Privacy

Customer Service Agents Might Be Able To See What You're Typing In Real Time (gizmodo.com) 135

Gizmodo is warning that some customer service agents might be able to see what you're typing in real time. A reader sent them a transcript from a conversation they had with a mattress company after the agent responded to a message he hadn't sent yet. From the report: Something similar recently happened to HmmDaily's Tom Scocca. He got a detailed answer from an agent one second after he hit send. Googling led Scocca to a live chat service that offers a feature it calls "real-time typing view" to allow agents to have their "answers prepared before the customer submits his questions." Another live chat service, which lists McDonalds, Ikea, and Paypal as its customers, calls the same feature "message sneak peek," saying it will allow you to "see what the visitor is typing in before they send it over." Salesforce Live Agent also offers "sneak peak."

This particular magic trick happens thanks to JavaScript operating in your browser and detecting what's happening on a particular site in real time. It's also how companies capture information you've entered into web forms before you've hit submit. Companies could lessen the creepiness by telling people their typing is seen in real time or could eliminate the send button altogether. So if you don't want to be monitored or send secret messages to agents, put your phone on mute while on hold and copy/paste messages from another document to your customer service chatbox. And in general, be nice to customer service agents. It's not their fault.

Privacy

Urban Massage Data Breach Exposed Sensitive Comments On Its Creepy Clients (techcrunch.com) 38

An anonymous reader shares a report from TechCrunch: Urban Massage, a popular massage startup that bills itself as providing "wellness that comes to you," has leaked its entire customer database. The London, U.K.-based startup -- now known as just Urban -- left its Google-hosted ElasticSearch database online without a password, allowing anyone to read hundreds of thousands of customer and staff records. Anyone who knew where to look could access, edit or delete the database. It's not known how long the database was exposed or if anyone else had accessed or obtained the database before it was pulled. It's believed that the database was exposed for at least a few weeks.

Urban pulled the database offline after TechCrunch reached out. Among the records included thousands of complaints from workers about their clients. The records included specific complaints -- from account blocks for fraudulent behavior, abuse of the referral system and persistent cancelers. But, many records also included allegations of sexual misconduct by clients -- such as asking for "massage in genital area" and requesting "sexual services from therapist." Others were marked as "dangerous," while others were blocked due to "police enquiries." Each complaint included a customer's personally identifiable information -- including their name, address and postcode and phone number.

Youtube

YouTube To Make New Originals Available For Free, Ad-Supported Viewing (variety.com) 63

YouTube is removing the paywall for its original programming. Starting next year, the company will move to make all of its new original programming available for free for anyone to watch. "With the change, YouTube is moving toward more mainstream celebrity-driven and creator-based reality fare, while it will continue to greenlight scripted productions," reports Variety. From the report: Until now, YouTube Originals have mainly been available on its YouTube Premium subscription service, although YouTube also has expanded the shows and movies it makes available on an ad-supported basis. The company calls the new YouTube Originals strategy its "Single Slate," which will combine ad-supported and subscription VOD programming initiatives that by 2020 will provide free windows for all YouTube users. Some original productions will remain behind the paywall, including season 2 of "Cobra Kai," an offshoot of the "Karate Kid" movies. Moving forward, YouTube Premium will include early access to original, exclusive content as a reason to pay for the service. YouTube has faced stiff competition in trying to lure paying customers with original content against the likes of Netflix, Hulu and Amazon, which spend far more on content. "As we look to 2019, we will continue to invest in scripted programming and shift to make our YouTube Originals ad supported to meet the growing demand of a more global fanbase," a YouTube rep said in a statement. "This next phase of our originals strategy will expand the audience of our YouTube Original creators, and provide advertisers with incredible content that reaches the YouTube generation."
Cellphones

Google To Open Project Fi To iPhone, Samsung, and OnePlus (theverge.com) 66

Google's Project Fi mobile service will reportedly be adding support for Samsung, OnePlus, and iPhones. "More handsets from existing Fi partners LG and Motorola will also gain Fi support," reports The Verge. "The iPhone experience is apparently 'in beta,' which is a sign that users might run into bugs or be left without some of Fi's features." From the report: The lineup of "Fi-ready" compatible phones -- those that Google says have been fully optimized for the network -- is fairly short: Google is currently selling the Pixel 3, 3 XL, 2 XL, LG G7, LG V35, Moto G6, and Moto X4 (Android One edition) directly through its Project Fi website.

And although Google is apparently about to widen support and officially allow more devices onto Fi, those "Fi-friendly" phones will still offer the best overall user experience for subscribers, according to the report. It's not yet entirely clear what that means, but we should know more once Google makes a proper announcement. Either way, adding that pool of popular hardware will allow for many more consumers to give the service a shot and see if the pricing model and performance are preferable over Fi's larger competitors.

China

China Expands Research Funding, Luring US Scientists and Students (npr.org) 93

An anonymous reader quotes a report from NPR: In the past decade or so, China has been expanding its commitment to scientific research, and it shows. Chinese researchers now produce more scientific publications than U.S. scientists do, and the global ratings of Chinese universities are rising. Five years ago [professor of chemistry at the University of California, San Diego, JaySiegel] became dean of the school of pharmaceutical science and technology at Tianjin University. He says the university president recruited him to build an undergraduate program that would attract students from all over -- not just China. Siegel says the program is taught entirely in English. There's another aspect of getting a pharmaceutical science degree at Tianjin that Siegel expects students from throughout the world to find particularly attractive: The Chinese government plans to offer scholarships to cover the cost for students who enroll. Siegel says this is all part of China's effort to attract international scientists. Of course, there are some drawbacks with working in China. There are internet restrictions, making it difficult to reach certain websites; English isn't spoken throughout most of the country, posing a problem for many foreign visitors; and free speech isn't the same concept as it is in the United States. With that said, "There's no interference politically on the science," says Greg Herczeg, an astronomer at the Kavli Institute for Astronomy and Astrophysics at Peking University.

"We've had no political restrictions," says Siegel. "I know that people talk about them being out there, and I've heard rumors of things. But, for us personally, I would have to say no, I've not had that experience."
Youtube

YouTube Will Remove All Pop-up Annotations on January 15 (engadget.com) 91

Early last year, YouTube announced that it would be retiring annotations, those boxes that pop up during a video with links and additional information. It discontinued the annotations editor in May of last year and soon all existing annotations will be going away as well. From a report: The company added an update to the help page announcing the end of its annotations editor, saying, "We will stop showing existing annotations to viewers starting January 15, 2019. All existing annotations will be removed."
Earth

CO2 Emissions Rose for the First Time in 4 Years (vice.com) 317

Human emissions of carbon dioxide have gone up for the first time since 2013, according to the UN's ninth annual Emissions Gap Report, meaning the world isn't on track to mitigate the worst of climate change's already disastrous effects. From the report: The report, published on Tuesday, says that while carbon emissions stayed relatively level between 2014 and 2016, carbon emissions in 2017 went up by 1.2 percent. Composed by climate scientists using the most up-to-date scientific data, the report aims to determine whether we're on track to meet the goals set by international climate agreements, such as the 2015 Paris Climate Accord. The "emissions gap" is the difference between how low our emissions need to be, and where they actually are. The UN report concludes that the world isn't hitting the emissions targets necessary to curb warming to 1.5 degrees Celsius above pre-industrial levels. While the goal is not impossible, it's unlikely to be met under current political conditions, which have rendered us unable to take significant action against climate change for more than half a century. "According to the current policy and [Nationally Determined Contributions] scenarios, global emissions are not estimated to peak by 2030, let alone by 2020," the report reads. "As the emissions gap assessment shows, this original level of ambition needs to be roughly tripled for the 2C scenario and increased around fivefold for the 1.5C scenario."
Communications

5G Will Cover Roughly 1.5 Billion People By 2024, Researchers Say (cnet.com) 43

By the end of 2025, 5G will reach more than 40 percent of the world's population and cover 1.5 billion people, according to the latest mobility report [PDF] from telecommunications company Ericsson, which says its networks currently carry nearly half the world's mobile traffic. From the report: 5G, short for fifth-generation network technology, promises a massive boost in speed and responsiveness. Industry watchers expect the first 5G smartphones to come out in the first half of next year. Researchers forecast that mobile data consumption will reach more than 21GB per month by 2024, which is nearly four times the consumption in 2018. 5G networks will carry 25 percent of global mobile data traffic, according to Ericsson. North America and North East Asia are expected to lead the 5G rollout, followed by Western Europe.
Facebook

A UK Commons Committee Chair Says He's Seen Evidence a Facebook Engineer Flagged Russian Entities Pulling Billions of Points of Data Every Day in 2014 (buzzfeed.com) 127

A UK Commons committee chair claims a seized trove of Facebook documents reveals that a company engineer flagged Russian "entities" were using a Pinterest API to pull billions of points of Facebook data every day in 2014. From a report: Damian Collins appeared to use parliamentary privilege to outline the detail from the sealed documents, during a fiery session of questioning of Facebook executive Richard Allan before the first sitting of the "international grand committee on disinformation and fake news" in London on Tuesday. The most contentious moment came during an exchange between Allan and the chair of the committee over what's alleged to be in a set of documents that are subject to the protective order of a California court.

During the questioning of Allan on Tuesday, Collins said the emails would not be released. But he did outline details from an alleged incident which, if true, would raise further questions about how Facebook responded to learning about data being taken from the platform. "An engineer at Facebook notified the company in October 2014 that entities with Russian IP addresses have been using a Pinterest API key to pull over 3 billion data points a day," Collins said. "Now was that reported to any external body at the time?" Allan dismissed the claim by focusing on the source of the information, Six4Three, labelling it a "hostile litigant."
Further reading: Facebook Exec Admits Zuckerberg Not Appearing Before UK Parliament Doesn't Look Great (CNBC); 'The Problem is Facebook,' Lawmakers From Nine Countries Tell Zuckerberg's Accountability Stand-in (TechCrunch); and "When You Get That Wealthy, You Start to Buy Your Own Bullshit": The Miseducation of Sheryl Sandberg (VanityFair).
AI

The Police in UK Want AI To Stop Violent Crime Before it Happens (newscientist.com) 170

Police in the UK want to predict serious violent crime using artificial intelligence, New Scientist is reporting. The idea is that individuals flagged by the system will be offered interventions, such as counseling, to avert potential criminal behavior. From the report: However, one of the world's leading data science institutes has expressed serious concerns about the project after seeing a redacted version of the proposals. The system, called the National Data Analytics Solution (NDAS), uses a combination of AI and statistics to try to assess the risk of someone committing or becoming a victim of gun or knife crime, as well as the likelihood of someone falling victim to modern slavery. West Midlands Police is leading the project and has until the end of March 2019 to produce a prototype. Eight other police forces, including London's Metropolitan Police and Greater Manchester Police, are also involved. NDAS is being designed so that every police force in the UK could eventually use it. Police funding has been cut significantly over recent years, so forces need a system that can look at all individuals already known to officers, with the aim of prioritizing those who need interventions most urgently, says Iain Donnelly, the police lead on the project.
Microsoft

Microsoft's Multi-Factor Authentication Service Goes Down For Second Week in a Row (zdnet.com) 101

Just over a week after a global problem with its multi-factor authentication (MFA) service plagued a number of users, another Microsoft MFA outage is impacting a number of customers. Many, but not all, of the customers reporting problems today seem to be U.S.-based. From a report: Starting around 9:15 a.m. ET, a number of Office 365 customers began reporting on Twitter that they were unable to sign into that service because of an MFA issue. Office 365 is one of a number of Microsoft services that uses Azure Active Directory MFA to authenticate. Around 10:15 a.m. ET, Microsoft's Azure status dashboard was updated to reflect the possibility of a cross-region potential outage impacting MFA. "Impacted customers may experience failures when attempting to authenticate into Azure resources where MFA is required by policy. Engineers are investigating the issue and the next update will be provided in 60 minutes or as events warrant," the dashboard status said.
AI

Uber has Cracked Two Classic '80s Video Games by Giving an AI Algorithm a New Type of Memory (technologyreview.com) 100

An algorithm that remembers previous explorations in Montezuma's Revenge and Pitfall! could make computers and robots better at learning how to succeed in the real world. From a report: A new kind of machine-learning algorithm just mastered a couple of throwback video games that have proved to be a big headache for AI. Those following along will know that AI algorithms have bested the world's top human players at the ancient, elegant strategy game Go, one of the most difficult games imaginable. But two pixelated classics from the era of 8-bit computer games -- Montezuma's Revenge and Pitfall! -- have stymied AI researchers. There's a reason for this seeming contradiction. Although deceptively simple, both Montezuma's Revenge and Pitfall! have been immune to mastery via reinforcement learning, a technique that's otherwise adept at learning to conquer video games.

DeepMind, a subsidiary of Alphabet focused on artificial intelligence, famously used it to develop algorithms capable of learning how to play several classic video games at an expert level. Reinforcement-learning algorithms mesh well with most games, because they tweak their behavior in response to positive feedback -- the score going up. The success of the approach has generated hope that AI algorithms could teach themselves to do all sorts of useful things that are currently impossible for machines. The problem with both Montezuma's Revenge and Pitfall! is that there are few reliable reward signals. Both titles involve typical scenarios: protagonists explore blockish worlds filled with deadly creatures and traps. But in each case, lots of behaviors that are necessary to advance within the game do not help increase the score until much later. Ordinary reinforcement-learning algorithms usually fail to get out of the first room in Montezuma's Revenge, and in Pitfall! they score exactly zero.

Businesses

'General Motors, Sears and Toys R Us: Layoffs Across America Highlight Our Shredding Financial Safety Net' (nbcnews.com) 554

New submitter Bruce Henry shares a story: Today's aging workforce faces an uncertain future. The announcement this week that General Motors will lay off 15 percent of its salaried workforce and shutter multiple plants in North America was a sobering reminder of how far the American worker has fallen. Unlike most large private sector corporations today, thousands of employees at GM still enjoy some union benefits. The company has reportedly set aside $2 billion for layoffs and buyouts. It's not much, but it's something -- many workers, if they are laid off en masse, will be far less lucky. Some older Americans are lucky enough to have been grandfathered into generous pension plans and others hope social security and personal savings will be enough to sustain themselves. But for millions of younger people, the outlook is bleaker -- an ever-diminishing social safety net, with retirement dependent almost entirely on how well they manage savings. Two-thirds of millennials have nothing saved for retirement.

The private sector pension as we once knew it is all but dead. Public sector pensions, meanwhile, are under attack at the state level. "Companies don't offer pensions anymore. Social security, when it was established, was meant to be one leg of a stool," says Gerald Friedman, an economist at the University of Massachusetts at Amherst. "One leg would be the private pension through employment, a second leg personal savings, and a third leg social security. Social security is now the only source of income of a lot elderly have." What, if anything, are our politicians doing about this? Progressives rail against President Donald Trump, but real retirement security has not been a big enough part of the conversation on either side of the political spectrum. Millions of Americans are in danger of entering their final decades unable to afford ballooning medical bills and cost-of-living expenses. This is a huge problem, and one that liberals in particular should have capitalized on this election cycle.

China

China is Planning To Build a Deep Sea Base For Unmanned Submarine Science and Defense Operations in the South China Sea (scmp.com) 69

Urged by China President Xi Jinping to dare to do something that has never been done before, scientists say challenges could give China huge technology lead. From a report: China is planning to build a deep sea base for unmanned submarine science and defence operations in the South China Sea, a centre that might become the first artificial intelligence colony on Earth, officials and scientists involved in the plan said. The project -- named in part after Hades, the underworld of Greek mythology -- was launched at the Chinese Academy of Sciences in Beijing this month after a visit to a deep sea research institute at Sanya, Hainan province, by Chinese President Xi Jinping in April.

Xi urged the scientists and engineers to dare to do something that has never been done before. "There is no road in the deep sea, we do not need to chase [after other countries], we are the road," he said. The idea of an outpost for deep sea exploration has been a favourite of scientists, engineers and fiction writers for hundreds of years, while the Greek allegory of Atlantis has inspired many "city beneath the sea" stories. The Hadal zone that would be home to the base is the deepest part of an ocean -- typically a V-shape abyss -- at a depth of 6,000 to 11,000 metres (19,685 to 36,100 feet). The project will cost Chinese taxpayers 1.1 billion yuan (US$160 million), the scientists said. That is half as much again as the cost of the FAST radio telescope -- the world's largest -- in Guizhou province, southwest China.

Security

Half of all Phishing Sites Now Have the Padlock (krebsonsecurity.com) 141

You may have heard you should look for the padlock symbol at the top of a website before entering your password or credit card information into an online form. It's well-meaning advice, but new data shows it isn't enough to keep your sensitive information secure. From a report: Recent data from anti-phishing company PhishLabs shows that 49 percent of all phishing sites in the third quarter of 2018 bore the padlock security icon next to the phishing site domain name as displayed in a browser address bar. That's up from 25 percent just one year ago, and from 35 percent in the second quarter of 2018. This alarming shift is notable because a majority of Internet users have taken the age-old "look for the lock" advice to heart, and still associate the lock icon with legitimate sites. A PhishLabs survey conducted last year found more than 80% of respondents believed the green lock indicated a website was either legitimate and/or safe. In reality, the https:// part of the address (also called "Secure Sockets Layer" or SSL) merely signifies the data being transmitted back and forth between your browser and the site is encrypted and can't be read by third parties. The presence of the padlock does not mean the site is legitimate, nor is it any proof the site has been security-hardened against intrusion from hackers.

Slashdot Top Deals