MindPrison writes: As ashamed as I am to admit it -- a longtime computer user since the Commodore heydays, I've been hacked twice recently and that has seriously made me rethink my options for my safety and well-being. So, I ask you dear Slashdot users, from one fellow longtime Slashdotter to another: which is the best router for optimal safety today?

Earlier this week, ZDNet shed some light on a company called LocationSmart that is buying your real-time location data from four of the largest U.S. carriers in the United States. The story blew up because a former police sheriff snooped on phone location data without a warrant, according to The New York Times. ZDNet is now reporting that the company "had a bug in its website that allowed anyone to see where a person is located -- without obtaining their consent." An anonymous reader shares an excerpt: "Due to a very elementary bug in the website, you can just skip that consent part and go straight to the location," said Robert Xiao, a PhD. student at the Human-Computer Interaction Institute at Carnegie Mellon University, in a phone call. "The implication of this is that LocationSmart never required consent in the first place," he said. "There seems to be no security oversight here." The "try" website was pulled offline after Xiao privately disclosed the bug to the company, with help from CERT, a public vulnerability database, also at Carnegie Mellon. Xiao said the bug may have exposed nearly every cell phone customer in the U.S. and Canada, some 200 million customers.

The researcher said he started looking at LocationSmart's website following ZDNet's report this week, which followed from a story from The New York Times, which revealed how a former police sheriff snooped on phone location data without a warrant. The sheriff has pleaded not guilty to charges of unlawful surveillance. He said one of the APIs used in the "try" page that allows users to try the location feature out was not validating the consent response properly. Xiao said it was "trivially easy" to skip the part where the API sends the text message to the user to obtain their consent. "It's a surprisingly simple bug," he said.

Catalin Cimpanu, writing for BleepingComputer: Cisco released 16 security advisories yesterday, including alerts for three vulnerabilities rated "Critical" and which received a maximum of 10 out of 10 on the CVSSv3 severity score. The three vulnerabilities include a backdoor account and two bypasses of the authentication system for Cisco Digital Network Architecture (DNA) Center. The Cisco DNA Center is a piece of software that's aimed at enterprise clients and which provides a central system for designing and deploying device configurations (aka provisioning) across a large network. This is, arguably, a pretty complex piece of software, and according to Cisco, a recent internal audit has yielded some pretty bad results.

Google announced Thursday it plans to drop the "Secure" indicator from the Chrome URL address bar -- starting with Chrome v68, set for release in July -- and only show a lock icon when the user is navigating to an HTTPS-secured website. From a report: The move is scheduled to take effect with the release of Chrome 69, scheduled for September, this year. Emily Schechter, Product Manager for Chrome Security, said the company is now comfortable making this move as a large chunk of Chrome's traffic is now via HTTPS. Since most traffic is HTTPS anyway, it's not necessary to draw the user's attention to the "Secure" indicator anymore.

An anonymous reader shares a report: The company that provides the U.K.'s air-traffic control service is taking a 10 percent stake in Aireon, a U.S. firm that's building a satellite-based tracking system and will offer commercial services to controllers starting next year. Aireon plans to use a constellation of 66 Iridium Communications. Next satellites in low Earth orbit to track aircraft. Iridium has 50 in orbit already, 47 of which are operational. Each carries equipment to offer aircraft position data to ground controllers.

Iridium plans to launch five additional satellites on May 22 from California, completing its full network later this year. Aireon said 70 percent of the world's airspace lacks satellite tracking or airline surveillance coverage, including most oceans and parts of Africa and Latin America.

Started by a group of 20-something robotics engineers from Massachusetts Institute of Technology who partnered with Michelin-starred chef Daniel Boulud, Spyce in downtown Boston is founded on the idea that a fulfilling meal can be more science than spontaneity [Editor's note: the link may be paywalled; alternative source]. From a report: The restaurant's founders have replaced human chefs with seven automated cooking pots that simultaneously whip up meals in three minutes or less. A brief description of meal preparation -- courtesy of 26-year-old co-founder, Michael Farid -- can sound more like laboratory instructions than conventional cooking. "Once you place your order, we have an ingredient delivery system that collects them from the fridge," Farid said.

"The ingredients are portioned into the correct sizes and then delivered to a robotic wok, where they are tumbled at 450 degrees Fahrenheit. The ingredients are cooked and seared. And once the process is complete, the woks tilt downward and put food into a bowl. And then they're ready to be garnished and served." Spyce bills itself as "the world's first restaurant featuring a robotic kitchen that cooks complex meals," a distinction that appears to reference burger-flipping robots like "Flippy," who plied his trade in a California fast food kitchen before being temporary suspended -- because he wasn't working fast enough.

The mayor of New York City, Bill de Blasio, has announced the formation of a new task force to examine the fairness of the algorithms used in the city's automated systems. From a report: The Automated Decision Systems Task Force will review algorithms that are in use to determine that they are free from bias. Representatives from the Department of Social Services, the NYC Police Department, the Department of Transportation, the Mayor's Office of Criminal Justice, the Administration for Children's Services, and the Department of Education will be involved, and the aim is to produce a report by December 2019. However, it may be some time before the task force has any sort of effect. While a report is planned for the end of next year, it will merely recommend "procedures for reviewing and assessing City algorithmic tools to ensure equity and opportunity" -- it will be a while before any recommendation might be assessed and implemented.

Investors have sent $1 billion into digital coin projects that flash warning signs for fraud, The Wall Street Journal reported Thursday. The revelation comes a day after the SEC created its own fake ICO to teach investors a lesson. From a report: In a review of 1,450 digital coin offerings, the Journal said it found 271 bore red flags such as plagiarized documents or fake executive information. Investors have already claimed losses of up to $273 million in these projects, the newspaper said, according to lawsuits and regulatory actions. The coin sales, or "initial coin offerings," give investors the chance to buy into a new digital token while letting developers get easy access to funding. The process may be a little too easy for many projects that are unproven or outright scams.

Coin offerings have raised roughly $9.8 billion in the two years through mid-March, according to financial research firm Autonomous Next. The Journal found widespread plagiarism in 111 projects' online whitepapers, including word-for-word copies of marketing plans and technical features.

An anonymous reader shares a report: Later this year, a small part of the International Space Station will become 10 billion times colder than the average temperature of the vacuum of space thanks to the Cold Atom Lab (CAL). Once it's on the space station, this atomic fridge will be the coldest known place in the universe and will allow physicists to 'see' into the quantum realm in a way that would never be possible on Earth.

In a normal room, "atoms are bouncing off one another in all directions at a few hundred meters per second," Rob Thompson, a NASA scientist working on CAL explained in a statement. CAL, however, can reach temperatures that are just one ten billionth of a degree above absolute zero -- the point at which matter loses all its thermal energy -- which means that this chaotic atomic motion comes to a near standstill.

CAL uses magnetic fields and lasers traps to capture the gaseous atoms and cool them to nearly absolute zero. Since all the atoms have the same energy levels at that point, these effectively motionless atoms condense into a state of quantum matter called a Bose-Einstein condensate. This state of matter means that the atoms have the properties of one continuous wave rather discrete particles.

The headline demo at Google's I/O conference earlier this month continues to be a talking point in the industry. The remarkable demo, which saw Google Assistant call a salon to successfully fix an appointment, continues to draw skepticism. News outlet Axios followed up with Google to get some clarifications only to find that the company did not wish to talk about it. From the report: What's suspicious? When you call a business, the person picking up the phone almost always identifies the business itself (and sometimes gives their own name as well). But that didn't happen when the Google assistant called these "real" businesses. Axios called over two dozen hair salons and restaurants -- including some in Google's hometown of Mountain View -- and every one immediately gave the business name.

Axios asked Google for the name of the hair salon or restaurant, in order to verify both that the businesses exist and that the calls were not pre-planned. We also said that we'd guarantee, in writing, not to publicly identify either establishment (so as to prevent them from receiving unwanted attention). A longtime Google spokeswoman declined to provide either name.

We also asked if either call was edited, even perhaps just cutting the second or two when the business identifies itself. And, if so, were there other edits? The spokeswoman declined comment, but said she'd check and get back to us. She didn't.

Google has said an Indian antitrust ruling that found it was guilty of search bias could cause "irreparable" harm and reputational loss to the company, Reuters reported Thursday, citing a legal document. From the report: The Competition Commission of India (CCI) in February fined Google $20 million for abusing its position in online web search and also slammed the company for preventing its partners from using competing search services. After the ruling, Google had said the verdict raised only "narrow concerns," but in its plea challenging the CCI's ruling the search giant signaled the impact could be far greater. The order, the company said, "requires Google to change the way it conducts business in India on a lasting basis and the way it designs its search results page in India," according to a copy of its plea which was seen exclusively by Reuters. The CCI, among other things, had ordered Google to stop imposing restrictions on its direct search agreements with other publishers.

An anonymous reader shares a report: This is happening across the entire league. The best NBA players are getting better younger. They were born with advantages that weren't available to older players and had access to more information than anyone before them in the history of basketball [Editor's note: the link may be paywalled]. Justin Tatum, a high-school basketball coach, could tell his son to watch clips with three words: "YouTube this guy." Which sounds totally normal until you remember it wasn't possible until very recently.

NBA players who grew up watching Michael Jordan couldn't even watch clips of Michael Jordan. LeBron James didn't have YouTube. He's been in the league for longer than YouTube has been a company. But today's young players have spent their entire lives watching basketball on demand. The extraordinary amount of knowledge at their disposal is one of the reasons they're entering the league with polished skills and making their influence felt immediately. YouTube allowed Kristaps Porzingis to admire Kevin Durant all the way from Latvia, Joel Embiid to emulate Hakeem Olajuwon and Tatum to geek out about Bryant.

New submitter TIWolfman writes: I'm looking to re-purpose some of the older hardware that I've held onto to create something of a starter machine for my kids (both aged below 10). At this point it's still just a few shortcut icons I can setup on the desktop for them, primarily to web tools/sites they use, but I'd like some flexibility; everything I've read suggests options that haven't had any activity since 2015. Is there an option out there or is this just a custom job?

An anonymous reader shares a report: Google has built a multibillion-dollar business out of knowing everything about its users. Now, a video produced within Google and obtained by The Verge offers a stunningly ambitious and unsettling look at how some at the company envision using that information in the future. The video was made in late 2016 by Nick Foster, the head of design at X (formerly Google X), and shared internally within Google. It imagines a future of total data collection, where Google helps nudge users into alignment with their goals, custom-prints personalized devices to collect more data, and even guides the behavior of entire populations to solve global problems like poverty and disease.

An anonymous reader quotes a report from Gizmodo: YouTube Music, a streaming music platform designed to compete with the likes of Spotify and Apple Music, officially has a launch date: May 22nd. Its existence will also shift around YouTube and Google's overall media strategy, which has thus far been quite the mess. YouTube Music will borrow the Spotify model and offer a free, ad-supported tier as well as a premium version. The paid tier, which will be called YouTube Music Premium, will be available for $9.99 per month. It will debut in the U.S., Australia, New Zealand, Mexico, and South Korea before expanding to 14 other countries.

One of the selling points for YouTube Music will be the ability to harness the endless amount of information Google knows about you, which it will use to try to create customized listening experiences. Pitchfork reported that the app, with the help of Google Assistant, will make listening recommendations based on the time of day, location, and listening patterns. It will also apparently offer "an audio experience and a video experience," suggesting perhaps an emphasis on music videos and other visual content. From here, Google seems to be focused on making its streaming strategy a little less wacky. Google Play Music, the company's previous music streaming service that is still inexplicably up and running despite teetering on the brink of extinction for years, will slowly be phased out according to USA Today. Meanwhile, the paid streaming subscription service, known as YouTube Red, is being rebranded to YouTube Premium and will cost $11.99 per month instead of $9.99. (Pitchfork notes that existing YouTube Red subscribers will be able to keep their $9.99 rate.) YouTube Premium will include access to YouTube Music Premium. Here's a handy-dandy chart that helps show what is/isn't included in the two plans.