An anonymous reader quotes the Press Democrat: When deadly flames incinerated hundreds of homes in Santa Rosa's Fountaingrove neighborhood earlier this month, they also destroyed irreplaceable papers and correspondence held nearby and once belonging to the founders of Silicon Valley's first technology company, Hewlett-Packard. The Tubbs fire consumed the collected archives of William Hewlett and David Packard, the tech pioneers who in 1938 formed an electronics company in a Palo Alto garage with $538 in cash. More than 100 boxes of the two men's writings, correspondence, speeches and other items were contained in one of two modular buildings that burned to the ground at the Fountaingrove headquarters of Keysight Technologies. Keysight, the world's largest electronics measurement company, traces its roots to HP and acquired the archives in 2014 when its business was split from Agilent Technologies -- itself an HP spinoff.

The Hewlett and Packard collections had been appraised in 2005 at nearly $2 million and were part of a wider company archive valued at $3.3 million. However, those acquainted with the archives and the pioneering company's impact on the technology world said the losses can't be represented by a dollar figure... Karen Lewis, the former HP staff archivist who first assembled the collections, called it irresponsible to put them in a building without proper protection. Both Hewlett-Packard and Agilent earlier had housed the archives within special vaults inside permanent facilities, complete with foam fire retardant and other safeguards, she said. "This could easily have been prevented, and it's a huge loss," Lewis said.
Lewis has described the collection as "the history of Silicon Valley ... This is the history of the electronics industry." Keysight Technologies spokesman Jeff Weber said the company "is saddened by the loss of documents that remind us of our visionary founders, rich history and lineage to the original Silicon Valley startup."

23 Californians were killed in the fires, which also destroyed 6,800 homes, and Weber says Keysight had taken "appropriate and responsible" steps to protect the archive, but "the most destructive firestorm in state history prevented efforts to protect portions of the collection."

"The BBC is reporting a security probe after security data about Heathrow was discovered on a USB found on the street," writes long-time Slashdot readers Martin S. From the article: The Sunday Mirror reported that the USB stick had 76 folders with maps, videos and documents, including details of measures used to protect the Queen. A man found it in west London and handed it into the paper, it said. Heathrow said all of its security plans had been reviewed and it was "confident" the airport was secure. "We have also launched an internal investigation to understand how this happened and are taking steps to prevent a similar occurrence in future," it said.
The Mirror reports that the USB stick was not encrypted and did not require a password, according to an article shared by Slashdot reader rastos1. Insiders "admitted it sparked a 'very, very urgent' probe, and that it posed 'a risk to national security'."

An anonymous reader quotes an announcement from SLAC: Scientists from Stanford University and the Department of Energy's SLAC National Accelerator Laboratory have captured the first atomic-level images of finger-like growths called dendrites that can pierce the barrier between battery compartments and trigger short circuits or fires... This is the first study to examine the inner lives of batteries with cryo-electron microscopy, or cryo-EM, a technique whose ability to image delicate, flash-frozen proteins and other "biological machines" in atomic detail was honored with the 2017 Nobel Prize in chemistry... The ability to see this level of detail for the first time with cryo-EM will give scientists a powerful tool for understanding how batteries and their components work at the most fundamental level and for investigating why high-energy batteries used in laptops, cell phones, airplanes and electric cars sometimes fail, the researchers said...

In cryo-EM, samples are flash-frozen by dipping them into liquid nitrogen, then sliced for examination under the microscope. You can freeze a whole coin-cell battery at a particular point in its charge-discharge cycle, remove the component you're interested in and see what is happening inside that component at an atom-by-atom scale. You could even create a stop-action movie of battery activity by stringing together images made at different points in the cycle... Zooming in, they used a different technique to look at the way electrons bounced off the atoms in the dendrite, revealing the locations of individual atoms in both the crystal and its solid electrolyte interphase (SEI) coating. When they added a chemical commonly used to improve battery performance, the atomic structure of the SEI coating became more orderly, and they think this may help explain why the additive works.

An anonymous reader quotes a local NBC news report: Stories are starting to pour in about those impacted by last month's massive Equifax data breach, which compromised the private information of more than 140 million people. Katie Van Fleet of Seattle says she's spent months trying to regain her stolen identity, and says it has been stolen more than a dozen times. "I kept receiving letters from Kohl's, from Macy's, from Home Depot, from Old Navy saying 'thank you for your application,'" she said to CNN affiliate KCPQ. But she says she's never applied for credit from any of those places. Instead, Van Fleet and her attorney Catherine Fleming say they believe her personal data was stolen during the massive Equifax security breach... Fleming has filed a class-action lawsuit against Equifax, saying they were negligent in losing private information on more than 140 million Americans... "Countless people, I mean, I've really, truly lost count, and the stories that like Katie's, the stories I hear are heart-wrenching," Fleming said.
But are things about to get worse? Marketwatch reports: It will become harder for consumers to sue their banks or companies like Equifax... The Senate voted Tuesday night to overturn a rule the Consumer Financial Protection Bureau worked on for more than five years. The final version of the rule banned companies from putting "mandatory arbitration clauses" in their contracts, language that prohibits consumers from bringing class-action lawsuits against them. It applies to institutions that sell financial products, including bank accounts and credit cards. Consumer advocates say it's good news for companies like Wells Fargo or Equifax, which have both had class-action lawsuits filed against them, and bad news for their customers... Lisa Gilbert, the vice president of legislative affairs at Public Citizen, a nonprofit based in Washington, D.C., said the Senate vote shouldn't impact cases that are already ongoing. However, there will "certainly" be more forced arbitration clauses in contracts in the future, and fewer cases brought against companies, she said.

"In Portugal, with no net neutrality, internet providers are starting to split the net into packages," argues a California congressman -- retweeting a stunning graphic. An anonymous reader quotes BoingBoing's Cory Doctorow: Since 2006, Net Neutrality activists have been warning that a non-Neutral internet will be an invitation to ISPs to create "plans" where you have to choose which established services you can access, shutting out new entrants to the market and allowing the companies with the deepest pockets to permanently dominate the internet... the Portuguese non-neutral ISP MEO has mistaken a warning for a suggestion, and offers a series of "plans" for its mobile data service where you pay €5 to access a handful of messaging services, €5 more to use social media; and €5 more for video-streaming services.
The congressman notes this arrangement offers "a huge advantage for entrenched companies, but it totally ices out startups trying to get in front of people, which stifles innovation."

"Feeds need to die because they distort our views and disconnect us from other human beings around us," argues TechCrunch's Romain Dillet: At first, I thought I was missing out on some Very Important Content. I felt disconnected. I fought against my own FOMO. But now, I don't feel anything. What's going on on Instagram? I don't care. Facebook is now the worst internet forum you can find. Twitter is filled with horrible, abusive people. Instagram has become a tiny Facebook now that it has discouraged all the weird, funny accounts from posting with its broken algorithm. LinkedIn's feed is pure spam.

And here's what I realized after forgetting about all those "social" networks. First, they're tricking you and pushing the right buttons to make you check your feed just one more time. They all use thirsty notifications, promote contrarian posts that get a lot of engagement and play with your emotions. Posting has been gamified and you want to check one more time if you got more likes on your last Instagram photo. Everything is now a story so that you pay more attention to your phone and you get bored less quickly -- moving pictures with sound tend to attract your eyes... [F]inally, I realized that I was missing out by constantly checking all my feeds. By putting my phone on 'Do Not Disturb' for days, I discovered new places, started conversations and noticed tiny little things that made me smile.
He concludes that technology has improved the way we learn, communicate, and share information, "But it has gone too far...

"Forget about your phone for a minute, look around and talk with people next to you."

schwit1 quotes UPI: New research suggests volcanic eruptions can trigger periods of rapid ice sheet melting... "Over a time span of 1,000 years, we found that volcanic eruptions generally correspond with enhanced ice sheet melting within a year or so," Francesco Muschitiello, a postdoctoral researcher at Columbia University's Lamont-Doherty Earth Observatory, said in a news release. The volcanoes of note weren't situated next-door, but thousands of miles from the ice sheet, a reminder of the unexpected global impacts of volcanic activity.

The new research -- detailed this week in the journal Nature Communications -- suggests ash ejected into the atmosphere by erupting volcanoes can be deposited thousands of miles away. When it's deposited on ice sheets, the dark particles cause the ice to absorb more thermal energy and accelerate melting... Some scientists have even suggested melting encouraged by volcanic eruptions could trigger even more eruptions, a positive feedback loop. As glaciers and ice sheets melt, pressure is relieved from the planet's crust, allowing magma to rise to the surface.

"San Francisco company Purism announced that they are now offering their Librem laptops with the Intel Management Engine disabled," writes Slashdot reader boudie2. Purism describes Management Engine as "a separate CPU that can run and control a computer even when powered off."

HardOCP reports that Management Engine "is widely despised by security professionals and privacy advocates because it relies on signed and secret Intel code, isn't easily alterable, isn't fully documented, and has been found to be vulnerable to exploitation... In short, it's a tiny potentially hackable computer in your computer that you cannot totally control, nor opt-out of, but it can totally control your system."

Purism writes: Disabling the Management Engine is no easy task, and it has taken security researchers years to find a way to properly and verifiably disable it. Purism, because it runs coreboot and maintains its own BIOS firmware update process, has been able to release and ship coreboot that disables the Management Engine from running, directly halting the ME CPU without the ability of recovery... "Disabling the Management Engine, long believed to be impossible, is now possible and available in all current Librem laptops. It is also available as a software update for previously shipped recent Librem laptops," says Todd Weaver, Founder & CEO of Purism.

"[N]early 200 F-35s might permanently remain unready for combat because the Pentagon would rather buy new aircraft than upgrade the ones the American people have already paid for," according to one defense news site. And now Bloomberg reports: The Pentagon is accelerating production of Lockheed Martin Corp.'s F-35 jet even though the planes already delivered are facing "significantly longer repair times" than planned because maintenance facilities are six years behind schedule, according to a draft audit. The time to repair a part has averaged 172 days -- "twice the program's objective" -- the Government Accountability Office, Congress's watchdog agency, found. The shortages are "degrading readiness" because the fighter jets "were unable to fly about 22 percent of the time" from January through August for lack of needed parts.

The Pentagon has said soaring costs to develop and produce the F-35, the costliest U.S. weapons system, have been brought under control, with the price tag now projected at $406.5 billion. But the GAO report raises new doubts about the official estimate that maintaining and operating them will cost an additional $1.12 trillion over their 60-year lifetime.
Slashdot reader schwit1 writes, "This is akin to buying an exotic car you can barely afford, without also budgeting for insurance, repairs, and tuneups."

"In a brutal reminder of the secrecy tech companies enforce on employees, Apple recently fired an employee after his daughter posted a video of the iPhone X," writes long-time Slashdot reader HockeyPuck. Engadget reports: His daughter took down the video as soon as Apple requested it, but the takedown came too late to prevent the clip from going viral, leading to seemingly endless reposts and commentary... [I]t's important to stress that this wasn't a garden variety iPhone X. As an employee device, it had sensitive information like codenames for unreleased products and staff-specific QR codes. Combine that with Apple's general prohibition of recording video on campus (even at relatively open spaces like Caffe Macs) and this wasn't so much about maintaining the surprise as making sure that corporate secrets didn't get out. Apple certainly didn't want to send the message that recording pre-release devices was acceptable. All the same, it's hard not to sympathize -- the [radiofrequecy] engineer had poured his heart into the iPhone X, only to be let go the week before the handset reaches customers.
In a new follow-up video, the former Apple engineer's daughter says "I had no idea this was a violation," adding that her father "takes full reponsibility for letting me film his iPhone X." Here's some more quotes from her video.

An anonymous reader quotes HPE Insights: Software developers and testers must be sick of hearing security nuts rant, "Beware SQL injection! Monitor for cross-site scripting! Watch for hijacked session credentials!" I suspect the developers tune us out... The industry has generated newer tools, better testing suites, Agile methodologies, and other advances in writing and testing software. Despite all that, coders keep making the same dumb mistakes, peer reviews keep missing those mistakes, test tools fail to catch those mistakes, and hackers keep finding ways to exploit those mistakes. One way to see the repeat offenders is to look at the Open Web Application Security Project Top 10, a sometimes controversial ranking of the 10 primary vulnerabilities, published every three or four years by the Open Web Application Security Project... It boggles the mind that a majority of top 10 issues appear across the 2007, 2010, 2013, and draft 2017 OWASP lists...

It's sad that eight out of 10 of the issues from 2013 are still top security issues in 2017. In fact, if you consider that the draft 2017 list combined two of the 2013 items, it's actually nine out of 10. Ouch... What can you do? Train everyone better, for starters. Look at coding and test tools that can help detect or prevent security vulnerabilities, but don't consider them silver bullets. Do dynamic application security testing, including penetration testing and fuzz testing. Ensure admins do their part to protect applications. And finally, make sure you establish a culture of security-aware programming and deployment.

Slashdot reader blottsie shares a new article about the legendary Captain Crunch -- which includes Steve Wozniak's memory that Steve Jobs "started avoiding Crunch...afraid that it would put us too close to getting arrested." The Daily Dot reports: Wozniak and Jobs, of course, would go on to found the most successful tech company in the world. But Draper is far from being just an important footnote in Apple's history. He's the original hacking prankster, a purist driven by curiosity and craftsmanship, with a lifetime of exploits that have pushed technological and legal boundaries. And according to Jobs, in a rare 1994 interview, without him there wouldn't have been Apple. Now, for the first time, Draper is looking to publish his story with Beyond the Little Blue Box, an autobiography for which he's about to launch a Kickstarter campaign...

[H]e anonymously called in a national emergency directly to a furious President Richard Nixon on the Oval Office phone line, reporting that the West Coast had run out of toilet paper. He also claims he once bypassed the Iron Curtain to call Moscow in the Soviet Union. There's a playful mischief about him, but he's serious when it comes to his craft, relaying technical, intricate details about the systems he worked to hack... For many tinkering young coders and internet activists, Draper is still considered a folk hero, one whose apolitical infatuation with complex systems and compulsion to expose their limits made him a target -- especially where that curiosity crossed with corporate interests.
"Experiences like that taught us the power of ideas," Steve Jobs said in a 1994 interview. "The power of understanding that if you could build this box, you could control hundreds of billions of dollars around the world, that's a powerful thing." Steve Wozniak -- who writes the book's foreword -- remembers how Jobs ended that interview. "Steve Jobs said -- and I agree -- that without the blue box there might never have been an Apple."

Draper's Kickstarter campaign includes a "2600 Club" Bronze level, while people who pledge over $199 will receive an actual blue anonabox. And there's also a $10,000 "Super Phreak" level which includes a "VIP one-to-one meeting" with 74-year-old John Draper himself.

While Whole Foods "strategically marked down select items like avocados and almond milk, overall prices have dropped very slightly -- about 1 percent -- since Amazon ownership, according to an analysis by research firm Gordon Haskett." An anonymous reader quotes Bustle: This hardly seems like big savings, and Gordon Haskett noted that since the initial price cuts in August, the cost of some items have been slowly ticking back up. "The price of frozen foods, for example, was 7 percent higher on Sept. 26 than on Aug. 28, when Amazon officially took over," Abha Bhattarai reported for the Post, which is owned by Amazon. "Snack items had risen 5.3 percent in that period, while dairy and yogurt were up 2 percent. (Among categories where prices are lower: Beverages, down about 2.8 percent; bread and bakery, down 6.8 percent; and produce, down 0.5 percent...)"

For shoppers like me who buy mostly fresh fruits and vegetables, it did feel like I was saving money. However, one industry insider said there is a strategy behind how prices are cut. "The whole game is that you want the 100 most recognizable things -- milk, apples, bananas -- to be cheaper," Jan Rogers Kniffen, an industry consultant and former department store executive, told the Post. "If you can do that, you can build a perception that the whole store is competitively priced."
From July through September, Whole Foods brought in $1.3 billion in sales for Amazon.