Cloud

New US Customs Guidelines Limit Copying Files and Searching Cloud Data (theverge.com) 71

The U.S. Customs and Border Protection Agency has updated its guidelines for electronic border searches, adding new detail to border search rules that were last officially updated in 2009. The Verge reports: Officers can still request that people unlock electronic devices for inspection when they're entering the U.S., and they can still look through any files or apps on those devices. But consistent with a statement from acting commissioner Kevin McAleenan last summer, they're explicitly banned from accessing cloud data -- per these guidelines, that means anything that can't be accessed while the phone's data connection is disabled. The guidelines also draw a distinction between "basic" and "advanced" searches. If officers connect to the phone (through a wired or wireless connection) and copy or analyze anything on it using external devices, that's an advanced search, and it can only be carried out with reasonable suspicion of illegal activity or a national security concern. A supervisor can approve the search, and "many factors" might create reasonable suspicion, including a terrorist watchlist flag or "other articulable factors."
Operating Systems

Eben Upton Explains Why Raspberry Pi Isn't Vulnerable To Spectre Or Meltdown (raspberrypi.org) 116

Raspberry Pi founder and CEO Eben Upton says the Raspberry Pi isn't susceptible to the "Spectre" or "Meltdown" vulnerabilities because of the particular ARM cores they use. "Spectre allows an attacker to bypass software checks to read data from arbitrary locations in the current address space; Meltdown allows an attacker to read data from arbitrary locations in the operating system kernel's address space (which should normally be inaccessible to user programs)," Upton writes. He goes on to provide a "primer on some concepts in modern processor design" and "illustrate these concepts using simple programs in Python syntax..."

In conclusion: "Modern processors go to great lengths to preserve the abstraction that they are in-order scalar machines that access memory directly, while in fact using a host of techniques including caching, instruction reordering, and speculation to deliver much higher performance than a simple processor could hope to achieve," writes Upton. "Meltdown and Spectre are examples of what happens when we reason about security in the context of that abstraction, and then encounter minor discrepancies between the abstraction and reality. The lack of speculation in the ARM1176, Cortex-A7, and Cortex-A53 cores used in Raspberry Pi render us immune to attacks of the sort."
Earth

NASA Launches a Mission To Study the Border of Earth and Space (arstechnica.com) 45

An anonymous reader quotes a report from Ars Technica: A new NASA mission, the first to hitch a ride on a commercial communications satellite, will examine Earth's upper atmosphere to see how the boundary between Earth and space changes over time. GOLD stands for Global-scale Observations of the Limb and Disk, and the mission will focus on the temperature and makeup of Earth's highest atmospheric layers. Along with another upcoming satellite, called ICON, GOLD will examine how weather on Earth -- and space weather caused by the sun -- affects those uppermost layers. GOLD, which will inspect the ultraviolet radiation that the upper atmosphere releases, will also be the first to take comprehensive records of that atmospheric layer's temperature. The satellite carrying GOLD will orbit 22,000 miles (35,400 kilometers) above Earth in a geostationary orbit, which means GOLD will stay fixed with respect to Earth's surface as the satellite orbits and the world turns. GOLD will pay particularly close attention to Earth's thermosphere, which is the gas that surrounds the Earth higher than 60 miles (97 km) up, and the layer called the ionosphere, which forms as radiation from the sun strips away electrons from particles to create charged ions. And although solar flares and other interactions on the sun do have a strong impact on those layers, scientists are learning that Earth's own weather has an impact on the layers, too.
AI

Ex-NSA Hacker Is Building an AI To Find Hate and Far-Right Symbols on Twitter and Facebook (vice.com) 509

Motherboard reporter Lorenzo Franceschi-Bicchierai has interviewed Emily Crose, a former NSA hacker, who has built NEMESIS, an AI-powered program that can help spot symbols that have been co-opted by hate groups to signal to each other in plain sight. Crose, who has also moderated Reddit in the past, thought of building NEMESIS after the Charlottesville, Virginia incident last year. From the report: Crose's motivation is to expose white nationalists who use more or less obscure, mundane, or abstract symbols -- or so-called dog whistles -- in their posts, such as the Black Sun and certain Pepe the frog memes. Crose's goal is not only to expose people who use these symbols online but hopefully also push the social media companies to clamp down on hateful rhetoric online. "The real goal is to educate people," Crose told me in a phone call. "And a secondary goal: I'd really like to get the social media platforms to start thinking how they can enforce some decency on their own platforms, a certain level of decorum." [...]

At a glance, the way NEMESIS works is relatively simple. There's an "inference graph," which is a mathematical representation of trained images, classified as Nazi or white supremacist symbols. This inference graph trains the system with machine learning to identify the symbols in the wild, whether they are in pictures or videos. In a way, NEMESIS is dumb, according to Crose, because there are still humans involved, at least at the beginning. NEMESIS needs a human to curate the pictures of the symbols in the inference graph and make sure they are being used in a white supremacist context. For Crose, that's the key to the whole project -- she absolutely does not want NEMESIS to flag users who post Hindu swastikas, for example -- so NEMESIS needs to understand the context. "It takes thousands and thousands of images to get it to work just right," she said.

Businesses

Ford is Giving Its Factory Workers Robot Exo-suits To Ease To Burden of Building Cars (qz.com) 49

Mike Murphy, writing for Quartz: Ford's cars are getting closer to driving themselves, but they still need humans to build them. And because people aren't quite as durable as robots, it's trying to make those jobs easier by developing a suit with Ekso Bionics that takes the stress out of working long hours on a car assembly floor. Ekes, founded in 2005 in California, builds exoskeletons, essentially robotic assistive systems that people strap into to make walking, lifting, and standing easier. It's worked with the US military to build suits for soldiers. The system Ekso developed with Ford, called the EksoVest, doesn't use any motors to make working on factory lines less stressful, and it's nothing like what you see in movies, as it simply uses hydraulics to redistribute weight so that workers can comfortably raise their arms above their heads for extended periods of time. The suit can be worn by anyone from 5 ft to 6 ft 4 inches tall, and can provide lift assistance up to 15 pounds per arm. Some assembly-line workers at the average Ford plant lift their arms 4,600 times a day -- or about 1 million times a year, the company said.
Science

Arbitrary Deadlines Are the Enemy of Creativity, According to Harvard Research (qz.com) 123

Time can feel like the enemy to an employee in any role, and in any industry, but it's most acutely threatening to creative types. From a report: We may tease them for their diva-like behaviors when they feel persecuted by a deadline, but we have to admit that "develop an amazing new idea" is not something that slides into your schedule, like pick up lunch or respond to new clients. Nor can systems be tweaked and extra hands hired to help hit a goal that requires innovation, the way they can when mundane busy work is piling up. And yet deadlines are a fact of life for any company that wants to stay competitive. In a recent Harvard Business School podcast, professor Teresa Amabile, whose academic career has focused on individuals, teams, and creativity, offers some guidance for managers who struggle to support or coax their creative talent. She explains that although the creative process itself can't be controlled, certain structures can set up the conditions to move it along. When possible, managers should avoid tight deadlines for creative projects. In her work, Amabile found that creative teams can produce ideas on a deadline, and creative people may feel productive on high-pressured days, but their ideas won't be inspired.
Businesses

Leading Lobbying Group for Amazon, Facebook, Google and Other Tech Giants is Joining the Legal Battle To Restore Net Neutrality (recode.net) 77

A leading lobbying group for Amazon, Facebook, Google, Netflix, Twitter and other tech giants said Friday that it would be joining the coming legal crusade to restore the U.S. government's net neutrality rules. From a report: The Washington, D.C.-based Internet Association specifically plans to join a lawsuit as an intervening party, aiding the challenge to FCC Chairman Ajit Pai's vote in December to repeal regulations that required internet providers like AT&T and Comcast to treat all web traffic equally, its leader confirmed to Recode. Technically, the Internet Association isn't filing its own lawsuit. That task will fall to companies like Etsy, public advocates like Free Press and state attorneys general, all of which plan to contend they are most directly harmed by Pai's decision, as Recode first reported this week. As an intervener, though, the Internet Association still will play a crucial role, filing legal arguments in the coming case. And in formally participating, tech giants will have the right to appeal a judge's decision later if Silicon Valley comes out on the losing end. "The final version of Chairman Pai's rule, as expected, dismantles popular net neutrality protections for consumers," said the group's chief, Michael Beckerman, in a statement. "This rule defies the will of a bipartisan majority of Americans and fails to preserve a free and open internet."
Businesses

What Happens When States Have Their Own Net Neutrality Rules? (bloomberg.com) 179

Last month FCC Chairman Ajit Pai dismantled Obama-era rules on net neutrality. A handful of lawmakers in liberal-leaning U.S. states plan to spend this year building them back up. FCC anticipated the move -- the commission's rules include language forbidding states from doing this, warning against an unwieldy patchwork of regulations. But lawmakers in New York and California aren't aiming to be exceptions to the national rules; they're looking to, in effect, create their own. From a report: In New York, Assemblywoman Patricia Fahy introduced a bill that would make it a requirement for internet providers to adhere to the principles of net neutrality as a requirement for landing state contracts. This would mean they couldn't block or slow down certain web traffic, and couldn't offer faster speeds to companies who pay them directly. Fahy said the restrictions on contractors would apply even if the behaviors in question took place outside New York. She acknowledged that the approach could run afoul of limits on states attempting to regulate interstate commerce, but thought the bill could "thread the needle." Even supporters of state legislation on net neutrality think this may go too far. California State Senator Scott Wiener introduced a bill this week that would only apply to behavior within the state, saying any other approach would be too vulnerable to legal challenge.

But this wouldn't be the first time a large state threw around its weight in ways that reverberate beyond its borders. The texbook industry, for instance, has long accommodated the standards of California and Texas. [...] The internet doesn't lend itself cleanly to state lines. It could be difficult for Comcast or Verizon to accept money from services seeking preferential treatment in one state, then make sure that its network didn't reflect those relationships in places where state lawmakers forbade them, said Geoffrey Manne, executive director of the International Center for Law & Economics, a research group.

Businesses

Jimmy Iovine To Leave Apple Music in August: Report (billboard.com) 46

An anonymous reader shares a report: Look for Jimmy Iovine to leave Apple Music in August. The former Interscope CEO joined Apple in 2014 after selling Beats, the the music service and electronics business that he and Dr. Dre co-founded, to the tech giant for $3 billion. It is believed his departure is timed to his Apple shares fully vesting, sources tell Billboard. Iovine's ties to Apple go back to 2003 when he first met Apple founder Steve Jobs and exec Eddy Cue, and was a key proponent of Apple's iTunes and iPod. Apple Music, Apple's subscription streaming service, has expanded to more than 30 million paying subscribers since its June 2015 launch. That success is, in part, due to Iovine's focus on content, including developing original programming.
Google

White Noise Video on YouTube Hit By Five Copyright Claims (bbc.com) 219

Chris Baraniuk, reporting for BBC: A musician who made a 10-hour long video of continuous white noise -- indistinct electronic hissing -- has said five copyright infringement claims have been made against him. Sebastian Tomczak, who is based in Australia, said he made the video in 2015 and uploaded it to YouTube. The claimants accusing him of infringement include publishers of white noise intended for sleep therapy. "I will be disputing these claims," he told the BBC. In this case, those accusing Mr Tomczak are not demanding the video's removal, but instead the reward of any revenue made from advertising associated with it. Without the claims, Mr Tomczak would receive such revenue himself. "I am intrigued and perplexed that YouTube's automated content ID system will pattern-match white noise with multiple claims," he said.
AI

Amazon Alexa is Coming To Headphones, Smart Watches, Bathrooms and More (cnbc.com) 89

An anonymous reader shares a CNBC report: Amazon announced new tools on Friday that will allow gadget-makers to include the smart voice assistant in a whole array of new products. Alexa is Amazon's smart voice assistant and it has slowly made its way from the Amazon Echo into third-party speakers, refrigerators and, soon, even microwaves. Now, with Amazon's Alexa Mobile Accessory Kit, device makers will be able to build Alexa into headphones, smart watches, fitness trackers and more. That means you may soon be able to look down at your wrist and ask Alexa the weather, or to remind you to pick up eggs at the grocery store. CNET reports Kohler, a company that makes plumbing products, wants to bring Alexa to your bathroom as well.
HP

HP Recalls 50,000 Lithium-Ion Laptop Batteries Over Fire Risk (consumerreports.org) 41

HP announced this week that it is recalling the lithium-ion batteries in more than 50,000 laptops because of the danger of fire in cases of battery malfunction. From a report: "These batteries have the potential to overheat, posing a fire and burn hazard to customers," the company said in a statement. "For this reason, it is extremely important to check whether your battery is affected." The recall affects the battery, not the entire computer. Consumers should run HP's Validation Utility software to determine if their battery has been recalled. If the battery needs to be replaced, they should then install an update that will put the device in Battery Safe Mode, which will discharge the battery and prevent it from being charged until it's replaced. This update will allow consumers to continue using the computers safely with AC power while they wait for a new battery. The recall affects batteries sold with, or as accessories for, the following models: HP Probook 640 G2, HP ProBook 640 G3, HP ProBook 645 G2, HP ProBook 645 G3, HP ProBook 650 G2, HP ProBook 650 G3, HP ProBook 655 G2, HP ProBook 655 G3, HP ZBook 17 G3, HP ZBook 17 G4, HP ZBook Studio G3, HP x360 310 G2, HP Pavilion x360, HP ENVY m6, and HP 11 Notebook PC.
Intel

Nope, No Intel Chip Recall After Spectre and Meltdown, CEO Says (cnet.com) 372

Hoping the Meltdown and Spectre security problems might mean Intel would be buying you a shiny new computer after a chip recall? Sorry, that's not on the cards. From a report: Intel famously paid hundreds of millions of dollars to recall its Pentium processors after the 1994 discovery of the "FDIV bug" that revealed rare but real calculation errors. But Intel CEO Brian Krzanich said the new problems are much more easily fixed -- and indeed are already well on their way to being fixed, at least in the case of Intel-powered PCs and servers. "This is very very different from FDIV," Krzanich said, criticizing media coverage of Meltdown and Spectre as overblown. "This is not an issue that is not fixable... we're seeing now the first iterations of patches." On Thursday, Intel said it was aiming to fix 90 percent of all Intel products that have been introduced within the past year by end of next week. CNET asked if the company was looking at older Intel processors? From the report: "We're working with [computer makers] to determine which ones to prioritize based on what they see as systems in the field," an executive at the company said. Intel also is fixing the problem in future chips, starting with products that will arrive later this year. Intel is effectively taking the software fixes being released now and building them directly into hardware, he said.
Intel

When F00F Bug Hit 20 Years Ago, Intel Reacted the Same Way (itwire.com) 141

troublemaker_23 writes: A little more than 20 years ago, Intel faced a problem with its processors, though it was not as big an issue as compared to the speculative execution bugs that were revealed this week. The 1997 bug, which came to be known as the F00F bug, allowed a malicious person to freeze up Pentium MMX and "classic" Pentium computers. Any Intel Pentium/Pentium MMX could be remotely and anonymously caused to hang, merely by sending it the byte sequence "F0 0F C7 C8". At the time, Intel said it learnt about the bug on 7 November 1997, but a report said that at least two people had indicated on an Intel newsgroup that the company knew about it earlier before. The processor firm confirmed the existence on 10 November. But, says veteran Linux sysadmin Rick Moen, the company's reaction to that bug was quite similar to the way it has reacted to this week's disclosures.

"Intel has a long history of trying to dissemble and misdirect their way out of paying for grave CPU flaws," Moen said in a post to Linux Users of Victoria mailing list. "Remember the 'Pentium Processor Invalid Instruction Erratum' of 1997, exposing all Intel Pentium and Pentium MMX CPUs to remote security attack, stopping them in their tracks if they could be induced to run processory instruction 'F0 0F C7 C8'? "No, of course you don't. That's why Intel gave it the mind-numbingly boring official name 'Pentium Processor Invalid Instruction Erratum', hoping to replace its popular names 'F00F bug' and 'Halt-and-Catch Fire bug'."

Government

The FCC Is Preparing To Weaken the Definition of Broadband (dslreports.com) 217

An anonymous reader quotes a report from DSLReports: Under Section 706 of the Telecommunications Act, the FCC is required to consistently measure whether broadband is being deployed to all Americans uniformly and "in a reasonable and timely fashion." If the FCC finds that broadband isn't being deployed quickly enough to the public, the agency is required by law to "take immediate action to accelerate deployment of such capability by removing barriers to infrastructure investment and by promoting competition in the telecommunications market." Unfortunately whenever the FCC is stocked by revolving door regulators all-too-focused on pleasing the likes of AT&T, Verizon and Comcast -- this dedication to expanding coverage and competition often tends to waver.

What's more, regulators beholden to regional duopolies often take things one-step further -- by trying to manipulate data to suggest that broadband is faster, cheaper, and more evenly deployed than it actually is. We saw this under former FCC boss Michael Powell (now the top lobbyist for the cable industry), and more recently when the industry cried incessantly when the base definition of broadband was bumped to 25 Mbps downstream, 4 Mbps upstream. We're about to see this effort take shape once again as the FCC prepares to vote in February for a new proposal that would dramatically weaken the definition of broadband. How? Under this new proposal, any area able to obtain wireless speeds of at least 10 Mbps down, 1 Mbps would be deemed good enough for American consumers, pre-empting any need to prod industry to speed up or expand broadband coverage.

Slashdot Top Deals