Science

James Randi, Magician and Stage Artist Devoted To Debunking the Paranormal, Dies At 92 (washingtonpost.com) 128

James Randi, a Canadian-American stage magician and scientific skeptic who extensively challenged paranormal and pseudoscientific claims, has passed away Tuesday "due to age-related causes." He was 92. Slashdot reader trinarybit first shared the news. The Washington Post reports: An inveterate skeptic and bristly contrarian in his profession, Mr. Randi insisted that magic is based solely on earthly sleight of hand and visual trickery. He scorned fellow magicians who allowed or encouraged audiences to believe their work was rooted in extrasensory or paranormal powers. In contrast, the bearded, gnomish Mr. Randi cheerfully described himself as a "liar" and "cheat" in mock recognition of his magician's skills at duping people into thinking they had seen something inexplicable -- such as a person appearing to be cut in half with a saw -- when it was, in fact, the result of simple physical deception. He was equally dismissive of psychics, seers and soothsayers. Still, he was always careful to describe himself as an investigator, not a debunker, and insisted he was always open to the possibility of supernatural phenomena but simply found no evidence of it after decades of research.

To put his money where his mouth was, Mr. Randi and the research organization he helped found in 1976, the Committee for the Scientific Investigation of Claims of the Paranormal, offered payouts ranging up to $1 million to anyone who could demonstrate a supernatural or paranormal phenomenon under mutually agreed, scientifically controlled conditions. While he had many takers, he said, none of them earned a cent.
Randi was featured in a handful of Slashdot stories over the years, including a two-part interview where he answered your questions.
Medicine

Remdesivir Has Little Effect on Covid-19 Mortality, WHO Study Says (ft.com) 162

The Covid-19 treatment remdesivir has no substantial effect on a patient's chances of survival [Editor's note: the link may be paywalled; alternative source], a clinical trial by the World Health Organization has found, delivering a significant blow to hopes of identifying existing medicines to treat the disease. From a report: Results from the WHO's highly anticipated Solidarity trial, which studied the effects of remdesivir and three other potential drug regimens in 11,266 hospitalised patients, found that none of the treatments "substantially affected mortality" or reduced the need to ventilate patients, according to a copy of the study seen by the Financial Times. "These remdesivir, hydroxychloroquine, lopinavir and interferon regimens appeared to have little effect on in-hospital mortality," the study found. The results of the WHO trial also showed that the drugs had little effect on how long patients stayed in hospital. However, WHO researchers said the study was primarily designed to assess impact on in-hospital mortality. The study has not yet been peer-reviewed. Remdesivir was one of a series of drugs used to treat US President Donald Trump after he tested positive for Covid-19. It was developed by US drugmaker Gilead Sciences, initially as a potential medicine to treat Ebola.
Star Wars Prequels

Are the Best Star Wars Stories Now in Games Like 'Star Wars: Squadrons'? (msn.com) 56

A game critic for the Los Angeles Times remembers his reaction to Star Wars: The Rise of Skywalker. "What a disappointment — if only it had been built for video game consoles." This leads to this epiphany: For all the deserved attention "The Mandalorian" series on Disney+ has received, the just-released game "Star Wars: Squadrons" reminds us that some of the best "Star Wars" stories in recent years have been in the video game space.... This is a work, in fact, that doesn't suffer from an action-focused, little-narrative approach — every second I've spent with this game has fulfilled the sort of personal "Star Wars" fantasy that's enhanced by giving the audience a bit of autonomy. It's also, for those privileged enough to own a virtual reality headset, the VR experience I've had at home that most represents what it's like to be in a theme park.

Rather than throwing spectacle after spectacle at me, it lets me partake in them, to scratch the itch of being in the center of intergalactic, aerial dogfights. But less than emphasizing awe, "Squadrons" centers on the feel of controlling a ship, making me feel a part of something bigger. Sure, that's just digital, fictional warfare, but "Squadrons" understands the appeal of "Star Wars" is that it's open to everyone, and any of us can be ace pilots if given the chance. We don't admire; we act.

There is nostalgia at play. The game recalls some of the LucasArts spaceflight simulators of yore that I obsessed with in my suburban Chicago basement, but there's a sense of swiftness and polish that makes this game as appealing as a coin-op arcade machine. And yet it's also in possession of confidence, a depth that I'll need to master if I really want to go hard in multiplayer battles. As a solo player without many friends who play multiplayer games — OK, fine, none — I'm not so sure I'll take the time to learn each individual ship and its advantages or disadvantages. But I'm not sure I need that because "Squadrons" has me smiling throughout, even if I accidentally turn my X-wing into an asteroid. While throwing me into larger-than-life moments — disable a giant, Imperial starship and help lead a capture of it — "Squadrons" succeeds in making them feel livable and conquerable.

In other words, by focusing so intently on the act of spaceflight, I don't feel like a tourist in the "Star Wars" universe, thrown a litany of "greatest hits" moments. Instead, "Squadron's" single-focus obsession allows my imagination to run free rather than have to wonder where I am, who I am or what I'm supposed to do now. I can just fly. And shoot. And it feels great.

The Courts

Judge Orders Twitter To Unmask FBI Impersonator Who Set Off Seth Rich Conspiracy (npr.org) 132

AmiMoJo shares a report from NPR: A federal judge in California has ordered that Twitter reveal the identity of an anonymous user who allegedly fabricated an FBI document to spread a conspiracy theory about the killing of Seth Rich, the Democratic National Committee staffer who died in 2016. The ruling could lead to the identification of the person behind the Twitter name @whyspertech. Through that account, the user allegedly provided forged FBI materials to Fox News. The documents falsely linked Rich's killing to the WikiLeaks hack of Democratic Party emails in the lead-up to the 2016 election.

While Twitter fought to keep the user's identity secret, U.S. Magistrate Judge Donna Ryu in Oakland, Calif., ordered on Tuesday that the tech company must turn over the information to attorneys representing Rich's family in a defamation suit by Oct. 20. It is the latest twist in a years-long saga over a conspiracy theory that rocked Washington, caused a grieving family a great deal of pain and set off multiple legal battles.
"In a now-retracted story, Fox News falsely claimed that Rich's computer was connected to the leak of Democratic Party emails provided to WikiLeaks, and that Rich's slaying was related to the purported leak," the report adds. "The theory was even debunked in special counsel Robert Mueller's report."

"The Washington Times later reported in 2018 that Rich's brother, Aaron Rich, helped steal the emails in exchange for money from WikiLeaks and that he knew his brother would be killed and did nothing to stop it. None of those allegations are true. That story has also been retracted."
Software

Conservancy Announces New Strategy For GPL Enforcement (sfconservancy.org) 6

Long-time Slashdot reader Jeremy Allison - Sam shares an announcement from the Software Freedom Conservancy, detailing a new strategy toward improving compliance and the freedom of users of devices that contain Linux-based systems. From the post: The new work has received an initial grant from Amateur Radio Digital Communications (ARDC). Our new initiative features:

1) Litigation to enforce against license violators that do not voluntarily comply in a timely manner.
2) Coordinating the development of alternative firmware for devices where none currently exists.
3) Collaborating with other organizations to promote copyleft compliance as a feature for consumers to protect their privacy and get more out of their devices.

We take this holistic approach because compliance is not an end in itself, but rather a lever to help people advance technology for themselves and the world. [...] ARDC has long served the amateur radio community who were early adopters of Internet communication. These roots have grown from the deeper soils of wireless and digital communication and open access to technical information. Amateur radio operators have long practiced the tradition of individual technical experimentation that benefited the general public. These traditions also form the basis of software freedom. Hobbyists and volunteers built, modified and improved Free and Open Source Software (FOSS) first. Conservancy defends the rights of software developers to examine the code in their devices and assists their work to improve the platforms they rely on and to understand our communication technologies. Copyleft compliance enables this work to continue and expand to new kinds of devices. [...]

When companies prevent us from actually modifying the software on our devices, software freedom remains only theoretical. In this new chapter of compliance work, Conservancy will leverage its technical and legal resources to help the public take control of the software on which they rely. This generous grant from ARDC is a first step. Please help in the next step through support of Conservancy's work with a donation. You can also email compliance@sfconservancy.org to let us know about GPL violations or to discuss volunteering on these projects.

Technology

D-Wave's 5,000-Qubit Quantum Computing Platform Handles 1 Million Variables (venturebeat.com) 66

D-Wave today launched its next-generation quantum computing platform available via its Leap quantum cloud service. The company calls Advantage "the first quantum computer built for business." In that vein, D-Wave today also debuted Launch, a jump-start program for businesses that want to begin building hybrid quantum applications. From a report: "The Advantage quantum computer is the first quantum computer designed and developed from the ground up to support business applications," D-Wave CEO Alan Baratz told VentureBeat. "We engineered it to be able to deal with large, complex commercial applications and to be able to support the running of those applications in production environments. There is no other quantum computer anywhere in the world that can solve problems at the scale and complexity that this quantum computer can solve problems. It really is the only one that you can run real business applications on. The other quantum computers are primarily prototypes. You can do experimentation, run small proofs of concept, but none of them can support applications at the scale that we can." Quantum computing leverages qubits (unlike bits that can only be in a state of 0 or 1, qubits can also be in a superposition of the two) to perform computations that would be much more difficult, or simply not feasible, for a classical computer. Based in Burnaby, Canada, D-Wave was the first company to sell commercial quantum computers, which are built to use quantum annealing. But D-Wave doesn't sell quantum computers anymore. Advantage and its over 5,000 qubits (up from 2,000 in the company's 2000Q system) are only available via the cloud. (That means through Leap or a partner like Amazon Braket.)
XBox (Games)

A Week With the Xbox Series X: Load Times, Game Performance, and More (theverge.com) 25

The Verge's Tom Warren spent the past week with an Xbox Series X, playing a variety of games on the preview unit, testing load times, performance, and some of the new Series X features. Here's an excerpt from each section of his report: Load Times: The most significant and obvious improvement with existing games on the Xbox Series X is the massive changes to load times. I noticed load times drop in pretty much every single game I've tested over the past week. Games like Sea of Thieves, Warframe, and Destiny 2 have their load times cut by up to a minute or more on the Series X. In Destiny 2, for example, I can now load into a planet in the game in around 30 seconds, compared to over a minute later on an Xbox One X and nearly two minutes in total on a standard Xbox One. These improved load times are identical to my custom-built PC that includes a fast NVMe SSD, and they genuinely transform how you play the game -- you can get more quests and tasks done instead of sitting and looking at a planet loading. [...] None of these games have been fully optimized for the Xbox Series X either. This is simply Microsoft's backward compatibility support in action. I switched back to my Xbox One X regularly throughout the week, and it was painful to witness these old load times that added a minute or more to games.

Game Performance: Not only do games load faster, but in many cases they also feel a lot smoother. Destiny 2 is a great example of a game that was held back by the weaker CPU and slow HDD in the Xbox One X. It's a title that hit native 4K previously, but the 6 teraflops of GPU performance in the One X was bottlenecked by a laptop-like CPU and an old spinning hard disk. This meant the game was stuck on 30fps. While Bungie has committed to enhancing Destiny 2 for the Xbox Series X and PS5 with 60fps support, it already feels faster without the patch. I would regularly notice frame rate drops in Destiny 2 on the Xbox One X when things got a little hectic on screen during a public event or in a raid with mobs of enemies coming at you. I haven't seen a single stutter running Destiny 2 on the Xbox Series X. This console has also improved other parts of Destiny 2 that were slow on the Xbox One. Loading into the character menu sometimes takes a few seconds on the Xbox One X, but on the Series X it feels like I'm playing on my PC as it's near instant. These are minor improvements, but they're the small things that add up and make a game more enjoyable to play.

Quick Resume: The Xbox One had a fast resume feature to let you swap between games, but it felt like it never really worked properly or games didn't support it. It couldn't be more different on the Xbox Series X. Quick Resume utilizes the SSD inside the Series X to let you swap between multiple games freely. It takes around five seconds to resume games where you left off, and I was able to switch between five games easily. I even rebooted the Xbox Series X for an update and all of the games still quickly resumed. Most games I tested worked flawlessly with Quick Resume, but some aren't supported. Titles like Sea of Thieves, that feature a big multiplayer arena, don't work with the new feature. It makes sense, though, since these games can't quickly resume a live and evolving environment that changes every second.
"What I will say is that the Xbox Series X felt like I was playing on a familiar Xbox that's a lot faster and more capable," writes Warren in closing. "The experience of switching back to an Xbox One was genuinely dispiriting."

"The true next generation of games is still a mystery, but what I've seen from backward-compatible games over the past week is encouraging. I'm hoping that game developers will have a lot fewer bottlenecks with both the Xbox Series X and PS5, enabling them to deliver some game improvements we're only used to seeing over on the PC side."
Facebook

Facebook Busts Russian Disinfo Networks As US Election Looms (wired.com) 80

An anonymous reader quotes a report from Wired: Facebook announced on Thursday that it has taken down three "coordinated inauthentic behavior" networks promoting disinformation that included nearly 300 Facebook and Instagram accounts along with dozens of Facebook Pages and Groups. While the efforts were seemingly run independently, and focused primarily outside of the US, each has ties to Russian intelligence -- and they collectively provide a sobering echo of the social media assault that roiled the 2016 election. The networks Facebook tackled dated back at least three years, but most had few followers at the time they were caught. They primarily promoted non-Facebook websites in an apparent effort to get around the platform's detection mechanisms, focusing on news and current events, particularly geopolitics. They targeted users in a number of countries, including Syria, Ukraine, Turkey, Japan, the UK, and Belarus, as well as the United States to a lesser extent.

Facebook attributed one of the disinformation distribution networks to "actors associated with election interference in the US in the past, including those involved in 'DC leaks' in 2016." In other words, the actors were likely tied to Fancy Bear, also known as APT 28, the group also responsible for hacks of the Democratic National Committee and Hillary Clinton's presidential campaign. Facebook attributes the second network to "individuals associated with past activity by the Russian Internet Research Agency," the so-called troll farm that wreaked havoc on Facebook in 2016. The company noted that it is unclear whether the IRA is still an active entity or what form it takes at this point. The third network had "links to individuals in Russia, including those associated with Russian intelligence services." None of the networks focused solely on the US. Instead, they engaged with a broad array of topics connected to Russian interests, including the war in Ukraine, the Syrian civil war, the election and protests in Belarus, Russia's relationship with NATO, and politics in Turkey.

Books

Bill Gates vs. Steve Jobs: the Books They Recommended (mostrecommendedbooks.com) 45

Slashdot has featured "the 61 books Elon Musk has recommended on Twitter" as well as the 41 books Mark Zuckerberg recommended on Facebook. Both lists were compiled by a slick web site (with Amazon referrer codes) called "Most Recommended Books." But they've also created pages showing books recommended by over 400 other public figuresincuding Bill Gates and the late Steve Jobs — which provide surprisingly revealing glimpses into the minds of two very different men.

Here's some of the highlights...
Piracy

Piratebay.Org Sold For $50,000 At Auction, ThePiratebay.com Up Next (torrentfreak.com) 27

Several Pirate Bay-related domains become available again this month after their owner failed to renew the registration. Yesterday, Piratebay.org was sold in a Dropcatch auction for $50,000 and ThePiratebay.com will follow soon. Both domains were previously registered to the official Pirate Bay site. TorrentFreak reports: Over the years the Pirate Bay team had many 'backup' domains available, just in case something happened. That included various exotic TLDs but the site also owned Piratebay.org and ThePiratebay.com. We use the past tense because both domains expired recently. The domains listed Pirate Bay co-founder Fredrik Neij as the registrant and until recently the same Swedish address was listed in Whois data. For reasons unknown, however, the registrant let both Piratebay.org and ThePiratebay.com expire. This isn't a problem for the torrent site really. The domains were never used as the site's main address. ThePiratebay.com did forward to the original .org domain at one point, but that's about it.

None of this means that the domains are not valuable to outsiders though. This became apparent in an auction yesterday, where Piratebay.org (without the the) was sold for $50,000 to a bidder named 'clvrfls.' The bid below ended up being the winning one. The Piratebay.org domain failed to renew earlier this month after which the professional 'drop catch' service Dropcatch.com scooped it up. They auctioned the domain off, which is a common practice, and it proved quite lucrative. What the new owner will do with the domain is unclear. It has a substantial number of backlinks and there will be plenty of type-in traffic as well. [...] ThePiratebay.com is expected to drop later this week and is listed at a pending delete auction, and ThePiratebay.net and Piratebay.net will drop in a few days as well.

Microsoft

Microsoft's 'Patch Tuesday' Includes 129 Security Updates, Mostly to Windows (krebsonsecurity.com) 41

This week Krebs on Security reported that Microsoft "released updates to remedy nearly 130 security vulnerabilities in its Windows operating system and supported software." None of the flaws are known to be currently under active exploitation, but 23 of them could be exploited by malware or malcontents to seize complete control of Windows computers with little or no help from users. The majority of the most dangerous or "critical" bugs deal with issues in Microsoft's various Windows operating systems and its web browsers, Internet Explorer and Edge. September marks the seventh month in a row Microsoft has shipped fixes for more than 100 flaws in its products, and the fourth month in a row that it fixed more than 120.

Among the chief concerns for enterprises this month is CVE-2020-16875, which involves a critical flaw in the email software Microsoft Exchange Server 2016 and 2019. An attacker could leverage the Exchange bug to run code of his choosing just by sending a booby-trapped email to a vulnerable Exchange server. "That doesn't quite make it wormable, but it's about the worst-case scenario for Exchange servers," said Dustin Childs, of Trend Micro's Zero Day Initiative. "We have seen the previously patched Exchange bug CVE-2020-0688 used in the wild, and that requires authentication. We'll likely see this one in the wild soon. This should be your top priority."

Also not great for companies to have around is CVE-2020-1210, which is a remote code execution flaw in supported versions of Microsoft Sharepoint document management software that bad guys could attack by uploading a file to a vulnerable Sharepoint site. Security firm Tenable notes that this bug is reminiscent of CVE-2019-0604, another Sharepoint problem that's been exploited for cybercriminal gains since April 2019.

The article points out that Google also shipped a critical update for Chrome this week "that resolves at least five security flaws that are rated high severity."
Education

Dozens of Scientific Journals Have Vanished From the Internet, and No One Preserved Them (sciencemag.org) 81

Eighty-four online-only, open-access (OA) journals in the sciences, and nearly 100 more in the social sciences and humanities, have disappeared from the internet over the past 2 decades as publishers stopped maintaining them, potentially depriving scholars of useful research findings, a study has found. From a report: An additional 900 journals published only online also may be at risk of vanishing because they are inactive, says a preprint posted on 3 September on the arXiv server. The number of OA journals tripled from 2009 to 2019, and on average the vanished titles operated for nearly 10 years before going dark, which "might imply that a large number ... is yet to vanish," the authors write. The study didn't identify examples of prominent journals or articles that were lost, nor collect data on the journals' impact factors and citation rates to the articles. About half of the journals were published by research institutions or scholarly societies; none of the societies are large players in the natural sciences. None of the now-dark journals was produced by a large commercial publisher.
Bug

Academics Find Crypto Bugs in 306 Popular Android Apps, None Get Patched (zdnet.com) 32

A team of academics from Columbia University has developed a custom tool to dynamically analyze Android applications and see if they're using cryptographic code in an unsafe way. From a report: Named CRYLOGGER, the tool was used to test 1,780 Android applications, representing the most popular apps across 33 different Play Store categories, in September and October 2019. Researchers say the tool, which checked for 26 basic cryptography rules (mentioned in the source story), found bugs in 306 Android applications. Some apps broke one rule, while others broke multiple.
China

Trump Ban On Chinese Drone Parts Risks Worsening Wildfires (arstechnica.com) 127

An anonymous reader quotes a report from The Financial Times: The U.S. interior department's decision not to buy more drones with Chinese parts has made it more difficult to fight wildfires, according to an internal departmental memo that lays bare one cost of the Trump administration's crackdown on Chinese technology. The memo, which was written by the department's Office of Aviation Services earlier this year, found that by the end of the year, the department will have carried out only a quarter of the controlled burning it might otherwise have done had it gone ahead with planned drone purchases.

The U.S. is experiencing one of its worst years for wildfire outbreaks thanks to hot weather and a lack of firefighters. And while none of those appear to have happened on federal land, government insiders warn the de facto ban on buying drones with Chinese components risks making the situation worse. The internal memo, which was written earlier this summer and has been seen by the Financial Times, warned: "[The department's current fleet] must expand to meet the demand of preventative measures mandated for the reduction of wildfire via vegetation reduction." It found that by the end of the year, the department will only have carried out 28 percent of the controlled burning it could have done had it purchased 17 new drone-based firefighting systems as planned.
"David Bernhardt, the interior secretary, announced the crackdown on Chinese-made drones last year amid concerns about the national security implications of flying them over federal lands," the report says. "Bernhardt decided all 810 departmental aircraft should be grounded pending a review into the security risks they pose, given that they all contain Chinese parts."

"Bernhardt did allow an exemption for carrying out controlled burning on federal land, a regular method of halting wildfires in their tracks. But at the same time, Susan Combs, one of his assistant secretaries, said that no new drones should be purchased without her authorization, which she has not since given."
Medicine

The Coronavirus is Most Deadly if You Are Older and Male -- New Data Reveal the Risks (nature.com) 253

An anonymous reader shares a report: For every 1,000 people infected with the coronavirus who are under the age of 50, almost none will die. For people in their fifties and early sixties, about five will die -- more men than women. The risk then climbs steeply as the years accrue. For every 1,000 people in their mid-seventies or older who are infected, around 116 will die. These are the stark statistics obtained by some of the first detailed studies into the mortality risk for COVID-19. Trends in coronavirus deaths by age have been clear since early in the pandemic. Research teams looking at the presence of antibodies against SARS-CoV-2 in people in the general population -- in Spain, England, Italy and Geneva in Switzerland -- have now quantified that risk, says Marm Kilpatrick, an infectious-disease researcher at the University of California, Santa Cruz. "It gives us a much sharper tool when asking what the impact might be on a certain population that has a certain demographic," says Kilpatrick. The studies reveal that age is by far the strongest predictor of an infected person's risk of dying -- a metric known as the infection fatality ratio (IFR), which is the proportion of people infected with the virus, including those who didn't get tested or show symptoms, who will die as a result.
Medicine

FDA Approves $5 Rapid Coronavirus Test That Doesn't Require Special Computer (cbsnews.com) 55

schwit1 writes: The Food and Drug Administration on Wednesday authorized the first rapid coronavirus test that doesn't need any special computer equipment to get results. The 15-minute test from Abbott Laboratories will sell for $5, giving it a competitive edge over similar tests that need to be popped into a small machine. The self-contained test is the size of a credit card and is based on the same technology used to test for the flu, strep throat and other infections. It's the latest cheaper, simpler test to hit the U.S. market, providing new options to expand testing as schools and businesses struggle to reopen and flu season approaches. The FDA also recently greenlighted a saliva test from Yale University that bypasses some of the supplies that have led to testing bottlenecks. Both tests have limitations and neither can be done at home. Several companies are developing rapid, at-home tests, but none have yet won approval. Abbott's new test still requires a nasal swab by a health worker, like most older coronavirus tests. The Yale saliva test eliminates the need for a swab, but can only be run at high-grade laboratories. And in general, rapid tests like Abbott's are less accurate than lab-developed tests.
Wikipedia

Most of Scottish Wikipedia Written By American in Mangled English (vice.com) 157

For over six years, one Wikipedia user -- AmaryllisGardener -- has written well over 23,000 articles on the Scots Wikipedia and done well over 200,000 edits. The only problem is that AmaryllisGardener isn't Scottish, they don't speak Scots, and none of their articles are written in Scots. From a report: Since 2013, this user -- a self-professed Christian INTP furry living somewhere in North Carolina -- has simply written articles that are written in English, riddled with misspellings that mimic a spoken Scottish accent. Many of the articles were written while they were a teenager. AmaryllisGardener is an admin of the Scots Wikipedia, and Wikipedians now have no idea what to do, because their influence over the country's pages has been so vast that their only options seem to be to delete the Scots language version entirely or revert the entire thing back to 2012. This ridiculous situation was discovered by a redditor on r/Scotland who happened to check the edit history of one article. By the redditor u/Ultach's count, Amaryllis was responsible for well over one-third of Scots Wikipedia in 2018, but Amaryllis stopped updating their milestones that year.
Privacy

Bridgefy, the Messenger Promoted For Mass Protests, Is a Privacy Disaster (arstechnica.com) 80

Bridgefy, a popular messaging app for conversing with one another when internet connections are heavily congested or completely shut down, is a privacy disaster that can allow moderately-skilled hackers to take a host of nefarious actions against users, according to a paper published on Monday. The findings come after the company has for months touted the app as a safe and reliable way for activists to communicate in large gatherings. Ars Technica reports: By using Bluetooth and mesh network routing, Bridgefy lets users within a few hundred meters -- and much further as long as there are intermediary nodes -- to send and receive both direct and group texts with no reliance on the Internet at all. Bridgefy cofounder and CEO Jorge Rios has said he originally envisioned the app as a way for people to communicate in rural areas or other places where Internet connections were scarce. And with the past year's upswell of large protests around the world -- often in places with hostile or authoritarian governments -- company representatives began telling journalists that the app's use of end-to-end encryption (reiterated here, here, and here) protected activists against governments and counter protesters trying to intercept texts or shut down communications.

[R]esearchers said that the app's design for use at concerts, sports events, or during natural disasters makes it woefully unsuitable for more threatening settings such as mass protests. They wrote: "Though it is advertised as 'safe' and 'private' and its creators claimed it was secured by end-to-end encryption, none of aforementioned use cases can be considered as taking place in adversarial environments such as situations of civil unrest where attempts to subvert the application's security are not merely possible, but to be expected, and where such attacks can have harsh consequences for its users. Despite this, the Bridgefy developers advertise the app for such scenarios and media reports suggest the application is indeed relied upon."

The researchers are: Martin R. Albrecht, Jorge Blasco, Rikke Bjerg Jensen, and Lenka Marekova from Royal Holloway, University of London. After reverse engineering the app, they devised a series of devastating attacks that allow hackers -- in many cases with only modest resources and moderate skill levels -- to take a host of nefarious actions against users. The attacks allow for: deanonymizing users; building social graphs of users' interactions, both in real time and after the fact; decrypting and reading direct messages; impersonating users to anyone else on the network; completely shutting down the network; and performing active man-in-the-middle attacks, which allow an adversary not only to read messages, but to tamper with them as well.
"The key shortcoming that makes many of these attacks possible is that Bridgefy offers no means of cryptographic authentication, which one person uses to prove she's who she claims to be," the report adds. "Instead, the app relies on a user ID that's transmitted in plaintext to identify each person. Attackers can exploit this by sniffing the ID over the air and using it to spoof another user."

The app also uses PKCS #1, an outdated way of encoding and formatting messages so that they can be encrypted with the RSA cryptographic algorithm. "This encoding method, which was deprecated in 1998, allows attackers to perform what's known as a padding oracle attack to derive contents of an encrypted message," reports Ars.
United States

750 Million Genetically Modified Mosquitoes Approved For Release In Florida Keys 104

A plan to release over 750 million genetically modified mosquitoes into the Florida Keys in 2021 and 2022 received final approval from local authorities, against the objection of many local residents and a coalition of environmental advocacy groups. The proposal had already won state and federal approval. CNN reports: Approved by the Environment Protection Agency in May, the pilot project is designed to test if a genetically modified mosquito is a viable alternative to spraying insecticides to control the Aedes aegypti. It's a species of mosquito that carries several deadly diseases, such as Zika, dengue, chikungunya and yellow fever. The mosquito, named OX5034, has been altered to produce female offspring that die in the larval stage, well before hatching and growing large enough to bite and spread disease. Only the female mosquito bites for blood, which she needs to mature her eggs. Males feed only on nectar, and are thus not a carrier for disease.

The mosquito also won federal approval to be released into Harris County, Texas, beginning in 2021, according to Oxitec, the US-owned, British-based company that developed the genetically modified organism (GMO). The Environmental Protection Agency granted Oxitec's request after years of investigating the impact of the genetically altered mosquito on human and environmental health. "This is an exciting development because it represents the ground-breaking work of hundreds of passionate people over more than a decade in multiple countries, all of whom want to protect communities from dengue, Zika, yellow fever, and other vector-borne diseases," Oxitec CEO Grey Frandsen said in a statement at the time. However, state and local approval for the Texas release has not been granted, said Sam Bissett, a communication specialist with Harris County Public Health.

The EPA permit requires Oxitec to notify state officials 72 hours before releasing the mosquitoes and conduct ongoing tests for at least 10 weeks to ensure none of the female mosquitoes reach adulthood. However, environmental groups worry that the spread of the genetically modified male genes into the wild population could potentially harm threatened and endangered species of birds, insects and mammals that feed on the mosquitoes.
NASA

NASA Is Tracking a Vast, Growing Anomaly In Earth's Magnetic Field (sciencealert.com) 59

fahrbot-bot shares a report from ScienceAlert: NASA is actively monitoring a strange anomaly in Earth's magnetic field: a giant region of lower magnetic intensity in the skies above the planet, stretching out between South America and southwest Africa. This vast, developing phenomenon, called the South Atlantic Anomaly, has intrigued and concerned scientists for years, and perhaps none more so than NASA researchers. The space agency's satellites and spacecraft are particularly vulnerable to the weakened magnetic field strength within the anomaly, and the resulting exposure to charged particles from the Sun.

The primary source is considered to be a swirling ocean of molten iron inside Earth's outer core, thousands of kilometers below the ground. A huge reservoir of dense rock called the African Large Low Shear Velocity Province, located about 2,900 kilometers (1,800 miles) below the African continent, disturbs the field's generation, resulting in the dramatic weakening effect -- which is aided by the tilt of the planet's magnetic axis. It's not just moving, however. Even more remarkably, the phenomenon seems to be in the process of splitting in two, with researchers this year discovering that the SAA appears to be dividing into two distinct cells, each representing a separate centre of minimum magnetic intensity within the greater anomaly. Just what that means for the future of the SAA remains unknown, but in any case, there's evidence to suggest that the anomaly is not a new appearance.

Slashdot Top Deals