The White House has publicly blamed North Korea for a ransomware attack in May that locked more than 300,000 computers in 150 countries. From a report: In an opinion piece published in The Wall Street Journal on Monday, Homeland security adviser Tom Bossert writes that after careful investigation, Washington can say that Pyongyang is "directly responsible" for the WannaCry virus. Bossert called the attack in which victims received ransom demands to unlock their computers "cowardly, costly and careless." "The consequences and repercussions of WannaCry were beyond economic," he wrote. "The malicious software hit computers in the U.K.'s health-care sector particularly hard, compromising systems that perform critical work. These disruptions put lives at risk." More details here.

If you're thinking about buying gadgets from auction sites such as Ebay, you will want to consider the potential risks. From a report: When you're buying from a third-party seller, it's a lot more difficult to tell where products have come from, whether you're getting exactly what you think you're getting, and if anything has been done to the product since it was manufactured. "It is possible for internet-connected devices to be tampered with and resold on the web," Leigh-Anne Galloway, lead cybersecurity resilience analyst at the cybersecurity firm Positive Technologies, told Quartz. "It's similar to buying a secondhand cellphone without it being restored to factory settings." In fact, buying a second hand gadget can potentially expose the user to some pretty extreme scenarios. "Cameras and IoT devices can contain spyware and malware, which can cause a plethora of problems for the user," Galloway added. "These devices could possibly listen to you, watch your every step, communicate with and attack other devices connected to the same local network, such as PCs, laptops, and TVs." Galloway said devices could also be used to perform botnet attacks -- where an unsecured internet-connected device is accessed by another computer and used along with other breached devices to take down websites or internet services, as what happened with the Mirai botnet attack in 2016.

An anonymous reader quotes a report from Motherboard: A core Republican talking point during the net neutrality battle was that, in 2015, President Obama led a government takeover of the internet, and Obama illegally bullied the independent Federal Communications Commission into adopting the rules. In this version of the story, Ajit Pai's rollback of those rules Thursday is a return to the good old days, before the FCC was forced to adopt rules it never wanted in the first place. But internal FCC documents obtained by Motherboard using a Freedom of Information Act request show that the independent, nonpartisan FCC Office of Inspector General -- acting on orders from Congressional Republicans -- investigated the claim that Obama interfered with the FCC's net neutrality process and found it was nonsense. This Republican narrative of net neutrality as an Obama-led takeover of the internet, then, was wholly refuted by an independent investigation and its findings were not made public prior to Thursday's vote.

Using a Freedom of Information Act request, Motherboard obtained a summary of the Inspector General's report, which has not been released publicly and is marked "Official Use Only, Law Enforcement Sensitive Information." After reviewing more than 600,000 emails, the independent office found that there was no collusion between the White House and the FCC: "We found no evidence of secret deals, promises, or threats from anyone outside the Commission, nor any evidence of any other improper use of power to influence the FCC decision-making process." [...] Since 2014, Republicans have pointed to net neutrality as an idea primarily promoted by President Obama, and have made it another in a long line of regulations and laws that they have sought to repeal now that Donald Trump is president. Prior to this false narrative, though, net neutrality was a bipartisan issue; the first net neutrality rules were put in place under President George W. Bush, and many Republicans worked on the 2015 rules that were just dismantled. What happened, then, is that Republicans sold the public a narrative that wasn't true, then used that narrative to repeal the regulations that protect the internet.

schwit1 shares a report from The Merkle: No one will be surprised to hear the Venezuelan government isn't too keen on Bitcoin and other cryptocurrencies. Since Bitcoin and other cryptocurrencies can't be regulated or controlled by the government in any official capacity, they could damage the country's brittle economy even further. As a result, the government has imposed new rules for anyone mining cryptocurrency. To be more specific, all miners will now be taxed and required to register with the government. Being taxed is not entirely illogical, but the registration requirement is pretty worrisome, to say the least. The government shouldn't need to know who is doing what in regards to crypto trading and mining. Nevertheless, authorities want to know who is mining, where they are located, and what type of equipment they use. "That'll put food back on the shelves," adds schwit1.

Paleobiologists have confirmed today that life forms existed some 3.5 billion years ago. The new study, published in the journal Proceedings of the National Academy of Sciences, uses the latest techniques to date the most aged remains available. Quartz reports: The research, led by paleobiologist William Schopf of the University of California-Los Angeles and geoscientist John Valley of the University of Wisconsin-Madison, has been in the works for what seems a long time to most, but which the academics know is merely a blink of the eye in terms of life on Earth. The specimens in question, mostly now-extinct bacteria and microbes, were found in 1982 at the Apex Chert, a rock formation in Western Australia, in a piece of rock. In 1993, based on radiometric analyses of the rock, and the shape of fossils, Schopf dated them as biological beings that existed 3.45 billion years ago. The rock held the earliest direct evidence of life, Schopf thought, and inferred from it that creatures existed over a billion years earlier than anyone previously believed. But some scientists argued that this claim was too speculative and that the microfossils, invisible to the naked eye, were really just weirdly-shaped bits of rock, strange minerals that only seem to contain biological specimens but do not.

Since then, technology has improved and Schopf and Valley teamed up to devise a new way to analyze the rock specimen, which now lives in the London Museum of Natural History. Valley spent 10 years developing a method to analyze the individual species that are shaped like tiny cylinders and filaments. Any type of organic substance (including both rock and microbe) contains a characteristic mix of carbon isotopes. Using a secondary ion mass spectrometer (a very rare tool, one of which is housed at the University of Wisconsin), the scientists were able to separate the carbon in each fossil into isotopes. That way, they could measure the carbon-isotope makeup of each fossil, and compare those to fossil-less rocks from the same era. [...] After analyzing the microfossils individually, they identified five species, concluding that two were photosynthesizers, two were methane-consuming organisms, and one produced methane.

An anonymous reader quotes a report from NPR: Older brains may forget more because they lose their rhythm at night. During deep sleep, older people have less coordination between two brain waves that are important to saving new memories, a team reports in the journal Neuron. The finding appears to answer a long-standing question about how aging can affect memory even in people who do not have Alzheimer's or some other brain disease. The study was the result of an effort to understand how the sleeping brain turns short-term memories into memories that can last a lifetime, says Matt Walker, the author of the book Why We Sleep. "What is it about sleep that seems to perform this elegant trick of cementing new facts into the neural architecture of the brain?" To find out, Walker and a team of scientists had 20 young adults learn 120 pairs of words. "Then we put electrodes on their head and we had them sleep," he says. The electrodes let researchers monitor the electrical waves produced by the brain during deep sleep. They focused on the interaction between slow waves, which occur every second or so, and faster waves called sleep spindles, which occur more than 12 times a second. The next morning the volunteers took a test to see how many word pairs they could still remember. And it turned out their performance was determined by how well their slow waves and spindles had synchronized during deep sleep.

Next, the team repeated the experiment with 32 people in their 60s and 70s. Their brain waves were less synchronized during deep sleep. They also remembered fewer word pairs the next morning. And, just like with young people, performance on the memory test was determined by how well their brain waves kept the beat, says Randolph Helfrich, an author of the new study and a postdoctoral fellow at UC Berkeley. The team also found a likely reason for the lack of coordination associated with aging: atrophy of an area of the brain involved in producing deep sleep. People with more atrophy had less rhythm in the brain, Walker says.

France's privacy watchdog CNIL has ordered WhatsApp to stop sharing user data with its parent company Facebook. According to a public notice posted on the French website, WhatsApp has a month to comply with the order. The Verge reports: The query began after WhatsApp added to its terms of service last year that it shares data with Facebook to develop targeted advertising, security measures, and to gather business intelligence. Upon investigating these claims, the CNIL ruled that while WhatsApp's intention of improving security measures was valid, the app's business intelligence reason wasn't as acceptable. After all, WhatsApp never told its users it was collecting data for business intelligence and there's no way to opt out without uninstalling the app. That violates "the fundamental freedoms of users," said the CNIL.

Media software maker Plex today announced a new incubator and community resource called Plex Labs. "The idea here is to help the company's internal passion projects gain exposure, along with those from Plex community members," reports TechCrunch. "Plex Labs is also unveiling its first product: a music player called Plexamp," which is designed to replace the long-lost Winamp. From the report: The player was built by several Plex employees in their free time, and is meant for those who use Plex for music. As the company explains in its announcement, the goal was to build a small player that sits unobtrusively on the desktop and can handle any music format. The team limited itself to a single window, making Plexamp the smaller Plex player to date, in terms of pixel size. Under the hood, Plexamp uses the open source audio player Music Player Daemon (MPD), along with a combination of ES7, Electron, React, and MobX technologies. The end result is a player that runs on either macOS or Windows and works like a native app. That is, you can use media keys for skipping tracks or playing and pausing music, and receive notifications. The player can also handle any music format, and can play music offline when the Plex server runs on your laptop.

The player also supports gapless playback, soft transitions and visualizations to accompany your music. Plus, the visualizations' palette of colors is pulled from the album art, Plex notes. Additionally, Plexamp makes use of a few up-and-coming features that will be included in Plex's subscription, Plex Pass, in the future. These new features are powering functionality like loudness leveling (to normalize playback volume), smart transitions (to compute the optimal overlap times between tracks), soundprints (to represent tracks visually), waveform seeking (to present a graphical view of tracks), Library stations, and artist radio.

Facebook is cracking down on a new type of clickbait: Posts that ask people to "Like" or share or comment to goose engagement numbers, what Facebook is calling "engagement bait." Their solution? Demote the posts considered to be "engagement bait." Recode reports: Facebook has decided it doesn't like publishers gaming the system this way, and claims users don't like it either."People have told us that they dislike spammy posts on Facebook that goad them into interacting with likes, shares, comments, and other actions," the company wrote on its blog. So starting Monday, posts that Facebook considers to be engagement bait will be pushed down in News Feed. Beginning in a few weeks, publishers and Pages that continue to utilize this tactic will see their reach diminished for all of their posts.

An anonymous reader quotes a report from PBS: U.S. Centers for Disease Control and Prevention director Dr. Brenda Fitzgerald on Sunday addressed a report that President Donald Trump's administration had banned the CDC from using seven words or phrases in next year's budget documents. The terms are "fetus," "transgender," "vulnerable," "entitlement," "diversity," "evidence-based" and "science-based," according to a story first reported on Friday in The Washington Post. But Fitzgerald said in a series of tweets on Sunday said there are "no banned words," while emphasizing the agency's commitment to data-driven science. "CDC has a long-standing history of making public health and budget decisions that are based on the best available science and data and for the benefit of all people -- and we will continue to do so," she said.

A group of the agency's policy analysts said senior officials at the CDC informed them about the banned words on Thursday, according to the Post's report. In some cases, the analysts were reportedly given replacement phrases to use instead. But in follow-up reporting, The New York Times cited "a few" CDC officials who suggested the move was not meant as an outright ban, but rather, a technique to help secure Republican approval of the 2019 budget by eliminating certain words and phrases. A spokesperson for the Department of Health and Human Services, which oversees the CDC, said the reported decree on banned words was a misrepresentation.

Freshly Exhumed writes: Two major backbone internet service providers -- Level 3 and Cogent -- appear to be suffering from massive outages and downgraded service, according to ISP monitoring service Downdetector. Users in San Francisco, Los Angeles, Chicago, Boston, Dallas, Atlanta, New York, Philadelphia, Baltimore, and Washington, D.C. are apparently being hit the hardest. Comcast is also said to be affected to a lesser degree. "Backbone internet service providers work directly with large internet platforms like Netflix to deliver large amounts of data across networks, and also work behind the scenes of consumer-facing ISPs," reports Slate. "Since the internet is an interconnected mess of wires, disruptions with Level 3 and Cogent could impact service for Comcast and Verizon users in turn."

Tesla has issued a new policy called Supercharger Fair Use, which prohibits new commercial drivers from using the red-and-white charging ports. The reason behind this new policy is to help alleviate congestion and improve the experience for others who rely on the Supercharging services. The Verge reports: Tesla says that the stations are intended for drivers who don't have ready options for charging at home or at work, and that when they're not used for this purpose, "it negatively impacts the availability of Supercharging services for others." Thus, the new policy says that for vehicles purchased after December 15th, drivers who plan to use their vehicles as a taxi, for ridesharing, commercial delivery or transportation, governmental purposes, or other commercial ventures won't be permitted to use the free stations. The company tracks usage and driver behavior, and if they find that someone isn't complying with the policy, they might be asked to stop, and simply limit or block one's vehicle from the stations in certain instances. The policy went into effect on Friday, December 15th, 2017. A Tesla spokesperson said that the company does "encourage the use of Teslas for commercial purposes," and that they will work with drivers to find other places to charge their vehicles. The policy carve out an exception, saying that some stations might be excluded, depending on local circumstances.

An anonymous reader quotes a report from Ars Technica: U.S. Senate Minority Leader Chuck Schumer (D-N.Y.) said he will force a vote on a bill that would reinstate the Federal Communications Commission's net neutrality rules. Legislation to reverse the repeal "doesn't need the support of the majority leader," Schumer said during a press conference Friday, according to The Hill. "We can bring it to the floor and force a vote. So, there will be a vote to repeal the rule that the FCC passed." The Federal Communications Commission voted to repeal its own net neutrality rules last week, and the repeal will take effect 60 days after it is published in the Federal Register. But Congress can overturn agency actions by invoking the Congressional Review Act (CRA), as it did earlier this year in order to eliminate consumer broadband privacy protections. A successful CRA vote in this case would invalidate the FCC's net neutrality repeal and prevent the FCC from issuing a similar repeal in the future. This would force the FCC to maintain the rules and the related classification of ISPs as common carriers under Title II of the Communications Act. A CRA vote lets Congress "undo regulations with a simple majority," without the possibility of a filibuster, as a Washington Post story said in February. Sen. Ed Markey (D-Mass.) announced a plan to file the CRA resolution last week. "It's in our power to do that and that's the beauty of the CRA rule," Schumer said. "Sometimes we don't like them, when they used it to repeal some of the pro-environmental regulations, but now we can use the CRA to our benefit, and we intend to."

FastCompany's harrymcc writes: It's not like there's ever a year that isn't rife with stories about buggy software. But 2017 seems to have had an unusually rich supply of software flaws that fouled up major products -- from Twitter to iOS 11 to the Google Pixel 2 -- in ways that were very noticeable and sometimes even funny. Sample this: A nagging flaw in Google's Play Services software for Android causes Gmail to demand access to "body sensors" before it will let users send email. Android Police's Artem Russakovskii discovers that his Mini is recording audio 24/7 and storing it on Google's servers. I rounded up a bunch of them over at Fast Company.

Moscow-based anti-virus company Kaspersky Lab sued the Trump administration in U.S. federal court on Monday, arguing that the American government has deprived it of due process rights by banning its software from U.S. government agencies. From a report: The lawsuit is the latest effort by Kaspersky Lab to push back on allegations that the company is vulnerable to Kremlin influence. The Department of Homeland Security in September issued a directive to U.S. civilian agencies ordering them to remove Kaspersky Lab from their computer networks within 90 days. The order came amid mounting concern among U.S. officials that the software could enable Russian espionage and threaten national security. The ban was codified last week when President Donald Trump signed legislation banning Kasperky Lab from use across civilian and military agencies.