×
Facebook

Facebook, Instagram, WhatsApp, and Oculus Have Been Suffering Global Outage For More Than 3 Hours Now [Update] (arstechnica.com) 169

Facebook -- and all the major services that Facebook owns -- are down today. ArsTechnica: We first noticed the problem at about 11:30 am Eastern time, when some Facebook links stopped working. Investigating a bit further showed major DNS failures at Facebook: "Google anycast DNS returns SERVFAIL for Facebook queries; querying http://a.ns.facebook.com directly times out."

The problem goes deeper than Facebook's obvious DNS failures, though. Facebook-owned Instagram was also down, and its DNS services -- which are hosted on Amazon rather than being internal to Facebook's own network -- were functional. Instagram and WhatsApp were reachable but showed HTTP 503 (no server is available for the request) failures instead, an indication that while DNS worked and the services' load balancers were reachable, the application servers that should be feeding the load balancers were not. A bit later, Cloudflare VP Dane Knecht reported that all BGP routes for Facebook had been pulled. With no BGP routes into Facebook's network, Facebook's own DNS servers would be unreachable -- as would the missing application servers for Facebook-owned Instagram, WhatsApp, and Oculus VR.
UPDATE 10/4/2021 22:15 UTC: Facebook is coming back online after a six-hour outage due to DNS routing problems.

"Inside Facebook, the outage broke internal systems as well, leaving employees unable to get into offices and communicate easily with each other," reports The Verge. "Some told The Verge they were using work-provided Outlook email accounts, allowing Facebook workers to email each other but unable to send or receive emails from external addresses."

Not only was it a rough day for Facebook and their stockholders, but it was especially hard on CEO Mark Zuckerberg. According to Bloomberg, Zuckerberg's personal wealth has fallen by more than $6 billion in just a few hours.
Communications

Company That Routes Billions of Text Messages Quietly Discloses It Was Hacked (vice.com) 24

A company that is a critical part of the global telecommunications infrastructure used by AT&T, T-Mobile, Verizon and several others around the world such as Vodafone and China Mobile, quietly disclosed that hackers were inside its systems for years, impacting more than 200 of its clients and potentially millions of cellphone users worldwide. From a report: The company, Syniverse, revealed in a filing dated September 27 with the U.S. Security and Exchange Commission that an unknown "individual or organization gained unauthorized access to databases within its network on several occasions, and that login information allowing access to or from its Electronic Data Transfer (EDT) environment was compromised for approximately 235 of its customers." A former Syniverse employee who worked on the EDT systems told Motherboard that those systems have information on all types of call records. [...] The company wrote that it discovered the breach in May 2021, but that the hack began in May of 2016.
Television

New 'Babylon 5' Reboot Being Developed By Original Creator J. Michael Straczynski (variety.com) 166

Back in 2014 Babylon 5 creator J. Michael Straczynski answered questions from Slashdot's readers.

And now this week, long-time Slashdot reader Jaegs writes: According to many sources and the Babylon 5 creator/writer/director/producer himself, J. Michael Straczynski (JMS), the CW — partly owned by the original Babylon 5 producer and rights holder, WarnerMedia — will be rebooting the popular franchise. JMS will be writing and executive producing the series.

Per JMS:

"[W]e will not be retelling the same story in the same way... There would be no fun and no surprises. Better to go the way of Westworld or Battlestar Galactica where you take the original elements that are evergreens and put them in a blender with a ton of new, challenging ideas, to create something fresh yet familiar. To those asking why not just do a continuation, for a network series like this, it can't be done because over half our cast are still stubbornly on the other side of the Rim.

The last part refers to the recent passing of Mira Furlan (Delenn), as well as the untimely deaths of other primary cast members after the conclusion of the original run of the series: Richard Biggs (Dr. Franklin), Michael O'Hare (Jeffrey Sinclair), Jerry Doyle (Michael Garibaldi), Stephen Furst (Vir Cotto), Jeff Conway (Zack Allan), and Andreas Katsulas (G'Kar).

Straczynski points out on Twitter that "The original Babylon 5 was ridiculously innovative: the first to use CGI to create ships and characters, and among the very first to shoot widescreen with a vigorous 5.1 mix." But his tweets also seem excited about the questions that this new reboot will answer. "if I were creating Babylon 5 today, for the first time, knowing what I now know as a writer, what would it look like? How would it use all the storytelling tools and technological resources available in 2021 that were not on hand then?

"How can it be used to reflect the world in which we live, and the questions we are asking and confronting every day? Fans regularly point out how prescient the show was and is of our current world; it would be fun to take a shot at looking further down the road..."
GNU is Not Unix

FSF Announces 'JShelter' Browser Privacy Extension to Block Fingerprinting, Tracking, and Malware (fsf.org) 39

This week the Free Software Foundation (FSF) announced JShelter, "an anti-malware Web browser extension to mitigate potential threats from JavaScript, including fingerprinting, tracking, and data collection."

The browser add-on — supported by NLnet Foundation's Next Generation Internet (NGI) Zero Privacy & Trust Enhancing Technologies fund — is currently "in development and the first release is available." This browser add-on will limit the potential for JavaScript programs to do harmful actions by restricting default behavior and adding a layer of control... Accessing cookies, performing fingerprinting to track users across multiple sites, revealing the local network address, or capturing the user's input before they submit a form are some examples of JavaScript's capabilities that can be used in harmful ways. JShelter adds a safety layer that allows the user to choose if a certain action should be forbidden on a site, or if it should be allowed with restrictions, such as reducing the accuracy of geolocation to the city area. This layer can also aid as a countermeasure against attacks targeting the browser, operating system, or hardware levels... [The extension] will ask — globally or per site — if specific native functions provided by the JavaScript engine and the Document Object Model (DOM) are allowed by the user. It will also link to an explanatory page for each function, to raise awareness of related threats. Depending on the function being addressed, the user will have the option to allow it, block it, or have it return a custom value...

"Our browsers have become perhaps the most critical of tools we depend on, and yet the browser environment is far from healthy," says Michiel Leenaars, director of strategy at NLnet Foundation and coordinator of NGI Zero. "Dominant corporate behavior from a small amount of actors has been aggressively reshaping the evolution of the Web, and that is starting to wreak havoc. Despite an enormous systemic dependency, we as users have very little control over what browsers allow and share — leading to significant risk as the most powerful tools in the shed are essentially left unprotected for every casual Web site to abuse. JShelter is a great initiative to help empower us all, to help us gain better understanding and to better safeguard ourselves from obvious and otherwise unavoidable harm."

The effort is part of a larger, multi-year campaign from FSF on JavaScript on the Web started in 2013, which among others includes the development of GNU LibreJS and outreach to users and developers about nonfree software inside the browser. The GNU LibreJS extension detects JavaScript web labels and assists users with running only JavaScript distributed under a free software license, according to their ethical convictions and individual preferences.

"JShelter will help protect users from critical threats now, and contribute significantly to progress on the necessary longer-term cultural shift of moving away from nonfree JavaScript," said Ruben Rodriguez, former FSF chief technology officer.

"This is a project I've been looking forward to for years, tired of dealing with all kinds of potential antifeatures in the browsers I use and distribute, and having to figure out some countermeasure for them with configuration changes, patches or extensions. Being able to wrap the JavaScript engine in a layer of protection is a game changer."
The Media

Bought Web Traffic and A Fake YouTube Executive: the Spectacular Failure of Ozy (go.com) 48

The American media company Ozy "boasted of a large audience for its general interest website, its newsletters and its videos," remembers the New York Times, calling it "a Gen X dream of what millennial media ought to be: earnest, policy-focused, inclusive, slickly sans-serif." Ozy was founded in 2013 with seed funding from Laurene Powell Jobs, followed by further investments that by 2020 were over $83 million (according to the data service PitchBook).

But the Times reports that something strange happened last winter while Ozy was pursuing a $40 million investment from Goldman Sachs: Ozy said it had a great relationship with YouTube, where many of its videos attracted more than a million views... That's what the Zoom videoconference on February 2 that Ozy arranged between the Goldman Sachs asset management division and YouTube was supposed to be about. The scheduled participants included Alex Piper, the head of unscripted programming for YouTube Originals.

He was running late and apologized to the Goldman Sachs team, saying he'd had trouble logging onto Zoom, and he suggested that the meeting be moved to a conference call, according to four people who were briefed on the meeting, all of whom spoke on the condition of anonymity to reveal details of a private discussion. Once everyone had made the switch to an old-fashioned conference call, the guest told the bankers what they had been wanting to hear: that Ozy was a great success on YouTube, racking up significant views and ad dollars, and that [CEO/co-founder Carlos] Watson was as good a leader as he seemed to be. As he spoke, however, the man's voice began to sound strange to the Goldman Sachs team, as though it might have been digitally altered, the four people said.

After the meeting, someone on the Goldman Sachs side reached out to Mr. Piper, not through the Gmail address that Mr. Watson had provided before the meeting, but through Mr. Piper's assistant at YouTube. That's when things got weird. A confused Mr. Piper told the Goldman Sachs investor that he had never spoken with her before. Someone else, it seemed, had been playing the part of Mr. Piper on the call with Ozy.

Four people told the Times that CEO Watson later said the voice on the call belonged to Ozy co-founder/chief operating officer Samir Rao and attributed the incident to a temporary mental health crisis. Ozy's chairman of the board called it "an unfortunate one-time event." But in addition the site's editor-at-large — who was fired earlier this year — says Ozy's claims of 50 million unique users a month "seemed high," according to the Times: In 2017, BuzzFeed News reported that Ozy had been among the publishers buying web traffic from "low-quality sources," companies using systems that caused articles to pop open under a reader's browser without the reader's knowledge. Ozy said it had been buying the traffic to build its email lists and had not billed advertisers for those views... Ozy doesn't rely on standard measurements of traffic, but the best known service, Comscore, shows nothing close to the company's public claims. According to Comscore, Ozy reached nearly 2.5 million people during some months in 2018, but only 230,000 people in June 2021 and 479,000 in July.

Mr. Watson called the Comscore numbers "incomplete," noting they don't include impressions on platforms ranging from social media to television and podcasts.

The Times' story "triggered canceled shows, an internal investigation, investor concern and high-level departures at the company," ABC News reported Friday. And the same day the Times delivered one more update — that Ozy was shutting down: In an article in The Times on Thursday, Brad Bessey, an Emmy-winning executive producer, and Heidi Clements, a longtime TV writer, said Ozy executives had misled them while they were working on "The Carlos Watson Show," Mr. Watson's talk show, for the company. Specifically, they said, executives told them that the show would appear on the cable network A&E. Mr. Bessey resigned when he learned there was no such deal in place, and the show ended up appearing on YouTube and the Ozy website.

Also this week: Advertisers including Chevrolet, Walmart, Facebook, Target and Goldman Sachs itself — many of which had been paying for placement on "The Carlos Watson Show" — hit the brakes on their spending with Ozy. By Friday afternoon, Mr. Watson and the other remaining board member, Michael Moe (another high-profile investment figure, who had published a book called "Finding the Next Starbucks"), concluded that the company could not recover and issued the farewell statement through a spokeswoman....

The Ozy staff received the news that the company was no more on Friday afternoon.

Facebook

'The Big Delete:' Inside Facebook's Crackdown in Germany (go.com) 78

"Days before Germany's federal elections, Facebook took what it called an unprecedented step: the removal of a series of accounts that worked together to spread COVID-19 misinformation and encourage violent responses to COVID restrictions," reports the Associated Press.

The crackdown, announced Sept. 16, was the first use of Facebook's new "coordinated social harm" policy aimed at stopping not state-sponsored disinformation campaigns but otherwise typical users who have mounted an increasingly sophisticated effort to sidestep rules on hate speech or misinformation. In the case of the German network, the nearly 150 accounts, pages and groups were linked to the so-called Querdenken movement, a loose coalition that has protested lockdown measures in Germany and includes vaccine and mask opponents, conspiracy theorists and some far-right extremists.

Facebook touted the move as an innovative response to potentially harmful content; far-right commenters condemned it as censorship. But a review of the content that was removed — as well as the many more Querdenken posts that are still available — reveals Facebook's action to be modest at best. At worst, critics say, it could have been a ploy to counter complaints that it doesn't do enough to stop harmful content. "This action appears rather to be motivated by Facebook's desire to demonstrate action to policymakers in the days before an election, not a comprehensive effort to serve the public," concluded researchers at Reset, a U.K.-based nonprofit that has criticized social media's role in democratic discourse....

Even with the new rule, a problem remains with the takedowns: they don't make it clear what harmful material remains up on Facebook, making it difficult to determine just what the social network is accomplishing. Case in point: the Querdenken network. Reset had already been
monitoring the accounts removed by Facebook and issued a report that concluded only a small portion of content relating to Querdenken was taken down while many similar posts were allowed to stay up... Facebook initially declined to provide examples of the Querdenken content it removed, but ultimately released four posts to the Associated Press that weren't dissimilar to content still available on Facebook...

Reset's analysis of comments removed by Facebook found that many were actually written by people trying to rebut Querdenken arguments, and did not include misinformation.

Communications

South Korea Broadband Firm Sues Netflix After Traffic Surge from 'Squid Game' (reuters.com) 69

South Korean Internet service provider SK Broadband has sued Netflix to pay for costs from increased network traffic and maintenance work because of a surge of viewers to the U.S. firm's content, an SK spokesperson said on Friday. From a report: The move comes after a Seoul court said Netflix should "reasonably" give something in return to the internet service provider for network usage, and multiple South Korean lawmakers have spoken out against content providers who do not pay for network usage despite generating explosive traffic. Netflix said it will review SK Broadband's claim, and seek dialogue and explore ways in the meantime to work with SK Broadband to ensure customers are not affected. The popularity of the hit series "Squid Game" and other offerings have underscored Netflix's status as the country's second-largest data traffic generator after Google's YouTube, but the two are the only ones to not pay network usage fees, which other content providers such as Amazon, Apple and Facebook are paying, SK said. Netflix's data traffic handled by SK jumped 24 times from May 2018 to 1.2 trillion bits of data processed per second as of September, SK said, riding on the success of several Netflix productions from Korea including "Squid Game" and "D.P."
Data Storage

Cloudflare To Enter Infrastructure Services Market With New R2 Storage Product (techcrunch.com) 19

Cloudflare, which has a network of data centers in 250 locations around the world, announced its first dalliance with infrastructure services today, an upcoming cloud storage offering called R2. From a report: Company co-founder and CEO Matthew Prince says that the idea for moving into storage as a service came from the same place as other ideas the company has turned into products. It was something they needed in-house and that led to them building it for themselves, before offering it to customers too. "When we build products, the reason that we end up building them is usually because we need them ourselves," Prince told me. He said that the storage component grew out of the need to store object components like images on the company's network. Once they built it, and they looked around at the cloud storage landscape, they decided that it would make sense to offer it as a product to customers too. [...] The R2 name is a little swipe at Amazon's S3 storage product and obviously a play on the name. The difference, according to Prince, is that they have found a way to reduce storage costs by up to 10% by eliminating egress fees. Cloudflare plans to price storage at $0.015 per GB of data stored per month. That compares with S3 pricing that starts at $0.023 per GB for the first 50 TB per month. Ben Thompson, writing at Stratechery: The reason that Cloudflare can pull this off is the same reason why S3's margins are so extraordinary: bandwidth is a fixed cost, not a marginal one. To take the most simplified example possible, if I were to have two computers connected by a cable, the cost of bandwidth is however much I paid for the cable; once connected I can transmit as much data I would like for free -- in either direction.

That's not quite right, of course: I am constrained by the capacity of the cable; to support more data transfer I would have to install a higher capacity cable, or more of them. What, though, if I already had built a worldwide network of cables for my initial core business of protecting websites from distributed denial-of-service attacks and offering a content delivery network, the value of which was such that ISPs everywhere gave me space in their facilities to place my servers? Well, then I would have massive amounts of bandwidth already in place, the use of which has zero marginal costs, and oh-by-the-way locations close to end users to stick a whole bunch of hard drives.

In other words, I would be Cloudflare: I would charge marginal rates for my actual marginal costs (storage, and some as-yet-undetermined-but-promised-to-be-lower-than-S3 rate for operations), and give away my zero marginal cost product for free. S3's margin is R2's opportunity.

Security

Chinese Espionage Group Deploys New Rootkit Compatible With Windows 10 Systems (therecord.media) 18

At the SAS 2021 security conference today, analysts from security firm Kaspersky Lab published details about a new Chinese cyber-espionage group that has been targeting high-profile entities across South East Asia since at least July 2020. From a report: Named GhostEmperor, Kaspersky said the group uses highly sophisticated tools and is often focused on gaining and keeping long-term access to its victims through the use of a powerful rootkit that can even work on the latest versions of Windows 10 operating systems. "We observed that the underlying actor managed to remain under the radar for months," Kaspersky researchers explained today. The entry point for GhostEmperor's hacks were public-facing servers. Kaspersky believes the group used exploits for Apache, Oracle, and Microsoft Exchange servers to breach a target's perimeter network and then pivoted to more sensitive systems inside the victim's network.
Communications

Alphabet Gives Some Loon Patents To SoftBank, Open Sources Flight Data and Makes Patent Non-assertion Pledge (techcrunch.com) 18

TechCrunch reports: Alphabet's Loon was a stratospheric moonshot that saw the company fly high-altitude balloons to provide cellular network coverage to target areas. The project broke a lot of new ground, including developing technology that enabled balloons to navigate autonomously and stay in one area for long stretches of time, but ultimately came to an end. Now, Alphabet is divvying up the Loon assets, many of which are being either made available to others in the industry for free -- or handed over to key partners and strategic investors. SoftBank is one company that walks away with some intellectual property; the Japanese telecommunication giant gets around 200 of Loon's patents related to stratospheric communications, service, operations and aircraft, which it says it will put to use developing its own High Altitude Platform Stations (HAPS) business.

SoftBank was an erstwhile partner of Loon's, having founded the 'HAPS Alliance' to further the industry. SoftBank's own HAPS business focused on autonomous gliders, but it adapted its communications payloads to work on Loon's balloons, too. SoftBank is also an investor in Loon, having put $125 million in the Alphabet company in 2019. The other company to get a windfall of sorts out of Loon's closure is Raven, another partner and a company that focuses on the manufacture of the high altitude balloons that the Alphabet moonshot operated. It picks up patents related specifically to balloon manufacturing.

Hardware

Chromebook Demand is Plummeting as the Pandemic Eases (arstechnica.com) 78

A global deceleration of laptop sales is being linked in a new report from market research firm Trendforce to increasing vaccination rates and a corresponding decrease in remote work and remote learning. From a report: According to the findings, demand for Chromebooks slid by over 50 percent during one month since July. And notebook shipments for the remainder of the year are expected to be affected by the COVID-19 pandemic and the shifting demand from businesses. Trendforce said that interest for ChromeOS-powered laptops within the last year had primarily been driven by remote learning. The analyst pointed to rising vaccination rates in North America, Europe, and Japan throughout the second half of 2021 as recently slowing demand for Chromebooks.

After being a "primary driver" of overall laptop shipments in the first half of 2021, Chromebook shipments dropped by over 50 percent during one month in the second half of the year. And because Chromebooks represent a "relatively high share" of HP's and Samsung's overall laptop shipments, the OEMs' shipments are predicted to fall by 10 to 20 percent from the first half of the year to the second half. Still, it's not all downhill from here for Chromebooks -- Trendforce still expects a total of 36 million devices shipped in 2021. "The US FCC released the Emergency Connectivity Fund, which totals US$7.17 billion, in July in order to facilitate the purchase of such equipment as notebooks, tablets, and network connectivity devices by schools and libraries," Trendforce said. "This fund will likely sustain the demand for Chromebooks for the next year."

Communications

Phone Companies Must Now Block Carriers That Didn't Meet FCC Robocall Deadline (arstechnica.com) 49

In a new milestone for the US government's anti-robocall efforts, phone companies are now prohibited from accepting calls from providers that did not comply with a Federal Communications Commission deadline that passed this week. From a report: "Beginning today, if a voice service provider's certification and other required information does not appear in the FCC's Robocall Mitigation Database, intermediate providers and voice service providers will be prohibited from directly accepting that provider's traffic," the FCC said yesterday. Specifically, phone companies must block traffic from other "voice service providers that have neither certified to implementation of STIR/SHAKEN caller ID authentication standards nor filed a detailed robocall mitigation plan with the FCC." As we've written, the STIR (Secure Telephone Identity Revisited) and SHAKEN (Signature-based Handling of Asserted Information Using toKENs) protocols verify the accuracy of Caller ID by using digital certificates based on public-key cryptography.

STIR/SHAKEN is now widely deployed on IP networks because large phone companies were required to implement it by June 30 this year, but it isn't a cure-all. Because of technology limitations, there was no requirement to implement STIR/SHAKEN on older TDM-based networks used with copper landlines, for instance. The FCC has said that "providers using older forms of network technology [must] either upgrade their networks to IP or actively work to develop a caller ID authentication solution that is operational on non-IP networks." The FCC also gave carriers with 100,000 or fewer customers until June 30, 2023, to comply with the STIR/SHAKEN requirement, though the commission is seeking comment on a plan to make that deadline June 30, 2022, instead because "evidence demonstrates that a subset of small voice service providers appear to be originating a high number of calls relative to their subscriber base and are also generating a high and increasing share of illegal robocalls compared to larger providers."

Wireless Networking

Ring Puts An Eero Router Inside Its New Home Alarm System (engadget.com) 28

Eero and Ring -- two Amazon-owned companies -- have teamed up to produce a home security system that incorporates an Eero router inside. Engadget reports: Ring COO Mike Harris said that the decision to work with Eero was not one foisted down from upon high by Amazon. Instead, Harris said that both companies saw the opportunity to work together to help leverage their individual skills in tandem. To take advantage of the technology, you'll need to sign up to Ring's new subscription product, dubbed Protect Pro. The package offers cloud video storage, professional monitoring, Alexa Guard Plus, 24/7 backup internet for your security devices (via an LTE module in the Ring Pro base station) and Eero's cybersecurity subscription product for network protection. This, at least in the US as it launches, will set you back $20 a month, or $200 per year per location up front.

At the same time, Ring is launching a system dubbed "Virtual Security Guard," which connects users to third-party security guards. You'll need to pay for that separately, but you can hand over access to select Ring camera feeds to those companies who can keep a watch over your property. It is only when motion is detected that an operator can access your feed, and can speak to whoever is there to determine their intentions. Ring adds that third parties can't view motion events when the camera is disarmed, and can't download, share or save the clips of what's going on in your front yard. The first company to sign up for the program is Rapid Response, with others expected to join in the near future.
The Virtual Security Guard service will require you to apply for early access, but the Ring Alarm Pro can be pre-ordered today for $250. (Since this isn't a Slashvertisement, we won't include a link to the product; you'll have to search for it yourself. Sorry not sorry.)
AI

AI Study Suggests a London Gallery's Been Exhibiting a Fake For Years (thenextweb.com) 121

Thomas Macaulay writes via The Next Web: Samson and Delilah is among the most famous works by Peter Paul Rubens, one of the most influential artists of the 17th century. The painting depicts an Old Testament story in which the warrior Samson is betrayed by his lover Delilah. When London's National Gallery bought the masterpiece in 1980, it became the third most expensive artwork (PDF) ever purchased at auction. But the buyers may now be searching for their receipt. According to a new AI analysis, their prized possession is almost certainly a fake.

The tests were conducted by Art Recognition, a Swiss company that uses algorithms to authenticate artworks. The firm's tool is based on a deep convolutional neuronal network. The system learns to identify an artist's characteristics by training the algorithm on images of their real works. The training dataset is then augmented by splitting the images into smaller patches, which are zoomed into to capture the finer details. Once the training is complete, the algorithm is fed a new image to assess. It then analyzes the picture's features to evaluate the likelihood of it being genuine. After comparing Samson and Delilah with 148 genuine Rubens paintings, the system gave the artwork a 91% probability of being inauthentic.
Carina Popovici, the cofounder of Art Recognition, was shocked by the results: "We repeated the experiments to be really sure that we were not making a mistake, and the result was always the same. Every patch, every single square, came out as fake, with more than 90% probability."
Security

NSA, CISA Publish Guide for Securing VPN Servers (therecord.media) 31

The National Security Agency (NSA) and the Cybersecurity and Infrastructure Security Agency (CISA) have published today technical guidance on properly securing VPN servers used by organizations to allow employees remote access to internal networks. From a report: The NSA said it put together the nine-page guide [PDF] after "multiple nation-state advanced persistent threat (APT) actors" weaponized vulnerabilities in common VPN servers as a way to breach organizations. "Exploitation of these CVEs [vulnerabilities] can enable a malicious actor to steal credentials, remotely execute code, weaken encrypted traffic's cryptography, hijack encrypted traffic sessions, and read sensitive data from the device," the NSA said today in a press release announcing the guide's publication. "If successful, these effects usually lead to further malicious access and could result in a large-scale compromise to the corporate network," the agency added.
Businesses

Bank of Russia's Computer Says Officials Must Speak More Simply (bloomberg.com) 24

A computerized neural network has spoken: central banker Elvira Nabiullina needs to use simpler language if she wants more Russians to believe she can really reduce inflation. From a report: A study conducted by a pair of the Bank of Russia's own researchers came to the perhaps less-than-shocking conclusion that figuring out central bank statements takes a degree in economics. "All the main communication on monetary policy is accessible to only a professional audience right now," Alina Evstigneeva and Mark Sidorovsky, researchers at the bank's monetary-policy department wrote in an article published on a bank-sponsored website. "The potential for qualitative improvement in the language of communication is vast." The communications breakdown has important real-world implications, they argued. Ordinary Russians continue to be deeply skeptical of the central bank's commitment to keep inflation to its 4% target, with polls showing most expect price growth over the next year to be about triple that. That doubt helps keep inflation high, according to the central bank. Market professionals, who presumably have the economics education needed to understand the bank's words, are much more likely to expect inflation to be closer to target.
IT

1Password Adds Its Own 'Hide My Email' Feature (theverge.com) 36

1Password is launching a new feature to let users create unique email aliases for logins, much like Apple's iCloud Plus Hide My Email function. From a report: 1Password is partnering with Fastmail to bring its masked email feature to the password manager, giving all users the option of hiding their email addresses from apps and services. "Your email address is your online identity," explains Bron Gondwana, CEO of Fastmail. "If your credentials are compromised in a data breach, having a randomly generated email address adds a second line of defense because it can't be associated with your primary email address, and therefore, your identity." This new masked email feature will be ideal for registering accounts for temporary purposes, like a free Wi-Fi network. But they can also be used to hide your personal email address from any app or service as the aliases don't expire unless a 1Password user manually deletes them.
Communications

SpaceX Satellite Signals Used Like GPS To Pinpoint Location On Earth (gpsdaily.com) 27

schwit1 shares a report from GPS Daily: Engineering researchers have developed a method to use signals broadcast by Starlink internet service satellites to accurately locate a position here on Earth, much like GPS does. It is the first time the Starlink system has been harnessed by researchers outside SpaceX for navigation. The researchers used signals from six Starlink satellites to pinpoint a location on Earth within 8 meters of accuracy. The researchers did not need assistance from SpaceX to use the satellite signals, and they emphasized that they had no access to the actual data being sent through the satellites -- only to information related to the satellite's location and movement.

For this research, [Zak Kassas, director of the Center for Automated Vehicles Research with Multimodal Assured Navigation (CARMEN), a multi-institution transportation center housed at The Ohio State University] and his research team studied the Starlink system and analyzed signals being sent by the satellites. They developed an algorithm that could use the signals of multiple satellites to locate a position on Earth. Then, they set up an antenna on the campus of UCI and tried to use the network to pinpoint the antenna's location. Using Starlink, they identified the antenna's location within about 7.7 meters. GPS, by comparison, generally identifies a device's location within 0.3 and 5 meters. The team has used similar techniques with other low Earth orbit satellite constellations, but with less accuracy, pinpointing locations within about 23 meters, Kassas said. The team has also been working with the U.S. Air Force to pinpoint locations of high-altitude aircraft; they were able to come within 5 meters using land-based cellular signals, Kassas said.
The research paper has been published in the journal IEEE Xplore.
China

US To Open Program To Replace Huawei Equipment In US Networks (reuters.com) 31

An anonymous reader quotes a report from Reuters: The U.S. Federal Communications Commission (FCC) on Monday said it would open a $1.9 billion program to reimburse mostly rural U.S. telecom carriers for removing network equipment made by Chinese companies deemed national security threats like Huawei and ZTE. The program, which was finalized in July, will open Oct. 29 for applications through Jan. 14, 2022.

Last year, the FCC designated Huawei and ZTE as national security threats to communications networks -- a declaration that barred U.S. firms from tapping an $8.3 billion government fund to purchase equipment from the companies. The FCC in December adopted rules requiring carriers with ZTE or Huawei equipment to "rip and replace" that equipment. The issue is a big one for rural carriers that face high costs and difficulty finding workers to remove and replace equipment. The FCC's final order expanded the companies eligible for reimbursement from those with 2 million or fewer customers to those with 10 million or fewer customers. The FCC in September 2020 estimated it would cost $1.837 billion to remove and replace Huawei and ZTE equipment from networks. [...] The affected companies included the previously designated Huawei and ZTE, as well as Hytera, Hangzhou Hikvision Digital Technology Co and Zhejiang Dahua Technology Co.

AI

Samsung Engineers Propose 'Copying and Pasting' the Brain onto AI Chips (engadget.com) 134

Samsung has proposed a way to build brain-like computer chips by "copying and pasting" a brain's neuron wiring map onto 3D neuromorphic chips. Engadget reports: The approach would rely on a nanoelectrode array that enters a large volumes of neurons to record both where the neurons connect and the strength of those connections. You could copy that data and 'paste' it to a 3D network of solid-state memory, whether it's off-the-shelf flash storage or cutting-edge memory like resistive RAM. Each memory unit would have a conductance that reflects the strength of each neuron connection in the map. The result would be an effective return to "reverse engineering the brain" like scientists originally wanted, Samsung said.

The move could serve as a 'shortcut' to artificial intelligence systems that behave like real brains, including the flexibility to learn new concepts and adapt to changing conditions. You might even see fully autonomous machines with true cognition, according to the researchers.

"Envisioned by the leading engineers and scholars from Samsung and Harvard University, the insight was published as a Perspective paper, titled 'Neuromorphic electronics based on copying and pasting the brain'..." Samsung said in a statement.

In short, they're proposing a method that "directly downloads the brain's neuronal connection map onto the memory chip."

Slashdot Top Deals