×
Security

Millions Experience Browser Problems After Long-Anticipated Expiration of 'Let's Encrypt' Certificate (zdnet.com) 94

"The expiration of a key digital encryption service on Thursday sent major tech companies nationwide scrambling to deal with internet outages that affected millions of online users," reports the Washington Examiner.

The expiring certificate was issued by Let's Encrypt — though ZDNet notes there's been lots of warnings about its pending expiration: Digital Shadows senior cyber threat analyst Sean Nikkel told ZDNet that Let's Encrypt put everyone on notice back in May about the expiration of the Root CA Thursday and offered alternatives and workarounds to ensure that devices would not be affected during the changeover. They have also kept a running forum thread open on this issue with fairly quick responses, Nikkel added.
Thursday night the Washington Examiner describes what happened when the big day arrived: Tech giants — such as Amazon, Google, Microsoft, and Cisco, as well as many smaller tech companies — were still battling with an endless array of issues by the end of the night... At least 2 million people have seen an error message on their phones, computers, or smart gadgets in the past 24 hours detailing some internet connectivity problems due to the certificate issue, according to Scott Helme, an internet security researcher and well-known cybersecurity expert. "So many people have been affected, even if it's only the inconvenience of not being able to visit certain websites or some of their apps not working," Helme said.

"This issue has been going on for many hours, and some companies are only just getting around to fixing it, even big companies with a lot of resources. It's clearly not going smoothly," he added.

There was an expectation before the certificate expired, Helme said, that the problem would be limited to gadgets and devices bought before 2017 that use the Let's Encrypt digital certificate and haven't updated their software. However, many users faced issues on Thursday despite having the most cutting-edge devices and software on hand. Dozens of major tech products and services have been significantly affected by the certificate expiration, such as cloud computing services for Amazon, Google, and Microsoft; IT and cloud security services for Cisco; sellers unable to log in on Shopify; games on RocketLeague; and workflows on Monday.com.

Security researcher Scott Helme also told ZDNet he'd also confirmed issues at many other companies, including Guardian Firewall, Auth0, QuickBooks, and Heroku — but there might be many more beyond that: "For the affected companies, it's not like everything is down, but they're certainly having service issues and have incidents open with staff working to resolve. In many ways, I've been talking about this for over a year since it last happened, but it's a difficult problem to identify. it's like looking for something that could cause a fire: it's really obvious when you can see the smoke...!"

Digital certificates expert Tim Callan added that the popularity of DevOps-friendly architectures like containerization, virtualization and cloud has greatly increased the number of certificates the enterprise needs while radically decreasing their average lifespan. "That means many more expiration events, much more administration time required, and greatly increased risk of a failed renewal," he said.

Businesses

Cloudflare Is Taking a Shot at Email Security (wired.com) 46

Cloudflare, the internet infrastructure company, already has its fingers in a lot of customer security pots, from DDoS protection to browser isolation to a mobile VPN. Now the company is taking on a classic web foe: email. From a report: On Monday, Cloudflare is announcing a pair of email safety and security offerings that it views as a first step toward catching more targeted phishing attacks, reducing the effectiveness of address spoofing, and mitigating the fallout if a user does click a malicious link. The features, which the company will offer for free, are mainly geared toward small business and corporate customers. And they're made for use on top of any email hosting a customer already has, whether it's provided by Google's Gmail, Microsoft 365, Yahoo, or even relics like AOL. Cloudflare CEO Matthew Prince says that from its founding in 2009, the company very intentionally avoided going anywhere near the thorny problem of email. But he adds that email security issues are unrelenting, so it has become necessary.

"I think what I had assumed is that hosting providers like Google and Microsoft and Yahoo were going to solve this issue, so we weren't sure there was anything for us to do in the space," Prince says. "But what's become clear over the course of the last two years is that email security is still not a solved issue." Prince says that Cloudflare employees have been "astonished by how many targeted threats were getting through Google Workspace," the company's email provider. That's not for lack of progress by Google or the other big providers on anti-spam and anti-malware efforts, he adds. But with so many types of email threats to deal with at once, strategically crafted phishing messages still slip through. So Cloudflare decided to build additional defense tools that both the company itself as well as its customers could use.

Government

Report: In 2017 America's CIA Plotted to Kidnap Julian Assange From Ecuador (yahoo.com) 149

"In 2017, as Julian Assange began his fifth year holed up in Ecuador's embassy in London, the CIA plotted to kidnap the WikiLeaks founder," reports Yahoo News, "spurring heated debate among Trump administration officials over the legality and practicality of such an operation."

The report is based on conversations with more than 30 former U.S. officials, "eight of whom described details of the CIA's proposals to abduct Assange." Some senior officials inside the CIA and the Trump administration even discussed killing Assange, going so far as to request "sketches" or "options" for how to assassinate him. Discussions over kidnapping or killing Assange occurred "at the highest levels" of the Trump administration, said a former senior counterintelligence official. "There seemed to be no boundaries...."

While Assange had been on the radar of U.S. intelligence agencies for years, these plans for an all-out war against him were sparked by WikiLeaks' ongoing publication of extraordinarily sensitive CIA hacking tools, known collectively as "Vault 7," which the agency ultimately concluded represented "the largest data loss in CIA history." President Trump's newly installed CIA director, Mike Pompeo, was seeking revenge on WikiLeaks and Assange, who had sought refuge in the Ecuadorian Embassy since 2012 to avoid extradition to Sweden on rape allegations he denied... The CIA's fury at WikiLeaks led Pompeo to publicly describe the group in 2017 as a "non-state hostile intelligence service." More than just a provocative talking point, the designation opened the door for agency operatives to take far more aggressive actions, treating the organization as it does adversary spy services, former intelligence officials told Yahoo News. Within months, U.S. spies were monitoring the communications and movements of numerous WikiLeaks personnel, including audio and visual surveillance of Assange himself, according to former officials...

There is no indication that the most extreme measures targeting Assange were ever approved, in part because of objections from White House lawyers, but the agency's WikiLeaks proposals so worried some administration officials that they quietly reached out to staffers and members of Congress on the House and Senate intelligence committees to alert them to what Pompeo was suggesting... In late 2017, in the midst of the debate over kidnapping and other extreme measures, the agency's plans were upended when U.S. officials picked up what they viewed as alarming reports that Russian intelligence operatives were preparing to sneak Assange out of the United Kingdom and spirit him away to Moscow... In response, the CIA and the White House began preparing for a number of scenarios to foil Assange's Russian departure plans, according to three former officials. Those included potential gun battles with Kremlin operatives on the streets of London, crashing a car into a Russian diplomatic vehicle transporting Assange and then grabbing him, and shooting out the tires of a Russian plane carrying Assange before it could take off for Moscow. (U.S. officials asked their British counterparts to do the shooting if gunfire was required, and the British agreed, according to a former senior administration official.)

One former senior official told Yahoo News that "It got to the point where every human being in a three-block radius was working for one of the intelligence services — whether they were street sweepers or police officers or security guards."
Power

After 47 Years, US Power Company Abandons Still-Unfinished $6 Billion Nuclear Power Plant (yahoo.com) 206

America's federally-owned electric utility, the Tennessee Valley Authority, has spent billions of dollars with nothing to show for it, reports the Chattanooga Times Free Press.

"Nearly 47 years after construction began on the Bellefonte Nuclear Power Plant in Northeast Alabama, the Tennessee Valley Authority is giving up its construction permit for America's biggest unfinished nuclear plant and abandoning any plans to complete the twin-reactor facility..." Giving up the construction permit at Bellefonte signals the end of any new nuclear plant construction at TVA with only seven of the 17 nuclear reactors the utility once planned to build ever completed.... Since the 1970s, a total of 95 nuclear reactors proposed to be built by U.S. utilities have been canceled due to rising construction costs, slowing power demand and cheapening power alternatives.

The NRC now regulates 93 remaining commercial nuclear reactors at 56 nuclear power plants, including TVA's Sequoyah and Watts Bar nuclear plants in East Tennessee and the Browns Ferry nuclear plant in Athens, Alabama. Collectively, those nuclear plants provide more than 40% of TVA's power and over 20% of the nation's electricity supply... TVA spokesman Jim Hopson said in the past two decades, the growth in power demand in the Tennessee Valley has continued to slow as more energy efficiency measures have been adopted and the price of natural gas, solar power and additional hydroelectric generation has declined in competition with nuclear.

Thanks to long-time Slashdot reader The Real Dr John for sharing the story. And today the Chattanooga Times Free Press opinions editor offered this suggestion: TVA still owns the 1,600-acre site, as well as the plant that has never — and likely now will never — generate the first spark of nuclear-produced electricity. But that doesn't mean it can't make power some other way. A gas plant? Uggh. A wind field? Seems unlikely given the stillness of North Alabama. A solar plant? That could be more of a possibility. All of the transmission equipment and the electrical grid is at the ready...

By now — after siting, building, scrapping, building again, abandoning, putting up for sale, agreeing to sell for pennies on the dollar and finally going to court to defend not selling the Bellefonte Nuclear Plant — TVA ratepayers and taxpayers have lost somewhere between $6 billion (according to TVA) and $9 billion (according to a 2018 letter from five congressmen)... TVA spokesman Jim Hopson said Wednesday that TVA is making no decisions immediately. "But we're not taking anything off the table," he added...

Hopson said TVA's May 2021 "strategic intent and guiding principles" notes the utility has solar commitments to date of more than 2,300 megawatts of solar capacity expected to come online by the end of 2023. Including those projects, TVA expects to add 10,000 megawatts of solar power by 2035 — a 24-fold increase from today.

That 10,000 megawatts of solar power would be equal to more than eight would-be Bellefonte reactors.

Cellphones

Microsoft Debuts Surface Duo 2 Dual-Screen Android Phone With Larger Displays and 5G (yahoo.com) 27

At Microsoft's Surface event today, the company announced its Surface Duo 2 dual-screen Android smartphone, featuring a trio of new cameras, a faster processor, larger displays, and support for 5G. The company also unveiled a successor to the Surface Book line of laptops, the Surface Laptop Studio, as well as the Surface Pro 8. From a report: The first-generation of the Duo made a splash thanks to its unique design. While the original Duo had no exterior screen at all, the Duo 2 now has a sliver of screen called the Glance Bar that peeks out from where its displays come together and provides you with the time and notifications when the Duo is closed. Microsoft has seemingly addressed a number of the original Duo's shortcomings with its Duo 2. One of the biggest issues with the first-generation version was its lack of any truly capable camera. [...] This time around, Microsoft has outfitted the Surface Duo 2 with a trio of external cameras. Like Apple's iPhone and Samsung's Galaxy line of smartphones, the Duo 2 gets a wide-angle camera, an ultra-wide angle camera, and a telephoto camera. There's also a dedicated night photography mode, 2x optical zoom with the telephoto lens, and the ability to record 4K video at 60 frames per second.

As for the occasionally sluggish performance, the Duo 2 should have that sorted out. This time around, Microsoft has dropped Qualcomm's latest Snapdragon 888 processor into the Duo 2, which means the phone should run as smoothly and quickly as any of the leading smartphones on the market. What's more, the Duo 2 gets 8GB of RAM and 128GB, 256GB, or 512GB of storage. On top of that, the Surface Duo 2 gets 5G connectivity, something that was conspicuously absent from the first-generation Duo.

The Duo 2 also gets two larger displays this time around. Rather than two 5.1-inch panels, the Duo 2 gets two 5.3-inch screens that open up to an 8.3-inch display that you can use to move your apps across or as a single canvas for more expansive apps. [...] The gist of the Surface Duo 2 is that two screens are better than one. To that end, Microsoft has combined two panels with a hinge to make an Android-powered device that lets you not only use both displays at the same time, but also seamlessly move apps and content between them. That capability will cost you a pricey $1,499 when the Duo 2 hits store shelves. It's available for pre-order today.

Earth

Can the Computer Chip Industry Reduce Its Carbon Footprint? (theguardian.com) 25

"Last week Taiwan Semiconductor Manufacturing Company, the world's largest chipmaker, which supplies chips to Apple, pledged to reach net zero emissions by 2050," reports the Guardian.

"But decarbonizing the industry will be a big challenge." TSMC alone uses almost 5% of all Taiwan's electricity, according to figures from Greenpeace, predicted to rise to 7.2% in 2022, and it used about 63m tons of water in 2019. The company's water use became a controversial topic during Taiwan's drought this year, the country's worst in a half century, which pitted chipmakers against farmers. In the US, a single fab, Intel's 700-acre campus in Ocotillo, Arizona, produced nearly 15,000 tons of waste in the first three months of this year, about 60% of it hazardous. It also consumed 927m gallons of fresh water, enough to fill about 1,400 Olympic swimming pools, and used 561m kilowatt-hours of energy. Chip manufacturing, rather than energy consumption or hardware use, "accounts for most of the carbon output" from electronics devices, the Harvard researcher Udit Gupta and co-authors wrote in a 2020 paper....

[A]mid pressure from investors and electronics makers keen to report greener supply chains to customers, the semiconductor business has been ramping up action on tackling its climate footprint... Greater availability of renewable energy is helping chipmakers reduce their carbon footprint. Intel made a commitment to source 100% of its energy from renewable sources by 2030, as did TSMC, but with a deadline of 2050. Energy consumption accounts for 62% of TSMC's emissions, said a company spokesperson, Nina Kao. The company signed a 20-year deal last year with the Danish energy firm Ørsted, buying all the energy from a 920-megawatt offshore windfarm Ørsted is building in the Taiwan Strait. The deal, which has been described as the world's largest corporate renewables purchase agreement, has benefits for TSMC, said Shashi Barla, renewables analyst at the energy consultancy Wood Mackenzie. As well as guaranteeing a clean electricity supply, it pays a wholesale cost and removes itself from price shocks, "killing two birds with one stone", he said.

TSMC's actions have the potential to influence the rest of the industry, said Clifton Fonstad, professor of electrical engineering and computer science at MIT, "other manufacturers are likely to follow its lead"...

There is also innovation aimed at tackling the worst-polluting materials used in making semiconductors. The chip industry uses different gases during the production process, many of which have a significant climate impact. TSMC said it had implemented scrubbers and other facilities to treat gas emissions. But another route is replacing "dirtier" cleaning gases that clean the delicate tools in semiconductor manufacturing, said Michael Pittroff, a chemical engineer working on semiconductor gases at Solvay Special Chemicals. In industrial tests over the last six years with about a half dozen chipmaker clients, Pittroff said, he and his team had replaced more polluting gases with "cleaner" fluorine, with a lower global warming impact. Other companies target the gases that are used to etch patterns onto and clean the silicon surface of a wafer — the thin piece of material used to make semiconductors. Paris-based industrial gases company Air Liquide, for example, has come up with a line of alternative etching gases with lower global warming impacts...

Some experts believe chipmakers will start to modify their processes to incorporate greener gases, especially if the big players make a move. "If TSMC switches, I am sure the others will," said Fonstad. "If TSMC doesn't, then other manufacturers may switch to show they are better than TSMC."

Firefox

Mozilla Experiment: Set Default Search Engine to Bing for 1% of Firefox Users (ghacks.net) 73

"Mozilla is running an experiment on 1% of the Firefox desktop population currently, which sets the default search engine to Bing in the web browser," reports Ghacks: [I]n most regions, it is Google Search. Mozilla and Google extended the search deal in 2020 for another three years. Google is paying Mozilla "between $400 and $450 million per year" so that its search engine is the default in Firefox in most regions. Google has been Firefox's default search engine since 2017, when Mozilla ended its search deal with Yahoo early.

Firefox users may change the default search engine to one of the other engines that are included by default, or an engine that is not included but can be added...

The study started on September 6 and it will run until early 2022, likely January 2022. About 1% of Firefox desktop users may notice that the default search engine is changed when the installation of Firefox is picked for the experiment.

Tip: load about:studies in the Firefox address bar to list the studies that the browser us currently taking part in and has completed already. Firefox users who don't want to participate in studies can disable the preference "Allow Firefox to install and run studies" on about:preferences#privacy.

United States

20 Years After the World Trade Center Attack, a Nation Remembers (slashdot.org) 197

I first saw the news on the front page of Yahoo.com. But every American remembers where they were when they heard the news. "The World Trade Towers in new york were crashed into by 2 planes, one on each tower, 18 minutes apart," CmdrTaco posted on Slashdot. "Nobody really knows who did it, but the planes were big ones.

"Normally I wouldn't consider posting this on Slashdot, but I'm making an exception this time because I can't get news through any of the conventional websites, and I assume I'm not alone."

CmdrTaco later posted an update. "Both towers havecollapsed, pentagon hit by 3rd plane. Part of it has collapsed."


It's 20 years later, and there's plenty of hindsight, recollections, and reflection around the web. But today back on the front page of Yahoo.com there's this remembrance from a U.S. airman who'd been dispatched to crash her plane into one of the hijacked jetliners: As the Sept. 11, 2001 attacks were unfolding, then-Air Force Lt. Heather Penney was given a mission to intercept hijacked United Airlines Flight 93 before it reached Washington, D.C. The rookie F-16 pilot said she believed she would not come back from that mission.

"[I remember] how crystal blue the skies were that day," she told ABC News Live anchor Linsey Davis...

"I had raised my hand and swore an oath to protect and defend our nation," she said. "If this was where the universe had placed me at this moment in time... that this was my purpose. Anyone who had been in our position would have been willing to do the same thing.

"And the proof is in the pudding, because the passengers on Flight 93 did...."

Flight 93 passengers attempted to retake the plane, and in the struggle, the aircraft crashed in a field in Pennsylvania, killing everyone on board. It was the only one of the four hijacked aircrafts that day that did not reach the terrorists' intended target.

Security

Russia's Yandex Says It Repelled Biggest DDoS Attack in History (yahoo.com) 39

head_dunce writes: A cyber attack on Russian tech giant Yandex's servers in August and September was the largest known distributed denial-of-service (DDoS) attack in the history of the internet, the company said on Thursday. The DDoS attack, in which hackers try to flood a network with unusually high volumes of data traffic in order to paralyse it when it can no longer cope with the scale of data requested, began in August and reached a record level on Sept. 5. "Our experts did manage to repel a record attack of nearly 22 million requests per second (RPS). This is the biggest known attack in the history of the internet," Yandex said in a statement. The previous record was held by Cloudflare, which said last month that it had mitigated a 17.2 RPS DDoS attack.
Privacy

Lawsuits Accuse Siri, Alexa, and Google of Listening When They're Not Supposed To (yahoo.com) 99

"Tech companies have long encouraged putting listening devices in homes and pockets..." reports the Washington Post. "But some are growing concerned that these devices are recording even when they're not supposed to — and they're taking their fears to the courts." (Alternate URLs here and here.) On Thursday, a judge ruled that Apple will have to continue fighting a lawsuit brought by users in federal court in California, alleging that the company's voice assistant Siri has improperly recorded private conversations... [H]e ruled that the plaintiffs, who are trying to make the suit a class action case, could continue pursuing claims that Siri turned on unprompted and recorded conversations that it shouldn't have and passed the data along to third parties, therefore violating user privacy. The case is one of several that have been brought against Apple, Google and Amazon that involve allegations of violation of privacy by voice assistants...

The voice assistants are supposed to turn on when prompted — saying "Hey, Siri," for example — but the lawsuit alleges that plaintiffs saw their devices activate even when they didn't call out the wake word. That conversation was recorded without their consent and the information was then used to target advertisements toward them and sent on to third-party contractors to review, they allege... The lawsuits ask the companies to contend with what they do once they hear something they weren't intended to. Nicole Ozer, the technology and civil liberties director of the ACLU of California, said the suits are a sign that people are realizing how much information the voice technology is collecting.

"I think this lawsuit is part of people finally starting to realize that Siri doesn't work for us, it works for Apple," she said.

An Amazon spokesperson told the Post only a "small fraction" of audio is manually reviewed, and users can opt-out of those reviews or manage their recordings. Apple told the Post that isn't selling its Siri recordings, and that its recordings are not associated with an "identifiable individual." And Google pointed out that they don't retain audio recordings by default "and make it easy to manage your privacy preferences."

But there's still concerns. "A Washington Post investigation in 2019 found that Amazon kept a copy of everything Alexa records after it thinks it hears its name — even if users didn't realize," the Post adds. In a 2019 video, Post reporter Geoffrey A. Fowler even spliced together all of Amazon's recordings of his voice, into a spoken-word anthem titled "Your voice now belongs to Amazon. "Eavesdropping is an invasion," Fowler argues in the video, adding that Amazon "is putting its profits over our privacy. It's also a sign of a bold data grab that's going on in our increasingly connected homes."
Earth

Climate Change Is Bankrupting America's Small Towns (yahoo.com) 226

"Rather than bouncing back, places hit repeatedly by hurricanes, floods and wildfires are unraveling," reports the New York Times.

"Residents and employers leave, the tax base shrinks and it becomes even harder to fund basic services." That downward spiral now threatens low-income communities in the path this week of Hurricane Ida and those hit by the recent flooding in Tennessee — hamlets regularly pummeled by storms that are growing more frequent and destructive because of climate change. Their gradual collapse means more than just the loss of identity, history and community. The damage can haunt those who leave, since they often can't sell their old homes at a price that allows them to buy something comparable in a safer place. And it threatens to disrupt neighboring towns and cities as the new arrivals push up demand for housing...

Adapting to climate change in the United States arguably comes down to a brutal decision: When to build back, and when to help move people away from threats that are only getting worse.

The first option is becoming more expensive and less effective as disasters mount. The second option is usually too painful to even consider.

Yahoo!

Yahoo Is Yahoo Once More After New Owners Complete Acquisition (theverge.com) 79

Yahoo and AOL, formerly known as Verizon Media, have officially been acquired by their new owners and renamed as simply "Yahoo." The Verge reports: Verizon announced it was selling the properties to Apollo Global Management in May in a deal said to be worth $5 billion, around half of the nearly $9 billion the telecom giant originally paid for them, and a fraction of the hundreds of billions the two companies were worth at their peaks.

Yahoo will now be run by CEO Guru Gowrappan, and will operate as a standalone company under Apollo Funds. Apollo is a private equity firm that owns assets like crafts retailer Michaels, Chuck E. Cheese restaurants, and the Venetian resort in Las Vegas. "The close of the deal heralds an exciting time of renewed opportunity for us as a standalone entity," Gowrappan said. "We anticipate that the coming months and years will bring fresh growth and innovation for Yahoo as a business and a brand, and we look forward to creating that future with our new partners."

Security

Juniper Breach Mystery Starts To Clear With New Details on Hackers and US Role (yahoo.com) 19

An anonymous reader shares a report: An anonymous reader Days before Christmas in 2015, Juniper Networks alerted users that it had been breached. In a brief statement, the company said it had discovered "unauthorized code" in one of its network security products, allowing hackers to decipher encrypted communications and gain high-level access to customers' computer systems. Further details were scant, but Juniper made clear the implications were serious: It urged users to download a software update "with the highest priority." More than five years later, the breach of Juniper's network remains an enduring mystery in computer security, an attack on America's software supply chain that potentially exposed highly sensitive customers including telecommunications companies and U.S. military agencies to years of spying before the company issued a patch.

Those intruders haven't yet been publicly identified, and if there were any victims other than Juniper, they haven't surfaced to date. But one crucial detail about the incident has long been known -- uncovered by independent researchers days after Juniper's alert in 2015 -- and continues to raise questions about the methods U.S. intelligence agencies use to monitor foreign adversaries. The Juniper product that was targeted, a popular firewall device called NetScreen, included an algorithm written by the National Security Agency. Security researchers have suggested that the algorithm contained an intentional flaw -- otherwise known as a backdoor -- that American spies could have used to eavesdrop on the communications of Juniper's overseas customers. NSA declined to address allegations about the algorithm.

Juniper's breach remains important -- and the subject of continued questions from Congress -- because it highlights the perils of governments inserting backdoors in technology products. "As government agencies and misguided politicians continue to push for backdoors into our personal devices, policymakers and the American people need a full understanding of how backdoors will be exploited by our adversaries," Senator Ron Wyden, a Democrat from Oregon, said in a statement to Bloomberg. He demanded answers in the last year from Juniper and from the NSA about the incident, in letters signed by 10 or more members of Congress.

America Online

Is Facebook the AOL of 2021? (zdnet.com) 134

A new article at ZDNet argues that "The 1990s had a word for being trapped inside a manipulative notion of human contact: AOL."

"Facebook and its ilk are the rebirth of that limited vision." Once upon a time, roughly thirty years ago, there was a computer network called America Online... There was already an Internet, but most people didn't know how to use it or even that it existed. AOL, and a couple of competitors, Compuserve and Prodigy, offered people online things they could do, such as chat with other people... The services had only one drawback, which was that they were limited. People couldn't do just whatever they wanted, they could only pick from a small menu of functions, such as chat, that the services provided... As it grew and grew, the World Wide Web became an amazing place in contrast to AOL... People were so excited by the World Wide Web, they never wanted to go back to AOL or Compuserve or Prodigy. The three services withered...

People got excited about Facebook because it was a place where they could find real people they knew, just like MySpace, but also because it had some features like AOL, like the game Farmville. Business people were even more excited because Facebook started to generate a lot of advertising revenue. Advertisers liked Facebook because it not only knew who was talking to whom, it also knew a little bit about the hobbies and interests of people. Advertisers liked that because they could use the information to "target" their ads like never before. Smart people said that Facebook had what are known as "network effects." It became more powerful the more people joined it...

There were just a couple problems with Facebook. Facebook was a lot like AOL. It limited people by telling them with whom they could communicate.... One of the bad things was that people no longer had control. They had given so much information about themselves to Facebook and its competitors that it was like those companies owned people when they were in Cyberspace. The services didn't seem to do a great job of handling people's information, either.

What's interesting about this article is it even tells you how the story ends: Then one day, someone smart built a new technology that didn't require people to sign away their information. Now, people could meet anyone they wanted and talk about whatever they wanted, not just what Facebook or its competitors said was okay. People felt more relaxed, too, because even though there were ads, people could meet up in Cyberspace without every single action they took being used to fuel an advertising machine.

People got excited again, like the first time they found the Web and gave up on AOL.

But there our story ends, because that chapter has not yet been written.

Stats

'Silent Majority' of Americans Don't Want to Work Remotely Full-Time (yahoo.com) 277

"While workers who want to stay at home forever have been especially vocal about their demands, a silent majority of Americans do want to get back to the office, at least for a few days a week..." reports the New York Times. The article, shared by long-time Slashdot reader gollum123, cites the opinions of workers in a variety of industries. In a national survey of more than 950 workers, conducted in mid-August by Morning Consult on behalf of The New York Times, 31 percent said they would prefer to work from home full time. By comparison, 45 percent said they wanted to be in a workplace or an office full time. The remaining 24 percent said they wanted to split time between work and home... The data intelligence company's findings echoed recent internal surveys by employers like Google and Twitter, as well as outside surveys by firms like Eden Workplace. Among those craving the routines of office life and cubicle chatter: social butterflies, managers, new hires eager to meet colleagues, and people with noisy or crowded homes...

Certainly, some people have thrived in their new remote work lives. They saved time and money, and sometimes increased productivity. The degree to which employees have embraced permanent remote or hybrid work models has been "stunning" to company executives, said Tsedal Neeley, a Harvard Business School professor who has studied remote work for decades. But for others, Professor Neeley said, it has removed needed barriers between work and home life, increased a sense of isolation and led to burnout. "Some people just dislike the screen — their physicality and their proximity to others is a big part of what work looks like," she said.

In the Times' article, here's how one 23-year-old recent college graduate starting at Google described their own dilemma.

"If we don't get a really solid foundation at this company in our first six months, our first year, what foot does that leave us on for the rest of our time at the company?"
Games

South Korea To End Its Controversial Gaming Curfew (engadget.com) 26

South Korea is ending a law it announced in 2011 that blocked young gamers from accessing game websites after midnight. "South Korea's Ministry of Culture, Sports and Tourism, as well as the Ministry of Gender Equality and Family, say that they're ending the law to respect children's rights and encourage at-home education," reports Engadget. "The country aims to abolish the law by the end of the year when it revises its Youth Protection Act." From the report: The news doesn't mean underage gamers are entirely off the hook, though. Instead, excessive gaming will be managed by the country's "choice permit" system, which lets parents and guardians arrange approved play times. Still, that sounds more permissive than China's gaming curfew, which bans players under 18 from playing between 10PM and 8AM. Additionally, they're limited to 90 minutes of game time during weekdays, and three hours on weekends and holidays.

As Kotaku reports, the shutdown law was originally meant to curb PC gaming, but it also affected consoles. Sony's PlayStation Network and Microsoft's Xbox Live ended up restricting their accounts to adults. That's why Minecraft is now an R-rated game in the country. "In the changing media environment, the ability of children to decide for themselves and protect themselves has become important more than anything," Deputy Prime Minister and Education Minister Yoo Eun-hae said, according to The Korea Times. "We will work with related ministries to systematically support media and game-use education at schools, homes, and in society so that young people can develop these abilities, and continue to make efforts to create a sound gaming environment and various leisure activities for children."

AI

Disney's Newest Animatronic Robots Get a 'Level of Intelligence' to Make Their Own Decisions (yahoo.com) 49

"Are You Ready for Sentient Disney Robots?" asks a headline at the New York Times. (Alternate URL here for a text-only version.)

"A new trend that is coming into our animatronics is a level of intelligence," a senior Imagineering executive tells the Times, showing off Disney's sophisticated new three-foot animatronic of the Guardians of the Galaxy character Groot. "This guy represents our future. It's part of how we stay relevant."

The animatronic Groot walked across the room to introduce himself to the Times' reporter. When I remained silent, his demeanor changed. His shoulders slumped, and he seemed to look at me with puppy dog eyes. "Don't be sad," I blurted out. He grinned and broke into a little dance before balancing on one foot with outstretched arms.
It's just part of a larger initiative to upgrade the park's tech in a variety of different ways: There are animatronics at Disney World that have been doing the same herky-jerky thing on loop since Richard Nixon was president. In the meantime, the world's children have become technophiles, raised on apps (three million in the Google store), the Roblox online gaming universe and augmented reality Snapchat filters... In early June, Disney's animatronic technology took a sonic leap forward. The Disneyland Resort's newest ride, WEB Slingers: A Spider-Man Adventure, features a "stuntronic" robot (outfitted in Spidey spandex) that performs elaborate aerial tricks, just like a stunt person. A catapult hurls the untethered machine 65 feet into the air, where it completes various feats (somersaults in one pass, an "epic flail" in another) while autonomously adjusting its trajectory to land in a hidden net... The Spider-Man robot — 95 pounds of microprocessors, 3-D printed plastic, gyroscopes, accelerometers, aluminum and other materials — took more than three years to develop. Disney declined to discuss the cost of the stuntronics endeavor, but the company easily invested millions of dollars...

One of Disney's senior roboticists, Scott LaValley, came from Boston Dynamics, where he contributed to an early version of Atlas, a running and jumping machine that inspires "how did they do that" amazement — followed by dystopian dread. Disney said it had no plans to replace human performers... Rather, Disney's newest robotics initiative is about extreme Marvel and "Star Wars" characters — huge ones like the Incredible Hulk, tiny ones like Baby Yoda and swinging ones like Spider-Man — that are challenging to bring to life in a realistic way, especially outdoors.... The development of Groot — code-named Project Kiwi — is the latest example. He is a prototype for a small-scale, free-roaming robotic actor that can take on the role of any similarly sized Disney character....

Cameras and sensors will give these robots the ability to make on-the-fly choices about what to do and say. Custom software allows animators and engineers to design behaviors (happy, sad, sneaky) and convey emotion.

Medicine

New Report Suggests a Different Chinese Government Cover-Up on Covid-19 Origins (yahoo.com) 123

"COVID-19 origin theorists could be right about a Chinese government cover-up," reports The Week, "but they might have their sights set in the wrong direction, an American virologist suggested to Bloomberg." When an international group of experts organized by the World Health Organization traveled to Wuhan, China, earlier this year to research the origins of the coronavirus that sparked the ongoing COVID-19 pandemic, they visited the Baishazhou market, which is larger, but perhaps less well-known (internationally, at least) than the Huanan market, where many people initially believed the virus first jumped from wild animals to humans.

The research team was told only frozen foods, ingredients, and kitchenware were sold there. But a recently released study that had previously languished in publishing limbo showed, thanks to data meticulously collected over 30 months, that at least two vendors there regularly sold live wild animals, Bloomberg reports. Bloomberg also notes that one of the earliest recorded COVID-19 clusters in Wuhan [December 19th] involved a Huanan stall employee who traded goods back and forth between the two markets.

A link between them would be "very intriguing," Stephen Goldstein, an evolutionary virology research associate at the University of Utah, told Bloomberg...

[I]t seems likely to Goldstein that some authorities didn't want the presence of a thriving wildlife trade to become public knowledge. "It seems to me, at a minimum, that local or regional authorities kept that information quiet deliberately. It's incredible to me that people theorize about one type of cover-up," he said, likely referring to the hypothesis that the virus actually leaked from a nearby government-run lab, "but an obvious cover-up is staring them right in the face."

The paper contains "meticulously collected data and photographic evidence supporting scientists' initial hypothesis — that the outbreak stemmed from infected wild animals..." according to Bloomberg's article. (Alternate URL here.) According to the report, which was published in June in the online journal Scientific Reports, minks, civets, raccoon dogs, and other mammals known to harbor coronaviruses were sold in plain sight for years in shops across the city, including the now infamous Huanan wet market, to which many of the earliest Covid cases were traced... [Researcher Xiao Xiao's] animal logs included masked palm civets and raccoon dogs — both involved in the 2003 SARS outbreak — and other species susceptible to coronavirus infections, such as bamboo rats, minks, and hog badgers. Of the 38 species Xiao documented, 31 were protected.

Anyone caught violating China's wild animal conservation law faces fines and up to 15 years of imprisonment. But enforcement was lax, as evidenced by the fact that many of the Wuhan shops displayed their wares openly, "caged, stacked and in poor condition," Xiao observed in the report.

Xiao estimated that 47,381 wild animals were sold in Wuhan over the survey period.

Collaborating with four more scientists (including three from the University of Oxford), Xiao had submitted their manuscript to a journal for publication in February of 2020 — only to have it rejected. "Had the study been made public right away, the search for the origins of the virus might have taken a very different course..." Bloomberg writes: Disease detectives arriving from Beijing on the first day of 2020 ordered environmental samples to be collected from drains and other surfaces at the market. Some 585 specimens were tested, of which 33 turned out to be positive for SARS-CoV-2... All but two of the positive specimens came from a cavernous and poorly-ventilated section of the market's western wing, where many shops sold animals....

As other nations began blaming the Chinese Communist Party for the pandemic, the government grew defensive. It may have been embarrassed that its citizens were still eating wild animals bought in wet markets — a well-known path for zoonotic disease transmission that China tried unsuccessfully to outlaw almost 20 years ago...

Geng Shuang, a spokesman for China's Foreign Ministry, denied "wildlife wet markets" existed in the country...

The Courts

Court Rules California's 'Gig Worker' Initiative is Unconstitutional (yahoo.com) 205

Slashdot reader phalse phace tipped us off to a breaking story. Reuters reports: A California judge on Friday ruled that a 2020 ballot measure that exempted ride-share and food delivery drivers from a state labor law is unconstitutional as it infringed on the legislature's power to set standards at the workplace...which makes the entire ballot measure "unenforceable", Alameda County Superior Court Judge Frank Roesch wrote in the ruling.

Gig economy companies including Uber, Lyft, Doordash and Instacart were pushing to keep drivers' independent contractor status, albeit with additional benefits.

United Kingdom

UK Considers Blocking Nvidia Takeover of ARM Over Security (yahoo.com) 75

According to Bloomberg, the U.K. is considering blocking a takeover of Arm by Nvidia due to potential risks to national security. SoftBank announced plans to sell Arm to U.S. chip company Nvidia last September for more than $40 billion. It's been under investigation and protested ever since. Bloomberg reports: In April, U.K. Culture Secretary Oliver Dowden asked the Competition and Markets Authority (CMA) to prepare a report on whether the deal could be deemed anti-competitive, along with a summary of any national security concerns raised by third parties. The assessment, delivered in late July, contains worrying implications for national security and the U.K. is currently inclined to reject the takeover, a person familiar with government discussions said. The U.K. is likely to conduct a deeper review into the merger due to national security issues, a separate person said.

No final decision has been taken, and the U.K. could still approve the deal alongside certain conditions, the people added. Dowden is set to decide on whether the merger needs further examination by the U.K.'s competition authorities. "We continue to work through the regulatory process with the U.K. government," said an Nvidia spokesperson in a statement. "We look forward to their questions and expect to resolve any issues they may have."

Slashdot Top Deals