×
AI

Face Scanner Clearview AI Aims To Branch Out Beyond Police (apnews.com) 11

A controversial facial recognition company that's built a massive photographic dossier of the world's people for use by police, national governments and -- most recently -- the Ukrainian military is now planning to offer its technology to banks and other private businesses. The Washington Post reports: Clearview AI co-founder and CEO Hoan Ton-That disclosed the plans Friday to The Associated Press in order to clarify a recent federal court filing that suggested the company was up for sale. "We don't have any plans to sell the company," he said. Instead, he said the New York startup is looking to launch a new business venture to compete with the likes of Amazon and Microsoft in verifying people's identity using facial recognition.

The new "consent-based" product would use Clearview's algorithms to verify a person's face, but would not involve its ever-growing trove of some 20 billion images, which Ton-That said is reserved for law enforcement use. Such ID checks that can be used to validate bank transactions or for other commercial purposes are the "least controversial use case" of facial recognition, he said. That's in contrast to the business practice for which Clearview is best known: collecting a huge trove of images posted on Facebook, YouTube and just about anywhere else on the publicly-accessible internet.

United States

Misinformation is Derailing Renewable Energy Projects Across the United States (npr.org) 224

An anonymous reader shares a report: On a winter night in early 2016, Jeremy Kitson gathered in his buddy's large shed with some neighbors to plan their fight against a proposed wind farm in rural Van Wert County, Ohio. The project would be about a mile from his home. From the beginning, Kitson -- who teaches physics and chemistry at the local high school -- knew he didn't want the turbines anywhere near him. He had heard from folks who lived near another wind project about 10 miles away that the turbines were noisy and that they couldn't sleep. "There were so many people saying that it's horrible, you do not want to live under these things,'" Kitson says. He and his neighbors went on the offensive. "I was just like, there's got to be a way to beat 'em," he says of the developer, Apex Clean Energy. "You got to outsmart them. You got to figure out the science. You got to figure out the economic arguments. You got to figure out what they're going to say and figure out how to counter it."

At the shed, according to Kitson, they agreed that part of their outreach would involve posting information on a Facebook community page called "Citizens for Clear Skies," which ultimately grew to more than 770 followers. In between posts selling anti-wind yard signs and posts about public meetings opposing local wind projects, there were posts that spread false, misleading and questionable information about wind energy. Links to stories about wind turbine noise causing birth defects in Portuguese horses. Posts about the health effects of low frequency infrasound, also called wind turbine syndrome. Posts about wind energy not actually reducing carbon dioxide emissions. Photos of wind turbines breaking, burning and falling -- some in nearby counties and states, but some in Germany and New Zealand.

According to 2014 data from the Department of Energy, the most recent available, out of the then-40,000 turbines in the U.S., there had been fewer than 40 incidents. Kitson, the administrator of the Facebook page, says he knows that these accidents aren't typical. "Those events are not likely. We know that," Kitson says. But Kitson has seen a broken piece of a fallen turbine blade himself, which got him worrying about how the fiberglass might affect the integrity of the soil and the crops. So he posts the photos and articles, many of which he receives from an anti-wind email list. "I do that just to try to show people what's possible." Kitson's group is one of dozens in the United States and abroad that oppose utility-scale wind and solar projects. Researchers say that in many groups, misinformation is raising doubts about renewable energy and slowing or derailing projects.

Piracy

Russia's Site-Blocking System Isn't Performing and Could Even Collapse (torrentfreak.com) 27

Blocking access to internet resources requires lots of hardware but due to sanctions, there are fears in Russia that a breakdown in systems operations may be just months away. Andy Maxwell, reporting for TorrentFreak: Russia's invasion of Ukraine has been going on for more than a month. It isn't going to plan. In parallel with the terrible images being shared around the world, Russia is using its infamous site-blocking systems to deny access to websites that dare to challenge the Kremlin's narrative of Putin's 'Special Operation.' Telecoms regulator Roscomnadzor is working harder than ever to maintain its blockades against everything from Google News, Twitter, Facebook, and Instagram, to the thousands of pirate sites and other resources on the country's blacklists. But, like the invasion itself, things aren't going to plan here either.

A little over a week ago, local telecoms operators supplying internet access to Russian citizens were ordered to carry out "urgent checks" on their ability to continue blocking sites deemed illegal by the state. ISPs were required to carry out an audit and liaise with telecoms regulator Roscomnadzor. Today is the reporting deadline but according to several sources, problems are apparent in the system. With accurate and critical reporting being all but strangled by the state, it is not absolutely clear who or what ordered the review but the consensus is that prescribed blocking standards aren't being met. As previously reported, local torrent site RuTracker suddenly found itself unblocked earlier this month, reportedly due to issues at an ISP. Problems are also reported with the Roscomnadzor-controlled 'TSPU' Deep Packet Inspection (DPI) system embedded into the networks of around 80 local ISPs and recently used to restrict Tor, VPNs and Twitter traffic.

Security

Lapsus$ Gang Claims New Hack With Data From Apple Health Partner (theverge.com) 5

After a short "vacation," the Lapsus$ hacking gang is back. In a post shared through the group's Telegram channel on Wednesday, Lapsus$ claimed to have stolen 70GB of data from Globant -- an international software development firm headquartered in Luxembourg, which boasts some of the world's largest companies as clients. From a report: Screenshots of the hacked data, originally posted by Lapsus$ and shared on Twitter by security researcher Dominic Alvieri, appeared to show folders bearing the names of a range of global businesses: among them were delivery and logistics company DHL, US cable network C-Span, and French bank BNP Paribas. Also in the list were tech giants Facebook and Apple, with the latter referred to in a folder titled "apple-health-app." The data appears to be development material for Globant's BeHealthy app, described in a prior press release as software developed in partnership with Apple to track employee health behaviors using features of the Apple Watch.
United States

State Attorneys General Ask Snap and TikTok To Give Parents More Control Over Apps (nytimes.com) 9

A group of attorneys general have asked Snap and TikTok to work more closely with parental control apps and to apply more scrutiny to inappropriate content on their platforms, the latest salvo in a growing fight over child protection between governments and social media companies. From a report: Attorneys general from 43 states and territories said in a letter to executives at the two apps that they were worried the companies were "not taking appropriate steps to allow parents to protect their kids on your platforms." Specifically, the officials said that Snap, which makes the Snapchat app, and TikTok should work more closely with third-party parental control services.

Some people have raised concerns that third-party parental controls surveil young people but do little to actually stop them from encountering harmful content. The attorneys general said in the letter, organized by the National Association of Attorneys General, that they were not endorsing a particular parental control product. They also called on the companies to tighten their own parental supervision tools and to do a better job of weeding out content that might be harmful to children. Concerns that popular social media platforms can expose children to posts that are sexualized, hurt their body image or are violent have escalated in recent years. State attorneys general are currently investigating whether Facebook, owned by Meta, and TikTok, part of the Chinese conglomerate ByteDance, have put young people in harm's way. President Biden also called for new online privacy rules for children in his State of the Union speech earlier this month.

Facebook

Facebook Paid GOP Firm To Malign TikTok (washingtonpost.com) 101

Several readers have shared this report: Employees with the firm, Targeted Victory, worked to undermine TikTok through a nationwide media and lobbying campaign portraying the fast-growing app, owned by the Beijing-based company ByteDance, as a danger to American children and society, according to internal emails shared with The Washington Post. Targeted Victory needs to "get the message out that while Meta is the current punching bag, TikTok is the real threat especially as a foreign owned app that is #1 in sharing data that young teens are using," a director for the firm wrote in a February email. Campaign operatives were also encouraged to use TikTok's prominence as a way to deflect from Meta's own privacy and antitrust concerns. "Bonus point if we can fit this into a broader message that the current bills/proposals aren't where [state attorneys general] or members of Congress should be focused," a Targeted Victory staffer wrote.

The emails, which have not been previously reported, show the extent to which Meta and its partners will use opposition-research tactics on the Chinese-owned, multibillion-dollar rival that has become one of the most downloaded apps in the world, often outranking even Meta's popular Facebook and Instagram apps. In an internal report last year leaked by the whistleblower Frances Haugen, Facebook researchers said teens were spending "2-3X more time" on TikTok than Instagram, and that Facebook's popularity among young people had plummeted. In one email, a Targeted Victory director asked for ideas on local political reporters who could serve as a "back channel" for anti-TikTok messages, saying the firm "would definitely want it to be hands off." In other emails, Targeted Victory urged partners to push stories to local media tying TikTok to dangerous teen trends in an effort to show the app's purported harms. "Any local examples of bad TikTok trends/stories in your markets?" a Targeted Victory staffer asked.

Bitcoin

Climate Campaign Pushes Bitcoin Network To Drop Energy-Hungry Code (theverge.com) 151

Greenpeace and other environmental groups launched a new campaign today to push the Bitcoin network to slash its growing greenhouse gas emissions. The Verge reports: The goal of the campaign, dubbed "Change the code, not the climate," is to switch up the energy-hungry process of verifying transactions and mining new Bitcoins. [...] In order to validate transactions, Bitcoin miners rely on specialized hardware to solve complex puzzles. Their computers gobble up a lot of energy in the process, and the miners get new tokens in return. It's a process called "proof of work," in which the energy used is sort of the price paid to verify transactions. The process is deliberately energy-intensive as a safety measure. The baked-in inefficiency is meant to discourage bad actors from manipulating the data because it would cost a lot of energy to do so.

The new campaign aims to move Bitcoin away from that energy-hungry proof of work process. The most popular alternative is called proof of stake. Cryptocurrencies that use proof of stake use vastly less energy because there are no puzzles to solve. Instead of essentially paying with electricity to participate in the process, you have to offer up some of your own tokens. This is supposed to prove that you have a "stake" in keeping the ledger accurate. If you mess anything up, you lose tokens as a penalty. While proof of stake might make solve a lot of Bitcoin's pollution problems, experts have been skeptical that miners would be willing to make the change. Miners invest a lot in their hardware and would be hard-pressed to abandon it. And some fans of proof of work maintain that it's the most secure way to maintain the ledger.
"We know Bitcoin stakeholders are incentivized not to change," the campaign acknowledges on its website. "Changing Bitcoin would render a whole lot of expensive infrastructure worthless, meaning Bitcoin stakeholders will need to walk away from sunk costs -- or find other creative solutions."

As the Guardian notes, the campaign is launching a huge digital advertising push via the Wall Street Journal, New York Times, Marketwatch, Politico, Facebook and others. "Organizers are also taking legal action against proposed mining sites and using their large memberships to push bitcoin's biggest investors and influencers to call for a code change." Additionally, the campaign is urging people to tweet at cryptocurrency influencers to support the campaign.
Communications

'Most Severe' Cyberattack Since Russian Invasion Crashes Ukraine Internet Provider (forbes.com) 7

A "powerful" cyberattack has hit Ukraine's biggest fixed line telecommunications company, Ukrtelecom. Described as the most severe cyberattack since the start of the Russian invasion in February, it has sent the company's services across the country down. From a report: Victor Zhora, deputy head of the State Service for Special Communications and Information Protection, confirmed to Forbes that the government was investigating the attack. He said it's not yet known whether Ukrtelecom -- a telephone, internet and mobile provider -- has been hit by a distributed denial of service (DDoS) attack or a deeper, more sophisticated intrusion. The attack has only been acknowledged by Ukrtelecom in responses to customer comments on Facebook. In one, it responded by saying that services were down as a result of a "powerful cyber attack of the enemy." When Forbes messaged Ukrtelecom over Facebook, an automated response was provided, reading, "Currently, there are difficulties in using the internet service from Ukrtelecom. Our specialists are doing everything possible to resolve this issue as soon as possible. Due to the abnormal load and problems with internal systems, the operators of the contact center and Facebook can not process customer requests." NetBlocks, which tracks internet downtimes across the world, found Ukrtelecom had been dealing with a disrupted service since this morning, "collapsing to 13% of pre-war levels."
Crime

Amateur Detectives are Now Crowdfunding DNA Sequencing to Solve Murders (nytimes.com) 54

In 2018 police arrested "the Golden State Killer" — now a 72-year-old man who had committed 13 murders between 1974 and 1986, the New York Times remembers: What made the investigation possible was GEDmatch, a low-frills, online gathering place for people to upload DNA test results from popular direct-to-consumer services such as Ancestry or 23andMe, in hopes of connecting with unknown relatives. The authorities' decision to mine the genealogical enthusiasts' data for investigative leads was shocking at the time, and led the site to warn users. But the practice has continued, and has since been used in hundreds of cases.
But now using similar techniques, a wellness coach born in Mississippi (through a Facebook group called DNA Detectives) has helped over 200 strangers identify their unknown parents, the Times reports.

And she's recently donated more than $100,000 to a genetics lab called Othram — to fund the sequencing of DNA to solve cold cases back in her home state. "These families have waited so long for answers," she told the New York Times, which calls her "part of a growing cohort of amateur DNA detectives..." [Othram] created a site called DNASolves to tell the stories of horrific crimes and tragic John and Jane Does — with catchy names like "Christmas tree lady" and "angel baby" — to encourage people to fund budget-crunched police departments, so that they can hire Othram. A competitor, Parabon NanoLabs, had created a similar site called JusticeDrive, which has raised around $30,000.

In addition to money, Othram encouraged supporters to donate their DNA, a request that some critics called unseemly, saying donors should contribute to databases easily available to all investigators. "Some people are too nervous to put their DNA in a general database," said Mr. Mittelman, who declined to say how large his database is. "Ours is purpose-built for law enforcement."

Another group raising money for genetic investigations are the producers of true-crime podcasts — and their listeners. According to the article, the podcast-producing company Audiochuck has donated roughly $800,000 to organizations doing investigative genealogical research (including Othram), though the majority went to a nonprofit started by the host of the "Crime Junkie" podcast. (And that nonprofit raised another $250,000, some through crowdfunding.)

"Why just listen to a murder podcast when you can help police comb through genealogical databases for the second cousins of suspected killers and their unidentified victims?" the Times asks? So far donors around the country have given at least a million dollars to the cause. They could usher in a world where few crimes go unsolved — but only if society is willing to accept, and fund, DNA dragnets.... A group of well-off friends calling themselves the Vegas Justice League has given Othram $45,000, resulting in the solving of three murder-rape cases in Las Vegas, including those of two teenage girls killed in 1979 and in 1989.... [T]he perpetrators were dead....

Natalie Ram, a law professor at the University of Maryland, expressed concern about "the public picking and choosing between cases," saying investigative priorities could be determined by who can donate the most. Ms. Ram said the "largest share" of cases solved so far with the method "tend to involve white female victims...."

Ms. Ram is also concerned about the constitutional privacy issues raised by the searches, particularly for those people who haven't taken DNA tests or uploaded their results to the public internet. Even if you resolve never to put your DNA on a site accessible to law enforcement authorities, you share DNA with many other people so could still be discoverable. All it takes is your sibling, aunt or even a distant cousin deciding differently.

Twitter

Can Twitter Help Disseminate Scientific Information? (science.org) 92

Science magazine explores how actual scientists feel about Twitter: "I like that there's a low bar to entry [on Twitter] — I can put something out and see how other scientists are thinking of a problem, people who have a different skill set than mine," says biostatistician Natalie Dean of Emory University, whose Twitter account has some 138,000 followers. But the pandemic has also helped demonstrate the limitations of social media. It can be difficult, for example, for scientists to be heard over the cacophony of messages on Twitter — some 500 million each day. And although some scientists have used the platform to elevate their online presence, that has rarely translated into concrete professional rewards....

[A]s the pandemic exploded and researchers sought to pump out information to each other and an eager public, many saw advantages to Twitter. Its vast reach became a draw: more than 200 million active daily users, including an estimated one-quarter of U.S. adults, according to the Pew Research Center. This allows scientists to use a single platform to share research findings with both peers and the public and to foster open discussions... One result is that the platform has carried posts about a majority of the total COVID-19 literature — about 51% of journal articles on pandemic research had been mentioned in at least one tweet through May 2021, according to a report by the Research on Research Institute (RoRI). That exceeds the number cited in scholarly articles or mentioned in several other communications venues, including news stories, Facebook, YouTube, Wikipedia, blogs, and policy documents. And it's well above the level before the pandemic, when studies found that just 10% to 30% of papers on any scientific topic got a mention on Twitter....

But an emerging body of research about tweeting suggests that, overall, scientists often struggle to be heard on social media. One study, for example, found tweets containing links to scholarly papers typically get little engagement. Of 1.1 million such tweets about papers published before the pandemic, half drew no clicks, and an additional 22% attracted just one or two, according to a 2021 paper in the Journal of the Association for Information Science and Technology.

An information scientist at the University of Ottawa tells the magazine that "We are really not at the point where we want to get, which is, ideally, seeing the impact of research on the greater good of society."

Thanks to Slashdot reader sciencehabit for sharing the story...
Facebook

Watch Out, Facebook. American Non-Profit Creates Social Network for Older Adults (arstechnica.com) 61

Wikipedia points out that America's two largest-circulation publications are the two magazine sent out to over 38 million members of massive non-profit AARP (originally the American Association of Retired Persons).

It's now starting its own social network to compete with Facebook (which according to a recent survey is being used by over 72 million Americans over the age of 50), Ars Technica reports: The nonprofit funded the creation of Senior Planet Community, a social media network that encourages users to join pre-existing groups around shared interests, including gardening, travel, fitness, food, and technology. In that way, it feels more like a pared-down version of Reddit or a small collection of forums....

Besides its focus on the 50-plus set, Senior Planet Community stands apart from Facebook in that it's not commercial. The site has no advertising or membership fees. Unless the cost to run the site grows substantially, that probably won't present much of a problem. AARP isn't saying how much it has put into Senior Planet Community, but the organization is famously well-capitalized, with $2.3 billion in net assets and $1.7 billion in revenue in 2020.

At present, the site is bare-bones when compared with Facebook. There's no mobile app yet, though OATS [the affiliate organization that built the social network] says it hopes to develop one. The site is mobile-friendly at least, and all the requisite features are there, including groups, photo sharing, @-mentions, notifications, and direct messaging. As with all social networks, a looming question is how Senior Planet Community will handle moderation. The site has a relatively extensive list of "house rules" that encourages users to "be courteous" and "cite your sources." Posts about politics aren't forbidden, but the rules say posts can't stray off-topic, and users can't "attack individuals, social, ethnic, or political groups and figures." Users can report posts they think violate the rules. Currently, the user base is relatively small, so policing it should be straightforward.

"The moderating team keeps an eye on all comments, posts, and updates added to the platform from the backend.... " Suzanne Myklebust, OATS's director of communications, told Ars.

Facebook

To Help Retain Engineers, Apple Gives $100K-$200K Bonuses (protocol.com) 29

Apple is paying six-figure "special retention grants" to a handful of hardware and software engineers. Protocol reports: The bonuses, anonymous sources told Bloomberg, are worth between $100,000 and more than $200,000 in restricted stock units that vest over several years, providing another incentive for engineers to stay at Apple... The bonuses show the level of insecurity that some of the top-paying companies in the industry feel in this tight market for tech talent. (Even Google employees are feeling unhappy with their compensation....) Apple and other tech giants are throwing more and more money at employees to retain them.

In the last few months, Alphabet has adopted a new cash bonus plan that allows employee bonuses "of nearly any size for nearly any reason," The Wall Street Journal reported last month, and Amazon has raised its cash-pay cap from $160,000 to $350,000, according to The New York Times.

Bloomberg points out Apple "has suffered some attrition in its chip design group," as Facebook's parent Meta Platforms "has stepped up recruiting of engineers — aiming to put them to work on the so-called metaverse," and the payouts also went to Apple employees working on virtual and augmented reality headsets. Inflation also has put pressure on employers to boost compensation. And Apple is preparing for a return to the office — a source of tension for some employees. By May, the company will require engineers and other corporate staff to work out of the office at least three days a week.
So the bonuses "are designed to keep the employees from leaving by vesting over several years," Bloomberg concludes, "and they could become more valuable over time if Apple's stock price continues to rise.

"The shares are up more than 40% over the past 12 months..."
Social Networks

Could Deepfakes Change the Course of War? (cnn.com) 64

CNN Business reports a deepfake video of Russian president Volodymyr Zelensky was fabricated to falsely depict him urging viewers to lay down their weapons and return to their families. But at the same time, "there was another widely circulated deepfake video depicting Russian President Vladimir Putin supposedly declaring peace in the Ukraine war."

Though both videos were "noticeably low resolution" (which they describe as a common tactic for hiding flaws), "experts still see them as dangerous." That's because they show the lighting speed with which high-tech disinformation can now spread around the globe. As they become increasingly common, deepfake videos make it harder to tell fact from fiction online, and all the more so during a war that is unfolding online and rife with misinformation. Even a bad deepfake risks muddying the waters further. "Once this line is eroded, truth itself will not exist," said Wael Abd-Almageed, a research associate professor at the University of Southern California and founding director of the school's Visual Intelligence and Multimedia Analytics Laboratory. "If you see anything and you cannot believe it anymore, then everything becomes false. It's not like everything will become true. It's just that we will lose confidence in anything and everything...."

The fact that they are now being used in an attempt to influence people during a war is especially pernicious, experts told CNN Business, simply because the confusion they sow can be dangerous. Siwei Lyu, director of the computer vision and machine learning lab at University at Albany, said under normal circumstances, deepfakes may not have much impact beyond drawing interest and getting traction online. "But in critical situations, during a war or a national disaster, when people really can't think very rationally and they only have a very truly short span of attention, and they see something like this, that's when it becomes a problem," he added.

Snuffing out misinformation in general has become more complex during the war in Ukraine. Russia's invasion of the country has been accompanied by a real-time deluge of information hitting social platforms like Twitter, Facebook, Instagram, and TikTok. Much of it is real, but some is fake or misleading. The visual nature of what's being shared — along with how emotional and visceral it often is — can make it hard to quickly tell what's real from what's fake. Nina Schick, author of "Deepfakes: The Coming Infocalypse," sees deepfakes like those of Zelensky and Putin as signs of the much larger disinformation problem online, which she thinks social media companies aren't doing enough to solve. She argued that responses from companies such as Facebook, which quickly said it had removed the Zelensky video, are often a "fig leaf."

"You're talking about one video," she said. The larger problem remains.

As deepfakes get better, researchers and companies are trying to keep up with tools to spot them....

Hardware

Retro Computing Museum In Ukraine Destroyed By Russian Bomb (pcgamer.com) 131

A privately owned collection of more than 500 pieces of retro computer and technology history has been destroyed by a Russian bomb in the city of Mariupol. PC Gamer reports: The destruction was highlighted by Mark Howlett on Twitter, and confirmed by the Ukrainian Software and Computer Museum account, which operates museums in Kharkiv and Kyiv. The owner of the Mariupul collection, Dmitry Cherepanov, is reportedly safe, though his collection of computers, consoles, and assorted tech from fifty years of computing has been wiped out. "There is neither my museum nor my house," writes Cherepanov on his Facebook page, it8bit.club.

The museum itself may be gone, but Cherepanov has been chronicling his collection of exhibits online for some time now, and though this is all that's left, it is still a resource worth checking out. There are a host of fascinating old machines, including the Commodore C64 [...]. As well as images and information about all the 120 computers and consoles in his collection, Cherepanov also hosts RetroBit Radio on the site, too. Cherepanov has set up a Paypal account for donations, the details of which you can find on his Facebook page.

The Internet

Meet the Secretive US Company Building an 'Unbreakable' Internet Inside Russia (vice.com) 100

An anonymous reader quotes a report from Motherboard: As Russia makes preparations to possibly disconnect from the global internet in a bid to control the narrative around the invasion of Ukraine, one secretive U.S. company is rushing to lay the final pieces of an unbreakable network that the Kremlin won't be able to take down. The company is Lantern, which says it has seen staggering growth inside Russia in the last four weeks for its app that allows users to bypass restrictions the Kremlin has put in place on platforms like Facebook, Twitter, and Instagram. But now the company is building something even more robust, an internal peer-to-peer network that will allow dissenting voices to continue to upload and share content even if the Kremlin pulls the plug on the internet.

Within the next week, the network will be fully operational, allowing opposition voices to use the Lantern app to post content like videos from protests or updates on the war in Ukraine directly to the Lantern network. This would allow users to share it with other Lantern users without fear that the content will be removed or blocked. [...] Lantern was founded in California in 2010 with the goal of keeping "the world's information, speech, expression, and finance uncensored." The free version of the app has a data cap of 500MB, but the pro version, which costs $32 a year, has no data cap. It has become hugely popular in China because of its ability to stay one step ahead of the government's censorship efforts, spreading mainly via word-of-mouth as it's not available via the Google or Apple app stores inside China. n Russia, like all new markets it enters, Lantern removed the data cap for all users. Despite this, some users still paid for the pro version.

EU

EU Takes Aim at Big Tech's Power With Landmark Digital Act (theverge.com) 89

The European Union agreed on Thursday to one of the world's most far-reaching laws to address the power of the biggest tech companies (Warning: source may be paywalled; alternative source), potentially reshaping app stores, online advertising, e-commerce, messaging services and other everyday digital tools. The New York Times reports: The law, called the Digital Markets Act, is the most sweeping piece of digital policy since the bloc put the world's toughest rules to protect people's online data into effect in 2018. The legislation is aimed at stopping the largest tech platforms from using their interlocking services and considerable resources to box in users and squash emerging rivals, creating room for new entrants and fostering more competition. [...] The Digital Markets Act will apply to so-called gatekeeper platforms, which are defined by factors including a market value of more than 75 billion euros, or about $83 billion. The group includes Alphabet, the owner of Google and YouTube; Amazon; Apple; Microsoft; and Meta. Specifics of the law read like a wish list for rivals of the biggest companies. Apple and Google, which make the operating systems that run on nearly every smartphone, would be required to loosen their grip. Apple will have to allow alternatives to its App Store for downloading apps, a change the company has warned could harm security. The law will also let companies such as Spotify and Epic Games use payment methods other than Apple's in the App Store, which charges a 30 percent commission.

Amazon will be barred from using data collected from outside sellers on its services so that it could offer competing products, a practice that is the subject of a separate E.U. antitrust investigation. The law will result in major changes for messaging apps. WhatsApp, which is owned by Meta, could be required to offer a way for users of rival services like Signal or Telegram to send and receive messages to somebody using WhatsApp. Those rival services would have the option to make their products interoperable with WhatsApp. The largest sellers of online advertising, Meta and Google, will see new limits for offering targeted ads without consent. Such ads -- based on data collected from people as they move between YouTube and Google Search, or Instagram and Facebook -- are immensely lucrative for both companies.

[...] With these actions, Europe is cementing its leadership as the most assertive regulator of tech companies such as Apple, Google, Amazon, Meta and Microsoft. European standards are often adopted worldwide, and the latest legislation further raises the bar by potentially bringing the companies under new era of oversight -- just like health care, transportation and banking industries. "Faced with big online platforms behaving like they were 'too big to care,' Europe has put its foot down," said Thierry Breton, one of the top digital officials in the European Commission. "We are putting an end to the so-called Wild West dominating our information space. A new framework that can become a reference for democracies worldwide." On Thursday, representatives from the European Parliament and European Council hammered out the last specifics of the law in Brussels. The agreement followed about 16 months of talks -- a speedy pace for the E.U. bureaucracy -- and sets the stage for a final vote in Parliament and among representatives from the 27 countries in the union. That approval is viewed as a formality.

United States

Want To Talk? FBI Trolls Russian Embassy for Disgruntled Would-Be Spies (washingtonpost.com) 37

Recruitment ad hits social media feeds of mobile phones located outside or inside the diplomatic compound. From a report: The FBI is trying a novel strategy to recruit Russian-speaking individuals upset about the country's invasion of Ukraine: aiming social media ads at cellphones located inside or just outside the Russian Embassy in Washington. The ads, which appear on Facebook, Twitter and Google, are carefully geographically targeted. A Washington Post reporter standing next to the embassy's stone walls on Wednesday morning received the ad in their Facebook feed. But the ads did not appear in the feed when the reporter stood on the other side of Wisconsin Avenue NW, in the District's Glover Park neighborhood.

The ads are designed to capitalize on any dissatisfaction or anger within Russian diplomatic or spy services -- or among Russian emigres to the United States -- over the invasion of Ukraine, an event that counterintelligence experts call a huge opportunity for the U.S. intelligence community to recruit new sources. The unlikely star of the campaign is Russian President Vladimir Putin, whose own words are used to encourage people working in or visiting the embassy to talk to the FBI. The ad quotes Putin at a meeting last month where he publicly chastised his intelligence chief, Sergey Naryshkin, correcting the spy boss's position on Russian policy toward the separatist eastern regions of Ukraine. Naryshkin, the director of Russia's Foreign Intelligence Service, or SVR, stammered at the meeting and seemed unsure of what Putin wanted him to say.

Facebook

Facebook Fails To Detect Hate Against Rohingya (apnews.com) 110

A new report has found that Facebook failed to detect blatant hate speech and calls to violence against Myanmar's Rohingya Muslim minority years after such behavior was found to have played a determining role in the genocide against them. From a report: The report shared exclusively with The Associated Press showed the rights group Global Witness submitted eight paid ads for approval to Facebook, each including different versions of hate speech against Rohingya. All eight ads were approved by Facebook to be published. The group pulled the ads before they were posted or paid for, but the results confirmed that despite its promises to do better, Facebook's leaky controls still fail to detect hate speech and calls for violence on its platform. The army conducted what it called a clearance campaign in western Myanmar's Rakhine state in 2017 after an attack by a Rohingya insurgent group. More than 700,000 Rohingya fled into neighboring Bangladesh and security forces were accused of mass rapes, killings and torching thousands of homes.

On Feb. 1 of last year, Myanmar's military forcibly took control of the country, jailing democratically elected government officials. Rohingya refugees have condemned the military takeover and said it makes them more afraid to return to Myanmar. Experts say such ads have continued to appear and that despite its promises to do better and assurances that it has taken its role in the genocide seriously, Facebook still fails even the simplest of tests -- ensuring that paid ads that run on its site do not contain hate speech calling for the killing of Rohingya Muslims.

Canada

Calgarians Detail Life With an Electricity Load Limiter (www.cbc.ca) 307

Limiters cap amount of electricity households can use, making many appliances unusable. From a report: Josie Gagne was stumbling in the dark, sobbing while on the phone with an Enmax customer assistant, as she tried to locate the tiny orange button under the utility meter that would restore heat inside. It was the shock that got her. The young single mother with two kids under two returned home one winter day last year to find a note on her door from Enmax. She'd fallen behind on bills; the home was now on a limiter, capping her electricity. The furnace was off and at that point, she had no idea what a limiter even was. "I'm freaking out. I'm crying, thinking 'What am I going to do?'" she said. "It's the middle of winter, it's still cold outside. How am I going to feed my children when my oven doesn't work?"

Rising utility bills have community advocates worried the number of Calgarians facing this scenario will increase, and many don't know what a load limiter is. It's often the first step before disconnection. Several Calgary residents flagged the issue while sharing their utility bill experiences with CBC Calgary through text messaging, and on Calgary Kindness, a mutual aid Facebook group. They've shared their personal stories with CBC journalists so others know what to expect. Contributors said they were scared their fridge would lose power and their groceries would rot. They relied on air fryers, barbecues or a hot plate to make it through. The extra fees -- $52 for the notice, $52 to remove the limiter -- only made it worse. Plus, the black mark on their files means they often can't get a contract with more favourable fixed rates. When the device is installed, a stove or anything else requiring 240 volts of electricity won't work.

Security

Browser-in-the-Browser Attack Can Trick Even Savvy Users (arstechnica.com) 46

apoc.famine shares a report from Ars Technica: Hundreds of thousands of sites use the OAuth protocol to let visitors login using their existing accounts with companies like Google, Facebook, or Apple. Instead of having to create an account on the new site, visitors can use an account that they already have -- and the magic of OAuth does the rest. The Browser-in-the-Browser (BitB) technique capitalizes on this scheme. Instead of opening a genuine second browser window that's connected to the site facilitating the login or payment, BitB uses a series of HTML and cascading style sheets (CSS) tricks to convincingly spoof the second window. The URL that appears there can show a valid address, complete with a padlock and HTTPS prefix. The layout and behavior of the window appear identical to the real thing.

While the method is convincing, it has a few weaknesses that should give savvy visitors a foolproof way to detect that something is amiss. Genuine OAuth or payment windows are in fact separate browser instances that are distinct from the primary page. That means a user can resize them and move them anywhere on the monitor, including outside the primary window. BitB windows, by contrast, aren't a separate browser instance at all. Instead, they're images rendered by custom HTML and CSS and contained in the primary window. That means the fake pages can't be resized, fully maximized or dragged outside the primary window. All users should protect their accounts with two-factor authentication. One other thing more experienced users can do is right click on the popup page and choose "inspect." If the window is a BitB spawn, its URL will be hardcoded into the HTML.

Slashdot Top Deals