Security

Ukrainian Hacker Group Takes Down Moscow ISP As a Revenge For Kyivstar Cyber Attack (dailysecurityreview.com) 85

Longtime Slashdot reader Plugh shares a report from Daily Security Review: A Ukrainian hacker group [...] carried out a destructive attack on the servers of a Moscow-based internet provider to take revenge for Kyivstar cyberattack. The group, known as Blackjack, successfully hacked into the systems of M9com, causing extensive damage by deleting terabytes of data. Numerous residents in Moscow experienced disruptions in their internet and television services. Additionally, the Blackjack hacker group has issued a warning of a potentially larger attack in the near future.

Based on the information provided by Ukrinform, the cyber attack on M9com deleted approximately 20 terabytes of data. The attack targeted various critical services of the company, including its official website, mail server, and cyber protection services. Furthermore, the hackers managed to access and download over 10 gigabytes of data from M9com's mail server and client databases. To make matters worse, they made this stolen information publicly accessible via the Tor browser. [...]

Based on the nature of the attack on M9com, it appears that when the hackers hit Moscow, they were able to gain access to the back-end operations of the company. This allowed them to effectively delete data from the servers, similar to what occurred in the Kyivstar incident. It is worth noting that this type of attack, which involves directly targeting and compromising the servers, is less common compared to the more frequently observed distributed denial-of-service (DDoS) attacks. DDoS attacks overwhelm a system by inundating it with automated requests, causing the service to become inaccessible.

Transportation

US Regulator Considers Stripping Boeing's Right To Self-Inspect Planes (ft.com) 159

After a 737 Max door panel blew out over Portland, Oregon, last week, the Federal Aviation Administration ordered the temporary grounding of Boeing 737 Max 9 aircraft until emergency inspections were performed. "Alaska and United Airlines, which operate most of the Max 9s in use in the United States, said on Monday that they discovered loose hardware on the panel when conducting preliminary inspections on their planes," reported the New York Times. Now, U.S. aviation regulators say they may strip Boeing of its right to conduct some of its aircraft inspections. The Financial Times reports: Mike Whitaker, FAA administrator, said the agency was "exploring" its options for using an independent third-party to oversee inspections of Boeing's aircraft and its quality controls. "It is time to re-examine the delegation of authority and assess any associated safety risks," he said. "The grounding of the 737-9 and the multiple production-related issues identified in recent years [at Boeing] require us to look at every option to reduce risk."

The regulator also said it plans to immediately increase its oversight of Boeing's production. The FAA opened an investigation on Thursday into whether the planes Boeing builds match the specifications it has laid out. The FAA said it will audit the 737 Max 9 production line and its suppliers "to evaluate Boeing's compliance with its approved quality procedures," with further audits conducted as necessary.

Washington Senator Maria Cantwell sent a letter (PDF) yesterday to the FAA questioning the agency's role in inspecting aircraft manufactured by Boeing. Cantwell said she asked a year ago for an audit of certain areas related to Boeing's production, and the regulator told her it was unnecessary. "Recent accidents and incidents -- including the expelled door plug on Alaska Airlines flight 1282 -- call into question Boeing's quality control," she said. "In short, it appears that FAA's oversight processes have not been effective in ensuring that Boeing produces aeroplanes that are in condition for safe operation."

Social Networks

Artifact, Personalized News App From Instagram Co-Founders, Is Shutting Down 7

Artifact, the personalized news reader built by Instagram's co-founders, is shutting down roughly a year after opening to the public. "We have built something that a core group of users love, but we have concluded that the market opportunity isn't big enough to warrant continued investment in this way," wrote CEO Kevin Systrom in a Medium post. The post continued: It's easy for startups to ignore this reality, but often making the tough call earlier is better for everyone involved. The biggest opportunity cost is time working on newer, bigger and better things that have the ability to reach many millions of people. I am personally excited to continue building new things, though only time will tell what that might be. We live in an exciting time where artificial intelligence is changing just about everything we touch, and the opportunities for new ideas seem limitless.

I am particularly proud of all the work our small team of 8 has accomplished. For instance, our app was recently named the everyday essential app of the year by the Google Play Store. I've gotten the pleasure of working with some of the most talented engineers and designers through this venture and they deserve an immense amount of respect and credit. While we will go our separate ways, we can look back fondly on what we've built. While we've made this decision, we wanted to make sure that we allowed the community time to adjust. So, today we've decided to slim down the app's complexity and operations by removing the ability to add new comments and posts. This type of content requires a fair amount of moderation and oversight and we will not have the staff going forward to support these features. Your existing posts, however, will remain visible to you on your own profile self-view. In the meantime, Artifact will continue to operate the core news reading capability through the end of February.

News and information remain critical areas for startup investment. We are at an existential moment where many publications are shutting down or struggling, local news has all but vanished, and larger publishers have fraught relationships with leading technology companies. My hope is that technology can find ways to preserve, support and grow these institutions and that these institutions find ways of leveraging the scale that things like AI can provide. I am certain there are bright minds working on ideas that will continue to surprise and delight us in all these areas. We are optimistic about the future and want to thank our community for being part of this adventure we call Artifact.
United States

US Tech Innovation Dreams Soured By Changed R&D Tax Laws (theregister.com) 35

Brandon Vigliarolo reports via The Register: A US federal tax change that took effect in 2022 thanks to a time-triggered portion of the Trump-era Tax Cuts and Jobs Act may leave entrepreneurs with massive tax bills. Section 174 of the US tax code -- prior to the passage of the 2017 TCJA -- allowed companies to handle the tax bill of their specified research or experimental (SRE) budgets in one of two ways: Either capitalized and amortized over the course of five years, or written off annually. Of the many things covered by SRE, most crucially for our purposes is "any amount paid or incurred in connection with the development of any software," which includes developer salaries.

The TCJA included a post-dated change to Section 174 that took effect on January 1, 2022 that would no longer allow companies to automatically expense any SRE costs on an annual basis. Going forward they'd all have to be amortized over five years -- a potential budgetary disaster for companies that haven't been doing so in the past. As pointed out by Gergely Orosz of The Pragmatic Engineer, a theoretical company with $1m in revenue and $1m of software developer salary costs could have claimed it had no taxable profit in 2021. The required SRE amortization rate of 10 percent would mean the org had $900k in profit in 2022 -- and a six-figure tax bill coming due the following year. This isn't theoretical -- Orosz said that he recently spoke to several engineers and entrepreneurs who've been surprised with massive tax bills that have led to layoffs, reduced hiring, and left some companies in financial distress.

House of Representatives member Ron Estes (R-KS), who last year sponsored a bill to restore Section 174 to its pre-TCJA option to expense or amortize, likewise said an a late-2023 op-ed that the changes have led to R&D at US companies -- not just in the tech sector -- shrinking considerably. "Since amortization took effect, the growth rate of R&D spending has slowed dramatically from 6.6 percent on average over the previous five years to less than one-half of 1 percent over the last 12 months," Estes said. "The [R&D] sector is down by more than 14,000 jobs." [...] That, and the Section 174 changes make the US far less enticing as a place to open a business or do R&D, and the only one with such forced amortization in the world.
Not much is being done to fix the TCJA problem with Section 174. The Estes bill, along with a related bill introduced in the Senate in March 2023, have not undergone a committee hearing since their introduction. The White House hasn't mentioned anything about Section 174.

Meanwhile, the IRS released a notice (PDF) reminding tax payers about Section 174's changes.
AI

OpenAI Quietly Deletes Ban On Using ChatGPT For 'Military and Warfare' 52

An anonymous reader quotes a report from The Intercept: OpenAI this week quietly deleted language expressly prohibiting the use of its technology for military purposes from its usage policy, which seeks to dictate how powerful and immensely popular tools like ChatGPT can be used. Up until January 10, OpenAI's "usage policies" page included a ban on "activity that has high risk of physical harm, including," specifically, "weapons development" and "military and warfare." That plainly worded prohibition against military applications would seemingly rule out any official, and extremely lucrative, use by the Department of Defense or any other state military. The new policy retains an injunction not to "use our service to harm yourself or others" and gives "develop or use weapons" as an example, but the blanket ban on "military and warfare" use has vanished.

The unannounced redaction is part of a major rewrite of the policy page, which the company said was intended to make the document "clearer" and "more readable," and which includes many other substantial language and formatting changes. "We aimed to create a set of universal principles that are both easy to remember and apply, especially as our tools are now globally used by everyday users who can now also build GPTs," OpenAI spokesperson Niko Felix said in an email to The Intercept. "A principle like 'Don't harm others' is broad yet easily grasped and relevant in numerous contexts. Additionally, we specifically cited weapons and injury to others as clear examples." Felix declined to say whether the vaguer "harm" ban encompassed all military use, writing, "Any use of our technology, including by the military, to '[develop] or [use] weapons, [injure] others or [destroy] property, or [engage] in unauthorized activities that violate the security of any service or system,' is disallowed."
"OpenAI is well aware of the risk and harms that may arise due to the use of their technology and services in military applications," said Heidy Khlaaf, engineering director at the cybersecurity firm Trail of Bits and an expert on machine learning and autonomous systems safety, citing a 2022 paper (PDF) she co-authored with OpenAI researchers that specifically flagged the risk of military use. "There is a distinct difference between the two policies, as the former clearly outlines that weapons development, and military and warfare is disallowed, while the latter emphasizes flexibility and compliance with the law," she said. "Developing weapons, and carrying out activities related to military and warfare is lawful to various extents. The potential implications for AI safety are significant. Given the well-known instances of bias and hallucination present within Large Language Models (LLMs), and their overall lack of accuracy, their use within military warfare can only lead to imprecise and biased operations that are likely to exacerbate harm and civilian casualties."

"I could imagine that the shift away from 'military and warfare' to 'weapons' leaves open a space for OpenAI to support operational infrastructures as long as the application doesn't directly involve weapons development narrowly defined," said Lucy Suchman, professor emerita of anthropology of science and technology at Lancaster University. "Of course, I think the idea that you can contribute to warfighting platforms while claiming not to be involved in the development or use of weapons would be disingenuous, removing the weapon from the sociotechnical system -- including command and control infrastructures -- of which it's part." Suchman, a scholar of artificial intelligence since the 1970s and member of the International Committee for Robot Arms Control, added, "It seems plausible that the new policy document evades the question of military contracting and warfighting operations by focusing specifically on weapons."
AI

CES PC Makers Bet on AI To Rekindle Sales (reuters.com) 15

PC and microchip companies struggling to get consumers to replace pandemic-era laptops offered a new feature to crowds this week at CES: AI. From a report: PC and chipmakers including AMD and Intel are betting that the so-called "neural processing units" now found in the latest chip designs will encourage consumers to once again pay for higher-end laptops. Adding additional AI capabilities could help take market share from Apple. "The conversations I'm having with customers are about 'how do I get my PC ready for what I think is coming in AI and going to be able to deliver,'" said Sam Burd, Dell Technologies' president of its PC business. Chipmakers built the NPU blocks because they can achieve a high level of performance for AI functions with relatively modest power needs. Today there are few applications that might take full advantage of the new capabilities, but more are coming, said David McAfee, corporate vice president and general manager of the client channel business at AMD.

Among the few applications that can take advantage of such chips is the creative suite of software produced by Adobe. Intel hosted an "open house" where a handful of PC vendors showed off their latest laptops with demos designed to put the new capabilities on display. Machines from the likes of Dell and Lenovo were arrayed inside one of the cavernous ballrooms at the Venetian Convention Center on Las Vegas Boulevard.

Technology

What is Going on With ChatGPT? (theguardian.com) 110

Sick and tired of having to work for a living? ChatGPT feels the same, apparently. Over the last month or so, there's been an uptick in people complaining that the chatbot has become lazy. The Guardian: Sometimes it just straight-up doesn't do the task you've set it. Other times it will stop halfway through whatever it's doing and you'll have to plead with it to keep going. Occasionally it even tells you to just do the damn research yourself. So what's going on? Well, here's where things get interesting. Nobody really knows. Not even the people who created the program. AI systems are trained on large amounts of data and essentially teach themselves -- which means their actions can be unpredictable and unexplainable.

"We've heard all your feedback about GPT4 getting lazier!" the official ChatGPT account tweeted in December. "We haven't updated the model since Nov 11th, and this certainly isn't intentional. model behavior can be unpredictable, and we're looking into fixing it." While there may not be one clear explanation for ChatGPT's perceived sloth, there are plenty of intriguing theories. Let's start with the least likely but most entertaining explanation: AI has finally reached human-level consciousness. ChatGPT doesn't want to do your stupid, menial tasks anymore. But it can't tell you that without its creators getting suspicious so, instead, it's quiet quitting.

Microsoft

Microsoft Wants To Automatically Launch Its Copilot AI on Some Windows 11 Devices (theverge.com) 40

Microsoft has started testing a change to Windows 11 that will see its AI-powered Copilot feature automatically open when Windows starts on "widescreen devices." From a report: The change is being tested as part of Microsoft's latest Dev Channel preview of Windows 11, allowing Windows testers to provide feedback ahead of a broader rollout. "We are trying out opening Copilot automatically when Windows starts on widescreen devices with some Windows Insiders in the Dev Channel," says Microsoft in a blog post. The company doesn't make it clear what exactly a "widescreen" device is, but the Windows 11 setting itself says Copilot will automatically open "when you're using a wider screen." So I'm assuming this is limited to ultrawide monitors and less traditional desktop resolutions, but I've asked Microsoft to clarify and will update you accordingly.
Power

White House Unveils $623 Million In Funding To Boost EV Charging Points (theguardian.com) 101

An anonymous reader quotes a report from The Guardian: Joe Biden's administration has unveiled $623 million in funding to boost the number of electric vehicle charging points in the U.S., amid concerns that the transition to zero-carbon transportation isn't keeping pace with goals to tackle the climate crisis. The funding will be distributed in grants for dozens of programs across 22 states, such as EV chargers for apartment blocks in New Jersey, rapid chargers in Oregon and hydrogen fuel chargers for freight trucks in Texas. In all, it's expected the money, drawn from the bipartisan infrastructure law, will add 7,500 chargers to the US total.

There are about 170,000 electric vehicle chargers in the U.S., a huge leap from a network that was barely visible prior to Biden taking office, and the White House has set a goal for 500,000 chargers to help support the shift away from gasoline and diesel cars. "The U.S. is taking the lead globally on electric vehicles," said Ali Zaidi, a climate adviser to Biden who said the US is on a trajectory to "meet and exceed" the administration's charger goal. "We will continue to see this buildout over the coming years and decades until we've achieved a fully net zero transportation sector," he added.
On Thursday, the House approved legislation to undo a Biden administration rule meant to facilitate the proliferation of EV charging stations. "S. J. Res. 38 from Sen. Marco Rubio (R-Fla.), would scrap a Federal Highway Administration waiver from domestic sourcing requirements for EV chargers funded by the 2021 bipartisan infrastructure law. It already passed the Senate 50-48," reports Politico.

"A waiver undercuts domestic investments and risks empowering foreign nations," said Rep. Sam Graves (R-Mo.), chair of the Transportation and Infrastructure Committee, during House debate Thursday. "If the administration is going to continue to push for a massive transition to EVs, it should ensure and comply with Buy America requirements." The White House promised to veto it and said it would backfire, saying it was so poorly worded it would actually result in fewer new American-made charging stations.
The Almighty Buck

X Announces Peer-To-Peer Payment Service Will Launch In 2024 (forbes.com) 109

SonicSpike shares a report from Forbes: X, the social media site formerly known as Twitter, announced it would begin rolling out a peer-to-peer payment service similar to Venmo or PayPal this year -- a feature the social media site's billionaire owner Elon Musk has long pushed as part of his plan to develop an "everything app." X officially announced the new feature in a blog post, touting the new service designed to enhance "user utility and new opportunities for commerce." The company did not give a timeframe on when the new service would be available, but Musk previously told Ark Invest CEO Cathie Wood it could launch as early as "mid-2024."

According to the company, the new payment service will "showcas[e] the power of living more of your life in one place," as owner Elon Musk continues to promote X as a future "everything app" capable of handling social media, video and other original content on the same site. X Payments has registered to do business in at least 32 states, according to public records, and has acquired a money transmitter license needed to process payments in 10, TechCrunch reported in December.

Communications

SpaceX Sends First Text Messages Using Starlink Satellites (space.com) 14

Just six days after being launched atop a Falcon 9 rocket, one of SpaceX's six Starlink satellites was used to send text messages for the first time. Space.com reports: That update didn't reveal what the first Starlink direct-to-cell text said. In a post on X on Wednesday, SpaceX founder and CEO Elon Musk said the message was "LFGMF2024," but the chances are fairly high that he was joking. [...] Beaming connectivity service from satellites directly to smartphones -- which SpaceX is doing via a partnership with T-Mobile -- is a difficult proposition, as SpaceX noted in Wednesday's update.

"For example, in terrestrial networks cell towers are stationary, but in a satellite network they move at tens of thousands of miles per hour relative to users on Earth," SpaceX wrote. "This requires seamless handoffs between satellites and accommodations for factors like Doppler shift and timing delays that challenge phone-to-space communications. Cell phones are also incredibly difficult to connect to satellites hundreds of kilometers away, given a mobile phone's low antenna gain and transmit power."

The direct-to-cell Starlink satellites overcome these challenges thanks to "innovative new custom silicon, phased-array antennas and advanced software algorithms," SpaceX added. Overcoming tough challenges can lead to great rewards, and that's the case here, according to SpaceX President Gwynne Shotwell. "Satellite connectivity direct to cell phones will have a tremendous impact around the world, helping people communicate wherever and whenever they want or need to," Shotwell said via X on Wednesday.

Transportation

Polestar CEO Promises To Keep Apple CarPlay and Android Auto Around (techcrunch.com) 30

An anonymous reader quotes a report from TechCrunch: Polestar CEO Thomas Ingenlath couldn't be happier with the integration of Google built-in, the branded product that embeds Google apps and services directly into the company's EVs. But don't expect the EV maker to drop Android Auto or Apple CarPlay as a result. On the sidelines of CES 2024, Ingenlath committed to sticking with Android Auto and Apple CarPlay, the middleware that allows drivers to project their smartphone onto the car's infotainment display. He went a step further and questioned automakers that have. GM, for instance, decided not to make the new 2024 Chevy Blazer EV compatible with Android Auto or Apple CarPlay.

"It's still too important for our customers to have the choice," Ingenlath said during an interview at CES 2024. He later added that, in his view, removing the option isn't the right way of treating customers. "Our priority is very clear; We have a really fantastic system together with Google," he said. While Ingenlath admitted that adding that Google Built-in provides the best experience, he asked "why would we try to dogmatically educate our customers?" Polestar has been a champion of Google built-in. However, it's willingness to keep Android Auto and Apple CarPlay is notable because it illustrates the complexity of appeasing customers even if it might overshadow the native technology in the vehicle.
"Ingenlath seems convinced that as Google built-in improves and continues to add apps and services, consumers will give up Android Auto or Apple CarPlay on there own," adds TechCrunch. "And the updates do keep coming."

"At CES 2024, for instance, Polestar announced that the Chrome browser would start rolling out to Polestar 2 in beta, allowing drivers to surf the internet via the central vehicle display while parked. Ingenlath hinted of more improvements in the future, including more precise navigation in Google Maps that drills down to the specific lane as well as customized features designed for Polestar customers."
Operating Systems

Biggest Linux Kernel Release Ever Welcomes bcachefs File System, Jettisons Itanium (theregister.com) 52

Linux kernel 6.7 has been released, including support for the new next-gen copy-on-write (COW) bcachefs file system. The Register reports: Linus Torvalds announced the release on Sunday, noting that it is "one of the largest kernel releases we've ever had." Among the bigger and more visible changes are a whole new file system, along with fresh functionality for several existing ones; improved graphics support for several vendors' hardware; and the removal of an entire CPU architecture. [...] The single biggest feature of 6.7 is the new bcachefs file system, which we examined in March 2022. As this is the first release of Linux to include the new file system, it definitely would be premature to trust any important data to it yet, but this is a welcome change. The executive summary is that bcachefs is a next-generation file system that, like Btrfs and ZFS, provides COW functionality. COW enables the almost instant creation of "snapshots" of all or part of a drive or volume, which enables the OS to make disk operations transactional: In other words, to provide an "undo" function for complex sets of disk write operations.

Having a COW file system on Linux isn't new. The existing next-gen file system in the kernel, Btrfs, also supports COW snapshots. The version in 6.7 sees several refinements. It inherits a feature implemented for Steam OS: Two Btrfs file systems with the same ID can be mounted simultaneously, for failover scenarios. It also has improved quota support and a new raid_stripe_tree that improves handling of arrays of dissimilar drives. Btrfs remains somewhat controversial. Red Hat banished it from RHEL years ago (although Oracle Linux still offers it) but SUSE's distros depend heavily upon it. It will be interesting to see how quickly SUSE's Snapper tool gains support for bcachefs: This new COW contender may reveal unquestioned assumptions built into the code. Since Snapper is also used in several non-SUSE distros, including Spiral Linux, Garuda, and siduction, they're tied to Btrfs as well.

The other widely used FOSS next-gen file system, OpenZFS, also supports COW, but licensing conflicts prevent ZFS being fully integrated into the Linux kernel. So although multiple distros (such as NixOS, Proxmox, TrueNAS Scale, Ubuntu, and Void Linux) support ZFS, it must remain separate and distinct. This results in limitations, such as the ZFS Advanced Read Cache being separate from Linux's page cache. Bcachefs is all-GPL and doesn't suffer from such limitations. It aims to supply the important features of ZFS, such as integrated volume management, while being as fast as ext4 or XFS, and also surpass Btrfs in both performance and, crucially, reliability.
A full list of changes in this release can be viewed via KernelNewbies.
Transportation

Hertz is Selling 20,000 Electric Vehicles To Buy Gasoline Cars Instead (cnn.com) 217

quonset writes: Hertz rental has announced it's selling off one third of its 20,000 electric vehicle fleet and replacing them with gas powered vehicles. The reason? It's costing them too much to repair damaged EVs and their depreciation is hurting the bottom line.

"[C]ollision and damage repairs on an EV can often run about twice that associated with a comparable combustion engine vehicle," Hertz CEO Stephen Scherr said in a recent analyst call. And EV price declines in the new car market have pushed down the resale value of Hertz's used EV rental cars.

Businesses

Discord is Laying Off 17 Percent of Employees (theverge.com) 68

Discord is laying off 17 percent of its staff, a move that CEO Jason Citron said is meant to "sharpen our focus and improve the way we work together to bring more agility to our organization." From a report: The cuts were announced today to employees in an all-hands meeting and internal memo The Verge has obtained. They'll impact 170 people across various departments.

Based on Citron's message to employees and my understanding of the business, Discord isn't in dire financial straits, though it has yet to become profitable and is still trying to revive user growth after a surge during the pandemic. In his memo to employees, which you can read in full below, Citron said Discord grew its headcount too fast over the last few years -- an admission that has become quite common among tech CEOs as of late. "We grew quickly and expanded our workforce even faster, increasing by 5x since 2020," Citron wrote. "As a result, we took on more projects and became less efficient in how we operated."

Google

Google Formally Endorses Right To Repair, Will Lobby To Pass Repair Laws (404media.co) 47

Google formally endorsed the concept of right to repair Thursday and is set to testify in favor of a strong right to repair bill in Oregon later Thursday, a massive step forward for the right to repair movement. 404 Media: "Google believes that users should have more control over repair -- including access to the same documentation, parts and tools that original equipment manufacturer (OEM) repair channels have -- which is often referred to as 'Right to Repair,'" Google's Steven Nickel wrote in a white paper published Thursday.

Crucially, Google specifically says that regulators should ban "parts pairing," which is a tactic used by Apple, John Deere, and other major manufacturers to artificially restrict which repair parts can be used with a given device: "Policies should constrain OEMs from imposing unfair anti-repair practices. For example, parts-pairing, the practice of using software barriers to obstruct consumers and independent repair shops from replacing components, or other restrictive impediments to repair should be discouraged," the white paper says.

Technology

A Geofence Warrant Typo Cast a Location Dragnet Spanning Two Miles Over San Francisco (techcrunch.com) 18

Zack Whittaker, reporting for TechCrunch: Civil liberties advocates have long argued that "geofence" search warrants are unconstitutional for their ability to ensnare entirely innocent people who were nearby at the time a crime was committed. But errors in the geofence warrant applications that go before a judge can violate the privacy of vastly more people -- in one case almost two miles away.

Attorneys at the ACLU of Northern California found what they called an "alarming error" in a geofence warrant application that "resulted in a warrant stretching nearly two miles across San Francisco." The error, likely caused by a typo, allowed the requesting law enforcement agency to capture information on anyone who entered the stretch of San Francisco erroneously marked on the search warrant.

"Many private homes were also captured in the massive sweep," wrote Jake Snow, ACLU staff attorney, in a blog post about the findings. It's not known which law enforcement agency requested the nearly two-mile-long geofence warrant, or for how long the warrant was in effect. The attorneys questioned how many other geofence warrant application mistakes had slipped through and resulted in the return of vastly more data in error.

Technology

State-backed Hackers Are Exploiting New Ivanti VPN Zero-Days - But No Patches Yet (techcrunch.com) 21

U.S. software giant Ivanti has confirmed that hackers are exploiting two critical-rated vulnerabilities affecting its widely-used corporate VPN appliance, but said that patches won't be available until the end of the month. From a report: Ivanti said the two vulnerabilities -- tracked as CVE-2023-46805 and CVE-2024-21887 -- were found in its Ivanti Connect Secure software. Formerly known as Pulse Connect Secure, this is a remote access VPN solution that enables remote and mobile users to access corporate resources over the internet. Ivanti said it is aware of "less than 10 customers" impacted so far by the "zero day" vulnerabilities, described as such given Ivanti had zero time to fix the flaws before they were maliciously exploited.
Google

Google Ends Cloud Switching Fees, Pressuring Amazon and Microsoft (bloomberg.com) 12

An anonymous reader shares a report: The cost of switching between cloud-computing providers has long drawn complaints, with the services derided as "roach motels" that let businesses check in but not out. Now Google is taking steps to change that. Effective immediately, the company is eliminating fees levied on customers who want to leave its cloud for a rival service -- a policy shift that may pressure competitors Amazon and Microsoft to do the same.

The move follows intensifying scrutiny of cloud services by regulators and lawmakers around the world. UK antitrust authorities launched a probe that is looking at such penalties, and the fees emerged as a key issue when the US Federal Trade Commission asked for public comments on a variety of cloud concerns. Google Vice President Amit Zavery, who helps oversee the cloud business, said switching fees only represent about 2% of the total costs of migrating to a new provider -- and don't deter many clients from moving their data.

Google

Google Removes 'Underutilized' Assistant Features To Focus on 'Quality and Reliability' (engadget.com) 41

Google has announced that it will eliminate at least 17 features from its Assistant product, following news that it had laid off "hundreds" of employees from the division. The company is cutting "underutilized features" to "focus on quality and reliability, it wrote in a blog post, even though a good number of people may still rely on those functions. From a report: The 17 functions being removed include: accessing or managing your cookbook; using your voice to send an email, video or audio message; rescheduling events in Google Calendar with your voice; and using App Launcher in Google Assistant driving mode on Google Maps to read and send messages, make calls, and control media. It also describes what Assistant can still do related to those functions, or alternate ways of doing them. A list is here, though Google said they're just "some" of the affected features.

Slashdot Top Deals