Medicine

Dentist Broke His Patients' Teeth To Make Millions Installing Crowns, Jury Finds (arstechnica.com) 103

A dentist in Wisconsin has been found guilty of deliberately breaking his patients' teeth with a drill so he could collect millions of dollars to repair the damage with dental crowns. ArsTechnica reports: The alleged scheme by licensed Grafton dentist Scott Charmoli, 61, appears to have begun in 2015, when the number of crowns he installed abruptly increased. In 2015, Charmoli installed 1,036 crowns, well over the 434 crowns he did in 2014. Amid the royal boom, his income increased by more than a million dollars, going from $1.4 million in 2014 to $2.5 million in 2015, according to court documents. From 2016 to 2019, Charmoli billed insurers and patients over $4.2 million for crown procedures, according to federal prosecutors. Charmoli ranked at or above the 95th percentile for the number of crowns installed by dentists in the state in each of those years, the report added.
Puzzle Games (Games)

NYT Takes Down Third-Party Wordle Archive (arstechnica.com) 33

The New York Times, which acquired Wordle in January, is putting an end to unofficial takes of the game. The latest casualty is Wordle Archive, a website that let users play through hundreds of previous daily five-letter Wordle puzzles. According to Ars Technica, the site "has been taken down at the request of Wordle owner The New York Times." From the report: The archival site, which offered a backward-looking play feature that's not available in the NYT's official version of Wordle, had been up since early January. But it was taken down last week and replaced with a message saying, "Sadly, the New York Times has requested that the Wordle Archive be taken down." A Twitter search shows dozens of daily Wordle Archive players who were willing to share their results on social media up through March 7. "The usage was unauthorized, and we were in touch with them," a New York Times representative said in response to an Ars Technica comment request. "We don't plan to comment beyond that."

The Wordle Archive is still fully playable in its own archived form (as of March 5) at the Internet Archive, appropriately enough. Other sites that allow you to play archived Wordle puzzles are not hard to find, as are sites that let you play unlimited Wordle puzzles beyond the usual one-a-day limit. But some of those sites may be under threat, if the Times' treatment of Wordle Archive is any indication.

Government

Congressional Bills Would Ban Tech Mergers Over $5 Billion (engadget.com) 100

Senator Elizabeth Warren and House Representative Mondaire Jones have introduced legislation in their respective congressional chambers that would effectively ban large technology mergers. Engadget reports: The Prohibiting Anticompetitive Mergers Act (PAMA) would make it illegal to pursue "prohibited mergers," including those worth more than $5 billion or which provide market shares beyond 25 percent for employers and 33 percent for sellers. The bills would also give antitrust regulators more power to halt and review mergers. They would have authority to reject mergers outright, without requiring court orders. They would likewise bar mergers from companies with track records of antitrust violations or other instances of "corporate crime" in the past decade. Officials would have to gauge the impact of these acquisition on labor forces, and wouldn't be allowed to negotiate with the companies to secure "remedies" for clearing mergers.

Crucially, PAMA would formalize procedures for reviewing past mergers and breaking up "harmful deals" that allegedly hurt competition. The Federal Trade Commission has signaled a willingness to split up tech giants like Meta despite approving mergers years earlier. PAMA might make it easier to unwind those acquisitions and force brands like Instagram and WhatsApp to operate as separate businesses.

Piracy

LimeWire Founder 'Not Thrilled' That 'Strangers' Are Exploiting the Brand for NFT Marketplace (torrentfreak.com) 12

Several outlets -- including Slashdot -- reported last week that LimeWire is making a comeback as an NFT marketplace. But as it turns out, the new LimeWire project has absolutely nothing to do with the team that originally developed the file-sharing software. They just happen to share the same name. TorrentFreak, a news website that tracks piracy and copyright, interviewed Mark Gorton, founder and chief executive of the original LimeWire company, called Lime Group LLC. An excerpt from the story: Gorton says that he had never even heard of this NFT project before it hit the news. "I was not approached about this NFT project, and I didn't hear about it until the public announcement," Gorton tells TorrentFreak. There was probably no legal obligation to inform the former LimeWire chief. The original trademarks have expired and the NFT website uses a new logo, so they can use the brand. However, Gorton is not happy to see the name used in a way that deviates from its original purpose. "I am not thrilled about an unrelated group of people using the LimeWire name. Using the LimeWire name in this way creates confusion and falsely uses that brand that we created for purposes for which it was never intended," Gorton says. The new LimeWire does have at least one asset that previously belonged to the original LimeWire team; the Limewire.com domain name.
Piracy

Netflix Will Prompt Subscribers To Pay for Users Outside Their Households in New Test to Address Unauthorized Password Sharing (variety.com) 113

Netflix will soon launch a test letting primary account holders pay an additional fee for users outside their households -- a new attempt by the company to address illicit password-sharing. From a report: According to the Netflix terms of service, a customer's account "may not be shared with individuals beyond your household." After years of turning a blind eye to password-sharing behavior that falls outside that requirement, the company last year ran a limited test prompting users to enter their account credentials as a way to nudge freeloaders into paying for their own accounts. Now, in an upcoming test launching in three countries -- Chile, Costa Rica and Peru -- Netflix will let members who share their accounts with people outside their household do so "easily and securely, while also paying a bit more," according to Chengyi Long, director of product innovation at Netflix. The new options will roll out in the next few weeks in the three countries (and may or may not expand beyond those markets).
Crime

Lawmakers Probe Early Release of Top RU Cybercrook (krebsonsecurity.com) 21

An anonymous reader quotes a report from KrebsOnSecurity: Aleksei Burkov, a cybercriminal who long operated two of Russia's most exclusive underground hacking forums, was arrested in 2015 by Israeli authorities. The Russian government fought Burkov's extradition to the U.S. for four years -- even arresting and jailing an Israeli woman to force a prisoner swap. That effort failed: Burkov was sent to America, pleaded guilty, and was sentenced to nine years in prison. But a little more than a year later, he was quietly released and deported back to Russia. Now some Republican lawmakers are asking why a Russian hacker once described as "an asset of supreme importance" was allowed to shorten his stay.

"An ICE spokesperson stated that Burkov is wanted by Russian authorities, and a DOJ spokesperson denied that a prisoner exchange took place," the letter reads. "The decision to prematurely release Burkov is curious given the lengths to which the U.S. government went to secure Burkov's arrest." The letter, signed by the ranking members of the House Judiciary, Homeland Security, Intelligence and Foreign Affairs committees, demanded to know why Burkov was released prematurely, and whether the U.S. received anything in return. The lawmakers also asked for a list of all Russian nationals convicted of crimes in the U.S. who were released early since President Biden took office.

Records show Burkov was in the custody of either Israeli or U.S. authorities for almost five years prior to his sentencing in 2020. At the time of his release, Burkov had already been incarcerated for nearly six years. So where did the other years of his sentence go? That remains unclear, but it is possible he cut some sort of deal to lessen his sentence. On June 16, 2021, a "sealed pleading" was added to Burkov's court record, followed by a sealed document entered on Aug. 18 -- a week before Burkov's deportation. The motion to seal these and other documents related to the pleading was made by U.S. federal prosecutors, and those documents remain hidden from public viewing.
"A native of St. Petersburg, Russia, Burkov admitted to running CardPlanet, a site that sold more than 150,000 stolen credit card accounts, and to being a founder of DirectConnection -- a closely guarded online community that attracted some of the world's most-wanted Russian hackers," notes Krebs. "A 2019 deep dive into Burkov's hacker alias 'K0pa' revealed he also was co-administrator of the secretive Russian cybercrime forum 'Mazafaka.' Like DirectConnection, Mazafaka's member roster was a veritable 'Who's Who?' of the Russian hacker underground, and K0pa played a key role in vetting new members and settling disputes for both communities."
Government

Senate Passes Bill To Make Daylight Saving Time Permanent (axios.com) 307

An anonymous reader quotes a report from Axios: The Senate passed a measure that would make Daylight Savings Time permanent across the U.S. The bill -- the Sunshine Protection Act co-sponsored by Sen. Sheldon Whitehouse (D-R.I.) and Sen. Marco Rubio (R-Fla.) -- was passed by unanimous consent. It would make Daylight Savings time permanent in 2023. If the legislation clears the House and is signed into law by President Biden, it will mean Americans will no longer have to change their clocks twice a year.

Health groups have called for an end to the seasonal shifting of clocks, a ritual first adopted in the U.S. more than a century ago. At a house hearing last week, health experts cited sleep deprivation and health problems as negative effects associated with changing clocks. Nearly two-thirds of Americans want to stop changing their clocks, according to a 2021 Economist/YouGov poll.
Axios has learned that Rep. Vern Buchanan (R-Fla.) "will be leading a letter to Speaker Pelosi calling for immediate House passage of his bill."

By making DST permanent, legislators are prioritizing more daylight in the evening, which could improve our health and allow for more sunshine during the most productive hours of the day. According to a new study published yesterday, sleeping in the dark may reduce your risk of heart disease and diabetes. "The results from this study demonstrate that just a single night of exposure to moderate room lighting during sleep can impair glucose and cardiovascular regulation, which are risk factors for heart disease, diabetes and metabolic syndrome," said study author Dr Phyllis Zee.
Bitcoin

Elizabeth Warren's Anti-crypto Crusade Splits the Left (politico.com) 123

Democratic lawmakers are entering a crypto collision course. Politico reports: Questions around how to police digital currency and whether to support its adoption are driving a rift not just between the party's liberal and centrist wings but also among progressives who often see eye-to-eye on financial regulation. Sen. Elizabeth Warren of Massachusetts -- who has long led the left's charge to crack down on banks and Wall Street -- has emerged as one of the party's most vocal cryptocurrency critics, warning that it exposes consumers to danger, is ripe for financial crimes and is an environmental threat because of its electricity usage. But a new generation of progressives -- and a number of other senior Democrats -- are embracing the startup industry. They're arguing against regulations that could stifle what proponents say is a new avenue for financial inclusion and a breakthrough alternative to traditional banks. "The project of radically decentralizing the internet and finance strikes me as a profoundly progressive cause," Rep. Ritchie Torres (D-N.Y.) said in an interview. "You should never define any technology by its worst uses. ... There's more to crypto than ransomware, just like there's more to money than money laundering."

The simmering conflict is set to intensify in the coming months. President Joe Biden last week asked federal agencies to start solidifying the federal government's approach to crypto, framing the step as supportive of innovation rather than an industry crackdown. The price of Bitcoin surged on the news. Separately, Democratic lawmakers have started to draft a host of crypto regulation bills that are also exposing a wide range of views on the government's role in the $1.7 trillion market for digital assets. The lack of consensus among Democrats means it's unlikely Congress will act anytime soon to pass major legislation laying out the direction of regulation of the new market. Some Democrats and lobbyists had expected initial votes early this year, but that timeline has slipped.

Piracy

TorGuard Settles Piracy Lawsuit, Agrees To Block Torrent Traffic On US Servers (torrentfreak.com) 40

TorGuard has settled a copyright infringement lawsuit filed by several movie companies last year. The VPN provider stood accused of failing to take action against subscribers who were pirating films. As part of the settlement, TorGuard agrees to block BitTorrent traffic on U.S. servers; however, it stresses that user privacy is in no way affected by this decision. TorrentFreak reports: "Pursuant to a confidential settlement agreement, Plaintiffs have requested, and Defendant has agreed to use commercially reasonable efforts to block BitTorrent traffic on its servers in the United States using firewall technology," a joint statement reads. This is quite a far-reaching measure as a broad BitTorrent blockade will also affect legal traffic, which includes software updates from Twitter and Facebook. That said, people can still use BitTorrent on servers in other regions. [...]

The company confirms that it's blocking torrent traffic on U.S. servers, but that doesn't change anything for the privacy of users. "TorGuard has not been forced to log network usage data. Due to the nature of shared IP's and related hardware technicalities of how TorGuard's network was built it is impossible for us to do so," the VPN provider writes. "We have a responsibility to provide high quality uninterrupted VPN and proxy services to our client base at large while mitigating any related network abuse that should arise. This commitment to user privacy and service reliability is the reason we have taken measures to block Bittorrent traffic on servers within the United States."

Encryption

Researcher Uses 379-Year-Old Algorithm To Crack Crypto Keys Found In the Wild (arstechnica.com) 17

An anonymous reader quotes a report from Ars Technica: Cryptographic keys generated with older software now owned by technology company Rambus are weak enough to be broken instantly using commodity hardware, a researcher reported on Monday. This revelation is part of an investigation that also uncovered a handful of weak keys in the wild. The software comes from a basic version of the SafeZone Crypto Libraries, which were developed by a company called Inside Secure and acquired by Rambus as part of its 2019 acquisition of Verimatrix, a Rambus representative said. That version was deprecated prior to the acquisition and is distinct from a FIPS-certified version that the company now sells under the Rambus FIPS Security Toolkit brand.

Researcher Hanno Bock said that the vulnerable SafeZone library doesn't sufficiently randomize the two prime numbers it used to generate RSA keys. (These keys can be used to secure Web traffic, shells, and other online connections.) Instead, after the SafeZone tool selects one prime number, it chooses a prime in close proximity as the second one needed to form the key. "The problem is that both primes are too similar," Bock said in an interview. "So the difference between the two primes is really small." The SafeZone vulnerability is tracked as CVE-2022-26320. Cryptographers have long known that RSA keys that are generated with primes that are too close together can be trivially broken with Fermat's factorization method. French mathematician Pierre de Fermat first described this method in 1643. Fermat's algorithm was based on the fact that any number can be expressed as the difference between two squares. When the factors are near the root of the number, they can be calculated easily and quickly. The method isn't feasible when factors are truly random and hence far apart. The security of RSA keys depends on the difficulty of factoring a key's large composite number (usually denoted as N) to derive its two factors (usually denoted as P and Q). When P and Q are known publicly, the key they make up is broken, meaning anyone can decrypt data protected by the key or use the key to authenticate messages.

So far, Bock has identified only a handful of keys in the wild that are vulnerable to the factorization attack. Some of the keys belong to printers originally branded as Fuji Xerox and now belonging to Canon. Printer users can use the keys to generate a Certificate Signing Request. The creation date for the keys was 2020 or later. The weak Canon keys are tracked as CVE-2022-26351. Bock also found four vulnerable PGP keys, typically used to encrypt email, on SKS PGP key servers. A user ID tied to the keys implied they were created for testing, so he doesn't believe they're in active use. Bock said he believes all the keys he found were generated using software or methods not connected to the SafeZone library. If true, other software that generates keys might be easily broken using the Fermat algorithm. It's plausible also that the keys were generated manually, "possibly by people aware of this attack creating test data." The researcher found the keys by searching through billions of public keys that he either had access to, were shared with him by other researchers, or that were available through certificate transparency programs.
UPDATE: The headline incorrectly stated that a "600-Year-Old Algorithm" was used. It's been changed to "379-Year-Old-Algorithm" to reflect the updated headline on Ars.
AI

Ukraine Has Started Using Clearview AI's Facial Recognition During War (msn.com) 49

Reuters reports: Ukraine's defense ministry on Saturday began using Clearview AI's facial recognition technology, the company's chief executive told Reuters, after the U.S. startup offered to uncover Russian assailants, combat misinformation and identify the dead. Ukraine is receiving free access to Clearview AI's powerful search engine for faces, letting authorities potentially vet people of interest at checkpoints, among other uses, added Lee Wolosky, an adviser to Clearview and former diplomat under U.S. presidents Barack Obama and Joe Biden.

The plans started forming after Russia invaded Ukraine and Clearview Chief Executive Hoan Ton-That sent a letter to Kyiv offering assistance, according to a copy seen by Reuters. Clearview said it had not offered the technology to Russia, which calls its actions in Ukraine a "special operation...."

The Clearview founder said his startup had more than 2 billion images from the Russian social media service VKontakte at its disposal, out of a database of over 10 billion photos total. That database can help Ukraine identify the dead more easily than trying to match fingerprints and works even if there is facial damage, Ton-That wrote.... Ton-That's letter also said Clearview's technology could be used to reunite refugees separated from their families, identify Russian operatives and help the government debunk false social media posts related to the war.

The exact purpose for which Ukraine's defense ministry is using the technology is unclear, Ton-That said. Other parts of Ukraine's government are expected to deploy Clearview in the coming days, he and Wolosky said.

Censorship

How Putin's Pre-War Moves Against Google and Apple Prepared His Clampdown on Free Speech (msn.com) 91

The Washington Post shares a story that hasn't been previously disclosed. "Russian agents came to the home of Google's top executive in Moscow to deliver a frightening ultimatum last September: take down an app that had drawn the ire of Russian President Vladimir Putin within 24 hours or be taken to prison." Google quickly moved the woman to a hotel where she checked in under an assumed name and might be protected by the presence of other guests and hotel security, according to people with knowledge of the matter. The same agents — believed by company officials to be from Russia's FSB, a successor to the KGB intelligence service — then showed up at her room to tell her the clock was still ticking.

Within hours, an app designed to help Russians register protest votes against Putin could no longer be downloaded from Google or Apple, whose main representative in Moscow faced a similarly harrowing sequence....

The unnerving encounters, which have not previously been disclosed, were part of a broader campaign that Putin intensified last year to erode sources of internal opposition — moves now helping him maintain his hold on power amid a global backlash over the invasion of Ukraine. In a single year, Putin had his political nemesis Alexei Navalny imprisoned after a poisoning attempt failed to kill him; pushed independent news outlets to the brink of extinction; orchestrated a Kremlin-controlled takeover of Russia's Facebook equivalent; and issued "liquidation" orders against human rights organizations.

Amid this internal offensive, Putin also moved to bring foreign technology companies to heel. Moscow deployed new devices that let it degrade or even block Russians' access to Facebook and Twitter, imposed fines totaling $120 million on firms accused of defying Kremlin censors, and ordered 13 of the world's largest technology companies to keep employees in Russia and thus exposed to potential arrest or other punishment for their employers' actions — a measure that U.S. executives refer to as the "hostage law."

On their own, these moves were seen as disparate signs of Russia' descent into authoritarianism. But they also laid the groundwork for the Soviet-style suppression of free expression now underway in Russia, much as the months-long military buildup set the stage for the invasion of Ukraine.

The article also notes "preliminary evidence that the suppression strategy is working. "Polls, whose reliability is always uncertain in Russia, show that a majority of Russians support the war. In interviews with Western journalists that have gone viral online, Russians who rely on state-controlled media have consistently echoed Kremlin falsehoods about eradicating alleged Nazism in Ukraine while seeming to be genuinely oblivious to the war's carnage."

The article also notes how Apple is responding to Ukraine's crisis — but also includes this anecdote: Apple has similarly kept employees in Russia and taken other steps to placate the Kremlin. The company last year began configuring iPhones sold in Russia to promote Kremlin-backed social media companies, enabling users to activate them with a single click. It is an accommodation Apple has rarely made elsewhere and advances Putin's goal of migrating Russian people to platforms controlled by the government, according to Russia analysts.
Wikipedia

Belarus Arrests Prominent Wikipedia Editor, Sentences Him to 15 Days of Arrest (theverge.com) 73

Friday the Verge reported: The Main Directorate for Combating Organized Crime and Corruption of Belarus (GUBOPiK) has detained prominent Wikipedia editor Mark Bernstein, according to the Belarusian publication Zerkalo.

The arrest comes after Bernstein's personal information was shared on GOBUPiK's public Telegram channel. Bernstein is one of the top 50 editors of Russian Wikipedia. The Verge was able to confirm that Bernstein's information — including his social media, Wikipedia handle, and place of work — had been shared in GUBOPik's channel on the messaging app. A video of Bernstein's arrest was also posted alongside his photo and personal details. In the photo itself, Bernstein is accused of "distributing fake anti-Russian information." The channel has since been made private....

In an activity log of Bernstein's purported Wikimedia username, you can see that he's made over 200,000 edits to Russian Wikipedia articles. Currently, his account is described as "blocked indefinitely."

"Earlier in March, Slate reported on the same Wikipedia editor and his efforts to ensure the correct information hits pages about the invasion," adds The Byte.

On Saturday the human rights site Charter 97 reported that Bernstein was given 15 days of arrest, "according to the Viasna human rights center."
Censorship

'The Kremlin is Lying', Warn Text Messages Sent to Millions of Russian Cellphone Numbers (dailydot.com) 210

"People around the world are using a new website to circumvent the Kremlin's propaganda machine by sending individual messages about the war in Ukraine to random people in Russia," reports the Wall Street Journal.

"The website was developed by a group of Polish programmers who obtained some 20 million cellphone numbers and close to 140 million email addresses owned by Russian individuals and companies."

A Tuesday report from the Daily Dot: Created by the hacking group known as Squad303, the tool, hosted at the domain 1920.in, loads a pre-written statement into a user's native SMS app that attempts to inform Russians about the ongoing conflict.

"Dear Russians, your media is being censored. The Kremlin is lying," the statement reads. "Find out the truth about Ukraine on the free internet and in the Telegram app. Time to overthrow dictator Putin!"

In a statement to the Daily Dot, a member of Squad303 described the effort as a "non-violent communication project" aimed at bypassing Russia's crackdown on independent news sources.

The domain name for the tool refers to Poland's surprise victory against Russian forces in 1920.

"We know that people wanted to get engaged to help Ukrainians. We wanted to deliver them a tool to start a dialog with Russians," the group said.... Squad303 claims that its tool has already been used to send out more than 6.3 million text messages, although the Daily Dot was unable to confirm the number.

United States

Critical US Companies Will Soon Be Required to Report All Breaches and Ransomware to the DHS (apnews.com) 16

"Companies critical to U.S. national interests will now have to report when they're hacked or they pay ransomware, according to new rules approved by Congress," reports the Associated Press: The rules are part of a broader effort by the Biden administration and Congress to shore up the nation's cyberdefenses after a series of high-profile digital espionage campaigns and disruptive ransomware attacks. The reporting will give the federal government much greater visibility into hacking efforts that target private companies, which often have skipped going to the FBI or other agencies for help. "It's clear we must take bold action to improve our online defenses," Sen. Gary Peters, a Michigan Democrat who leads the Senate Homeland Security and Government Affairs Committee and wrote the legislation, said in a statement on Friday.

The reporting requirement legislation was approved by the House and the Senate on Thursday and is expected to be signed into law by President Joe Biden soon. It requires any entity that's considered part of the nation's critical infrastructure, which includes the finance, transportation and energy sectors, to report any "substantial cyber incident" to the government within three days and any ransomware payment made within 24 hours....

The legislation designates the Department of Homeland Security's Cybersecurity and Infrastructure Security Agency as the lead agency to receive notices of hacks and ransomware payments.... The new rules also empower CISA to subpoena companies that fail to report hacks or ransomware payments, and those that fail to comply with a subpoena could be referred to the Justice Department for investigation.

Government

Lawmakers Urge Congress To Make Daylight Saving Time Permanent (wsj.com) 188

An anonymous reader quotes a report from Wall Street Journal: It's time to Spring Forward again, as most of the U.S. shifts Sunday into daylight-saving time. If it were up to some lawmakers, the lost hour of sleep every March would be but a fixture of the past. The tradition of setting clocks forward in the spring and backward in the fall has been a source of debate and consternation for decades. Efforts to make daylight-saving time -- or, in some cases, standard time -- permanent have bubbled up in state houses over the years. But the bipartisan cause to stop the time changes has gained renewed momentum recently (Warning: source paywalled; alternative source), with lawmakers citing studies identifying the negative effects of clock changes on people's health and the economy.

Eighteen states have passed legislation or resolutions in the past four years making daylight-saving time permanent, according to the National Conference of State Legislatures. In 2022, 28 states are weighing bills regarding the time changes, according to the group, which tracks state laws. The majority of the 68 measures seek to make daylight-saving time the permanent standard -- making the changes less likely to be swiftly enacted. Under current federal law, any state can choose to observe standard time year-round. But states can't move to follow daylight-saving time permanently without changes to federal law.

A bipartisan group of senators, including Marco Rubio (R., Fla.) and Ed Markey (D., Mass.), reintroduced legislation in March 2021 to make daylight-saving time the year-round standard. The legislation would allow similar laws passed in states including Florida, Georgia, Delaware, Oregon and Louisiana to take effect. But the bill hasn't made much progress in the past year. "Switching in and out of daylight-saving time is outdated," Mr. Rubio said in a video message Thursday, renewing calls for action. "Let's just lock the clock once and for all and put all this stupidity behind us." [...] Lawmakers hoping to make daylight-saving time permanent say it would reduce car accidents, risks for heart attacks and reduce energy use. Some researchers, however, have questioned the role that time change plays in energy conservation and its correlation to negative health impacts.

Government

Bill Targeting NDAs Used By Tech Companies Passes In Washington State (geekwire.com) 26

Landmark legislation that will drastically curtail tech companies' ability to stop employees from talking about mistreatment is headed to the governor's desk in Washington state. GeekWire reports: Last week, Washington legislators approved House Bill 1795 -- also called the Silenced No More Act -- in major victory for activists who have fought to limit non-disclosures and non-disparagement agreements. The legislation, introduced by Rep. Liz Berry (D-Seattle), makes it illegal for companies to ban employees from discussing "illegal acts of discrimination, harassment, retaliation, wage and hour violations, and sexual assault."

"This bill is about empowering workers," said Berry in a statement last week. "It is about giving workers a voice. Despite the progress we've made in recent years, too many workers are still forced to sign NDAs and settlement agreements that silence them. This bill will allow all survivors of inappropriate or illegal workplace misconduct to share their experiences if they choose to do so." NDAs have long been common practice at many large tech companies, and often state that employees will have to repay severance money or face other financial ramifications if they violate the agreement.

Washington state will be the second state to ban these types of gag orders; California passed its own Silenced No More Act last year. There, the legislation passed despite vocal opposition from trade groups, which argued that employees could end up getting hurt if companies decide to limit severance payments, or to forgo them altogether.

Crime

US Extradites REvil Ransomware Member To Stand Trial For Kaseya Attack (bleepingcomputer.com) 14

The U.S. Department of Justice announced that alleged REvil ransomware affiliate, Yaroslav Vasinskyi, was extradited to the United States last week to stand trial for the Kaseya cyberattack. BleepingComputer reports: Vasinkyi, a 22-year-old Ukrainian national, was arrested in November 2021 while entering Poland for his cybercrime activities as a REvil member. Vasinkyi is believed to be a REvil ransomware affiliate tasked to breach corporate networks worldwide, steal unencrypted data, and then encrypt all of the devices on the network. Shortly after Vasinkyi was arrested, the DOJ announced that he was responsible for the ransomware attack against Kaseya, a managed services provider, impacting thousands of companies worldwide.

"In the alleged attack against Kaseya, Vasinskyi caused the deployment of malicious Sodinokibi/REvil code throughout a Kaseya product that caused the Kaseya production functionality to deploy REvil ransomware to "endpoints" on Kaseya customer networks," explained the U.S. DoJ announcement. "After the remote access to Kaseya endpoints was established, the ransomware was executed on those computers, which resulted in the encryption of data on computers of organizations around the world that used Kaseya software."
Vasinskyi is facing the following charges: conspiracy to commit fraud and related activity in connection with computers; intentional damage to protected computers; and conspiracy to commit money laundering.

"If convicted for all counts, Vasinskyi will be sentenced to a total of 115 years in prison," adds BleepingComputer. "Additionally, he will also forfeit all property and financial assets."
United States

The White House is Briefing TikTok Stars About the War in Ukraine (washingtonpost.com) 91

The White House has been closely watching TikTok's rise as a dominant news source, leading to its decision to approach a select group of the platform's most influential names. From a report: This week, the administration began working with Gen Z For Change, a nonprofit advocacy group, to help identify top content creators on the platform to orchestrate a briefing aimed at answering questions about the conflict and the United States' role in it.

The briefing was led by Matt Miller, a special adviser for communications at the White House National Security Council, and Psaki. The Washington Post obtained a recording of the call, and in it, Biden officials stressed the power these creators had in communicating with their followers. "We recognize this is a critically important avenue in the way the American public is finding out about the latest," said the White House director of digital strategy, Rob Flaherty, "so we wanted to make sure you had the latest information from an authoritative source."

Patents

Russia Says Its Businesses Can Steal Patents From Anyone In 'Unfriendly' Countries (washingtonpost.com) 256

Russia has effectively legalized patent theft from anyone affiliated with countries "unfriendly" to it, declaring that unauthorized use will not be compensated. The Washington Post reports: The decree, issued this week, illustrates the economic war waged around Russia's invasion of Ukraine, as the West levies sanctions and pulls away from Russia's huge oil and gas industry. Russian officials have also raised the possibility of lifting restrictions on some trademarks, according to state media, which could allow continued use of brands such as McDonald's that are withdrawing from Russia in droves. The effect of losing patent protections will vary by company, experts say, depending on whether they have a valuable patent in Russia. The U.S. government has long warned of intellectual property rights violations in the country; last year Russia was among nine nations on a "priority watch list" for alleged failures to protect intellectual property. Now Russian entities could not be sued for damages if they use certain patents without permission.

The patent decree and any further lifting of intellectual property protections could affect Western investment in Russia well beyond any de-escalation of the war in Ukraine, said Josh Gerben, an intellectual property lawyer in Washington. Firms that already saw risks in Russian business would have more reason to worry. "It's just another example of how [Putin] has forever changed the relationship that Russia will have with the world," Gerben said. Russia's decree removes protections for patent holders who are registered in hostile countries, do business in them or hold their nationality.

The Kremlin has not issued any decree lifting protections on trademarks. But Russia's Ministry of Economic Development said last week that authorities are considering "removing restrictions on the use of intellectual property contained in certain goods whose supply to Russia is restricted," according to Russian state news outlet Tass, and that potential measures could affect inventions, computer programs and trademarks. The ministry said the measures would "mitigate the impact on the market of supply chain breaks, as well as shortages of goods and services that have arisen due to the new sanctions of western countries," Tass stated. Gerben said a similar decree on trademarks would pave the way for Russian companies to exploit American brand names that have halted their business in Russia. He gave a hypothetical involving McDonald's, one of the latest global giants to suspend operations in Russia under public pressure.

Slashdot Top Deals