Cloud

Walmart Is Looking Into Launching Its Own Cloud Gaming Service, Report Says (theverge.com) 76

Google's Stadio cloud-gaming service may be intercepted by a similar service from Walmart. According to a report from US Gamer, the American retail giant is looking into launching its own cloud gaming service. From the report: Multiple sources familiar with Walmart's plans, who wish to remain anonymous, confirmed to USG that the retail giant is exploring its own platform to enter in the now-competitive video game streaming race. No other details were revealed other than it will be a streaming service for video games, and that Walmart has been speaking with developers and publishers since earlier this year and throughout this year's Game Developers Conference. Walmart's discussions with developers for its streaming service have been secretive, and it's unclear how far along the service is in-development. But our sources are confident that this is a space Walmart is trying to move into.

Though Walmart might sound like a strange company to be jumping into the streaming tech space, the move isn't wholly unexpected. In recent years due to competition from Amazon, Walmart has been increasingly looking into more tech-focused markets beyond its traditional physical retail chain. Over time, Walmart has integrated its physical stores with its large online presence, offering deliveries, app integrations, and in-store pick up services. Walmart also has a technology arm in Silicon Valley called Walmart Labs, which has 6,000 employees and develops tech for Walmart's digital presence. In addition it boasts tools like Cruxlux, which is a search engine designed to reveal the connection between any two people, places, or things. Finally, Walmart has a data center unofficially called Area 71 in Caverna, Missouri which holds over 460 trillion bytes of data. Data centers are a centerpiece of Google's Stadia streaming service and companies like Microsoft, Amazon, and Apple also own powerful data facilities, all of whom are also coincidentally working in streaming technology.

The Courts

Tesla Sues Former Employees For Allegedly Stealing Data, Autopilot Source Code (reuters.com) 87

Tesla is suing a former engineer at the company, claiming he copied the source code for its Autopilot technology before joining a Chinese self-driving car startup in January. Reuters reports: The engineer, Guangzhi Cao, copied more than 300,000 files related to Autopilot source code as he prepared to join China's Xiaopeng Motors Technology Company Ltd, the Silicon Valley carmaker said in the lawsuit filed in a California court. Separately, Tesla lawyers on Wednesday filed a lawsuit against four former employees and U.S. self-driving car startup Zoox Inc, alleging the employees stole proprietary information and trade secrets for developing warehousing, logistics and inventory control operations. The Verge reported on the lawsuit filed against Cao: Tesla says that last year, Cao started uploading "complete copies of Tesla's Autopilot-related source code" to his iCloud account. The company claims he ultimately moved more than 300,000 files and directories related to Autopilot. After accepting a job with XPeng at the end of last year, Tesla says Cao deleted 120,000 files off his work computer and disconnected his personal iCloud account, and then "repeatedly logged into Tesla's secure networks" to clear his browser history before his last day with the company. Tesla also claims Cao recruited another Autopilot employee to XPeng in February. Tesla claims that it gives XPeng "unfettered access" to Autopilot: "Absent immediate relief, Tesla believes Cao and his new employer, [XPeng], will continue to have unfettered access to Tesla's marquee technology, the product of more than five years' work and over hundreds of millions of dollars of investment, which they have no legal right to possess," the company's lawyers write.
Programming

Coders' Primal Urge To Kill Inefficiency -- Everywhere (wired.com) 181

For software engineers, lack of friction is an aesthetic joy, an emotional high, the ideal existential state. It's what drives them, and what shapes our world. An excerpt from an upcoming book on coding, via Wired: The thrust of Silicon Valley is always to take human activity and shift it into metabolic overdrive. And maybe you've wondered, why the heck is that? Why do techies insist that things should be sped up, torqued, optimized? There's one obvious reason, of course: They do it because of the dictates of the market. Capitalism handsomely rewards anyone who can improve a process and squeeze some margin out. But with software, there's something else going on too. For coders, efficiency is more than just a tool for business. It's an existential state, an emotional driver.

Coders might have different backgrounds and political opinions, but nearly every one I've ever met found deep, almost soulful pleasure in taking something inefficient -- even just a little bit slow -- and tightening it up a notch. Removing the friction from a system is an aesthetic joy; coders' eyes blaze when they talk about making something run faster or how they eliminated some bothersome human effort from a process. This passion for efficiency isn't unique to software developers. Engineers and inventors have long been motivated by it. During the early years of industrialization, engineers elevated the automation of everyday tasks to a moral good. The engineer was humanity's "redeemer from despairing drudgery and burdensome labor," as Charles Hermany, an engineer himself, wrote in 1904.

[...] Many of today's programmers have their efficiency "aha" moment in their teenage years, when they discover that life is full of blindingly dull repetitive tasks and that computers are really good at doing them. (Math homework, with its dull litany of exercises, was one thing that inspired a number of coders I've talked to.) Larry Wall, who created the Perl programming language, and several coauthors wrote that one of the key virtues of a programmer is "laziness" -- of the variety where your unwillingness to perform rote actions inspires you to do the work to automate them.

Software

LLVM 8.0 Released With Cascade Lake Support, Better Diagnostics, More OpenMP/OpenCL (phoronix.com) 36

After being delayed for the better part of one month, LLVM 8.0 officially is finally available. From a report: LLVM release manager Hans Wennborg announced the release a few minutes ago and summed up this half-year update to LLVM and its sub-project as: "speculative load hardening, concurrent compilation in the ORC JIT API, no longer experimental WebAssembly target, a Clang option to initialize automatic variables, improved pre-compiled header support in clang-cl, the /Zc:dllexportInlines- flag, RISC-V support in lld. And as usual, many bug fixes, optimization and diagnostics improvements, etc."
Programming

Researchers Create the First AI-Controlled Robotic Limb That Can Learn To Walk Without Being Programmed (sciencealert.com) 39

schwit1 shares a report from ScienceAlert: Researchers at the University of Southern Carolina (USC) claim to have created the first AI-controlled robotic limb that can learn how to walk without being explicitly programmed to do so. The algorithm they used is inspired by real-life biology. Just like animals that can walk soon after birth, this robot can figure out how to use its animal-like tendons after only five minutes of unstructured play.

Today, most robots take months or years before they are ready to interact with the rest of the world. But with this new algorithm, the team has figured out how to make robots that can learn by simply doing. This is known in robotics as "motor babbling" because it closely mimics how babies learn to speak through trial and error. "During the babbling phase, the system will send random commands to motors and sense the joint angles," co-author Ali Marjaninejad an engineer at USC, told PC Mag. "Then, it will train the three-layer neural network to guess what commands will produce a given movement. We then start performing the task and reinforce good behavior."

Programming

Twitter Cracks Down on API Abuse, Will Charge B2B Developers (techcrunch.com) 33

To prevent its own Cambridge Analytica moment and make sure it's getting paid for its data, Twitter said today it will audit developers that use its APIs. From a report: Starting June 19th, Twitter will require developers of any app that calls recent tweets from or mentions a user more than 100,000 times per day to submit their app for review. If a developer proves they have a legitimate consumer use case, like running a third-party Twitter client or doing research, they'll be granted free access to the API at the same rate they have today. If they primarily use the data to serve business customers as a B2B tool, like for customer service or social media monitoring, they'll have to pay to enter a commercial licensing agreement with Twitter with a custom price based on usage. Twitter refused to even specify the range those prices fall into, which won't win it any extra trust.

Developers found to be breaking Twitter's policies will be booted from the platform, while those that don't submit for review will be capped at 100,000 requests per day for the user timeline and mentions APIs. Twitter says it suspended 162,000 apps in the second half of 2018, showing it's willing to play hardball with developers that endanger its ecosystem.

Google

Google's Bad Data Wiped Another Neighborhood Off the Map (medium.com) 76

Medium's technology publication ran a 3,600-word investigation into a mystery that began when a 66-year-old New York woman Googled directions to her neighborhood, "and found that the app had changed the name of her community..." It's just as well no one contacted Google, because Google wasn't the company that renamed the Fruit Belt to Medical Park. When residents investigated, they found the misnomer repeated on several major apps and websites including HERE, Bing, Uber, Zillow, Grubhub, TripAdvisor, and Redfin... Monica Stephens, a geographer at the University at Buffalo who studies digital maps and misinformation, immediately suspected the geographic clearinghouse Pitney Bowes. Founded in 1920 as a maker of postage meters -- the machines that stamp mail with proof it's been sent -- Pitney Bowes expanded into neighborhood data in 2016 when it bought the leading U.S. provider, Maponics. In its 15-year run, Maponics had supplied neighborhood data to companies from Airbnb to Twitter to the Houston Chronicle. And it had also just acquired a longtime competitor, Urban Mapping, which has previously supplied Facebook, Microsoft, MapQuest, Yahoo, and Apple. Though Pitney Bowes is far from a household name, the $3.4 billion data broker is "a huge company at this point," says Stephens, with enough influence to inadvertently rename a neighborhood across hundreds of sites...

In the early 2000s, Urban Mapping offered new college grads $15 to $25 per hour to comb local blogs, home listings, city plans, and brochures for possible neighborhood names and locations. Maponics, meanwhile, used nascent technologies such as computer vision and natural language processing to pull neighborhoods from images and blocks of text, one former executive with the company said... I visited the Buffalo Central Library to find the source of the error... Sure enough, one of the librarians located a single planning office map that used the "Medical Park" label. It was a 1999 report on poverty and housing conditions -- long since relegated to a dusty shelf stacked with old binders and file folders... Somehow, likely in the early 2000s, this map made its way into what is now the Pitney Bowes data set -- and from there, was hoovered into Google Maps and out onto the wider internet. Buffalo published another map in 2017, with the Fruit Belt clearly marked, and broadcast on the city's open data portal. For whatever reason, Pitney Bowes and its customers never picked that map up.

This is not the first time Google Maps has seemed to spontaneously rename a neighborhood. But for Fruit Belt the reporter's query eventually prompted corrections to the maps on Redfin, TripAdvisor, Zillow, Grubhub, and Google Maps. But the article argues that when it comes to how city names are represented online, "the process is too opaque to scrutinize in public. And that ambiguity foments a sense of powerlessness."

Pitney Bowes doesn't even have a method for submitting corrections. Yet, "In an emailed statement, a spokesperson for Google defended its use of third-party neighborhood sources. 'Overall, this provides a comprehensive and up-to-date map,' the spokesperson said, 'but when we're made aware of errors, we work quickly to fix them.'"
Network

Valve's Steam Link Will Let You Stream Your PC Games Anywhere (techcrunch.com) 7

Valve has announced the "early beta" release of Steam Link Anywhere, which will enable streamed gaming to any compatible device, and Steam Networking Sockets APIs, granting developers access to the technology and infrastructure that underlies CS:GO and Dota 2. PC Gamer reports: Steam Link Anywhere is an extension of Steam Link that will enable users to connect to their PCs and play games from anywhere (thus the name), rather than being limited to a local network. It's compatible with both the Steam Link hardware and app, and will be rolled out automatically (and freely) to everyone who owns the hardware with beta firmware installed, the Android app beta, or the Raspberry Pi app. You'll also need to be enrolled in the Steam client beta, and have the latest version installed. Assuming you've got all that covered, you'll see an "Other Computer" option on the screen when searching for computers to connect to via Steam Link. Select that, follow the instructions, and you'll be set. Valve didn't provide specific network requirements but said you'll need "a high upload speed from your computer and strong network connection to your Steam Link device" in order to use it.

Steam Networking Sockets APIs isn't as flashy (and that "flash" is definitely relative) but is aimed squarely at developers, and could be even more significant to Steam's fortunes given the pressure it's facing from the Epic Games Store: It enables developers to run their game traffic through Valve's own private gaming network, providing players "faster and more secure connections." It's free for developers, and "a large portion" of the API is now open source, which could be a pretty big draw for devs look to incorporate online play with a minimum of fuss. If that's your bag, you can get more detailed information at steamcommunity.com, and Valve will be talking about the new feature in-depth at a Game Developer's Conference panel next Thursday, March 21.

Android

Google Launches Android Q Beta 1 (venturebeat.com) 33

Google said today it is rolling out the first beta version of Android Q, the newest version of its mobile operating system. The company will roll out a stable version of Android Q later this year. From a report: The first beta includes a preview SDK for developers with system images for the Pixel, Pixel XL, Pixel 2, Pixel 2 XL, Pixel 3, Pixel 3 XL, and the official Android Emulator. This is the fourth year running that Google has released the first developer preview of the next Android version in March -- Android N (later named Android Nougat), Android O (Android Oreo), and Android P (Android Pie). For the past two years, Google did not use the Android Beta Program, which lets you get early Android builds via over-their-air updates on select devices.

That changes with Android Q -- Google is making the first preview available as a beta, not just as a developer preview. That signals that it is ready for early adopters to try, in addition to developers. As before, this preview version will be referred to as Android Q until Google picks a name starting with that letter.

Programming

Amazon's Alexa has 80,000 Apps -- and No Runaway Hit (bloomberg.com) 93

Amazon's Echo-branded smart speakers have attracted millions of fans with their ability to play music and respond to queries spoken from across the room. But almost four years after inviting outside developers to write apps for Alexa, Amazon's voice system has yet to offer a transformative new experience. From a report: Surveys show most people use their smart speakers to listen to tunes or make relatively simple requests -- "Alexa, set a timer for 30 minutes" -- while more complicated tasks prompt them to give up and reach for their smartphone. Developers had less trouble creating hits for previous generations of technology.

Think Angry Birds or Pokemon Go on the iPhone, or, decades ago, spreadsheets on the first Windows computers. Amazon counts some 80,000 "skills" -- its name for apps -- in its marketplace. It seems impressive, but at this point in their development, Apple's App Store and the Google Play Store each boasted more than 550,000 applications and minted fortunes for many successful developers. "This platform is almost four years old, and you can't point me to one single killer app," says Mark Einhorn, who created a well-reviewed Alexa game that lets users operate a simulated lemonade stand and is one of 10 developers interviewed for this story.

Open Source

Node.js and JS Foundations Are Merging To Form OpenJS (venturebeat.com) 38

The Linux Foundation today unveiled several major collaborative partnerships as it looks to cement the development of various open source projects that power much of the web. From a report: First off, the Node.js Foundation and the JS Foundation, which the Linux Foundation launched in 2016, are merging to form the OpenJS Foundation. The merger between the two chief organizations that focus on JavaScript comes six months after they publicly began to explore such a possibility with their communities. The OpenJS Foundation will focus on hosting and funding activities that support the growth of JavaScript and web technologies, the Linux Foundation said in a press release.

The OpenJS Foundation consists of 29 open source JavaScript projects including jQuery, Node.js, Appium, Dojo, and webpack. The merger is supported by 30 corporate and end user members including Google, Microsoft, IBM, PayPal, GoDaddy, and Joyent that recognize the "interconnected nature of the JavaScript ecosystem, and the importance of providing a neutral home for projects which represent significant shared value," the Linux Foundation said in a prepared statement.
Also in the report: The Linux Foundation has created CHIPS Alliance, a project that aims to host and curate open source code relevant to design of chips that power mobile, IoT, and other consumer electronic devices; and the Continuous Delivery Foundation, which aims to serve as a platform for vendors, developers, and users to frequently engage and share insights and best practices to spur the development of open source projects.

It also announced that the GraphQL Foundation is collaborating with Joint Development Foundation to encourage "contributions, stewardship, and a shared investment from a broad group in vendor-neutral events, documentation, tools, and support for the data query language."
Windows

Microsoft Asks Users To Call Windows 10 Devs About ALT+TAB Feature (bleepingcomputer.com) 235

An anonymous reader quotes a report from Bleeping Computer: Microsoft has started to display notifications in the Windows 10 Action Center asking users to have a phone call with Microsoft developers and provide direct feedback about the ALT+TAB feature in Windows. While using a Windows 10 Insider build today, I was shown a Feedback Hub notification stating that "Microsoft wants to hear your opinions! To set up a phone call with Windows engineers, go to: http://www.aka.ms/alttab." This link then redirects to a web page at https://ux.microsoft.com/?AltTab. It is not known if this is only being shown to Windows Insiders users at this time.

When users visit this link they will be shown a Microsoft User Research page stating that a Windows 10 product team is looking to "understand our customer needs" and would like to have an anonymous 5-10 minute phone call with the user. In this particular case, the phone call will be with Microsoft engineers to discuss how users use the ALT+TAB feature to switch between apps. Microsoft states they are performing these calls in order to get a better understanding of how a feature is being used while they are in development. According to the web site, Windows engineers will be available on 3/11/2019 between 11:15 AM and 1:00 PM PST and on 3/12/2019 between 9:30 AM and 11:30 AM PST to schedule a call. The page goes on to say that users can expect a 5-10 minute call, but that it could last longer if there is more to discuss. They also state that the calls are not being recorded, are anonymous, and the content of the call will not be stored.

The Internet

CSS To Get Support For Trigonometry Functions (zdnet.com) 135

CSS, or the language that styles and arranges how page elements appear on a website, will soon get support for trigonometry functions such as sine, cosine, tangent, and others, ZDNet is reporting. From the report: The new trigonometry functions were approved at the end of February in a meeting of the World Wide Web Consortium (W3C) CSS Working Group. The new functions approved and set to join the CSS standard are: Sine - sin(), cosine - cos(), tangent - tan(), arccosine - acos(), arcsine - asin(), arctangent - atan(), arctangent (of two numbers x and y) - atan2(), square root - sqrt(), square root of the sum of squares of its arguments - hypot(), and power of - pow().
Cloud

Cringley's Next 2019 Predictions: Only 3.5 Cloud Players Will Survive (cringely.com) 148

Ten days ago 66-year-old tech pundit Robert Cringely revealed the first of what may be his final set of annual predictions for the technology industry -- but he's not done yet. Thursday Cringely predicted that "the Virtual Private Cloud (VPC) solution based on Open Source using Linux will change the Internet-as-a-Service Cloudscape to VPC-only during 2019" -- and that there'll be an industry-wide shakeout.

Long-time Slashdot reader supremebob, a Connecticut-based sys-admin, writes: He seems to believe that IBM Cloud and Oracle Cloud and doomed to fail, and Alibaba will only survive because of its strong Chinese presence. These seem like safe predictions, but his comments on Google Cloud are somewhat controversial...
After AWS, Alibaba, and Microsoft, "All the others will eventually disappear," Cringely writes, adding "Remember you read it first here." Google's largest cloud customer will always be Google and that will inevitably lead to poorer service for outside customers. That's why I think of Google Cloud as half of a player. Feel free to prove me wrong by delighting customers, Google... I don't see the marketing effort to help clients migrate. Lots of handholding is needed that IBM and Microsoft are happy to provide. Google does not understand customers whose IQs are sub-200. As such, Google doesn't have (and likely won't) have a history of winning outside of search advertising.

For IBM, their VPC roll-out is coming in the next month or two, but it's more marketing than an actual product. Big Blue simply has no capital to build out a unique offering. And Oracle? Well the new head of Google Cloud came from Oracle, where not enough was happening.

Cringely also predicts the U.S. government will try to force Amazon to spin-off its near-monopoly cloud business, noting that "the larger customers of AWS (those not operating on a credit card) generally hate Amazon because of its ruthless business behavior."

Lots of pressure will come to bear in this case from IBM, Microsoft, and Oracle, who are all suffering from a very specific database problem competing with AWS. Each of these companies sells their own database (DB2, SQL Server, and Oracle, respectively) that they've rolled into their cloud services. AWS's RDB, in contrast, is based on MySQL and costs Amazon almost nothing to support, giving the biggest cloud player a clear pricing advantage.
Android

The Official Android Beta Community Moves From Google+ To Reddit (androidpolice.com) 33

With Google+ being shutdown in just a few weeks, the official Android Beta community announced that it will be leaving the dying social media site in exchange for Reddit. The group on Google+ was home to over 163,000 members. Android Police reports: The community's new home will be r/android_beta. In an official announcement, the Android Beta team says they'll keep a close eye on the subreddit for feedback and will use it for announcements and updates. There's nothing there just yet, but when the Android Q beta hits, we're sure things will get much busier. For now, just make sure you subscribe and keep in mind that you have a second address where you can send all your Q beta complaints -- the first is obviously our tips inbox.
Java

'Java 9, It Did Break Some Things': Oracle Bod Admits To Developers Still Clinging To Version 8 (theregister.co.uk) 251

Java has a problem -- the language and platform is evolving faster than ever, but many developers are stuck on the five-year-old Java 8. From a report: So why have developers not upgraded? Simply, Java 9 introduced major changes, including internal restructuring, new modularity (known as "Project Jigsaw"), and the removal of little-used APIs. These changes broke code, and even developers who are happy to make the necessary revisions have dependency issues. "We have problems with libraries that do not yet support the latest versions," said one QCon attendee.

"I want to explain why it was necessary," said Oracle's Ron Pressler, part of the Java platform group developing the language and lead for Project Loom. "There are billions of lines of code in Java, and Java 9, it did break some things. The reason is that Java is 20-something years old. It will probably be big and popular in another 20 years. We have to think 20 years ahead. The way the JDK was structured prior to Java 9 was just unmaintainable. We could not keep Java competitive if we had not done that change. That was an absolute necessity."

Programming

A 60 Minutes Story on Gender Equality Accidentally Proved the Persistence of Patriarchy (qz.com) 529

Over at Quartz, Ephrat Livni reports that a 60 Minutes story about gender equality accidentally proved the persistence of patriarchy. Reader theodp shares the report: Good intentions are nice, but they aren't enough, the TV news show 60 Minutes recently proved. The show's producers apparently meant well when they decided to do a segment on women in technology and the gender gap, which aired on March 4. But they ended up punching women in the gut, as the founder and CEO of Girls Who Code, Reshma Saujani, puts it in her response to the segment. Ultimately, 60 Minutes featured a man, Code.org CEO Hadi Partovi. His [tech-backed] organization's mission is to expand access to computer science education in schools.

Women technologists like Saujani who were tapped to appear on the show about a year ago and worked with producers to provide research and interviews, ended up on the cutting room floor while Partovi spoke on their behalf. Here is the cruel irony: As a result, 60 Minutes' segment was accidentally exceptionally effective-it proved that women in tech really can't catch a break. [...] Ayah Bdeir, the founder of STEM learning toy company littleBits, also responded to the episode in a Medium post. She noted that she worked with 60 Minutes for a year, planning interviews, providing research, talking to the producers and reporters, telling her story and that of her organization, which is focused on closing the gender gap in technology. Yet producers wrote to her last August to say that the focus of the segment had shifted and that littleBits would no longer be central in the story. In an email, a producer explained to her, 'It's not that the important points you made in your interview are ignored in the story, or that you didn't make them very effectively, they're just made by others'.

The Almighty Buck

Nintendo To Smartphone Game Makers: You Can Only Gouge Our Players So Much (arstechnica.com) 29

An anonymous reader quotes a report from Ars Technica: Wall Street Journal reporter Takashi Mochizuki took a Wednesday opportunity to review one game maker's financial reports: CyberAgent Inc, maker of smartphone games like the Nintendo-published Dragalia Lost. This report, published at the end of January, made vague allusions to a single smartphone game dragging the company down. Quoting from the company's own English-language press release: "At the time of the original earnings forecast announcement on October 25, we looked a new game title made a good start [sic]. However, its performance is being slower than we expected as of today." That resulted in a whopping 20-percent drop in revenue expectations in the company's gaming sector, from 50 billion yen to 40 billion. Mochizuki pressed the company to confirm which game that was, and CyberAgent confirmed the game in question was indeed Nintendo's Dragalia Lost.

The company clarified things even further to the WSJ, alleging that Nintendo responded to players' complaints about Dragalia's loot box economy by asking the developer to "adjust the game" to reduce how much a player might spend in the game to progress normally. "Nintendo is not interested in making a large amount of revenue from a single smartphone game," a CyberAgent representative told the WSJ. "If we managed the game alone, we would have made a lot more." When asked by the WSJ, Nintendo's Japanese arm replied with a statement that apparently confirms CyberAgent's allegation. "We discuss various things, not just limited to payments, to deliver high-quality fun to consumers," the Nintendo rep told the WSJ.
The report says the reason why Nintendo's revenue goals for its entire smartphone-gaming sector are considered modest compared to other large Japanese publishers may be "because its smartphone games are positioned less to make oodles of cash and more to raise awareness of Nintendo's IP (which Nintendo will soon leverage with theme park attractions and a feature-length film)."
Programming

Researchers Uncover Ring of GitHub Accounts Promoting 300+ Backdoored Apps (zdnet.com) 54

An anonymous reader writes: A security researcher has uncovered a ring of malicious GitHub accounts promoting over 300 backdoored Windows, Mac, and Linux applications and software libraries. The malicious apps contained code to gain boot persistence on infected systems and later download other malicious code -- which appeared to be a "sneaker bot," a piece of malware that would add infected systems to a botnet that would later participate in online auctions for limited edition sneakers.

All the GitHub accounts that were hosting these files -- backdoored versions of legitimate apps -- have now been taken down. One account, in particular, registered in the name of Andrew Dunkins, hosted 305 backdoored ELF binaries. Another 73 apps were hosted across 88 other accounts.

Databases

Massive Database Leak Exposes China's 'Digital Surveillance State' (eff.org) 72

Long-time Slashdot reader retroworks shared this EFF article: Although relatively little news gets out of Xinjiang to the rest of the world, we've known for over a year that China has been testing facial-recognition tracking and alert systems across Xinjiang and mandating the collection of biometric data -- including DNA samples, voice samples, fingerprints, and iris scans -- from all residents between the ages of 12 and 65... Earlier this month, security researcher Victor Gevers found and disclosed an exposed database live-tracking the locations of about 2.6 million residents of Xinjiang, China, offering a window into what a digital surveillance state looks like in the 21st century...

Over a period of 24 hours, 6.7 million individual GPS coordinates were streamed to and collected by the database, linking individuals to various public camera streams and identification checkpoints associated with location tags such as "hotel," "mosque," and "police station." The GPS coordinates were all located within Xinjiang. This database is owned by the company SenseNets, a private AI company advertising facial recognition and crowd analysis technologies. A couple of days later, Gevers reported a second open database tracking the movement of millions of cars and pedestrians. Violations like jaywalking, speeding, and going through a red-light are detected, trigger the camera to take a photo, and ping a WeChat API, presumably to try and tie the event to an identity.

China may have a working surveillance program in Xinjiang, but it's a shockingly insecure security state. Anyone with an Internet connection had access to this massive honeypot of information... Even poorly-executed surveillance is massively expensive, and Beijing is no doubt telling the people of Xinjiang that these investments are being made in the name of their own security. But the truth, revealed only through security failures and careful security research, tells a different story: China's leaders seem to care little for the privacy, or the freedom, of millions of its citizens.

EFF also reports that a Chinese cybersecurity firm also recently discovered 468 exposed MongoDB servers on the internet, including databases containing detailed information about remote access consoles owned by China General Nuclear Power Group.

Meanwhile, ZDNet suggests that SenseNets may actually be "a government contractor, helping authorities track the Muslim minority, rather than a private company selling its product to another private entity. Otherwise, it would be hard to explain how SenseNets has access to ID card information and camera feeds from police stations and other government buildings."

Slashdot Top Deals