Printer

3D Printers Have 'Fingerprints', a Discovery That Could Help Trace 3D-Printed Guns: Study (sciencedaily.com) 139

Like fingerprints, no 3D printer is exactly the same. That's the takeaway from a new University at Buffalo-led study that describes what's believed to be the first accurate method for tracing a 3D-printed object to the machine it came from. From the study: The advancement, which the research team calls "PrinTracker," could ultimately help law enforcement and intelligence agencies track the origin of 3D-printed guns, counterfeit products and other goods. "3D printing has many wonderful uses, but it's also a counterfeiter's dream. Even more concerning, it has the potential to make firearms more readily available to people who are not allowed to possess them," says the study's lead author Wenyao Xu, PhD, associate professor of computer science and engineering in UB's School of Engineering and Applied Sciences.

[...] To understand the method, it's helpful to know how 3D printers work. Like a common inkjet printer, 3D printers move back-and-forth while "printing" an object. Instead of ink, a nozzle discharges a filament, such as plastic, in layers until a three-dimensional object forms. Each layer of a 3D-printed object contains tiny wrinkles -- usually measured in submillimeters -- called in-fill patterns. These patterns are supposed to be uniform. However, the printer's model type, filament, nozzle size and other factors cause slight imperfections in the patterns. The result is an object that does not match its design plan.

Data Storage

Buggy Software in Popular Connected Storage Drives Can Let Hackers Read Private Data (techcrunch.com) 44

Security researchers have found flaws in four popular connected storage drives that they say could let hackers access a user's private and sensitive data. From a report: The researchers Paulos Yibelo and Daniel Eshetu said the software running on three of the devices they tested -- NetGear Stora, Seagate Home and Medion LifeCloud -- can allow an attacker to remotely read, change and delete data without requiring a password. Yibelo, who shared the research with TechCrunch this week and posted the findings Friday, said that many other devices may be at risk.

The software, Hipserv, built by tech company Axentra, was largely to blame for three of the four flaws they found. Hipserv is Linux-based, and uses several web technologies -- including PHP -- to power the web interface. But the researchers found that bugs could let them read files on the drive without any authentication. It also meant they could run any command they wanted as "root" -- the built-in user account with the highest level of access -- making the data on the device vulnerable to prying eyes or destruction.

Apple

DHS Seized Aftermarket Apple Laptop Batteries From Independent Repair Expert (vice.com) 242

Louis Rossmann says US Customs and Border Patrol seized $1,000 worth of laptop batteries, claiming they were counterfeit. From a report: Earlier this year, Louis Rossmann, the highest-profile iPhone and Mac repair professional in the United States, told Motherboard that determining "the difference between counterfeiting and refurbishing is going to be the next big battle" between the independent repair profession and Apple. At the time, his friend and fellow independent repair pro, Jessa Jones, had just had a shipment of iPhone screens seized by Customs and Border Patrol. Rossmann was right: His repair parts were also just seized by the US government.

Last month, US Customs and Border Protection (CBP) seized a package containing 20 Apple laptop batteries en route to Rossman's store in New York City. The laptop batteries were en route from China to Rossmann Repair Group -- a NYC based repair store that specializes in Apple products. "Apple and customs seized batteries to a computer that, at [the Apple Store], they no longer service because they claim it's vintage," Rossmann, the owner and operator of Rossmann Repair Group, said in a YouTube video. "They will not allow me to replace batteries, because when I import batteries that are original they'll tell me the they're counterfeit and have them stolen from by [CBP]." CBP seized the batteries on September 6, then notified Rossmann via a letter dated October 5. Rossmann produced the letter in its entirety in his video.

United States

Justice Department Charges Russian Woman With Interference in Midterm Elections (washingtonpost.com) 261

The Justice Department on Friday charged a Russian woman for her role in a conspiracy to interfere with the 2018 U.S. election, marking the first criminal case prosecutors have brought against a foreign national for interfering in the upcoming midterms. From a report: Elena Khusyaynova, 44, was charged with conspiracy to defraud the United States. Prosecutors said she managed the finances of "Project Lakhta," a foreign influence operation they said was designed "to sow discord in the U.S. political system" by pushing arguments and misinformation online about a whole host of divisive political issues, including immigration, the Confederate flag, gun control, and the NFL national anthem protests. The charges against Khusyaynova came just as the Office of the Director of National Intelligence warned that it was concerned about "ongoing campaigns" by Russia, China and Iran to interfere with the upcoming Midterm elections and even the 2020 race -- an ominous warning that comes just weeks before voters head to the polls.
Businesses

Click Farms Are Gaming Apple's Top Podcasts List (venturebeat.com) 14

A new report sheds some light on the issue of paid click farms gaming Apple's long-running list of Top Podcasts. From a report: Earlier this month, Apple's long-running list of Top Podcasts began to exhibit some unusual issues -- no-name podcasts vaulting over popular, well-established ones -- but the company appeared to quickly fix its chart. Unfortunately, the problems have popped up again, and an analysis from podcast industry tracker Chartable suggests that paid click farms are now gaming the list, which it calls "the closest thing to the Billboard Top 100 in the podcast world." In theory, Apple's podcast popularity rankings might not matter -- podcasts are free, and Apple's only one source of such rankings. But after introducing its Podcast Directory in 2005, Apple became the world's largest aggregator of such programming, and its rankings serve two purposes: showing listeners what's hot, and helping advertisers determine which shows to support, thereby keeping their creators afloat. The core problem is that Apple's Top Podcasts chart appears to use a poor and easily manipulated ranking metric. Chartable believes that it's based entirely upon a podcast's total number of new subscribers over the past week, with weights assigned to movement in the past one to three days.
Security

In an Unprecedented Move, Apple CEO Tim Cook Calls For Bloomberg To Retract Its Chinese Spy Chip Story (buzzfeednews.com) 162

John Paczkowski and Joseph Bernstein, reporting for BuzzFeed News: Apple CEO Tim Cook, in an interview with BuzzFeed News, went on the record for the first time to deny allegations that the company was the victim of a hardware-based attack carried out by the Chinese government. And, in an unprecedented move for the company, he called for a retraction of the story that made this claim. Earlier this month Bloomberg Businessweek published an investigation alleging Chinese spies had compromised some 30 US companies by implanting malicious chips into Silicon Valley bound servers during their manufacture in China. The chips, Bloomberg reported, allowed the attackers to create "a stealth doorway" into any network running on a server in which they were embedded. Apple was alleged to be among the companies attacked, and a focal point of the story. [...] "We turned the company upside down," Cook said. "Email searches, datacenter records, financial records, shipment records. We really forensically whipped through the company to dig very deep and each time we came back to the same conclusion: This did not happen. There's no truth to this." A Bloomberg spokesperson said, "We stand by our story and are confident in our reporting and sources."
The Courts

WikiLeaks Founder Julian Assange Sues Ecuador For 'Violating His Rights' (sky.com) 225

Julian Assange is suing Ecuador's government for violating his "fundamental rights and freedoms," despite the fact he is still being sheltered in the country's UK embassy. From a report: It comes after Ecuador cut off communications for Mr Assange, who has been living inside the country's London embassy for more than six years. Baltasar Garzon, a lawyer for WikiLeaks, has arrived in Ecuador to launch the case, which is expected to be heard next week in a domestic court. WikiLeaks claims Mr Assange's access to the outside world has been "summarily cut off" and says Ecuador has threatened to remove the protection he has had since being given political asylum. The site said Ecuador's government has refused to allow a visit by Human Rights Watch general counsel Dinah PoKempner and prevented several meetings with Mr Assange's lawyers. A statement said: "Ecuador's measures against Julian Assange have been widely condemned by the human rights community."
Encryption

Quantum Computers Will Break the Encryption that Protects the Internet (economist.com) 166

An anonymous reader shares a report: Factorising numbers into their constituent primes may sound esoteric, but the one-way nature of the problem -- and of some other, closely related mathematical tasks -- is the foundation on which much modern encryption rests. Such encryption has plenty of uses. It defends state secrets, and the corporate sort. It protects financial flows and medical records. And it makes the $2trn e-commerce industry possible. Nobody, however, is certain that the foundation of all this is sound. Though mathematicians have found no quick way to solve the prime-factors problem, neither have they proved that there isn't one. In theory, any of the world's millions of professional or amateur mathematicians could have a stroke of inspiration tomorrow and publish a formula that unravels internet cryptography -- and most internet commerce with it.

In fact, something like this has already happened. In 1994 Peter Shor, a mathematician then working at Bell Laboratories, in America, came up with a quick and efficient way to find a number's prime factors. The only catch was that for large numbers his method -- dubbed Shor's algorithm -- needs a quantum computer to work. Quantum computers rely on the famous weirdness of quantum mechanics to perform certain sorts of calculation far faster than any conceivable classical machine. Their fundamental unit is the "qubit", a quantum analogue of the ones and zeros that classical machines manipulate. By exploiting the quantum-mechanical phenomena of superposition and entanglement, quantum computers can perform some forms of mathematics -- though only some -- far faster than any conceivable classical machine, no matter how beefy.

Google

Google Warns Apple: Missing Bugs in Your Security Bulletins Are 'Disincentive To Patch' (zdnet.com) 43

Apple has not documented some high-severity bugs it patched that were reported to it by Google's Project Zero researchers. From a report: While it's good news that Apple beat Project Zero's 90-day deadline for patching or disclosing the bugs it finds, the group's Ivan Fratric recently argued that the practice endangered users by not fully informing them why an update should be installed. This time the criticism comes from Project Zero's Ian Beer, who's been credited by Apple with finding dozens of serious security flaws in iOS and macOS over the years. Beer posted a blog about several vulnerabilities in iOS 7 he found in 2014 that share commonalities with several bugs he has found in iOS 11.4.1, some of which he's now released exploits for.

Beer notes that none of the latest issues is mentioned in the iOS 12 security bulletin even though Apple did fix them. The absence of information about them is a "disincentive" for iOS users to patch, Beer argues. "Apple are still yet to assign CVEs for these issues or publicly acknowledge that they were fixed in iOS 12," wrote Beer. "In my opinion a security bulletin should mention the security bugs that were fixed. Not doing so provides a disincentive for people to update their devices since it appears that there were fewer security fixes than there really were."

United States

Should We Break Up the Tech Giants? Not if You Ask the Economists Who Take Money From Them (fastcompany.com) 127

This week's FTC hearings on the growing power of companies like Amazon, Facebook, and Google only included economists who have taken money, directly and indirectly, from giant corporations that have a stake in the debate. From a report: Amid growing concern over the power of such behemoths as Amazon, Google, Facebook, and other tech giants, in recent months there's been a bipartisan push for better enforcement of antitrust rules -- with even President Trump saying in August that their size and influence could constitute a "very antitrust situation." The Federal Trade Commission (FTC) has launched its most wide-ranging study of corporate concentration in America in more than 20 years with a series of hearings being held around the country. Chairman Joseph Simons, a practical enforcement-minded leader, launched the hearings by expressing concern over the growing problem of monopoly, which is now found in nearly every sector of the economy. "I approach all of these issues with a very open mind," said Simons, "very much willing to be influenced by what I see and hear."

But there's a problem. The FTC organized these hearings so that Simons and the public would be hearing from many economists who have taken money, directly or indirectly, from giant corporations. For example, on Monday, the FTC convened a panel titled "The Current Economic Understanding of Multi-Sided Platforms" to look specifically at the most dynamic and dangerous set of concentrated economic actors, the big tech platforms. Every single one of the economists who testified had financial ties to giant corporations. One example is David Evans, the chairman of the Global Economics Group. Evans scoffed at the danger of platform monopolies. He indicated that the question of "whether Facebook and Google and Amazon are monopolies, it's all interesting, it's great to read in the New York Times," but it's "not all that relevant" to the practice of antitrust. His firm has taken money directly from Microsoft, Visa, the large investment bank SIFMA, and the Chinese giant tech giant Tencent. Another example is Howard Shelanski, a partner at Davis Polk. Shelanski is more enforcement-minded, but he expressed caution, testifying that we don't know enough for antitrust enforcers to understand whether powerful technology companies hold unassailable market positions. Shelanski pointed to his own children, saying that they've stopped using Facebook because it's uncool. As it turns out, his law firm's clients include Facebook, as well as Comcast, and Chinese search giant Baidu.

Android

Google App Suite Costs as Much as $40 Per Phone Under New EU Android Deal (theverge.com) 120

Android manufacturers will have to pay Google a surprisingly high cost in Europe in order to include Google's Play Store and other mobile apps on their devices, according to documents obtained by The Verge. From the report: A confidential fee schedule shows costs as high as $40 per device to install the "Google Mobile Services" suite of apps, which includes the Google Play Store. The new fees vary depending on country and device type, and it would apply to devices activated on or after February 1st, 2019. But phone manufacturers may not actually have to shoulder that cost: Google is also offering separate agreements to cover some or all of the licensing costs for companies that choose to install Chrome and Google search on their devices as well, according to a person familiar with the terms. Google declined to comment.
Businesses

Is Repair As Important As Innovation? (economist.com) 171

An anonymous reader shares an excerpt from The Economist: Events about making new things are ten a penny. Less common are events about keeping things as good as new. Maintenance lacks the glamour of innovation. It is mostly noticed in its absence -- the tear in a shirt, the mould on a ceiling, the spluttering of an engine. Not long ago David Edgerton of Imperial College London, who also spoke at the festival, drove across the bridge in Genoa that collapsed in August, killing 43 people (pictured). 'We're encouraged to pride ourselves on all being innovators and entrepreneurs,' he said. Maintenance is often dismissed as mere drudgery. But in fact, as he pointed out, repairing things is often trickier than making them.

It is also more difficult for economists to measure. The discipline's most prominent statistic, GDP, is gross (as opposed to net) because it leaves out the cost of wear and tear. To calculate these costs, statisticians must estimate the lifespan of a country's assets and make assumptions about the way they deteriorate. [...] And how much do economies spend fighting decay? No one knows, partly because most maintenance is performed in-house, not purchased on the market. The best numbers are collected by Canada, where firms spent 3.3% of GDP on repairs in 2016, more than twice as much as the country spends on research and development.
In closing, the report mentions the tyrannies of the ancient East where people were forced to maintain fragile irrigation systems. "In those societies, to repair was to repress," the report says. "But some people today have the opposite concern. They see maintenance and repair as a right they are in danger of losing to companies that hoard spare parts and information too jealously."
IBM

IBM Finally Proves That Quantum Systems Are Faster Than Classical Systems (engadget.com) 79

In a paper published Thursday in the journal Science, Dr. Sergey Bravyi and his team reveal that they've developed a mathematical proof which, in specific cases, illustrates the quantum algorithm's inherent computational advantages over classical. Engadget reports: "It's good to know, because results like this become parts of algorithms," Bob Sutor, vice president of IBM Q Strategy and Ecosystem, told Engadget. "They become part of decisions about how people will start to attack problems. Where will they try classical techniques? Where will they try quantum techniques? How will those interplay? How will they work back and forth together?" What's more, the proof shows that, in these cases, the quantum algorithm can solve the problem in a fixed number of steps, regardless of how many inputs are added. With a classical computer, the more inputs you add, the more steps it needs to take in order to solve. Such are the advantages of parallel processing.

"The main point of this paper is not that somehow we discover some incredibly important quantum algorithm, or some practical, interesting problem," Bravyi told Engadget. "We ask if we can separate a constant depth [between] quantum and classical algorithms. As we increase the problem size, the runtime of the quantum algorithm remains constant, but the total number of operations grows." As Bravyi points out, this new proof doesn't, in and of itself, solve any existing computational issues. Instead, "it gives us insight into what makes a quantum computers more powerful," he continued. "And hopefully in the future it will lead to more practical, useful algorithms."

Science

Measurement Shows the Electron's Stubborn Roundness (scientificamerican.com) 103

OneHundredAndTen writes: A new article in Nature reports of a new, extremely precise measurement of the electric dipole moment of the electron. The conclusion is that, within the margin of error of the measurement, the electron remains a perfect sphere. This implies that supersymmetric theories keep running out of corners to hide, that another nail is driven into their coffin, and that string theory looks less and less compelling. By lighting up the molecules with lasers, "the scientists were able to interpret how other subatomic particles alter the distribution of an electron's charge," reports Scientific American. "The symmetrical roundness of the electrons suggested that unseen particles aren't big enough to skew electrons into squashed oblong shapes, or ovals. These findings once again confirm a long-standing physics theory, known as the Standard Model, which describes how particles and forces in the universe behave."
Earth

Microplastics Found In 90 Percent of Table Salt (nationalgeographic.com) 190

An anonymous reader quotes a report from National Geographic: New research shows microplastics in 90 percent of the table salt brands sampled worldwide. Of 39 salt brands tested, 36 had microplastics in them, according to a new analysis by researchers in South Korea and Greenpeace East Asia. Salt samples from 21 countries in Europe, North and South America, Africa, and Asia were analyzed. The three brands that did not contain microplastics are from Taiwan (refined sea salt), China (refined rock salt), and France (unrefined sea salt produced by solar evaporation). The study was published this month in the journal Environmental Science & Technology.

The density of microplastics found in salt varied dramatically among different brands, but those from Asian brands were especially high, the study found. The highest quantities of microplastics were found in salt sold in Indonesia. Asia is a hot spot for plastic pollution, and Indonesia -- with 34,000 miles (54,720 km) of coastline -- ranked in an unrelated 2015 study as suffering the second-worst level of plastic pollution in the world. In another indicator of the geographic density of plastic pollution, microplastics levels were highest in sea salt, followed by lake salt and then rock salt.
Even though the study found that the average adult consumes approximately 2,000 microplastics per year through salt, it's not clear what the health consequences are.

Slashdot Top Deals