Microsoft confirms June Outlook and OneDrive outages were caused by DDoS attacks

Earlier this month, a group known as Anonymous Sudan took credit for a service outage that disrupted access to Outlook, OneDrive and a handful of other Microsoft online services. After initially sharing little information about the incident, the company confirmed late Friday it had been the target of a series of distributed denial-of-service attacks. In a blog post spotted by the Associated Press (via The Verge), Microsoft said the attacks “temporarily impacted” the availability of some services, adding they were primarily designed to generate “publicity” for a threat actor the company has dubbed Storm-1359. Under Microsoft’s threat actor naming convention, Storm is a temporary designator the company employs for groups whose affiliation it hasn’t definitively established yet.

“We have seen no evidence that customer data has been accessed or compromised,” the company said.

[…]

Source: Microsoft confirms June Outlook and OneDrive outages were caused by DDoS attacks | Engadget

Gas stoves emit benzene, linked to cancer, a new Stanford study shows

When the blue flame fires up on a gas stove, there’s more than heat coming off the burner. Researchers at Stanford University found that among the pollutants emitted from stoves is benzene, which is linked to cancer.

Levels of benzene can reach higher than those found in secondhand tobacco smoke and the benzene pollution can spread throughout a home, according to the research.

The findings add to a growing body of scientific evidence showing that emissions within the home are more harmful than gas stove owners have been led to believe

[…]

The risks of benzene have long been known. The Centers for Disease Control and Prevention says the chemical is linked to leukemia and other blood cell cancers.

“Benzene forms in flames and other high-temperature environments, such as the flares found in oil fields and refineries. We now know that benzene also forms in the flames of gas stoves in our homes,” said Rob Jackson in a statement. He’s the study’s senior author and a Stanford professor of earth sciences.

With one burner on high or the oven at 350 degrees, the researchers found benzene levels in a house can be worse than average levels for second-hand tobacco smoke. And they found the toxin doesn’t just stay in the kitchen, it can migrate to other places, such as bedrooms.

“Good ventilation helps reduce pollutant concentrations, but we found that exhaust fans were often ineffective at eliminating benzene exposure,” Jackson said. He says this is the first paper to analyze benzene emissions when a stove or oven is in use.

Researchers also tested whether cooking food – pan-frying salmon or bacon – emits benzene but found all the pollution came from the gas and not the food.

[…]

The American Gas Association, which represents natural gas utilities, routinely casts doubt over scientific research showing that burning natural gas in homes can be unhealthy. Last year the powerful trade group criticized a peer-reviewed study showing gas stoves leak benzene even when they are turned off. The AGA offered similar criticism of a 2022 analysis, which showed 12.7% of childhood asthma cases in the U.S. can be attributed to gas stove use in homes.

[…]

Medical experts are starting to take stands against cooking with gas. Nitrogen dioxide emissions have been the biggest concern, because they can trigger respiratory diseases, like asthma. The American Public Health Association has labeled gas cooking stoves “a public health concern,” and the American Medical Association warns that cooking with gas increases the risk of childhood asthma.

[…]

 

Source: Gas stoves emit benzene, linked to cancer, a new Stanford study shows : NPR

AIs are being fed with AI output by the people who are supposed to feed AI with original input

Workers hired via crowdsource services like Amazon Mechanical Turk are using large language models to complete their tasks – which could have negative knock-on effects on AI models in the future.

Data is critical to AI. Developers need clean, high-quality datasets to build machine learning systems that are accurate and reliable. Compiling valuable, top-notch data, however, can be tedious. Companies often turn to third party platforms such as Amazon Mechanical Turk to instruct pools of cheap workers to perform repetitive tasks – such as labeling objects, describing situations, transcribing passages, and annotating text.

Their output can be cleaned up and fed into a model to train it to reproduce that work on a much larger, automated scale.

AI models are thus built on the backs of human labor: people toiling away, providing mountains of training examples for AI systems that corporations can use to make billions of dollars.

But an experiment conducted by researchers at the École polytechnique fédérale de Lausanne (EPFL) in Switzerland has concluded that these crowdsourced workers are using AI systems – such as OpenAI’s chatbot ChatGPT – to perform odd jobs online.

Training a model on its own output is not recommended. We could see AI models being trained on data generated not by people, but by other AI models – perhaps even the same models. That could lead to disastrous output quality, more bias, and other unwanted effects.

The experiment

The academics recruited 44 Mechanical Turk serfs to summarize the abstracts of 16 medical research papers, and estimated that 33 to 46 percent of passages of text submitted by the workers were generated using large language models. Crowd workers are often paid low wages – using AI to automatically generate responses allows them to work faster and take on more jobs to increase pay.

The Swiss team trained a classifier to predict whether submissions from the Turkers were human- or AI-generated. The academics also logged their workers’ keystrokes to detect whether the serfs copied and pasted text onto the platform, or typed in their entries themselves. There’s always the chance that someone uses a chatbot and then manually types in the output – but that’s unlikely, we suppose.

“We developed a very specific methodology that worked very well for detecting synthetic text in our scenario,” Manoel Ribeiro, co-author of the study and a PhD student at EPFL, told The Register this week.

[…]

Large language models will get worse if they are increasingly trained on fake content generated by AI collected from crowdsource platforms, the researchers argued. Outfits like OpenAI keep exactly how they train their latest models a close secret, and may not heavily rely on things like Mechanical Turk, if at all. That said, plenty of other models may rely on human workers, which may in turn use bots to generate training data, which is a problem.

Mechanical Turk, for one, is marketed as a provider of “data labeling solutions to power machine learning models.”

[…]

As AI continues to improve, it’s likely that crowdsourced work will change. Riberio speculated that large language models could replace some workers at specific tasks. “However, paradoxically, human data may be more precious than ever and thus it may be that these platforms will be able to implement ways to prevent large language model usage and ensure it remains a source of human data.”

Who knows – maybe humans might even end up collaborating with large language models to generate responses too, he added.

Source: Today’s AI is artificial artificial artificial intelligence • The Register

It’s like a photocopy of a photocopy of a photocopy…

Meta’s Voicebox AI does text-to-speech without huge training data per voice

Meta has unveiled Voicebox, its generative text-to-speech model that promises to do for the spoken word what ChatGPT and Dall-E, respectfully, did for text and image generation.

Essentially, its a text-to-output generator just like GPT or Dall-E — just instead of creating prose or pretty pictures, it spits out audio clips. Meta defines the system as “a non-autoregressive flow-matching model trained to infill speech, given audio context and text.” It’s been trained on more than 50,000 hours of unfiltered audio. Specifically, Meta used recorded speech and transcripts from a bunch of public domain audiobooks written in English, French, Spanish, German, Polish, and Portuguese.

That diverse data set allows the system to generate more conversational sounding speech, regardless of the languages spoken by each party, according to the researchers. “Our results show that speech recognition models trained on Voicebox-generated synthetic speech perform almost as well as models trained on real speech.” What’s more the computer generated speech performed with just a 1 percent error rate degradation, compared to the 45 to 70 percent drop-off seen with existing TTS models.

The system was first taught to predict speech segments based on the segments around them as well as the passage’s transcript. “Having learned to infill speech from context, the model can then apply this across speech generation tasks, including generating portions in the middle of an audio recording without having to recreate the entire input,” the Meta researchers explained.

[…]

Text-to-Speech generators haver been around for a minute — they’re how your parents’ TomToms were able to give dodgy driving directions in Morgan Freeman’s voice. Modern iterations like Speechify or Elevenlab’s Prime Voice AI are far more capable but they still largely require mountains of source material in order to properly mimic their subject — and then another mountain of different data for every. single. other. subject you want it trained on.

Voicebox doesn’t, thanks to a novel new zero-shot text-to-speech training method Meta calls Flow Matching. The benchmark results aren’t even close as Meta’s AI reportedly outperformed the current state of the art both in intelligibility (a 1.9 percent word error rate vs 5.9 percent) and “audio similarity” (a composite score of 0.681 to the SOA’s 0.580), all while operating as much as 20 times faster that today’s best TTS systems.

[…]

the company released a series of audio examples (see above/below) as well as a the program’s initial research paper. In the future, the research team hopes the technology will find its way into prosthetics for patients with vocal cord damage, in-game NPCs and digital assistants.

Source: Meta’s Voicebox AI is a Dall-E for text-to-speech | Engadget

Ransomware gang lists first victims of MOVEit mass-hacks, including US banks and universities, federal and state govt, huge companies, more more more

lop, the ransomware gang responsible for exploiting a critical security vulnerability in a popular corporate file transfer tool, has begun listing victims of the mass-hacks, including a number of U.S. banks and universities.

The Russia-linked ransomware gang has been exploiting the security flaw in MOVEit Transfer, a tool used by corporations and enterprises to share large files over the internet, since late May. Progress Software, which develops the MOVEit software, patched the vulnerability — but not before hackers compromised a number of its customers.

While the exact number of victims remains unknown, Clop on Wednesday listed the first batch of organizations it says it hacked by exploiting the MOVEit flaw. The victim list, which was posted to Clop’s dark web leak site, includes U.S.-based financial services organizations 1st Source and First National Bankers Bank; Boston-based investment management firm Putnam Investments; the Netherlands-based Landal Greenparks; and the U.K.-based energy giant Shell.

GreenShield Canada, a non-profit benefits carrier that provides health and dental benefits, was listed on the leak site but has since been removed.

Other victims listed include financial software provider Datasite; educational non-profit National Student Clearinghouse; student health insurance provider United Healthcare Student Resources; American manufacturer Leggett & Platt; Swiss insurance company ÖKK; and the University System of Georgia (USG).

[…]

Clop, which like other ransomware gangs typically contacts its victims to demand a ransom payment to decrypt or delete their stolen files, took the unusual step of not contacting the organizations it had hacked. Instead, a blackmail message posted on its dark web leak site told victims to contact the gang prior to its June 14 deadline.

[…]

Multiple organizations have previously disclosed they were compromised as a result of the attacks, including the BBC, Aer Lingus and British Airways. These organizations were all affected because they rely on HR and payroll software supplier Zellis, which confirmed that its MOVEit system was compromised.

The Government of Nova Scotia, which uses MOVEit to share files across departments, also confirmed it was affected, and said in a statement that some citizens’ personal information may have been compromised. However, in a message on its leak site, Clop said, “if you are a government, city or police service… we erased all your data.”

[…]

Source: Ransomware gang lists first victims of MOVEit mass-hacks, including US banks and universities | TechCrunch

Also: US energy department and other agencies hit by hackers in MoveIt breach | Guardian

Also: Millions of Americans’ personal data exposed in global hack

This list is searchable here: MOVEit victim list Progress Software MOVEit Transfer global cyber incident

There’s Now an OTC Gel for Erectile Dysfunction

Futura Medical is a UK-based pharmaceutical. The company’s flagship development is a proprietary gel technology called DermaSys, and its first launch product based on the tech is a treatment for erectile dysfunction. The ED gel has been codenamed MED3000 but it will be sold under the name Eroxon. It’s classified as a medical device and will not require a prescription to obtain.

Eroxon is said to work by containing volatile solvents that evaporate when applied to the glans, the head of the penis. These solvents create a quickly cooling and then warming effect that stimulates the highly sensitive nerves of the penis, which then leads to a boost in the production of nitric oxide, a molecule with many roles in the body—including the relaxation of smooth muscle and increased blood flow in the penis that makes an erection possible.

The pivotal phase III clinical trial that secured the FDA’s authorization involved about 100 men with mild to severe ED. The men were randomized to receive the gel or the lowest prescribed dose of oral tadalafil, the active ingredient in the popular ED drug Cialis.

The trial met all of the primary and secondary goals, with the gel significantly improving men’s erectile function on average. The gel was overall less effective than tadalafil, but its effects were felt much sooner, working within 10 minutes (it typically takes at least a half hour for tadalafil and similar ED treatments). And while both drugs were safe to take, Eroxon also appeared to provide far fewer side effects. Headaches, one of the most common adverse events in the trial, were experienced by four percent of Eroxon users, compared to about 20% of tadalafil users. About one percent of Eroxon users reported a localized burning sensation as well.

The FDA’s go-ahead is the latest victory for the company and MED3000. The gel has already received authorization from the European Union, the UK, and parts of the Middle East. It has since launched in the UK, where it’s being sold as a package of four doses for about $30. The company is also expected to launch the gel in physical EU stores sometime this year. But there isn’t a clear launch timeline or pricing for the product in the U.S. just yet. According to CNN, some financial analysts predict that it might take until 2025 for Americans to get their hold on Eroxon.

Source: There’s Now an OTC Gel for Erectile Dysfunction

MEPs ready to negotiate first-ever rules for safe and transparent AI after passing AI act in Parliament

The rules aim to promote the uptake of human-centric and trustworthy AI and protect the health, safety, fundamental rights and democracy from its harmful effects.

On Wednesday, the European Parliament adopted its negotiating position on the Artificial Intelligence (AI) Act with 499 votes in favour, 28 against and 93 abstentions ahead of talks with EU member states on the final shape of the law. The rules would ensure that AI developed and used in Europe is fully in line with EU rights and values including human oversight, safety, privacy, transparency, non-discrimination and social and environmental wellbeing.

Prohibited AI practices

The rules follow a risk-based approach and establish obligations for providers and those deploying AI systems depending on the level of risk the AI can generate. AI systems with an unacceptable level of risk to people’s safety would therefore be prohibited, such as those used for social scoring (classifying people based on their social behaviour or personal characteristics). MEPs expanded the list to include bans on intrusive and discriminatory uses of AI, such as:

  • “Real-time” remote biometric identification systems in publicly accessible spaces;
  • “Post” remote biometric identification systems, with the only exception of law enforcement for the prosecution of serious crimes and only after judicial authorization;
  • biometric categorisation systems using sensitive characteristics (e.g. gender, race, ethnicity, citizenship status, religion, political orientation);
  • predictive policing systems (based on profiling, location or past criminal behaviour);
  • emotion recognition systems in law enforcement, border management, the workplace, and educational institutions; and
  • untargeted scraping of facial images from the internet or CCTV footage to create facial recognition databases (violating human rights and right to privacy).

High-risk AI

MEPs ensured the classification of high-risk applications will now include AI systems that pose significant harm to people’s health, safety, fundamental rights or the environment. AI systems used to influence voters and the outcome of elections and in recommender systems used by social media platforms (with over 45 million users) were added to the high-risk list.

Obligations for general purpose AI

Providers of foundation models – a new and fast-evolving development in the field of AI – would have to assess and mitigate possible risks (to health, safety, fundamental rights, the environment, democracy and rule of law) and register their models in the EU database before their release on the EU market. Generative AI systems based on such models, like ChatGPT, would have to comply with transparency requirements (disclosing that the content was AI-generated, also helping distinguish so-called deep-fake images from real ones) and ensure safeguards against generating illegal content. Detailed summaries of the copyrighted data used for their training would also have to be made publicly available.

Supporting innovation and protecting citizens’ rights

To boost AI innovation and support SMEs, MEPs added exemptions for research activities and AI components provided under open-source licenses. The new law promotes so-called regulatory sandboxes, or real-life environments, established by public authorities to test AI before it is deployed.

Finally, MEPs want to boost citizens’ right to file complaints about AI systems and receive explanations of decisions based on high-risk AI systems that significantly impact their fundamental rights. MEPs also reformed the role of the EU AI Office, which would be tasked with monitoring how the AI rulebook is implemented.

Quotes

After the vote, co-rapporteur Brando Benifei (S&D, Italy) said: “All eyes are on us today. While Big Tech companies are sounding the alarm over their own creations, Europe has gone ahead and proposed a concrete response to the risks AI is starting to pose. We want AI’s positive potential for creativity and productivity to be harnessed but we will also fight to protect our position and counter dangers to our democracies and freedoms during the negotiations with Council”.

Co-rapporteur Dragos Tudorache (Renew, Romania) said: “The AI Act will set the tone worldwide in the development and governance of artificial intelligence, ensuring that this technology, set to radically transform our societies through the massive benefits it can offer, evolves and is used in accordance with the European values of democracy, fundamental rights, and the rule of law”.

Next steps

Negotiations with the Council on the final form of the law will begin later today.

Source: MEPs ready to negotiate first-ever rules for safe and transparent AI | News | European Parliament

WhatsApp may finally let you add multiple accounts to one device

If you regularly use people who regularly use more than one WhatsApp account this new beta update is going to be of interest to you. The messaging app is reportedly working on multi-account support for its Android app, an update that would allow you to switch between profiles on the same device, WABetaInfo reports. The feature appears to work just like changing accounts on fellow Meta-owned app Instagram with a pop-up at the bottom of your app showing current accounts and the option to add new ones.

Any new accounts will be stored within your device and, of course, can be logged out of at any point. Multi-account support might be advantageous if you have different work and personal numbers or want to try out recent social media-centric WhatsApp features like Channels. This update lets you send broadcasts like photos and polls to followers, with WhatsApp planning to monetize it for creators in the future. Similarly, WhatsApp has reportedly been working on a username feature that would allow you to find people the same as Instagram or Twitter, without having their phone numbers.

Multi-account support also follows the iOS and Android release of companion mode, an update that allows you to use the same WhatsApp account on up to four phones. Previously, you could only be logged in on a single mobile phone along with your tablet and computer.

Source: WhatsApp may soon let you add multiple accounts to one device | Engadget

Broadcom squeezed Samsung, now South Korea’s squeezing back

As the Commission explained in a Tuesday adjudicaiton, Broadcom and Samsung were in talks for a long-term supply agreement when the American chipmaker demanded the Korean giant sign or it would suspend shipments and support services.

Broadcom also wanted Samsung to commit to spending over $760 million a year, to make up the difference for any shortfalls, and not to buy from rivals.

With the market for the components it needs tight, Samsung reportedly signed. Then, when a certain viral pandemic cruelled its business, the giant conglomerate found itself having to buy parts it didn’t need. The chaebol estimates the deal cost it millions.

News of the deal eventually reached the regulator, which in 2022 asked Broadcom to propose a remedy – a common method of dispute resolution in South Korea.

Broadcom proposed a $15.5 million fund to stimulate South Korea’s small semiconductor outfits, plus extra support for Samsung.

On Tuesday, the Commission decided that’s not a reasonable restitution because it doesn’t include compensation for the impacted parties.

That’s bad news for Broadcom, because it means the regulator will now escalate matters – first by determining if the chipmaker broke local laws and then by considering a different penalty.

South Korea is protective of its local businesses – even giants like Samsung that are usually capable of fending for themselves. Broadcom reps will soon have some tricky-to-negotiate meetings on their agendas.

At least the corporation’s legal team has experience at this sort of thing. In 2018 it was probed by US authorities over contract practices, and in 2021 was forced to stop some anticompetitive practices. In 2022 it was in strife again – this time for allegedly forcing its customers to sign exclusive supply contracts.

The serial acquirer also lost a regulatory rumble over its attempted acquisition of Qualcomm, and is currently trying to explain why its proposed acquisition of VMware won’t harm competition.

Now it awaits South Korea’s wrath – and perhaps Samsung’s too.

Source: Broadcom squeezed Samsung, now South Korea’s squeezing back • The Register

Google Restores ‘Downloader’ App To Store 20 days after DMCA takedown based on 0 evidence, says it’s normal to be able to take down apps for no reason

A couple of weeks back, we discussed how Google had delisted the app Downloader from the Play Store after a DMCA notice was issued by a firm representing several Israeli TV networks. The problem with all of this is simple: Downloader doesn’t have anything to do with copyright infringement or piracy. All it does is combine a file manager and basic web browser. The DMCA notice centered on the latter, complaining that users could get to piracy sites from the browser. You know, just like you can from any browser.

Well, take heart, dear friends, because Google reinstated Downloader on the Play Store 20 days after it was removed.

Google has reversed the suspension of an Android TV app that was hit with a copyright complaint simply because it is able to load a pirate website that can also be loaded in any standard web browser. The Downloader app, which combines a web browser with a file manager, is back in the Google Play Store after nearly a three-week absence.

In addition to the rejected appeal, Saba filed a DMCA counter-notification with Google. That “started a 10-business-day countdown for the [TV companies’] law firm to file legal actions against me,” Saba wrote today. “Due to the app being removed on a Friday and the Memorial Day holiday, 10 business days had elapsed with no word from the law firm on June 6th and I contacted Google to have the app reinstated.”

All of which is why Google, further down the article, is quoted as saying they followed the standard playbook to DMCA takedown notices. The counter-notification kicked off that process, giving the firm that issued the original notice time to decide whether to file a lawsuit or not, which it presumably did not. The quote has all the hallmarks of Google resting on that process to wipe its hands clean of the whole situation.

But that’s stupid. It also serves as an example proving Saba’s point: the DMCA takedown process is broken. That a bunch of foreign TV networks can get a perfectly legit app removed from the app store for weeks just by pushing paperwork around is absurd.

As is Google’s continued inability to get things right with regard to this particular app.

In yet another example of the Google Play Store’s absurdity, Google had determined that my app collected email addresses without declaring so. Since there is no way for my app itself to collect email addresses, and without any additional information or help from Google, I can only assume that Google is referring to the email mailing list signup form on this website, which loads by default in the web browser of the Downloader app.

Once again, that isn’t the app doing a thing; it’s the web browser doing it if someone signs up to be on an email list.

So, the app is back, a lawsuit has not yet been filed, and everyone will probably forget about this entire thing, meaning the broken nature of the DMCA process will remain broken. Bang up job all around.

Source: Google Finally Restores ‘Downloader’ App To Store

“Clearly predatory”: Western Digital sparks panic, anger for age-shaming HDDs, making it impossible to repair RAID pools

The practice’s revelation is the last straw for some users. Western Digital already had a steep climb to win back NAS customers’ trust after shipping NAS drives with SMR (shingled magnetic recording) instead of CMR (conventional magnetic recording). Now, some are saying they won’t use or recommend the company’s hard drives anymore.

“Warning,” your NAS drive’s been on for 3 years

As users have reported online, including on Synology-focused and Synology’s own forums, as well as on Reddit and YouTube, Western Digital drives using Western  Digital Device Analytics (WDDA) are getting a “warning” stamp in Synology DSM once their power-on hours count hits the three-year mark. WDDA is similar to SMART monitoring and rival offerings, like Seagate’s IronWolf, and is supposed to provide analytics and actionable items.

The recommended action says: “The drive has accumulated a large number of power on hours [throughout] the entire life of the drive. Please consider to replace the drive soon.” There seem to be no discernible problems with the hard drives otherwise.

Synology confirmed this to Ars Technica and noted that the labels come from Western Digital, not Synology. A spokesperson said the “WDDA monitoring and testing subsystem is developed by Western Digital, including the warning after they reach a certain number of power-on-hours.”

The practice has caused some, like YouTuber SpaceRex, to stop recommending Western Digital drives for the foreseeable future. In May, the YouTuber and tech consultant described his outrage, saying three years is “absolutely nothing” for a NAS drive and lamenting the flags having nothing to do with anything besides whether or not a drive has been in use for three years.

[…]

Users are also concerned that this could prevent people from noticing serious problems with their drive.

Further, you can’t repair a pool with a drive marked with a warning label.

“Only drives with a healthy status can be used to repair or expand a storage pool,” Synology’s spokesperson said. “Users will need to first suppress the warning or disable WDDA to continue.”

[…]

Since Western Digital’s questionable practice has come to light, there has been discussion about how to disable WDDA via SSH.

Synology’s spokesperson said if WDDA is enabled in DSM, one could disable WDDA in Storage Manager and see the warning removed.

“Because the warning is triggered by a fixed power-on-hour count, we do not believe [disabling WDDA] it to be a risk. However, administrators should still pay close attention to their systems, including if other warnings or I/O disruptions occur,” the Synology rep said. “Indicators such as significantly slower reads/writes are more evident signs that a drive’s health may be deteriorating.”

[…]

Source: “Clearly predatory”: Western Digital sparks panic, anger for age-shaming HDDs | Ars Technica

Space Force doesn’t want HQ in anti-abortion Alabama, so their congressman Targets Air Force Funds

[…]

President Joe Biden’s administration is reportedly trying to reverse a decision to relocate the Space Command’s headquarters from Colorado to Huntsville, Alabama, largely due to concerns regarding the state’s strict anti-abortion law that was put into effect last summer. In December 2022, the Biden administration directed the U.S. Air Force to conduct a review of the relocation decision, which was made by former President Donald Trump during his time in office. For months now, the move to Alabama has been put on hold pending the review.

Alabama lawmakers have been outspoken against Biden’s attempts to delay the decision and Congressman Rogers’ proposed bill, known as the chairman’s mark, could be the latest attempt to add pressure on the White House.

The bill, which the committee will consider on June 21, would limit funds “to construct or modify facilities for temporary or permanent use by United States Space Command for headquarter operations until the Secretary of the Air Force delivers a report on the selection of a permanent location to the congressional defense committees,” it states.

The proposed bill would also limit the travel funds of the secretary of the Air Force until the delivery of the report.

The Space Command is still not fully operational but is set to reach full operations by the end of the year. Senior military leaders have expressed concern that relocating the Space Command’s headquarters to Alabama could disrupt its operations while staying in Colorado would allow it to reach full operational capacity sooner, SpaceNews reported in March.

Officials in Alabama, however, are keen on having the Space Command based in their state. “Let me repeat what everyone already knows: Alabama is the only rightful home for Space Command Headquarters,” Alabama Governor Kay Ivey wrote in a statement on May 30.

The bill includes other restrictions targeted at the Space Command. It would limit funds for the WGS-12 satellite, stating that the secretary of the Air Force may not issue a contract for the procurement of a WGS-12 satellite, part of a geostationary constellation by the U.S. Space Command, until it can certify that the requirements met by the satellite cannot be fulfilled by commercial providers.

Finally, the proposed bill would require the Air Force to increase competition for phase three of the National Security Space Launch Program to provide “opportunities for emerging launch providers while also assuring access to proven launch capabilities for low-risk tolerant payloads,” the draft states. The program is intended to provide payloads from the Department of Defense and other government bodies with access to space.

Although it’s easy to confuse them, the Space Command is different from the U.S. Space Force. It’s a combatant command of the U.S. Department of Defense (DOD) to conduct “operations in, from, and to space to deter conflict, and if necessary, defeat aggression, deliver space combat power for the joint/combined force, and defend U.S. vital interests with allies and partners,” according to the DOD.

Source: Congressman’s Battle Over Space Force HQ Targets Air Force Funds

It’s not particularly surprising that no-one wants to move to a state that hates abortions.

Fitbit Privacy & security guide – no one told me it would send my data to the US

As of January 14, 2021, Google officially became the owner of Fitbit. That worried many privacy conscious users. However, Google promised that “Fitbit users’ health and wellness data won’t be used for Google ads and this data will be kept separate from other Google ad data” as part of the deal with global regulators when they bought Fitbit. This is good.

And Fitbit seems to do an OK job with privacy and security. It de-identifies the data it collects so it’s (hopefully) not personally identifiable. We say hopefully because, depending on the kind of data, it’s been found to be pretty easy to de-anonymize these data sets and track down an individual’s patterns, especially with location data. So, be aware with Fitbit—or any fitness tracker—you are strapping on a device that tracks your location, heart rate, sleep patterns, and more. That’s a lot of personal information gathered in one place.

What is not good is what can happen with all this very personal health data if others aren’t careful. A recent report showed that health data for over 61 million fitness tracker users, including both Fitbit and Apple, was exposed when a third-party company that allowed users to sync their health data from their fitness trackers did not secure the data properly. Personal information such as names, birthdates, weight, height, gender, and geographical location for Fitbit and other fitness-tracker users was left exposed because the company didn’t password protect or encrypt their database. This is a great reminder that yes, while Fitbit might do a good job with their own security, anytime you sync or share that data with anyone else, it could be vulnerable.

[…]

e Fitbit app does allow for period tracking though. And the app, like most wearable tracking apps, collects a whole bunch of person, body-related data that could potentially be used to tell if a user is pregnant.

Fortunately, Fitbit doesn’t sell this data but it does say it can share some personal data for interest-based advertising. Fitbit also can share your wellness data with other apps, insurers, and employers if you sign up for that and give your consent.

[…]

Fitbit isn’t the wearable we’d trust the most with our private reproductive health data. Apple, Garmin, Oura all make us feel a bit more comfortable with this personal information.

Source: Fitbit | Privacy & security guide | Mozilla Foundation

So when installing one it says it needs to process your data in the USA – which basically means it’s up for grabs for all and sundry. There is a reason the EU has the GDPR. But why does it need to send data anywhere other than your phone anyway?!

This is something that almost no-one mentions when you read the reviews on these things.

How to Have Windows Remember Their Size and Positions With WinSize2

We have been through multiple versions of Windows. Yet, Microsoft still refuses to give its OS one much-requested feature: the ability to remember each window’s desktop placement and dimensions.

Thankfully, the free WinSize2 utility can help with that. So, let’s see how you can use it to keep your desktop organized by “sticking” windows to their spot.

How to Download & Install WinSize2

Since it’s a third-party tool, it’s not included with Windows. Thus, to use it, you will have to download the app from the official WinSize2 site.

After you download and install it, you won’t see anything on your screen. The app will run in the background, hidden from sight, waiting for your input. As we’ll see next, its interface will be accessible from an icon in the window tray.

Before you access WinSize2’s interface, we should warn you that it looks ancient. That’s because, well, it is ancient.

WinSize2 was released over a decade ago, but that’s not a negative. On the contrary, it remains relevant many Windows versions later, the time since its release not affecting its usefulness.

[…]

How to Insta-Lock Window Positions

Point your mouse cursor at WinSize2’s icon, lingering in the Windows tray. You will see a hovering bubble with its version and active hotkey.

You can use this hotkey combination, by default mapped to Ctrl + Alt + Z, to save any window’s position and dimensions on any desktop spot.

[…]

With the window whose placement and dimensions you want to save visible, move it and resize it anywhere on your desktop, precisely as you’d like it to show up in the future.

With the window active and selected, to create an entry for it and save its spot and size, press WinSize2’s hotkey button combination (by default Ctrl + Alt + Z).

Almost immediately, a message will appear hovering next to your mouse cursor, informing you about the action’s success.

That was it! If you try closing and reopening the window, you will see it reappear on the same spot with the exact dimensions. Try moving it around and closing it. When it shows up again, instead of popping up on a random location on your desktop, WinSize2 will detect its appearance, and move and resize it wherever you “pinned” it.

[…]

 

Source: How to Have Windows Remember Their Size and Positions With WinSize2

Royal Navy Tests Quantum Navigation

GPS has changed the way we get around the globe. But if you command a warship, you must think about what you would do if an adversary destroyed or compromised your GPS system. The Royal Navy and Imperial College London think a quantum navigation system might be the answer.

[…]

The quantum sensors in question are essentially accelerometers. Unlike conventional accelerometers, though, these devices use ultracold atoms to make very precise measurements using a laser optical ruler, which means they do not drift as rapidly

[…]

You can see a Sky News report on the trial below.The tests were done in a rapid prototyping pod carried onboard XV Patrick Blackett, a fitting name for an experimental ship since Lord Blackett was a Nobel laureate and head of the physics department at Imperial College for a decade ending in 1963. The underlying tech came out of the university back in 2018, but making it work in a real-world environment onboard a ship is another matter.

[…]

 

Source: Royal Navy Tests Quantum Navigation | Hackaday

Study finds sleep coaching app can help recover an extra hour of rest without drugs

The makers of an app called Sleep Reset claim it can help you get more (and better) sleep without the use of drugs — and they have the study to prove it. A group of researchers from the University of Arizona’s Sleep and Health Research Program, some of whom also serve as the company’s medical advisors, have just published a paper in peer-reviewed journal Frontiers in Sleep. The paper details the results of a 12-week program that used Sleep Reset, which apparently increased the average participant’s sleep time by 44 minutes.

Those who were getting less than six hours of sleep a night increased their sleep time by 85 minutes. Some of them likely improved their time because they were able to fall asleep much earlier: The paper says participants who typically lie awake for more than 30 minutes before dozing off managed to reduce that time by 53 percent. And those who usually spend more than an hour trying to fall asleep were able to reduce their time awake by 41 percent. Meanwhile, those’d wake up more than three times overnight found themselves experiencing two fewer nightly awakenings. The researchers also said that nearly half of the participants stopped using sleep aids after completing the program.

The study involved 564 participants (65 percent of whom were female) aged 30 to 60 years old who followed a standardized curriculum for three months. They used Sleep Reset in the way it’s meant to be used in that its sleep coaches gave them personalized recommendations and feedback via text messages within the app. They also used the app’s sleep diary, mindfulness exercises and trackers to monitor their progress. To use Sleep Reset, a user needs to answer a series of questions on what kind of sleep they’re getting and what they’re having trouble with. They’re also asked to state what their goals are, such as whether they’re looking to feel more well-rested or to look more youthful.

[…]

Dr. Michael Grandner, Associate Professor of Psychiatry at the University of Arizona College of Medicine and Sleep Reset’s Lead Scientific advisor said: “Many popular sleep solutions like Trazadone, Benadryl and Melatonin don’t even have the clinical evidence to increase total sleep time much at all. Ambien and Lunesta are known to increase sleep time by around 30 minutes, but that’s much less than what we’ve seen from Sleep Reset. What’s even better is that Sleep Reset is a non-medication intervention, thus non-habit forming and devoid of troubling side effects.”

Source: Study finds sleep coaching app can help recover an extra hour of rest

Redditor creates working anime QR codes using Stable Diffusion

On Tuesday, a Reddit user named “nhciao” posted a series of artistic QR codes created using the Stable Diffusion AI image-synthesis model that can still be read as functional QR codes by smartphone camera apps. The functional pieces reflect artistic styles in anime and Asian art.

QR codes, short for Quick Response codes, are two-dimensional barcodes initially designed for the automotive industry in Japan. These codes have since found wide-ranging applications in various fields including advertising, product tracking, and digital payments, thanks to their ability to store a substantial amount of data. When scanned using a smartphone or a dedicated QR code scanner, the encoded information (which can be text, a website URL, or other data) is quickly accessed and displayed.

In this case, despite the presence of intricate AI-generated designs and patterns in the images created by nhciao, we’ve found that smartphone camera apps on both iPhone and Android are still able to read these as functional QR codes. If you have trouble reading them, try backing your camera farther away from the images.

Stable Diffusion is an AI-powered image-synthesis model released last year that can generate images based on text descriptions. It can also transform existing images using a technique called “img2img.” The creator did not detail the exact technique used to create the novel codes in English, but based on this blog post and the title of the Reddit post (“ControlNet for QR Code”), they apparently trained several custom Stable Diffusion ControlNet models (plus LoRA fine tunings) that have been conditioned to create different-styled results. Next, they fed existing QR codes into the Stable Diffusion AI image generator and used ControlNet to maintain the QR code’s data positioning despite synthesizing an image around it, likely using a written prompt.

Other techniques exist to make artistic-looking QR codes by manipulating the positions of dots within the codes to make meaningful patterns that can still be read. In this case, Stable Diffusion is not only controlling dot positions but also blending picture details to match the QR code.

This interesting use of Stable Diffusion is possible because of the innate error correction feature built into QR codes. This error correction capability allows a certain percentage of the QR code’s data to be restored if it’s damaged or obscured, permitting a level of modification without making the code unreadable.

In typical QR codes, this error correction feature serves to recover information if part of the code is damaged or dirty. But in nhciao’s case, it has been leveraged to blend creativity with utility. Stable Diffusion added unique artistic touches to the QR codes without compromising their functionality.

An AI-generated image that still functions as a working QR code.
Enlarge / An AI-generated image that still functions as a working QR code.

The codes in the examples seen here all point to a URL for qrbtf.com, a QR code-generator website likely run by nhciao based on their previous Reddit posts from years past. The technique could technically work with any QR code, although someone on the Reddit thread said that it may work best for shorter URLs due to how QR codes encode data.

This discovery opens up new possibilities for both digital art and marketing. Ordinary black-and-white QR codes could be turned into unique pieces of art, enhancing their aesthetic appeal. The positive reaction to nhciao’s experiment on social media may spark a new era in which QR codes are not just tools of convenience but also interesting and complex works of art.

Source: Redditor creates working anime QR codes using Stable Diffusion | Ars Technica

Posted in Art

electric VTOL Pilot Training Outlined in US FAA Proposal (which could be used as urban air taxis, maybe)

US aviation regulators on Wednesday unveiled their first framework for how to train pilots for the expected new breed of electric-powered urban air taxis designed to revolutionize short-hop travel in cities. From a report: The Federal Aviation Administration published a proposed set of regulations that attempt to create an orderly process for building a pipeline of pilots on the devices, which don’t currently fit into existing regulations. It would allow flight crews trained on existing aircraft to take credit for that experience as they transition to the new devices known as electric vertical takeoff and landing, or eVOTLs, the FAA said in a statement. It also creates a pathway for pilots to receive FAA sign-off for specific new aircraft and attempts to merge the new technology into existing rules as much as possible, the agency said.

“These proposed rules of the sky will safely usher in this new era of aviation and provide the certainty the industry needs to develop,” David Boulter, FAA’s acting associate administrator for aviation safety, said in the release. The proposal is a key step in allowing the new aircraft — which take off vertically like helicopters, but can fly with the efficiency of fixed-wing planes — to be introduced into the US aviation system. The agency has estimated that it will approve a handful of the devices as early as 2025.

Source: Urban Air-Taxi Pilot Training Outlined in US FAA Proposal – Slashdot

Lung cancer pill cuts risk of death by half, says study

[…] Taking the drug osimertinib after surgery dramatically reduced the risk of patients dying by 51%, results presented at the world’s largest cancer conference showed.

[…]

“Fifty per cent is a big deal in any disease, but certainly in a disease like lung cancer, which has typically been very resistant to therapies.”

The Adaura trial involved patients aged between 30 and 86 in 26 countries and looked at whether the pill could help non-small cell lung cancer patients, the most common form of the disease.

Everyone in the trial had a mutation of the EGFR gene, which is found in about a quarter of global lung cancer cases, and accounts for as many as 40% of cases in Asia. An EGFR mutation is more common in women than men, and in people who have never smoked or have been light smokers.

[…]

After five years, 88% of patients who took the daily pill after the removal of their tumour were still alive, compared with 78% of patients treated with a placebo. Overall, there was a 51% lower risk of death for those who received osimertinib compared with those who received placebo.

[…]

 

Source: Lung cancer pill cuts risk of death by half, says ‘thrilling’ study | Cancer research | The Guardian

Scientists Beam Space-Based Solar Power to Earth for First Time

[…] The experiment is a part of Caltech’s Space Solar Power Project, and the institute announced a successful transmission via press release yesterday. The researchers conducted the power transfer experiment using the Microwave Array for Power-transfer Low-orbit Experiment, or MAPLE, which is a small prototype aboard the in-orbit Space Solar Power Demonstrator (SSPD-1) that launched this past January.

The researchers say that, in a first, MAPLE’s array of transmitters successfully beamed solar power collected in space using microwaves to a receiver on the rooftop of Gordon and Betty Moore Laboratory of Engineering on Caltech’s campus in Pasadena.

“Through the experiments we have run so far, we received confirmation that MAPLE can transmit power successfully to receivers in space,” said Space Solar Power Project co-director Ali Hajimiri in the press release. “We have also been able to program the array to direct its energy toward Earth, which we detected here at Caltech. We had, of course, tested it on Earth, but now we know that it can survive the trip to space and operate there.”

How Does Wireless Power Transfer Work?

The SSPD-1, attached to a Vigoride spacetug from Momentus Space, consists of two panels used to collect solar power. An array of transmitters within MAPLE sends that energy across a given distance using constructive and destructive interference. Located about a foot away from its transmitter, MAPLE has two receivers that collect solar energy and convert it to DC electricity which, during the experiment, was used to light up two LEDs inside MAPLE. The researchers were able to light up one LED at a time by shifting the transmissions between the receivers, demonstrating the accuracy of the array. MAPLE also has a window that can allow the transmitters to beam energy to a target outside the spacecraft, like Earth.

“In the same way that the internet democratized access to information, we hope that wireless energy transfer democratizes access to energy,” Hajimiri said in the release. “No energy transmission infrastructure will be needed on the ground to receive this power. That means we can send energy to remote regions and areas devastated by war or natural disaster.”

The ability to wirelessly transmit solar power from space has huge implications for renewable energy, so much so that Japan plans to start using it by the mid-2030’s. A Japanese research team is looking to pilot the technology in 2025 with a public-private partnership.

As humanity’s growing need for energy continues, a powerful solution like space-based solar power collection and transmission could be a huge step in the right direction. Space-based power collection would be able to operate 24-hours a day—whereas night pauses ground-based solar power collection—and would be to able to beam power to remote or disaster-stricken areas, assuming they have the requisite infrastructure.

Source: Scientists Beam Space-Based Solar Power to Earth for First Time

Of course, if the sender is pushed slightly off course…

US judge grants final approval to Apple’s $50m broken ‘butterfly’ keyboard settlement

A US federal court this week gave final approval to the $50 million class-action settlement Apple came to last July resolving claims the company knew about and concealed the unreliable nature of keyboards on MacBook, MacBook Air and MacBook Pro computers released between 2015 and 2019. Per Reuters (via 9to5Mac), Judge Edward Davila on Thursday called the settlement involving Apple’s infamous “butterfly” keyboards “fair, adequate and reasonable.” Under the agreement, MacBook users impacted by the saga will receive settlements between $50 and $395. More than 86,000 claims for class member payments were made before the application deadline last March, Judge Davila wrote in his ruling.

Apple debuted the butterfly keyboard in 2015 with the 12-inch MacBook. At the time, former design chief Jony Ive boasted that the mechanism would allow the company to build ever-slimmer laptops without compromising on stability or typing feel. As Apple re-engineered more of its computers to incorporate the butterfly keyboard, Mac users found the design was susceptible to dust and other debris. The company introduced multiple revisions to make the mechanism more resilient before eventually returning to a more conventional keyboard design with the 16-inch MacBook Pro in late 2019.

[…]

Source: US judge grants final approval to Apple’s $50 million ‘butterfly’ keyboard settlement | Engadget

Air New Zealand to weigh passengers before they board the airplane

That’s right: New Zealand’s Civil Aviation Authority is asking that its national airline weigh passengers departing on international flights from Auckland International Airport through July 2, 2023.

The program, which Air New Zealand calls a passenger weight survey, is a way to gather data on the weight load and distribution for planes, the airline said.

“We weigh everything that goes on the aircraft – from the cargo to the meals onboard, to the luggage in the hold,” Alastair James, the airline’s load control improvement specialist said in a statement. “For customers, crew and cabin bags, we use average weights, which we get from doing this survey.”

Still, weight is a personal thing that not everyone wishes to disclose. In order to protect individuals’ privacy, the airline says it has made the data anonymous.

Source: Air New Zealand to weigh passengers before they board the airplane | CNN

This is pretty relevant because the standard passenger weight is given in tables which are  slightly outdated. So if there are > adult 30 passengers, they are expected to weigh 84kg each including hand luggage. Holiday charters can calculate using 76kg. Baggage is expected to be 13kg within the EU. These figures seem extremely light to me.

Millions of Gigabyte Motherboards Were Sold With a Firmware Backdoor for updates

[…] Researchers at firmware-focused cybersecurity company Eclypsium revealed today that they’ve discovered a hidden mechanism in the firmware of motherboards sold by the Taiwanese manufacturer Gigabyte,

[…]

the hidden code is meant to be an innocuous tool to keep the motherboard’s firmware updated, researchers found that it’s implemented insecurely, potentially allowing the mechanism to be hijacked and used to install malware instead of Gigabyte’s intended program. And because the updater program is triggered from the computer’s firmware, outside its operating system, it’s tough for users to remove or even discover.

[…]

In its blog post about the research, Eclypsium lists 271 models of Gigabyte motherboards that researchers say are affected.

[…]

Gigabyte’s updater alone might have raised concerns for users who don’t trust Gigabyte to silently install code on their machine with a nearly invisible tool—or who worry that Gigabyte’s mechanism could be exploited by hackers who compromise the motherboard manufacturer to exploit its hidden access in a software supply chain attack. But Eclypsium also found that the update mechanism was implemented with glaring vulnerabilities that could allow it to be hijacked: It downloads code to the user’s machine without properly authenticating it, sometimes even over an unprotected HTTP connection, rather than HTTPS. This would allow the installation source to be spoofed by a man-in-the-middle attack carried out by anyone who can intercept the user’s internet connection, such as a rogue Wi-Fi network.

In other cases, the updater installed by the mechanism in Gigabyte’s firmware is configured to be downloaded from a local network-attached storage device (NAS), a feature that appears to be designed for business networks to administer updates without all of their machines reaching out to the internet. But Eclypsium warns that in those cases, a malicious actor on the same network could spoof the location of the NAS to invisibly install their own malware instead.

[…]

Source: Millions of Gigabyte Motherboards Were Sold With a Firmware Backdoor | WIRED

Amazon’s Ring used to spy on customers, children, FTC says in privacy settlement

A former employee of Amazon.com’s Ring doorbell camera unit spied for months on female customers in 2017 with cameras placed in bedrooms and bathrooms, the Federal Trade Commission said in a court filing on Wednesday when it announced a $5.8 million settlement with the company over privacy violations.

Amazon also agreed to pay $25 million to settle allegations it violated children’s privacy rights when it failed to delete Alexa recordings at the request of parents and kept them longer than necessary, according to a court filing in federal court in Seattle that outlined a separate settlement.

The FTC settlements are the agency’s latest effort to hold Big Tech accountable for policies critics say place profits from data collection ahead of privacy.

The FTC is also probing Amazon.com’s $1.7 billion deal to buy iRobot Corp (IRBT.O), which was announced in August 2022 in Amazon’s latest push into smart home devices, and has a separate antitrust probe underway into Amazon.

[…]

The FTC said Ring gave employees unrestricted access to customers’ sensitive video data: “As a result of this dangerously overbroad access and lax attitude toward privacy and security, employees and third-party contractors were able to view, download, and transfer customers’ sensitive video data.”

In one instance in 2017, an employee of Ring viewed videos made by at least 81 female customers and Ring employees using Ring products. “Undetected by Ring, the employee continued spying for months,” the FTC said.

[…]

In May 2018, an employee gave information about a customer’s recordings to the person’s ex-husband without consent, the complaint said. In another instance, an employee was found to have given Ring devices to people and then watched their videos without their knowledge, the FTC said.

[…]

rules against deceiving consumers who used Alexa. For example, the FTC complaint says that Amazon told users it would delete voice transcripts and location information upon request, but then failed to do so.

“The unlawfully retained voice recordings provided Amazon with a valuable database for training the Alexa algorithm to understand children, benefiting its bottom line at the expense of children’s privacy,” the FTC said.

Source: Amazon’s Ring used to spy on customers, FTC says in privacy settlement

The total settlement of $30m is insanely low considering the scale of the violations and the continuing nature of them.

Supreme Court Limits EPA’s Authority Under the Clean Water Act – yay, trash the USA!

The U.S. Supreme Court Court on Thursday significantly curtailed the power of the Environmental Protection Agency to regulate the nation’s wetlands and waterways. It was the court’s second decision in a year limiting the ability of the agency to enact anti-pollution regulations and combat climate change. The challenge to the regulations was brought by Michael and Chantell Sackett, who bought property to build their dream house about 500 feet away from Idaho’s Scenic Priest Lake, a 19-mile stretch of clear water that is fed by mountain streams and bordered by state and national parkland. Three days after the Sacketts started excavating their property, the EPA stopped work on the project because the couple had failed to get a permit for disturbing the wetlands on their land. Now a conservative Supreme Court majority has used the Sackett’s case to roll back longstanding rules adopted to carry out the 51-year-old Clean Water Act. While the nine justices agreed that the Sacketts should prevail, they divided 5-to-4 as to how far to go in limiting the EPA’s authority.

Writing for the court majority (PDF), Justice Samuel Alito said that the navigable waters of the United States regulated by the EPA under the statute do not include many previously regulated wetlands. Rather, he said, the CWA extends to only streams, oceans, rivers and lakes, and those wetlands with a “continuous surface connection to those bodies.” Justice Brett Kavanaugh, joined by the court’s three liberal members, disputed Alito’s reading of the statute, noting that since 1977 when the CWA was amended to include adjacent wetlands, eight consecutive presidential administrations, Republican and Democratic, have interpreted the law to cover wetlands that the court has now excluded. Kavanaugh said that by narrowing the act to cover only adjoining wetlands, the court’s new test will have quote “significant repercussions for water quality and flood control throughout the United States.” In addition to joining Kavanaugh’s opinion, the court’s liberals, signed on to a separate opinion by Justice Elena Kagan. Pointing to the air and water pollution cases, she accused the majority of appointing itself instead of Congress as the national policymaker on the environment. President Biden, in a statement, called the decision “disappointing.” It “upends the legal framework that has protected America’s waters for decades,” he said. “It also defies the science that confirms the critical role of wetlands in safeguarding our nation’s streams, rivers, and lakes from chemicals and pollutants that harm the health and wellbeing of children, families, and communities.”

“I don’t think its an overstatement to say its catastrophic for the Clean Water act,” said Jim Murphy of the National Wildlife Federation. Wetlands play an “enormous role in protecting the nation’s water,” he said. “They’re really the kidneys of water systems and they’re also the sponges. They absorb a lot of water on the landscape. So they’re very important water features and they’re very important to the quality of the water that we drink, swim, fish, boat and recreate in.”

Source: Supreme Court Limits EPA’s Authority Under the Clean Water Act – Slashdot