Comment An AMAZING number of flaws (Score 1) 5
The big underlying issue is why does Microsoft deliver software with so many flaws?
Submission + - How Microsoft's "Little Workaround" Created a Major Pentagon Threat (propublica.org)
joshuark writes: ProPublica Reporter Renee Dudley heard Microsoft was running tech support for the U.S. Defense Department through China, the country’s biggest cybersecurity adversary.
The arrangement was called “digital escorting.” She thought it sounded like a conspiracy theory — until she started looking into it. This is the story of what she found and how her investigation changed government policy.
Microsoft is using engineers in China to help maintain the Defense Department’s computer systems — with minimal supervision by U.S. personnel — leaving some of the nation’s most sensitive data vulnerable to hacking from its leading cyber adversary, a ProPublica investigation has found.
The arrangement, which was critical to Microsoft winning the federal government’s cloud computing business a decade ago, relies on U.S. citizens with security clearances to oversee the work and serve as a barrier against espionage and sabotage.
National security and cybersecurity experts in the Trump administration contacted by ProPublica were also surprised to learn that such an arrangement was in place, especially at a time when the U.S. intelligence community and leading members of Congress and the Trump administration view China’s digital prowess as a top threat to the country.
Microsoft uses the escort system to handle the government’s most sensitive information that falls below “classified.” According to the government, this “high impact level” category includes “data that involves the protection of life and financial ruin.” The “loss of confidentiality, integrity, or availability” of this information “could be expected to have a severe or catastrophic adverse effect” on operations, assets and individuals, the government has said. In the Defense Department, the data is categorized as “Impact Level” 4 and 5 and includes materials that directly support military operations.
“If someone ran a script called ‘fix_servers.sh’ but it actually did something malicious then [escorts] would have no idea,” a former Microsoft engineer who worked on the escort system, told ProPublica in an email. That said, he maintained that the “scope of systems they could disrupt” is limited.
In an emailed statement, the Defense Information Systems Agency said that cloud service providers “are required to establish and maintain controls for vetting and using qualified specialists,” but the agency did not respond to ProPublica’s questions regarding the digital escorts’ qualifications.
It’s unclear whether other cloud providers to the federal government use digital escorts as part of their tech support. Amazon Web Services and Google Cloud declined to comment on the record for this article. Oracle did not respond to requests for comment.
A spokesperson for the inspector general — whose office is supposed to operate independently in order to investigate potential waste, fraud and abuse — told ProPublica they were not authorized to speak about the issue and directed questions to DISA public affairs.
The arrangement was called “digital escorting.” She thought it sounded like a conspiracy theory — until she started looking into it. This is the story of what she found and how her investigation changed government policy.
Microsoft is using engineers in China to help maintain the Defense Department’s computer systems — with minimal supervision by U.S. personnel — leaving some of the nation’s most sensitive data vulnerable to hacking from its leading cyber adversary, a ProPublica investigation has found.
The arrangement, which was critical to Microsoft winning the federal government’s cloud computing business a decade ago, relies on U.S. citizens with security clearances to oversee the work and serve as a barrier against espionage and sabotage.
National security and cybersecurity experts in the Trump administration contacted by ProPublica were also surprised to learn that such an arrangement was in place, especially at a time when the U.S. intelligence community and leading members of Congress and the Trump administration view China’s digital prowess as a top threat to the country.
Microsoft uses the escort system to handle the government’s most sensitive information that falls below “classified.” According to the government, this “high impact level” category includes “data that involves the protection of life and financial ruin.” The “loss of confidentiality, integrity, or availability” of this information “could be expected to have a severe or catastrophic adverse effect” on operations, assets and individuals, the government has said. In the Defense Department, the data is categorized as “Impact Level” 4 and 5 and includes materials that directly support military operations.
“If someone ran a script called ‘fix_servers.sh’ but it actually did something malicious then [escorts] would have no idea,” a former Microsoft engineer who worked on the escort system, told ProPublica in an email. That said, he maintained that the “scope of systems they could disrupt” is limited.
In an emailed statement, the Defense Information Systems Agency said that cloud service providers “are required to establish and maintain controls for vetting and using qualified specialists,” but the agency did not respond to ProPublica’s questions regarding the digital escorts’ qualifications.
It’s unclear whether other cloud providers to the federal government use digital escorts as part of their tech support. Amazon Web Services and Google Cloud declined to comment on the record for this article. Oracle did not respond to requests for comment.
A spokesperson for the inspector general — whose office is supposed to operate independently in order to investigate potential waste, fraud and abuse — told ProPublica they were not authorized to speak about the issue and directed questions to DISA public affairs.
Comment "unstated ability to get access to systems" (Score 1) 45
Transcript of Internet Caucus Panel Discussion Weldon statement. September 28, 1999
Rep. Curt Weldon : Thank you. Let me see if I can liven things up here in the last couple of minutes of the luncheon. First of all, I apologize for being late. And I thank Bob and the members of the caucus for inviting me here.
...
But the point is that when John Hamre briefed me, and gave me the three key points of this change, there are a lot of unanswered questions. He assured me that in discussions that he had had with people like Bill Gates and Gerstner from IBM that there would be, kind of a, I don't know whether it's a, unstated ability to get access to systems if we needed it., Now, I want to know if that is part of the policy, or is that just something that we are being assured of, that needs to be spoke. Because, if there is some kind of a tacit understanding, I would like to know what it is. Because that is going to be subjected to future administrations, if it is not written down in a clear policy way. I want to know more about this end use certificate. In fact, sitting on the Cox Committee as I did, I saw the fallacy of our end use certificate that we were supposedly getting for HPCs going into China, which didn't work. So, I would like to know what the policies are. So, I guess what I would say is, I am happy that there seems to be a coming together. In fact, when I first got involved with NSA and DOD and CIS, and why can't you sit down with industry, and work this out. In fact, I called Gerstner, and I said, can't you IBM people, and can't you software people get together and find the middle ground, instead of us having to do legislation.
Comment History but Microsoft's intent remains the same (Score 2) 74
Submission + - Feds Want to Drop Requirement for Autonomous Cars to Have a Brake Pedal (caranddriver.com)
sinij writes:
Braking distance regulations would stick around, but the physical pedals would no longer be required for cars designed to be exclusively autonomous.
I would want any autonomous car to have emergency brake and/or shutoff.
Submission + - Europe: The World's Fastest-warming Continent (barrons.com)
fjo3 writes: The latest heatwave sweeping across Europe is a stark reminder that it is the world's fastest-warming continent, stretching into an Arctic that is heating at an even greater pace.
Britain, France, Italy and Spain have issued red alerts and health warnings for much of their territory this week as the region endures its second heat episode since May.
Britain, France, Italy and Spain have issued red alerts and health warnings for much of their territory this week as the region endures its second heat episode since May.
Submission + - Helion says the 1st fusion power plant is coming soon. A cofounder isn't so sure (scientificamerican.com)
tedlistens writes: The startup backed by Sam Altman recently raised $465 million, tripling it's valuation as it races to build what it says will be the world's first fusion power plant, supplying Microsoft with carbon-free electricity in 2028.
But one of its founders—the plasma scientist whose research inspired its reactor design—has serious doubts.
But one of its founders—the plasma scientist whose research inspired its reactor design—has serious doubts.
Submission + - Bypass the polirical parties, add a new feedback to Congress (taxnvote.org)
SysEngineer writes: How would you change the US Federal budget? TaxNVote.org allows you to adjust 9 or 1000 categories of the next federal budget. The default form shows nine top-level categories (Defense, VA, Education, Health, Infrastructure, Science, Environment, DHS, Other); expand any line and you can allocate down to individual federal accounts — NASA, the National Park Service, specific research agencies, anything Congress votes on. Takes about five minutes at the top level, longer if you want the detail.
Tax N Vote (TNV) is a proposal to add a new feedback channel to the federal budget process. At tax filing each year, every taxpayer optionally submits a Tax Dollar — one person, one allocation. The IRS anonymizes submissions; the Census Bureau processes and stores them (where you can verify your own); the CBO aggregates one-person-one-vote between April 16 and May 1 and publishes "The People's Budget." A third reference point alongside the two party platforms — measurable, granular, and updated annually. Congress is not bound by it; what changes is that deviations from constituent preferences become documented, attributable, and electorally citable. The argument is system-dynamics, not partisan: changing the color of the players doesn't change the system. A simulation of the mechanism shows convergence toward whatever the People's Budget turns out to be, in both ideological directions tested. There will be a talk on the model at ISDC 2026 in Delft.
The Government-side processing of Tax Dollar documents is written in Rust — memory safety and predictable performance for government data handling. The browser-side allocation engine is a Rust WASM module inside a Vue frontend, so the math you see in the app is the same math the aggregator uses. Processing is divided across agencies that already exist; marginal cost to the government is less than renaming the Department of War.
Open source end to end. The Tax Dollar format is open, the reference implementation is at github.com/greenpdx/TaxNVote26, and anyone can build their own client, audit the aggregator, or publish pre-filled template budgets that citizens adopt with one click. Go build a budget: TaxNVote.org.
Tax N Vote (TNV) is a proposal to add a new feedback channel to the federal budget process. At tax filing each year, every taxpayer optionally submits a Tax Dollar — one person, one allocation. The IRS anonymizes submissions; the Census Bureau processes and stores them (where you can verify your own); the CBO aggregates one-person-one-vote between April 16 and May 1 and publishes "The People's Budget." A third reference point alongside the two party platforms — measurable, granular, and updated annually. Congress is not bound by it; what changes is that deviations from constituent preferences become documented, attributable, and electorally citable. The argument is system-dynamics, not partisan: changing the color of the players doesn't change the system. A simulation of the mechanism shows convergence toward whatever the People's Budget turns out to be, in both ideological directions tested. There will be a talk on the model at ISDC 2026 in Delft.
The Government-side processing of Tax Dollar documents is written in Rust — memory safety and predictable performance for government data handling. The browser-side allocation engine is a Rust WASM module inside a Vue frontend, so the math you see in the app is the same math the aggregator uses. Processing is divided across agencies that already exist; marginal cost to the government is less than renaming the Department of War.
Open source end to end. The Tax Dollar format is open, the reference implementation is at github.com/greenpdx/TaxNVote26, and anyone can build their own client, audit the aggregator, or publish pre-filled template budgets that citizens adopt with one click. Go build a budget: TaxNVote.org.
Submission + - Alan Turing developed a portable voice encryption device (popularmechanics.com)
smooth wombat writes: Alan Turing, one of the more famous people who worked at Bletchley Park to decipher the German Enigma coding machine, was also working on a separate project. His private papers, known as the Bayley papers for his assistant Donald Bayley who held onto the papers until his death in 2020, reveal Turning had produced a working model of a portable voice encryption device. He even demonstrated it by using a Winston Churchill speech recording.
“Weighing just 39 kg, including its power pack,” Copeland summarizes, “Delilah would be at home in a truck, a trench, or a large backpack.”
Turing’s work at Bletchley Park actually informed the Delilah experimentation he was doing at Hanslope Park, and not just because he used Red Forms, the Army-issue sheets Hanslope staffers were meant to use to alert Bletchley staffers to enemy signals, as his personal scrap paper for Delilah experiments. He drew inspiration from one of the German cipher machines they had decoded at Bletchley; not the famed Enigma machine, but rather the SZ42. While the former relied on Morse Code, the latter utilized a 5-bit telegraph code, which Copeland notes “was a forerunner of ASCII and Unicode and is still used by some ham radio operators.”
The SZ42 produced an obscuring key of telegraph characters, with an identical key produced to both the sender and receiver. If it could be done for text, Turing reasoned it could be done for sound as well.
This is the part of the story where one might say “Well, I’ve never heard of Alan Turing’s voice encoder, so the experiments must have failed.” But remarkably, they didn’t. Turing and Bayley actually did create their Delilah, and even demonstrated it using a recording of a Winston Churchill speech, “successfully encrypting, transmitting, and decrypting it.”
Instead, the reason Delilah fell to the wayside of history isn’t because it was a failure, but rather because it simply wasn’t needed anymore. By the time Turing had built and demonstrated his device, the war was over. What good was a portable voice encryptor if you had no major enemies trying to intercept your calls, the government reasoned. So funding for the project stopped, and Turing’s two-year experiment ended with a whimper. Turing’s time as an electrical engineer at Hanslope Park became a footnote in his story, if even that.
“Weighing just 39 kg, including its power pack,” Copeland summarizes, “Delilah would be at home in a truck, a trench, or a large backpack.”
Turing’s work at Bletchley Park actually informed the Delilah experimentation he was doing at Hanslope Park, and not just because he used Red Forms, the Army-issue sheets Hanslope staffers were meant to use to alert Bletchley staffers to enemy signals, as his personal scrap paper for Delilah experiments. He drew inspiration from one of the German cipher machines they had decoded at Bletchley; not the famed Enigma machine, but rather the SZ42. While the former relied on Morse Code, the latter utilized a 5-bit telegraph code, which Copeland notes “was a forerunner of ASCII and Unicode and is still used by some ham radio operators.”
The SZ42 produced an obscuring key of telegraph characters, with an identical key produced to both the sender and receiver. If it could be done for text, Turing reasoned it could be done for sound as well.
This is the part of the story where one might say “Well, I’ve never heard of Alan Turing’s voice encoder, so the experiments must have failed.” But remarkably, they didn’t. Turing and Bayley actually did create their Delilah, and even demonstrated it using a recording of a Winston Churchill speech, “successfully encrypting, transmitting, and decrypting it.”
Instead, the reason Delilah fell to the wayside of history isn’t because it was a failure, but rather because it simply wasn’t needed anymore. By the time Turing had built and demonstrated his device, the war was over. What good was a portable voice encryptor if you had no major enemies trying to intercept your calls, the government reasoned. So funding for the project stopped, and Turing’s two-year experiment ended with a whimper. Turing’s time as an electrical engineer at Hanslope Park became a footnote in his story, if even that.
Submission + - Trump's "Made in the USA" Phone is just a reskinned HTC U24 Pro 1
necro81 writes: The heavily promoted, $499 T1 "Trump Phone" was originally said to be "Made in the USA" and ship in September 2025. Later, that was downgraded to "Assembled in the USA". Given the Trump Organization's lack of engineering or supply chain expertise, many assumed the "T1" would just be a private-label phone made by someone else. After a number of delays, the first phones are finally shipping.
iFixit has performed a teardown and concluded that the T1 is a just gold-painted 2024 HTC U24 Pro — a device from a Taiwanese company, probably using mainland China design and supply chains. In collaboration with NBC News, the iFixit team examined both phones using CT scans, side-by-side teardowns, and even reassembled a working T1 using a U24 Pro main board. As for "assembled in the USA", that may be true, in the same sense that your phone's repairman can "assemble" a phone from a handful of subassemblies sourced from someone else. Or it may have been assembled in Guangdong, China like the other U24 Pros.
iFixit sums it up: "What you have is not an 'American-Proud Design', but a phone designed in China, made in China, with the vast majority of parts sourced from China. I’m failing to find any stirring of American pride within me. I’ve certainly felt it before, so I can confirm that it is absent at this time."
iFixit has performed a teardown and concluded that the T1 is a just gold-painted 2024 HTC U24 Pro — a device from a Taiwanese company, probably using mainland China design and supply chains. In collaboration with NBC News, the iFixit team examined both phones using CT scans, side-by-side teardowns, and even reassembled a working T1 using a U24 Pro main board. As for "assembled in the USA", that may be true, in the same sense that your phone's repairman can "assemble" a phone from a handful of subassemblies sourced from someone else. Or it may have been assembled in Guangdong, China like the other U24 Pros.
iFixit sums it up: "What you have is not an 'American-Proud Design', but a phone designed in China, made in China, with the vast majority of parts sourced from China. I’m failing to find any stirring of American pride within me. I’ve certainly felt it before, so I can confirm that it is absent at this time."
Comment Re:Florida has a problem with profit over safety? (Score 4, Insightful) 42
I think they have a problem with Elon's enemies.
Submission + - Not alive, but not dead: disembodied human brains used for drug testing (science.org) 3
schwit1 writes: By restoring some functions to intact brains from deceased donors, the startup Bexorg hopes to create a better drug development test bed for neurodegenerative diseases
Submission + - Wi-Fi Routers Can Scan Your Body to Identify Exactly Who You Are (futurism.com) 1
JoeyRox writes: New research out of Germany’s Karlsruhe Institute of Technology found that the types of Wi-Fi routers we all have in our homes come with a major privacy vulnerability that can be used to identify any human body that comes within their range.
The study, flagged by Gizmodo, used machine learning systems to identify individuals with an accuracy rate of 99.5 percent. To do so, the researchers exploited a vulnerability in a process known as beamforming feedback information (BFI), which was introduced to allow routers to focus Wi-Fi signals on connected devices, as opposed to the older approach, which is to blanket an entire area in coverage.
While BFI is great for network connectivity, it has a major downsides for privacy. For starters, devices connected to a router using beamforming need to send constant feedback in order to be found. As routers send out and receive network feedback, the signal is inevitably impacted by real world factors like pets, walls, and people.
Making matters worse is the fact that this data is basically wide open for anyone to grab — not only is that feedback data unencrypted, it can also be accessed without ever connecting directly to the router.
The study, flagged by Gizmodo, used machine learning systems to identify individuals with an accuracy rate of 99.5 percent. To do so, the researchers exploited a vulnerability in a process known as beamforming feedback information (BFI), which was introduced to allow routers to focus Wi-Fi signals on connected devices, as opposed to the older approach, which is to blanket an entire area in coverage.
While BFI is great for network connectivity, it has a major downsides for privacy. For starters, devices connected to a router using beamforming need to send constant feedback in order to be found. As routers send out and receive network feedback, the signal is inevitably impacted by real world factors like pets, walls, and people.
Making matters worse is the fact that this data is basically wide open for anyone to grab — not only is that feedback data unencrypted, it can also be accessed without ever connecting directly to the router.
Comment Re:Can someone help explain "perfect" randomness? (Score 1) 140
There's no way to distinguish "true randomness," whatever that means, from "too many parameters to account for".
Submission + - I found a second vote.gov -- and it's registered to the White House
As_I_Please writes: The Drey Dossier reports that the National Design Studio, an office created by executive order and which reports only to the White House, has been building copies of federal agency websites like vote.gov, passports.gov, login.gov and others.
What [the National Design Studio] is doing is taking the parts of the federal government that touch you directly, your prescription, your voter registration, your passport, your federal login, out of the agencies that legally own them and rebuilding them on White House infrastructure. Vote.gov belongs to the Election Assistance Commission, and the studio built a copy. Passports belong to the State Department, and the studio is building a replacement this week. Login.gov belonged to GSA, and the studio’s guy runs it now.
Trump has said publicly that this infrastructure is for other presidents, and he is right about that. It is the one thing in this story I take him at his word on. The infrastructure outlasts him. Whoever wins in 2028 inherits the websites, the vendors, the data, and the hardware, sealed and waiting.
NDS Infrastructure Map — my live working github map of every National Design Studio subdomain I have found, filterable by status, registrant, and parent domain. If you want to retrace this investigation or watch new subdomains appear in real time, start here.
