ZDNet's editor-in-chief warns that Amazon has ambitious plans for its new Echo Plus: Amazon is making an explicit play to be the home hub because it can automatically discover and set up lights, locks, plugs, and switches without the need for additional hubs or apps. And the Alexa 'routines' feature will be able to tie all of this together by allowing you to automate a series of actions with a single voice command: saying "Alexa, good night," and having it turn off the lights, lock the door, and turn off the TV, for example. A platform that other apps and devices can connect into? This starts to sound a lot like an operating system for the home to me.

It's not just the home, either; Amazon announced a deal to make Alexa available in BMW and Mini vehicles from the middle of next year, allowing drivers to use the digital assistant to get directions, play music or control smart home devices while travelling, without having to use a separate app. Travellers will also have access to Alexa skills from third-party developers like Starbucks, allowing them to order their coffee while driving and thus skip the line. Back in January, Amazon and Ford said they were working together to allow voice commands to turn on the engine, lock or unlock the doors as well as play music and use other skills...

It's still early days but I think Alexa has a good shot at becoming one of the standard interfaces, certainly for consumers -- an operating system for the home, if not more, if the automotive tie-ups take off too. All of this will make Amazon a serious force to be reckoned with. Windows has the desktop, and Android and iOS can fight it out for the smartphone, but right now Alexa has a lock on the smart home.

How did a 37-ton tanker suddenly vanish from GPS off the coast of Russia? AmiMoJo shares a report from Wired: The ship's systems located it 25 to 30 miles away -- at Gelendzhik airport... The Atria wasn't the only ship affected by the problem... At the time, Atria's AIS system showed around 20 to 25 large boats were also marooned at Gelendzhik airport. Worried about the situation, captain Le Meur radioed the ships. The responses all confirmed the same thing: something, or someone, was meddling with the their GPS...

After trawling through AIS data from recent years, evidence of spoofing becomes clear. GPS data has placed ships at three different airports and there have been other interesting anomalies. "We would find very large oil tankers who could travel at the maximum speed at 15 knots," said a former director for Marine Transportation Systems at the U.S. Coast Guard. "Their AIS, which is powered by GPS, would be saying they had sped up to 60 to 65 knots for an hour and then suddenly stopped. They had done that several times"...

"It looks like a sophisticated attack, by somebody who knew what they were doing and were just testing the system..." says Lukasz Bonenberg from the University of Nottingham's Geospatial Institute. "You basically need to have atomic level clocks."
The U.S. Maritime Administration confirms 20 ships have been affected -- all traveling in the Black Sea -- though a U.S. Coast Guard representative "refused to comment on the incident, saying any GPS disruption that warranted further investigation would be passed onto the Department of Defence." But the captain of the 37-ton tanker already has his own suspicions. "It looks like the Russians define an area where they don't want the GPS to apply."

An anonymous reader quotes Fortune:There are two kinds of companies, according to a saying that former Equifax CEO Rick Smith shared in a speech at the University of Georgia on August 17. "There's those companies that have been breached and know it, and there are those companies that have been breached and don't know it," he said. Though it was still 21 days before his company would reveal that it had been massively hacked, Equifax, at that time, had been breached and knew it...

Smith's fastest growing area of security concern was state-sponsored hacking and espionage, he said. "It's countries you'd expect -- you know it's China, Russia, Iran, and Iraq -- and they're being very aggressive trying to get access to the know-how about how companies have built their capabilities, and transport that know-how back to their countries," said Smith. "It's my number one worry." he added.
"In a speech at the University of Georgia last month, he described a stagnating credit reporting agency with a 'culture of tenure' and 'average talent", reports Bloomberg, adding that the Equifax CEO also bragged that the company's data-crunching business nonetheless earned a gross profit margin of 90%.

AmiMoJo quotes Reuters: Britain's first solar power farm to operate without a government subsidy is due to open in eastern England on Tuesday, as a sharp fall in costs has made renewable energy much more economical. Britain needs to invest in new energy capacity to replace aging coal and nuclear plants that are due to close in the 2020s. But it is also trying to reduce subsidies on renewable power generation... The 10 megawatt (MW) solar farm, in Clayhill, Bedfordshire, can generate enough electricity to power around 2,500 homes and also has a 6 MW battery storage facility on site.

Mark Wilson writes: It's now a little more than a year since Microsoft first brought extensions to Edge. After so long you would expect the selection of addons to be overwhelming -- but that's far from being the case. In all, there are only 70-odd Edge extensions available, and Microsoft has been moved to explain why.

In a blog post, the company almost apologetically explains that it is "building a thoughtfully curated ecosystem," citing concern over quality and a fear of diminishing the user experience. What some might describe as "slow," Microsoft refers to as a "purposefully metered approach" to new extensions, and you probably shouldn't expect things to speed up a great deal any time soon.
Colleen Williams, senior program manager for Microsoft Edge, says "We want Microsoft Edge to be your favorite browser, with the fundamentals you expect -- speed, power efficiency, reliability, security." She also adds that "Astute observers of our release notes and active testers in the Insider program may have noticed that some preview builds break extensions temporarily."

An anonymous reader quotes NBC: Cellphones smuggled into prisons -- enabling inmates to order murders, plan escapes, deal drugs and extort money -- have become a scourge in a bloc of states where corrections officers annually confiscate as many as one for every three inmates... In South Carolina, prison officers have found and taken one phone for every three inmates, the highest rate in the country. In Oklahoma, it's one phone for every six prisoners, the nation's second-highest rate... Cellphones are prized because they allow inmates to avoid privatized jailhouse phone and visitation services that charge up to $15 for a two-minute call home to friends and family. "Inmates call their mothers like most of us do on holidays," said Dr. John Shaffer, former executive deputy secretary for the Pennsylvania Corrections Department.

But for some, the phones serve a darker purpose. "Most of these guys are just chitchatting with their girlfriends, but some of these guys are stone-hardened criminals running criminal enterprises," said Kevin Tamez of the MPM group, a litigation consulting firm that specializes in prison security... Meth rings operated by prisoners with cellphones, some with ties to prison gangs like the Aryan Brotherhood, the Irish Mob Gang and the United Blood Nation, have been discovered in at least five Southern facilities. Phones have also played a role in breakouts, with one South Carolina inmate dialing up drone delivery of wire cutters and cash for his escape in July. Cellphones are so prevalent in the prison system, Tamez said, that "if you don't have them, you would look like a loser."
The article reports convicts have actually uploaded in-prison videos to Facebook Live and to Snapchat. "Georgia inmates used phones to take photos of themselves tying up or beating other prisoners, then texted the horrifying images to the victim's family and demanded cash."

More than 400,000 lives are lost every year to malaria, reports the New York Post. But Thursday Science published two new studies on promisings ways to fight malaria -- with genetic engineering. The first study focused on whether mosquitoes that have been genetically modified to be more resistant to the malaria-causing parasite would become weaker and less able to mate and breed... The study, led by mosquito vector biologist George Dimopoulos, found that one type of genetically modified mosquito not only bred well, but became more attractive to normal mosquitoes... Within one generation, the mosquito population was becoming 90 percent genetically modified... The results suggest the genetically modified mosquitoes would not just thrive but could possibly drive their genetic immunity to the malaria parasite into mosquito populations to which they are introduced.

The second study published Thursday uses genetic modification of bacteria found inside mosquitoes to fight malaria. Researchers genetically modified a type of bacteria, which caused it to secrete a substance inside the mosquitoes' gut that kills off the malaria-causing parasite before it can develop properly... the genetically modified versions of the bacteria automatically spread to offspring in generation after generation, the researchers found. The next step for both approaches -- the genetically modified mosquitoes and bacteria -- is to test if they work outside the lab in conditions simulating nature. Johns Hopkins has built a "mosquito house" research facility in Zambia designed specifically for such experiments... But the researchers must first convince the Zambian government to allow their genetically modified subjects into its borders.

An anonymous reader writes: Security researchers have discovered a new technique that allows malware to bypass Windows Defender, the standard security software that comes included with all Windows operating systems. The technique -- nicknamed Illusion Gap -- relies on a mixture of both social engineering and the use of a rogue SMB server.

The attack exploits a design choice in how Windows Defender scans files stored on an SMB share before execution. For Illusion Gap to work, the attacker must convince a user to execute a file hosted on a malicious SMB server under his control. This is not as complex as it sounds, as a simple shortcut file is all that's needed.

The problems occur after the user double-clicks this malicious file. By default, Windows will request from the SMB server a copy of the file for the task of creating the process that executes the file, while Windows Defender will request a copy of the file in order to scan it. SMB servers can distinguish between these two requests, and this is a problem because an attacker can configure their malicious SMB server to respond with two different files. The attacker can send a malicious file to the Windows PE Loader, and a benign file to Windows Defender. After Windows Defender scans the clean file and gives the go-ahead, Windows PE Loader will execute the malicious file without Windows Defender realizing they're two different things. Microsoft declined to patch the bug, considering it a "feature request."

An anonymous reader quotes Bloomberg's report on the contractor Equifax first hired to investigate their breach: Equifax and Mandiant got into a dispute just as the hackers were gaining a foothold in the company's network... Mandiant warned Equifax that its unpatched systems and misconfigured security policies could indicate major problems, a person familiar with the perspectives of both sides said. For its part, Equifax believed Mandiant had sent an undertrained team without the expertise it expected from a marquee security company...

That rift, which appears to have squelched a broader look at weaknesses in the company's security posture, looks to have given the intruders room to operate freely within the company's network for months. According to an internal analysis of the attack, the hackers had time to customize their tools to more efficiently exploit Equifax's software, and to query and analyze dozens of databases to decide which held the most valuable data. The trove they collected was so large it had to be broken up into smaller pieces to try to avoid tripping alarms as data slipped from the company's grasp through the summer... By the time they were done, the attackers had accessed dozens of sensitive databases and created more than 30 separate entry points into Equifax's computer systems.
"They may not have immediately grasped the value of their discovery, but, as the attack escalated over the following months, that first group -- known as an entry crew -- handed off to a more sophisticated team of hackers," reports Bloomberg, suggesting that the attack may have been sponsored by a nation-state.

Bill Gates uses an Android phone now. "It may not be the most surprising revelation, given profits are sinking faster than a boat without a hull and big-name partners are jumping ship left and right, but the founder of Microsoft has presumably left Windows Mobile," reports Neonwin. Long-time Slashdot reader Billly Gates (no relation) writes: I would assume this is the final nail in the coffin for Windows Phone and the rumored Surface Phone which may never see the light of day. Over the past few months we have seen a change in Microsoft with them being friendly to Linux with stories of porting .NET core over to Linux, helping write a custom Linux kernel, as well as introducing the not-so-popular-on-slashdot WSL Ubuntu for WIndows 10.
Noting the Android emulators in Visual Studio, he's wondering if the company's ambitions go beyond developers, and if they're planning a Microsoft version of Android, "as the tools are in place with Ubuntu, Node.js, Python, Microsoft Code editor, and the Visual Studio 2017 Community Edition."

His original submission points out that 10 years ago these stories would have been unimaginable, but he also asks a second question: has Microsoft really changed? "Could we be seeing a new Microsoft now that the world is moving to mobile and they have no operating system in it?"

An anonymous reader writes: InfoWorld announced the winners of this year's "Best of Open Source Software Awards" -- honoring 68 different projects, spread across five categories. Besides the 15 best software development tools, they also recognized the best cloud computing software, machine learning tools, and networking and security software (as well as the best databases and analytics tools).

"Open source software isn't what it used to be," writes Doug Dineley, the site's executive editor. "The term used to conjure images of the lone developer, working into the night and through weekends, banging out line after line of code to scratch a personal itch or realize a personal vision... But as you wend your way through our Bossie winners, you're bound to be struck by the number of projects with heavyweight engineering resources behind them... Elsewhere in the open source landscape, valuable engineering resources come together in a different way -- through the shared interest of commercial software vendors."

More than 10% of the awards went to the Apache Software Foundation -- 7 of the 68 -- though I was surprised to see that five of the best software development tools are languages -- specifically Kotlin, Go, Rust, Clojure, and Typescript. Two more of the best open source software development tools were Microsoft products -- .Net Core and Visual Studio Code. And in the same category was OpenRemote a home automation platform, as well as Ethereum, which "smells and tastes like an open source project that is solving problems and serving developers."

"If you don't place a Capable Engineering crew to oversee a project that involves lives, you're asking for trouble," writes Slashdot reader Neuronwelder. Consumer Reports writes: Congress is moving ahead with plans to let self-driving cars be tested on U.S. roads without having to comply with the same safety rules as regular vehicles... The House passed its version of the legislation earlier this month with little opposition. The Senate is expected to vote on its bill in the coming weeks... "Federal law shouldn't leave consumers as guinea pigs," said William Wallace, policy analyst for Consumers Union. "We were hopeful that this bill would include much stronger measures to protect consumers against known emerging safety risks. Unfortunately, in the bill's current form, it doesn't."

The legislation, which would take effect in 18 months, would allow the deployment of up to 50,000 self-driving vehicles per company in the first year of its application, rising to 100,000 vehicles annually by the third year, exempt from essential federal safety standards... Automakers might be able to go beyond the limits by getting exemptions for more than one model. The bill also creates a means to go beyond 100,000 cars for each company, by allowing automakers to petition the NHTSA after five years for more vehicles.
"The bill pre-empts any state safety standards," argues the group Consumer Watchdog, "but there are none yet in place at the national level."

Vortex.com is one of the oldest domains on the internet -- one of the first 40 ever registered, writes Slashdot reader Lauren Weinstein. So why does Google sometimes block the email he sends? Here's why. First, my message had the audacity to mention "Google Account" or "Google Accounts" in the subject and/or body of the message. And secondly, one of my mailing lists is "google-issues" -- so some (digest format) recipients received the email from "google-issues-request@vortex.com"... Apparently what we're dealing with here is a simplistic (and frankly, rather haphazard in this respect at least) string-matching algorithm that could have come right out of the early 1970s...! [A]t least in this case, it appears that Google is basically using the venerable old UNIX/Linux "grep" command or some equivalent, and in a rather slipshod way, too.
In addition, the article concludes, "I've never found a way to get Google to 'whitelist' well-behaved senders against these kinds of errors, so some users see these false phishing warnings repeatedly.

An anonymous reader quotes the EFF: In the past few years, the sale of pre-configured Kodi boxes, and the availability of a range of plugins providing access to streaming media, has seen the software's popularity balloon -- and made it the latest target of Hollywood's copyright enforcement juggernaut. We've seen this in the appearance of streaming media boxes as an enforcement priority in the U.S. Trade Representative's Special 301 Report, in proposals for new legislation targeting the sale of "illicit" media boxes, and in lawsuits that have been brought on both sides of the Atlantic to address the "problem" that media boxes running Kodi, like any Web browser, can be used to access media streams that were not authorized by the copyright holder...

The difficulty facing the titans of TV is that since neither those who sell Kodi boxes, nor those who write or host add-ons for the software, are engaging in any unauthorized copying by doing so, cases targeting these parties have to rely on other legal theories. So far several legal theories have been used; one in Europe against sellers of Kodi boxes, one in Canada against the owner of the popular Kodi add-on repository TVAddons, and two in the United States against TVAddons and a plugin developer... These lawsuits by big TV incumbents seem to have a few goals: to expand the scope of secondary copyright infringement yet again, to force major Kodi add-on distributors off of the Internet, and to smear and discourage open source, freely configurable media players by focusing on the few bad actors in that ecosystem.
The EFF details the specific lawsuits in each region, and concludes that their courts "should reject these expansions of copyright liability, and TV networks should not target neutral platforms and technologies for abusive lawsuits."

schwit1 was the first Slashdot reader to bring us the news. Newsweek reports: Archaeologists believe they have found the key to unlocking a mystery almost as old as the Great Pyramid itself: Who built the structure and how were they able to transport two-ton blocks of stone to the ancient wonder more than 4,500 years ago...? Experts had long established that the stones from the pyramid's chambers were transported from as far away as Luxor, more than 500 miles to the south of Giza, the location of the Great Pyramid, but had never agreed how they got there. However, the diary of an overseer, uncovered in the seaport of Wadi al-Jafr, appears to answer the age-old question, showing the ancient Egyptians harnessed the power of the Nile to transport the giant blocks of stone.

According to a new British documentary Egypt's Great Pyramid: The New Evidence, which aired on the U.K.'s Channel 4 on Sunday, the Great Pyramid, also known as the Pyramid of Khufu, was built using an intricate system of waterways which allowed thousands of workers to pull the massive stones, floated on boats, into place with ropes. Along with the papyrus diary of the overseer, known as Merer, the archaeologists uncovered a ceremonial boat and a system of waterworks. The ancient text described how Merer's team dug huge canals to channel the water of the Nile to the pyramid.