes YouTube's Most-Watched Video of All Time (bbc.com) 61

Baby Shark, the infuriatingly catchy children's rhyme recorded by South Korean company Pinkfong, has become the most-watched video ever on YouTube. The BBC reports: The song has now been played 7.04 billion times, overtaking the previous record holder Despacito, the Latin pop smash by singer Luis Fonsi. Played back-to-back, that would mean Baby Shark has been streamed continuously for 30,187 years. Pinkfong stands to have made about $5.2 million from YouTube streams alone.

It took four years for Baby Shark to ascend to the top of YouTube's most-played chart, but the song is actually much older than that. It is thought to have originated in U.S. summer camps in the 1970s. One theory says it was invented in 1975, as Steven Spielberg's Jaws became an box office smash around the world. There are a huge number of variations on the basic premise, including one version where a surfer loses an arm to the shark, and another where the protagonist dies. There are also international versions - including the French Bebe Requin and the German Kleiner Hai (Little Shark), which became a minor hit in Europe in 2007. But none of them could match the phenomenal success of Pinkfong's interpretation, which was sung by 10-year-old Korean-American singer Hope Segoine and uploaded to YouTube in 2015.

Open Source

Slashdot Asks: How Do You Feel About Btrfs? (linuxjournal.com) 236

emil (Slashdot reader #695) shares an article from Linux Journal re-visiting the saga of the btrfs file system (initially designed at Oracle in 2007): The btrfs filesystem has taunted the Linux community for years, offering a stunning array of features and capability, but never earning universal acclaim. Btrfs is perhaps more deserving of patience, as its promised capabilities dwarf all peers, earning it vocal proponents with great influence. Still, [while] none can argue that btrfs is unfinished, many features are very new, and stability concerns remain for common functions.

Most of the intended goals of btrfs have been met. However, Red Hat famously cut continued btrfs support from their 7.4 release, and has allowed the code to stagnate in their backported kernel since that time. The Fedora project announced their intention to adopt btrfs as the default filesystem for variants of their distribution, in a seeming juxtaposition. SUSE has maintained btrfs support for their own distribution and the greater community for many years.

For users, the most desirable features of btrfs are transparent compression and snapshots; these features are stable, and relatively easy to add as a veneer to stock CentOS (and its peers). Administrators are further compelled by adjustable checksums, scrubs, and the ability to enlarge as well as (surprisingly) shrink filesystem images, while some advanced btrfs topics (i.e. deduplication, RAID, ext4 conversion) aren't really germane for minimal loopback usage. The systemd init package also has dependencies upon btrfs, among them machinectl and systemd-nspawn . Despite these features, there are many usage patterns that are not directly appropriate for use with btrfs. It is hostile to most databases and many other programs with incompatible I/O, and should be approached with some care.

The original submission drew reactions from three disgruntled btrfs users. But the article goes on to explore providers of CentOS-compatible btrfs-enabled kernels, ultimately opining that "There are many 'rough edges' that are uncovered above with btrfs capabilities and implementations, especially with the measures taken to enable it for CentOS. Still, this is far better than ext2/3/4 and XFS, discarding all the desirable btrfs features, in that errors can be known because all filesystem content is checksummed." It would be helpful if the developers of btrfs and ZFS could work together to create a single kernel module, with maximal sharing of "cleanroom" code, that implemented both filesystems... Oracle is itself unwilling to settle these questions with either a GPL or BSD license release of ZFS. Oracle also delivers a btrfs implementation that is lacking in features, with inapplicable documentation, and out-of-date support tools (for CentOS 8 conversion). Oracle is the impediment, and a community effort to purge ZFS source of Oracle's contributions and unify it with btrfs seems the most straightforward option... It would also be helpful if other parties refrained from new filesystem efforts that lack the extensive btrfs functionality and feature set (i.e. Microsoft ReFS).

Until such a day that an advanced filesystem becomes a ubiquitous commodity as Linux is as an OS, the user community will continue to be torn between questionable support, lack of features, and workarounds in a fragmented btrfs community. This is an uncomfortable place to be, and we would do well to remember the parties responsible for keeping us here.

So how do Slashdot's readers feel about btrfs?

Slashdot Top Deals