Intel

Intel Told Chinese Firms of Meltdown Flaws Before the US Government (engadget.com) 134

According to The Wall Street Journal, Intel initially told a handful of customers about the Meltdown and Spectre vulnerabilities, including Chinese tech companies like Alibaba and Lenovo, before the U.S. government. As a result, the Chinese government could have theoretically exploited the holes to intercept data before patches were available. Engadget reports: An Intel spokesman wouldn't detail who the company had informed, but said that the company couldn't notify everyone (including U.S. officials) in time because Meltdown and Spectre had been revealed early. Lenovo said the information was protected by a non-disclosure agreement. Alibaba has suggested that any accusations of sharing info with the Chinese government was "speculative and baseless," but this doesn't rule out officials intercepting details without Alibaba's knowledge. There's no immediate evidence to suggest that China has taken advantage of the flaws, but that's not the point -- it's that the U.S. government could have helped coordinate disclosures to ensure that enough companies had fixes in place.
Television

Ask Slashdot: How Can I Build a Private TV Channel For My Kids? 163

Long-time Slashdot reader ljw1004 writes: I want to assemble my OneDrive-hosted mp4s into a "TV channel" for my kids -- so at 7am while I sleep in, they know they can turn the TV on, it will show Mr Rogers then Sesame Street then grandparents' story-time, then two hand-picked cartoons, and nothing for the rest of the day. How would you do this? With Chromecast and write a JS Chrome plugin to drive it? Write an app for FireTV? Is there any existing OSS software for either the scheduling side (done by parents) or the TV-receiver side? How would you lock down the TV beyond just hiding the remote?
"There are good worthwhile things for them to see," adds the original submission, "but they're too young to be given the autonomy to pick them, and I can do better than Nickeloden or CBBC or Amazon Freetime Unlimited."

Slashdot reader Rick Schumann suggested putting the video files on an external hard drive (or burning them to a DVD), while apraetor points out many TVs now play files from flash drives -- and also suggests a private Roku channel. But what's the best way to build a private TV channel for kids?

Leave your best answers in the comments.
IBM

The SCO Vs IBM Zombie Shambles On (uscourts.gov) 127

Long-time Slashdot reader UncleJosh writes: At the end of last October, the 10th Circuit issued an opinion overturning the lower court's summary judgement in favor of IBM on one of SCO's claims, sending it back to the lower court for trial. Shortly thereafter, IBM filed for a re-hearing en banc. On January 2nd, the 10th circuit essentially denied IBM's request, issuing a slightly revised opinion with the same conclusions and result.
The charge being reheard accuses IBM of "stealing and improperly using [SCO's] source code to strengthen its own operating system, thereby committing the tort of unfair competition by means of misappropriation" -- though that charged is based on an implied duty that SCO says IBM incurred by entering into a development relationship with SCO. "SCO believes that IBM merely pretended to go along with the arrangement in order to gain access to Santa Cruz's coveted source code."

The court's 46-page document adds that "We are now almost fifteen years into this litigation."
Open Source

Linus Finally Releases Linux 4.15 Kernel, Blames Intel For Delay (phoronix.com) 55

An anonymous reader writes: Linus Torvalds has released Linux 4.15 following the lengthy development cycle due to the Spectre v2 and Meltdown CPU vulnerability mitigation work. This update comes with many kernel improvements including RISC-V architecture support, AMDGPU Display Code support, Intel Coffee Lake graphics support, and many other improvements.
"This obviously was not a pleasant release cycle, with the whole meltdown/spectre thing coming in in the middle of the cycle and not really gelling with our normal release cycle," Linus writes. "The extra two weeks were obviously mainly due to that whole timing issue... [T]he news cycle notwithstanding, the bulk of the 4.15 work is all the regular plodding 'boring' stuff. And I mean that in the best possible way. It may not be glamorous and get the headlines, but it's the bread and butter of kernel development, and is in many ways the really important stuff.

"Go forth and play with it, things actually look pretty good despite everything. And obviously this also means that the merge window for 4.16 is open... Hopefully we'll have a _normal_ and entirely boring release cycle for 4.16. Because boring really is good."
Cellphones

Trump Team Considers Nationalizing America's 5G Network (axios.com) 383

JoeyRox writes: "Trump national security officials are considering an unprecedented federal takeover of a portion of the nation's mobile network to guard against China, according to sensitive documents obtained by Axios." This is based on a PowerPoint presentation Axios has in their possession. Two options are described -- a national 5G network funded and built by the Federal government, or a mix of 5G networks built by existing wireless providers. A source suggests the first option is preferred and essential to protect against competition from China and "bad actors". The presentation suggests that a government-built network would then be leased out to carriers like AT&T, Verizon, and T-Mobile.
The PowerPoint presentation was produced by a senior National Security Council official, and argues that the move is necessary because "China has achieved a dominant position in the manufacture and operation of network infrastructure," and "China is the dominant malicious actor in the Information Domain."

It also suggests America could export its secure 5G technology to protect its allies, and "Eventually this effort could help inoculate developing countries against Chinese neo-colonial behavior."
The Military

Fitness-Tracking App Reveals Locations of Secret Army Bases (theguardian.com) 118

Coisiche shared this story from the Guardian: Sensitive information about the location and staffing of military bases and spy outposts around the world has been revealed by a fitness tracking company. The details were released by Strava in a data visualisation map that shows all the activity tracked by users of its app, which allows people to record their exercise and share it with others. The map, released in November 2017, shows every single activity ever uploaded to Strava -- more than 3 trillion individual GPS data points, according to the company. The app can be used on various devices including smartphones and fitness trackers like Fitbit to see popular running routes in major cities, or spot individuals in more remote areas who have unusual exercise patterns.

However, over the weekend military analysts noticed that the map is also detailed enough that it potentially gives away extremely sensitive information about a subset of Strava users: military personnel on active service... In locations like Afghanistan, Djibouti and Syria, the users of Strava seem to be almost exclusively foreign military personnel, meaning that bases stand out brightly. In Helmand province, Afghanistan, for instance, the locations of forward operating bases can be clearly seen, glowing white against the black map.

One analyst analyst predicted that after this discovery, "A lot of people are going to have to sit through lectures come Monday morning."

Another military analyst told the Guardian "U.S bases are clearly identifiable" -- though he added that the map "looks very pretty."
Facebook

Russian Trolls Created Facebook Events Seen By More Than 300,000 Users (cnn.com) 220

"Posing as American activists, Russian government-linked trolls created 129 Facebook events between 2015 and 2017," writes CNN. An anonymous reader quotes their report: On multiple occasions, the events prompted real Americans to take to the streets. In a written statement Facebook gave to the Senate Intelligence Committee released on Thursday, the social media network said that the events created by one Kremlin-linked troll group were seen by more than 300,000 Facebook users. About 62,500 users marked that they would attend the event, and an additional 25,800 expressed an interest in attending.

Facebook told Congress it does "not have data about the realization of these events," but CNN has previously found evidence that the Russian group successfully convinced Americans to attend the demonstrations. The events were organized on a range of divisive issues and were designed to pit Americans against each other.

"The company also told Congress it had removed Kaspersky Lab from a list of free anti-virus offerings it provides users."
OS X

Apple Deprecates More Services In OS X Server (apple.com) 145

Long-time Slashdot reader HEMI426 writes: Long ago, Apple used to produce rack servers, and a special flavor of OS X for that hardware with extra, server-friendly features. After Apple got out of the rack server game, OS X Server soldiered on, with the occasional change in cost or distribution method.

The next stop on the long, slow death march of OS X Server is here. With a recent post to their knowledgebase, Apple states that almost all of the services not necessary for the management of networked Macs and other iDevices are being deprecated. These services will be hidden for new installs, and dropped in the future.

Apple writes that "those depending on them should consider alternatives, including hosted services."
Intel

Microsoft Issues Windows Out-of-Band Update That Disables Spectre Mitigations (bleepingcomputer.com) 90

An anonymous reader quotes BleepingComputer: Microsoft has issued on Saturday an emergency out-of-band Windows update that disables patches for the Spectre Variant 2 bug (CVE-2017-5715). The update -- KB4078130 -- targets Windows 7 (SP1), Windows 8.1, all versions of Windows 10, and all supported Windows Server distributions. Microsoft shipped mitigations for the Meltdown and Spectre bugs on January 3. The company said it decided to disable mitigations for the Spectre Variant 2 bug after Intel publicly admitted that the microcode updates it developed for this bug caused "higher than expected reboots and other unpredictable system behavior" that led to "data loss or corruption."

HP, Dell, and Red Hat took previous steps during the past week.

"We are also offering a new option -- available for advanced users on impacted devices -- to manually disable and enable the mitigation against Spectre Variant 2 (CVE 2017-5715) independently via registry setting changes..." Microsoft writes.

"We recommend Windows customers, when appropriate, reenable the mitigation against CVE-2017-5715 when Intel reports that this unpredictable system behavior has been resolved for your device. "
Bug

Malwarebytes Released Two Bad Web Protection Updates (csoonline.com) 70

Malwarebytes had a bad day Saturday, pushing out an update "that gobbled up memory and CPU resources and turned off web protection," reports CSO. The company's forums lit up with complaints that the software was hogging 90 percent or more of memory and CPU resources. One thread about RAM usage currently is 37-pages long. Aware of the problem, Malwarebytes tweeted that "all hands" were on deck to resolve the issue. Unfortunately, even though a new update package was pushed out in about an hour, it did not fix the problem. Even after rebooting their computers, some users reported that their systems locked up as soon as the Malwarebytes Service process started as it ate large amounts of RAM.
"Two bad updates later, Malwarebytes released a fix," CSO reports, noting the company's blog post with steps to resolve the issue.

Long-time Slashdot reader marquis111 shares a link to an apology from Malwarebytes CEO Marcin Kleczynski, who says that he'll be "personally available" to discuss the problem on both the forums and at his personal email address.
Power

Giant Tesla Battery In Australia Earns A Million Bucks In a Few Days (electrek.co) 222

Long-time Slashdot reader drinkypoo writes: Last week, Neoen's and Tesla's massive battery was paid up to $1000/MWh to charge itself and now it could have earned up to 1 million AUD in the last few days by selling the power back to the grid to cover a coal plant outage. Unlike other forms of power storage, battery systems can be switched between states (charging, discharging, or idle) effectively instantly, which permits a stabilizing effect on the grid.
"What we are seeing here," writes Fred Lambert at Electrek.co, "is the Powerpack system enabling Neoen to sell electricity at up to $14,000 AUD per MWh and charging itself at almost no cost during overproduction."
Music

Streaming Services Must Hike Songwriter Payments Nearly 50%, Court Rules (bloomberg.com) 88

An anonymous reader quotes Bloomberg: Songwriters will get a larger cut of revenue from streaming services after a court handed technology companies a big defeat. The Copyright Royalty Board ruled that songwriters will get at least a 15.1 percent share of streaming revenues over the next five years, from a previous 10.5 percent. That's the largest rate increase in CRB history, according to a statement from the National Music Publishers' Association. The decision is a major victory for songwriters, who have long complained they are insufficiently uncompensated by on-demand music services like Spotify and YouTube.
"The ratio of what labels are paid by the services versus what publishers are paid has significantly improved," argues the NMPA, "resulting in the most favorable balance in the history of the industry.

"While an effective ratio of 3.82 to 1 is still not a fair split that we might achieve in a free market, it is the best songwriters have ever had under the compulsory license... The decision represents two years of advocacy regarding how unfairly songwriters are treated under current law and how crucial their contributions are to streaming services."

Meanwhile, the U.S. Congress has introduced a bipartisan "Music Modernization Act" to overhaul the rate court, and to create a new governing agency to issue blanket licenses to streaming services and then collect and distribute the resulting roylaties.
Science

Do Particles Have Consciousness? (qz.com) 498

An anonymous reader quotes Quartz: Consciousness permeates reality. Rather than being just a unique feature of human subjective experience, it's the foundation of the universe, present in every particle and all physical matter. This sounds like easily-dismissible bunkum, but as traditional attempts to explain consciousness continue to fail, the "panpsychist" view is increasingly being taken seriously by credible philosophers, neuroscientists, and physicists, including figures such as neuroscientist Christof Koch and physicist Roger Penrose...

"Physical science tells us a lot less about the nature of matter than we tend to assume," says Philip Goff, a philosophy professor at Central European University in Budapest, Hungary. "Arthur Eddington" -- the English scientist who experimentally confirmed Einstein's theory of general relativity in the early 20th century -- "argued there's a gap in our picture of the universe. We know what matter does but not what it is. We can put consciousness into this gap"...

An alternative panpsychist perspective holds that, rather than individual particles holding consciousness and coming together, the universe as a whole is conscious. This, says Goff, isn't the same as believing the universe is a unified divine being; it's more like seeing it as a "cosmic mess." Nevertheless, it does reflect a perspective that the world is a top-down creation, where every individual thing is derived from the universe, rather than a bottom-up version where objects are built from the smallest particles. Goff believes quantum entanglement -- the finding that certain particles behave as a single unified system even when they're separated by such immense distances there can't be a causal signal between them -- suggests the universe functions as a fundamental whole rather than a collection of discrete parts. Such theories sound incredible, and perhaps they are. But then again, so is every other possible theory that explains consciousness.

Government

WikiLeaks' Julian Assange Asks UK Judge to Drop His Arrest Warrant (theguardian.com) 229

An anonymous reader quotes the Guardian: WikiLeaks founder, Julian Assange, has asked a UK court to drop the arrest warrant that prevents him from leaving the Ecuadorian embassy in London, where he has been living for five and a half years. Assange, 46, skipped bail to enter the embassy in 2012 in order to avoid extradition to Sweden over allegations of sexual assault and rape, which he denies... Mark Summers QC told senior district judge Emma Arbuthnot at Westminster magistrates court on Friday that now that the Swedish case had been dropped the warrant had "lost its purpose and its function". He said because Swedish extradition proceedings against Assange had come to an end, so had the life of the arrest warrant... Arbuthnot said she would give her judgment about the arrest warrant on 6 February.
Judge Arbuthnot said she'd rule only on the legal issue, though the court had also received evidence about medical problems which included "a terrible bad tooth, frozen shoulder and depression."

Representing the Crown Prosecution Service, Aaron Watkins it would be absurd for defendants to be "rewarded with effective immunity" simply for having evaded proceedings for long enough.
Transportation

'No Drones or Driverless Trucks', Demands Teamsters Labor Union (cnbc.com) 295

An anonymous reader quotes CNBC: No drones or driverless vehicles for delivering packages -- that's one of the major demands from the Teamsters labor union in the big contract negotiation it's undertaking with UPS this week. The union wants to ban UPS from using such new-fangled technology, which the logistics company has been reportedly testing... The current agreement affects 260,000 full and part-time UPS employees and expires in July. "UPS is focused on a contract that provides the flexibility needed to remain highly competitive, given the challenge of an increasingly crowded logistics segment," the company told CNBC.
The Drive notes the smaller carbon footprint of drone deliveries, while adding that "one completely understands and empathizes with the aversion truck drivers have toward this stark, autonomous future.

"If it feels like their jobs are being endangered by the incredible exponential growth in technology, it's because they are."

Slashdot Top Deals