Australia

Eftpos Granted Government Accreditation as First Private ID Exchange Operator (zdnet.com) 17

Eftpos has become Australia's first accredited non-government operator of a digital identity exchange under the federal government's Trusted Digital Identity Framework (TDIF). From a report: By becoming an accredited operator, Eftpos connectID can now facilitate online transactions requiring a digital identity from Australians. Eftpos sent connectID live in June as a fully-owned subsidiary of the organisation and as a standalone fintech company. It's been set up to act as "broker" between identity service providers and merchants or government agencies that require identity verification, such as proof of age, address details, or bank account information. It has been designed to work within the federal government's Trusted Digital Identity Framework (TDIF) and the banking industry's TrustID framework. Although the Australian government has its own digital identity solution with myGovID, Eftpos has previously said its solution could provide a "smoother, faster, and more secure onboarding experience, including for government services." Eftpos has also assured that connectID does not store any identity data.
Government

When the FBI Seizes Your Messages from Big Tech, You May Not Know for Years (msn.com) 91

When America's law enforcement investigators serve tech companies with subpoenas or search warrants,"the target of the investigation has no idea their data is being seized," the Washington Post pointed out this weekend.

It's becoming surprisingly common in the U.S. "And if investigators obtain a gag order, the records must be handed over without the person's knowledge or consent — depriving the person of an opportunity to challenge the seizure in court." Every year, Facebook, Google and other technology companies receive hundreds of thousands of orders from law enforcement agencies seeking data people stash online: private messages, photos, search histories, calendar items — a potentially rich trove for criminal investigators. Often, those requests are accompanied by secrecy orders, also known as nondisclosure or gag orders, that require the tech companies to keep their customers in the dark, potentially for years...

In the last six months of 2020, Facebook received 61,262 government requests for user data in the United States, said spokesman Andy Stone. Most — 69 percent — came with secrecy orders. Meanwhile, Microsoft has received between 2,400 and 3,500 secrecy orders from federal law enforcement each year since 2016 — or seven to 10 per day — according to congressional testimony by vice president of customer security and trust Tom Burt. Google and Apple declined to disclose the number of gag orders they've received. But in the first half of 2020, Google said U.S. law enforcement made 39,536 requests for information about 84,662 accounts — with many of the requests targeting multiple accounts. Apple said it received 11,363 requests...

Under the 1986 Electronic Communications Privacy Act, federal prosecutors are required to seek digital information from tech companies, not their customers. Since then, prosecutors have routinely used gag orders to prevent the companies from spilling the beans to suspects who might destroy evidence, go into hiding or threaten someone's life. But the practice has mushroomed over the past two decades, part of a broader surveillance ramp-up following the Sept. 11, 2001, terrorist attacks, lawyers said. As the orders have proliferated, privacy advocates and the tech companies themselves have become increasingly concerned. Some tech company officials have accused prosecutors of reflexively requesting gag orders for routine investigations, regardless of whether the cases actually require such secrecy. And an array of company officials and legal experts argue that the practice robs tech company customers of their constitutional protections against unreasonable search and seizure.

"Across all the rest of society, it's understood that government doesn't get to take your stuff, doesn't get to come in and into your house, doesn't get to break into your file folders or your lock box at the bank without a warrant. And you get to know about that warrant and you get to exercise your legal rights," Microsoft's Burt said in an interview. "Someone cannot exercise their Fourth Amendment rights when their data has been taken in secret."

U.S. lawmakers are considering changes, the article points out. One idea? Require tech companies "to preserve digital files that are the subject of court orders and permit customers to challenge the orders in court before the information is turned over to prosecutors."

Senator Ron Wyden of Oregon points out that's how wiretaps currently work — and is also drafting a measure that would finally require federal courts to publish statistics on the number of surveillance and secrecy orders they've issued.
Encryption

With HTTPS Everywhere, EFF Begins Plans to Eventually Deprecate 'HTTPS Everywhere' Extension (therecord.media) 48

The Record reports: The Electronic Frontier Foundation said it is preparing to retire the famous HTTPS Everywhere browser extension after HTTPS adoption has picked up and after several web browsers have introduced HTTPS-only modes." "After the end of this year, the extension will be in 'maintenance mode' for 2022," said Alexis Hancock, Director of Engineering at the EFF. Maintenance mode means the extension will receive minor bug fixes next year but no new features or further development.

No official end-of-life date has been decided, a date after which no updates will be provided for the extension whatsoever.

Launched in June 2010, the HTTPS Everywhere browser extension is one of the most successful browser extensions ever released. The extension worked by automatically switching web connections from HTTP to HTTPS if websites had an HTTPS option available. At the time it was released, it helped upgrade site connections to HTTPS when users clicked on HTTP links or typed domains in their browser without specifying the "https://" prefix. The extension reached cult status among privacy advocates and was integrated into the Tor Browser and, after that, in many other privacy-conscious browsers. But since 2010, HTTPS is not a fringe technology anymore. Currently, around 86.6% of all internet sites support HTTPS connections. Browser makers such as Chrome and Mozilla previously reported that HTTPS traffic usually accounts for 90% to 95% of their daily connections.

From EFF's announcement: The goal of HTTPS Everywhere was always to become redundant. That would mean we'd achieved our larger goal: a world where HTTPS is so broadly available and accessible that users no longer need an extra browser extension to get it. Now that world is closer than ever, with mainstream browsers offering native support for an HTTPS-only mode.

With these simple settings available, EFF is preparing to deprecate the HTTPS Everywhere web extension as we look to new frontiers of secure protocols like SSL/TLS... We know many different kinds of users have this tool installed, and want to give our partners and users the needed time to transition.

The announcement also promises to inform users of browser-native HTTPS-only options before the day when the extension reaches its final sunsetting — and ends with instructions for how to activate the native HTTPS-only features in Firefox, Chrome, Edge, and Safari, "and celebrate with us that HTTPS is truly everywhere for users."
The Courts

Former Reddit CEO Asks: Why Is Theranos' Holmes the Only Tech CEO Facing Prosecution? (npr.org) 177

Federal prosecutors allege that Elizabeth Holmes and the No. 2 at Theranos, Ramesh "Sunny" Balwani, "broke the law by deceiving investors about how well the business was doing and the capabilities of its testing machines, in addition to allegedly providing false or flawed test results to patients," reports NPR.

But they add that in Silicon Valley, the trial has launched this debate. "Since Holmes was following a playbook used by dozens of tech CEOs, why is she the only one to face prosecution when a company becomes engulfed in a scandal?" To Ellen Pao, the former CEO of Reddit, who is a vocal critic of gender discrimination in tech, sexism is partially to blame. "When you see which CEOs get to continue to wreak havoc on consumers and the market, it's people who look like the venture capitalists, who are mostly white men," Pao said. She points to Adam Neumann, who drove WeWork into the ground; former Uber CEO Travis Kalanick, who resigned after a sexual harassment scandal; and Juul's Kevin Burns, who stepped down amid questions over the company's role in stoking the youth vaping epidemic. There were lawsuits, settlements and more fallout — but notably, Pao points out, no criminal prosecutions.

"That all these people continue to lead their lives and not be held accountable for all the harm that they've caused, it does send a message," she said.

Former prosecutors who have tried white-collar crime say there are several reasons why Holmes stands out among disgraced tech CEOs. First, the allegedly fraudulent behavior was egregious: Holmes told the world she had a miracle machine that would upend laboratory science. Prosecutors say, compared with her claims, the technology barely did anything at all. Mark MacDougall, a former federal prosecutor who focused on fraud cases in the U.S. Justice Department, said Theranos' being a biotech company raised the stakes. "It allows the government to contend, with some evidence, that the health of private citizens, the health of innocent people, was put at risk," MacDougall said. Another reason Holmes was charged, according to former prosecutors, was that the government says it obtained evidence that she acted intentionally, which can be difficult to establish in fraud cases.

Prosecutors now plan to show Holmes "knowingly and intentionally" defrauded investors and patients, "something her defense team says is false," the article points out. "Proving that Holmes is guilty will turn on demonstrating her intent, since exaggerating a product's potential, missing financial forecasts and running a secretive company do not constitute federal crimes."

Pao's argument is that Holmes "was encouraged by the high-risk, high-reward culture of venture capital. That said, Pao said she is not defending Holmes, saying her behavior warranted prosecution."

"At the same time, Pao wants a broader discussion in Silicon Valley about why other CEOs accused of wrongdoing have not faced criminal consequences."
Government

Report: In 2017 America's CIA Plotted to Kidnap Julian Assange From Ecuador (yahoo.com) 149

"In 2017, as Julian Assange began his fifth year holed up in Ecuador's embassy in London, the CIA plotted to kidnap the WikiLeaks founder," reports Yahoo News, "spurring heated debate among Trump administration officials over the legality and practicality of such an operation."

The report is based on conversations with more than 30 former U.S. officials, "eight of whom described details of the CIA's proposals to abduct Assange." Some senior officials inside the CIA and the Trump administration even discussed killing Assange, going so far as to request "sketches" or "options" for how to assassinate him. Discussions over kidnapping or killing Assange occurred "at the highest levels" of the Trump administration, said a former senior counterintelligence official. "There seemed to be no boundaries...."

While Assange had been on the radar of U.S. intelligence agencies for years, these plans for an all-out war against him were sparked by WikiLeaks' ongoing publication of extraordinarily sensitive CIA hacking tools, known collectively as "Vault 7," which the agency ultimately concluded represented "the largest data loss in CIA history." President Trump's newly installed CIA director, Mike Pompeo, was seeking revenge on WikiLeaks and Assange, who had sought refuge in the Ecuadorian Embassy since 2012 to avoid extradition to Sweden on rape allegations he denied... The CIA's fury at WikiLeaks led Pompeo to publicly describe the group in 2017 as a "non-state hostile intelligence service." More than just a provocative talking point, the designation opened the door for agency operatives to take far more aggressive actions, treating the organization as it does adversary spy services, former intelligence officials told Yahoo News. Within months, U.S. spies were monitoring the communications and movements of numerous WikiLeaks personnel, including audio and visual surveillance of Assange himself, according to former officials...

There is no indication that the most extreme measures targeting Assange were ever approved, in part because of objections from White House lawyers, but the agency's WikiLeaks proposals so worried some administration officials that they quietly reached out to staffers and members of Congress on the House and Senate intelligence committees to alert them to what Pompeo was suggesting... In late 2017, in the midst of the debate over kidnapping and other extreme measures, the agency's plans were upended when U.S. officials picked up what they viewed as alarming reports that Russian intelligence operatives were preparing to sneak Assange out of the United Kingdom and spirit him away to Moscow... In response, the CIA and the White House began preparing for a number of scenarios to foil Assange's Russian departure plans, according to three former officials. Those included potential gun battles with Kremlin operatives on the streets of London, crashing a car into a Russian diplomatic vehicle transporting Assange and then grabbing him, and shooting out the tires of a Russian plane carrying Assange before it could take off for Moscow. (U.S. officials asked their British counterparts to do the shooting if gunfire was required, and the British agreed, according to a former senior administration official.)

One former senior official told Yahoo News that "It got to the point where every human being in a three-block radius was working for one of the intelligence services — whether they were street sweepers or police officers or security guards."
Power

After 47 Years, US Power Company Abandons Still-Unfinished $6 Billion Nuclear Power Plant (yahoo.com) 206

America's federally-owned electric utility, the Tennessee Valley Authority, has spent billions of dollars with nothing to show for it, reports the Chattanooga Times Free Press.

"Nearly 47 years after construction began on the Bellefonte Nuclear Power Plant in Northeast Alabama, the Tennessee Valley Authority is giving up its construction permit for America's biggest unfinished nuclear plant and abandoning any plans to complete the twin-reactor facility..." Giving up the construction permit at Bellefonte signals the end of any new nuclear plant construction at TVA with only seven of the 17 nuclear reactors the utility once planned to build ever completed.... Since the 1970s, a total of 95 nuclear reactors proposed to be built by U.S. utilities have been canceled due to rising construction costs, slowing power demand and cheapening power alternatives.

The NRC now regulates 93 remaining commercial nuclear reactors at 56 nuclear power plants, including TVA's Sequoyah and Watts Bar nuclear plants in East Tennessee and the Browns Ferry nuclear plant in Athens, Alabama. Collectively, those nuclear plants provide more than 40% of TVA's power and over 20% of the nation's electricity supply... TVA spokesman Jim Hopson said in the past two decades, the growth in power demand in the Tennessee Valley has continued to slow as more energy efficiency measures have been adopted and the price of natural gas, solar power and additional hydroelectric generation has declined in competition with nuclear.

Thanks to long-time Slashdot reader The Real Dr John for sharing the story. And today the Chattanooga Times Free Press opinions editor offered this suggestion: TVA still owns the 1,600-acre site, as well as the plant that has never — and likely now will never — generate the first spark of nuclear-produced electricity. But that doesn't mean it can't make power some other way. A gas plant? Uggh. A wind field? Seems unlikely given the stillness of North Alabama. A solar plant? That could be more of a possibility. All of the transmission equipment and the electrical grid is at the ready...

By now — after siting, building, scrapping, building again, abandoning, putting up for sale, agreeing to sell for pennies on the dollar and finally going to court to defend not selling the Bellefonte Nuclear Plant — TVA ratepayers and taxpayers have lost somewhere between $6 billion (according to TVA) and $9 billion (according to a 2018 letter from five congressmen)... TVA spokesman Jim Hopson said Wednesday that TVA is making no decisions immediately. "But we're not taking anything off the table," he added...

Hopson said TVA's May 2021 "strategic intent and guiding principles" notes the utility has solar commitments to date of more than 2,300 megawatts of solar capacity expected to come online by the end of 2023. Including those projects, TVA expects to add 10,000 megawatts of solar power by 2035 — a 24-fold increase from today.

That 10,000 megawatts of solar power would be equal to more than eight would-be Bellefonte reactors.

Privacy

110,000 Affected by Epik Breach - Including Those Who Trusted Epik to Hide Their Identity (washingtonpost.com) 112

Epik's massive data breach is already affecting lives. Today the Washington Post describes a real estate agent in Pompano Beach who urged buyers on Facebook to move to "the most beautiful State." His name and personal details "were found on invoices suggesting he had once paid for websites with names such as racisminc.com, whitesencyclopedia.com, christiansagainstisrael.com and theholocaustisfake.com". The real estate brokerage where he worked then dropped him as an agent. The brokerage's owner told the Post they didn't "want to be involved with anyone with thoughts or motives like that."

"Some users appear to have relied on Epik to lead a double life," the Post reports, "with several revelations so far involving people with innocuous day jobs who were purportedly purveyors of hate online." (Alternate URL here.) Epik, based outside Seattle, said in a data-breach notice filed with Maine's attorney general this week that 110,000 people had been affected nationwide by having their financial account and credit card numbers, passwords and security codes exposed.... Heidi Beirich, a veteran researcher of hate and extremism, said she is used to spending weeks or months doing "the detective work" trying to decipher who is behind a single extremist domain. The Epik data set, she said, "is like somebody has just handed you all the detective work — the names, the people behind the accounts..."

Many website owners who trusted Epik to keep their identities hidden were exposed, but some who took additional precautions, such as paying in bitcoin and using fake names, remain anonymous....

Aubrey "Kirtaner" Cottle, a security researcher and co-founder of Anonymous, declined to share information about the hack's origins but said it was fueled by hackers' frustrations over Epik serving as a refuge for far-right extremists. "Everyone is tired of hate," Cottle said. "There hasn't been enough pushback, and these far-right players, they play dirty. Nothing is out of bounds for them. And now ... the tide is turning, and there's a swell moving back in their direction."

Earlier in the week, the Post reported: Since the hack, Epik's security protocols have been the target of ridicule among researchers, who've marveled at the site's apparent failure to take basic security precautions, such as routine encryption that could have protected data about its customers from becoming public... The hack even exposed the personal records from Anonymize, a privacy service Epik offered to customers wanting to conceal their identity.
Google

Google Sues India's Competition Commission - For Sharing Its Findings About Google (msn.com) 18

Google used its "huge financial muscle" to illegally hurt competitors, the Competition Commission of India found after an antitrust investigation. But now Reuters says Google is suing the commission — for leaking the results of that investigation to the press: "We cooperated fully and maintained confidentiality throughout the investigative process, and we hope and expect the same level of confidentiality from the institutions we engage with," Google's statement added...

India's antitrust authority ordered a probe in 2019, saying Google appeared to have leveraged its dominance to reduce device makers' ability to opt for alternate versions of its mobile operating system and force them to pre-install Google apps. Its 750-page report subsequently found the mandatory pre-installation of apps "amounts to imposition of unfair condition on the device manufacturers" in violation of India's competition law. The report, which has been seen by Reuters but which is not public, also found the company leveraged the position of its Play Store app store to protect its dominance.

Electronic Frontier Foundation

Why EFF Flew a Plane Over Apple's Headquarters (eff.org) 29

EFF.org has the story: For the last month, civil liberties and human rights organizations, researchers, and customers have demanded that Apple cancel its plan to install photo-scanning software onto devices. This software poses an enormous danger to privacy and security. Apple has heard the message, and announced that it would delay the system while consulting with various groups about its impact. But in order to trust Apple again, we need the company to commit to canceling this mass surveillance system.

The delay may well be a diversionary tactic. Every September, Apple holds one of its big product announcement events, where Apple executives detail the new devices and features coming out. Apple likely didn't want concerns about the phone-scanning features to steal the spotlight.

But we can't let Apple's disastrous phone-scanning idea fade into the background, only to be announced with minimal changes down the road. To make sure Apple is listening to our concerns, EFF turned to an old-school messaging system: aerial advertising.

During Apple's event, a plane circled the company's headquarters carrying an impossible-to-miss message: "Apple, don't scan our phones!" The evening before Apple's event, protestors also rallied nationwide in front of Apple stores. The company needs to hear us, and not just dismiss the serious problems with its scanning plan. A delay is not a cancellation, and the company has also been dismissive of some concerns, referring to them as "confusion" about the new features.

Apple's iMessage is one of the preeminent end-to-end encrypted chat clients. End-to-end encryption is what allows users to exchange messages without having them intercepted and read by repressive governments, corporations, and other bad actors. We don't support encryption for its own sake: we fight for it because encryption is one of the most powerful tools individuals have for maintaining their digital privacy and security in an increasingly insecure world.

Now that Apple's September event is over, Apple must reach out to groups that have criticized it and seek a wider range of suggestions on how to deal with difficult problems, like protecting children online...

The world, thankfully, has moved towards encrypted communications over the last two decades, not away from them, and that's a good thing. If Apple wants to maintain its reputation as a pro-privacy company, it must continue to choose real end-to-end encryption over government demands to read user's communication.

Privacy matters now more than ever. It will continue to be a selling point and a distinguishing feature of some products and companies. For now, it's an open question whether Apple will continue to be one of them.

Privacy

Google Photos' Nude-Friendly Folders Coming To All Android Phones Soon (theverge.com) 61

Google Photos' Locked Folder feature, which lets you hide sensitive photos and videos from your main library and secure them in a passcode- or biometric-protected folder, is coming to all devices running Android 6 and above. The Verge reports: The feature was released exclusively on newer Pixel phones in June. Google hasn't provided an exact date for when the feature is releasing more widely, noting only that it's "rolling out soon." When it announced the feature onstage at Google I/O in May, Google gave the wholesome example of the feature being used by parents hiding photos of a newly purchased puppy from their children. But I think it's fair to say that most people are going to have very different photos stored in their Locked Folder. I don't know about you, but in all the times I've had to wrench my phone out of someone's hand to stop them scrolling through my photos, it's never been because of a puppy picture.
Patents

Engineer Devises 'UFO Patents' For US Navy (interestingengineering.com) 78

Paul Ratner writes via Interesting Engineering: Theoretical inventions known as the "UFO patents" have been inflaming worldwide curiosity. A product of the American engineer Dr. Salvatore Cezar Pais, the patents were filed during his work for the U.S. Navy and are so ambitious in their scope and imagination that they continue to draw interest despite any clear evidence that they are feasible. The patents include designs for a futuristic hybrid vehicle with a radical propulsion system that would work equally well in the air, underwater, and in space, as well as a compact fusion reactor, a gravitational wave generator, and even a "spacetime modification weapon." The technology involved could impact reality itself, claims its inventor, whose maverick audacity rivals that of Nikola Tesla.

How real are these ideas? While you can read the patents for yourself, it's evident that the tech necessary to actually create the devices described is beyond our current capabilities. Yet research into many of these fields has gone on for years, which may explain why the Navy expressed an interest. Another likely influence is the fact that the Chinese government seems to be working to develop similar technology. The fantastical inventions devised by Dr. Pais largely build upon an idea that he calls "The Pais Effect." In his patent write-ups and in an interview with The Drive, he described it as "the generation of extremely high electromagnetic energy fluxes (and hence high local energy densities) generated by controlled motion of electrically charged matter (from solid to plasma states) subjected to accelerated vibration and/or accelerated spin, via rapid acceleration transients." This effect amounts to the ability to spin electromagnetic fields to contain a fusion reaction. The electromagnetic energy fields would be so powerful that they could "engineer the fabric of our reality at the most fundamental level," writes Pais. In practical terms, this invention could lead to a veritable revolution in propulsion, quantum communications, and create an abundance of cheaply-produced energy. Certainly, an extraordinary claim that requires extraordinary evidence, as posits the Sagan standard.

Despite the well-founded unease at Dr. Pais's inventions, the Navy took them seriously enough to run experiments for three years and even found some of them "operable," although the extent of that alleged operability is under debate. In the patent documents, two Navy officials seemed to assert the operability of the inventions. Furthermore, in correspondence with The Drive's "War Zone," Timothy Boulay of NAWCAD, stated that Pais's High Energy Electromagnetic Field Generator was, in fact, tested from 2016 until 2019, at a cost of $508,000. The team working on the project consisted of at least 10 technicians and engineers and put in some 1,600 hours of work. But upon the conclusion of the testing, the Pais Effect "could not be proven," shared Boulay. What happened subsequently with the tested device and further investigations is not known at this point. There are indications in documents obtained by The Drive's WarZone through the Freedom of Information Act that the inventions could be moved to another research department in the Navy or the Air Force, or possibly even to NASA or DARPA, but whether that really happened is not clear.
"One of the most attention-grabbing designs by Dr. Pais is the 2018 patent for a cone-shaped craft of unprecedented range and speed," writes Ratner. "Another futuristic patent with far-reaching ramifications is Pais' Plasma Compression Fusion Device. [...] Notes from researchers who worked on vetting Pais' ideas indicate that a possible outcome of the plasma fusion device and the high energy levels it may generate is the 'Spacetime Modification Weapon' (SMW). Research documents refer to it as 'a weapon that can make the Hydrogen bomb seem more like a firecracker, in comparison.'"

Pais also has a patent for an electromagnetic field generator, which could create "an impenetrable defensive shield to sea and land as well as space-based military and civilian assets." Another device conceived by Pais that could deflect asteroids is the high-frequency gravitational wave generator.
Privacy

Are You Ready To Share Your Analprint With Big Tech? (theguardian.com) 81

An anonymous reader quotes a report from The Guardian: For the past 10 years, Sonia Grego has been thinking about toilets -- and more specifically what we deposit into them. "We are laser-focused on the analysis of stool," says the Duke University research professor, with all the unselfconsciousness of someone used to talking about bodily functions. "We think there is an incredible untapped opportunity for health data. And this information is not tapped because of the universal aversion to having anything to do with your stool." As the co-founder of Coprata, Grego is working on a toilet that uses sensors and artificial intelligence to analyze waste; she hopes to have an early model for a pilot study ready within nine months. "The toilet that you have in your home has not functionally changed in its design since it was first introduced," she says, in the second half of the 19th century. There are, of course, now loos with genital-washing capabilities, or heated seats, but this is basic compared with what Grego is envisaging. "All other aspects of your life -- your electricity, your communication, even your doorbell -- have enhanced capabilities."

Smart toilet innovators believe the loo could become the ultimate health monitoring tool. Grego believes her product -- which analyses and tracks stool samples and sends the data to an app -- will provide "information related to cancer and many chronic diseases." For general consumers, it will provide peace of mind, she says, by establishing "a healthy baseline": "Having technology that tracks what is normal for an individual could provide an early warning that a checkup is needed." For people with specific conditions, such as inflammatory bowel disease, the device could provide helpful monitoring for doctors. "It's very difficult to know when to escalate or de-escalate treatment," she says. "Stool-based biomarkers can provide that information." At some point, she thinks, a smart toilet could make lifestyle suggestions -- it could tell you to eat more fibre or certain nutrients, for instance, or work out what kind of food triggered an uncomfortable gastric episode. "The science of nutrition is really moving in the direction of personalized nutrition," says Grego. "Our technology will be an enabler of this, because you have information of what you eat, but we can make seamless the obtaining of information of what comes out."
Researchers at the Stanford School of Medicine have been working on technology that can analyze feces (including "stool dropping time") and track the velocity and color of urine, as well as test it. According to the Wall Street Journal, the researchers have partnered with Izen, a Korean toilet manufacturer that's developed a scanner that can recognize the physical characteristics of whoever is sitting on the toilet -- or, in the words of the researchers, "the distinctive features of their anoderm" (the skin of the anal canal). While many people are ready for the smart toilet era, Stanford's study of user acceptance found that the "least favored module is analprint."

The Guardian article continues: Is all this -- your analprint out in the world, the makeup of your bowel movements analyzed -- a privacy breach too far? "Can it be kept secure?" asks Eerke Boiten, a professor of cybersecurity at De Montfort University in Leicester. [...] Many people "wouldn't, for very good reasons, like cameras pointing up their bottoms," says Phil Booth, the coordinator of MedConfidential, which campaigns for the confidentiality of medical records. That said, under the guidance of a medical professional, "there are not necessarily inherent privacy risks" in using a smart toilet as a medical device, he says. However, it might get interesting if the data created by general consumer use was owned by a company: "You may trust that particular company, but every company is pretty much buyable by Google or Facebook or Amazon. Then, what I thought was something for my own health monitoring has become fodder to business models I really know nothing about."

Where does it end? Could the police or others involved in surveillance track you by analprint, via the public and home smart lavatories you visit? Might you be asked to provide a print at a police station? [...] "Once you start to measure something that is of the body, the privacy line is stepped over," says Booth. "If you don't measure what's going on with someone's bowel movements, the bowel movement is private." This is an alarming thought -- but, says Booth with a laugh, it is not as though governments will mandate smart toilets. He says there will always be people -- those into the "quantified self" movement -- who are happy to measure and track themselves. If smart loos are considered clinical devices collecting medical data, "then it's a straight medical breach risk -- not special to toilets, but because you've turned the toilet into a medical data-generating experience. Are they managing those risks correctly?"

The Courts

Huawei CFO Meng Wanzhou To Be Released After Agreement With US In Wire Fraud Case (cnbc.com) 109

The chief financial officer of Chinese tech firm Huawei will be released and allowed to return to China after reaching an agreement with the U.S. government on fraud charges, prosecutors said Friday in a Brooklyn federal court. CNBC reports: A U.S. district judge accepted the deferred prosecution agreement, which will last until Dec. 1, 2022. Under the deal, the executive, Meng Wanzhou, affirmed the accuracy of a statement of facts and agreed not to commit other crimes, or risk prosecution. Meng, the daughter of Huawei's founder, was arrested in Canada in December 2018. The U.S. sought to extradite her on bank and wire fraud charges, claiming she was misled a financial institution to violate American sanctions on Iran. The U.S. said Friday it plans to withdraw its extradition request.

Meng pleaded not guilty to the charges on Friday. As part of the agreement, however, she took "responsibility for her principal role in perpetrating a scheme to defraud a global financial institution," acting U.S. Attorney for the Eastern District of New York Nicole Boeckmann said in a statement. According to Boeckmann, Meng admitted to making "multiple material misrepresentations" while CFO of Huawei about the company's business in Iran, in conversations with the senior executive of a financial institution. The government claimed she did this to continue Huawei's business relationship with the firm. Boeckmann said the admission confirms the core allegations against Meng.

Privacy

Other than Prison, Electronic Monitoring is 'the Most Restrictive Form' of Control, Research Finds (nbcnews.com) 50

An anonymous reader shares a report: In the past 18 months, as the judicial system has increasingly used electronic monitoring instead of prisons to monitor inmates through the coronavirus pandemic, newly released data confirm what activists and advocates have long argued: Ankle monitors are onerous, and they often subject wearers to vague rules, like avoiding people of "disreputable character." The ankle monitoring business, the research found, is also dominated by four profit-seeking companies, and it ultimately could drive more people back to prison.

The new, comprehensive collection of hundreds of electronic monitoring-related rules, policies and contracts, obtained through public records requests across 44 states, demonstrates that four companies that make millions of dollars a year account for 64 percent of the contracts examined in the study. The companies -- Attenti, BI Inc., Satellite Tracking of People and Sentinel Offender Services LLC, according to the report -- also keep location data indefinitely, even after monitoring is completed, which is within the law. Governments also often require family members or employers to act as agents of the government and report potential violations, putting them in an awkward position in which they must be both supportive and supervisory.

Crucially, wearers must pay both one-time and ongoing fees for the monitors, which can be $25 to over $8,000 a year. The report argues that such costs "undermine financial security when it is needed most." By comparison, the Justice Department's Bureau of Prisons said in 2018 that it costs just under $100 per day to incarcerate a federal inmate, or over $36,000 a year. Put another way, wearers in Los Angeles and Sacramento counties in California, which impose the highest annual costs, according to the new findings, pay $22 a day -- still considerably less than what taxpayers would otherwise pay.

AI

UK Appeals Court Rules AI Cannot Be Listed As a Patent Inventor (engadget.com) 54

The United Kingdom is the latest country to rule that an artificial intelligence can't be legally credited as an inventor. Engadget reports: Per the BBC, the UK Court of Appeal recently ruled against Dr. Stephen Thaler in a case involving the country's Intellectual Property Office. In 2018, Thaler filed two patent applications in which he didn't list himself as the creator of the inventions mentioned in the documents. Instead, he put down his AI DABUS and said the patent should go to him "by ownership of the creativity machine."

The Intellectual Property Office told Thaler he had to list a real person on the application. When he didn't do that, the agency decided he had withdrawn from the process. Thaler took the case to the UK's High Court. The body ruled against him, leading to the eventual appeal. "Only a person can have rights. A machine cannot," Lady Justice Elisabeth Laing of the Appeal Court wrote in her judgment. "A patent is a statutory right and it can only be granted to a person."
In August, an Australian Court ruled that an AI can be recognized as an inventor in a patent submission. However, a U.S. District Judge ruled earlier this month that a computer using AI can't be listed as an inventor on patents because only a human can be an inventor under U.S. law.
Government

California Passes Law Targeting Amazon Labor Algorithms (theverge.com) 40

An anonymous reader quotes a report from The Verge: California Gov. Gavin Newsom (D) signed a bill Wednesday that would block Amazon and other companies from punishing warehouse workers who fail to meet certain performance metrics for taking rest or meal breaks. The California Senate approved the measure earlier this month. The law allows warehouse workers to challenge performance goals that many say discourage them from taking bathroom breaks or other rest breaks throughout the work day. The bill was written in response to high rates of reported injuries at Amazon warehouses where performance quotas are algorithmically enforced.

The law does not explicitly name Amazon in its text, but both Republican and Democratic lawmakers recognize that the e-commerce giant would be greatly affected by the enactment of the legislation. Over the last few years, Amazon has come under intense criticism for its performance quotas with several outlets reporting that workers have peed in bottles as a means of meeting their warehouse fulfillment goals and maintaining their jobs. The law will also force companies like Amazon to make these performance algorithms more transparent, disclosing quotas to both workers and regulators.

Privacy

Hackers Leak LinkedIn 700 Million Data Scrape (therecord.media) 28

A collection containing data about more than 700 million users, believed to have been scraped from LinkedIn, was leaked online this week after hackers previously tried to sell it earlier this year in June. From a report: The collection, obtained by The Record from a source, is currently being shared in private Telegram channels in the form of a torrent file containing approximately 187 GB of archived data. The Record analyzed files from this collection and found the data to be authentic, with data points such as: LinkedIn profile names, LinkedIn ID, LinkedIn profile URL, location information (town, city, country), and email addresses. While the vast majority of the data points contained in the leak are already public information and pose no threat to LinkedIn users, the leak also contains email addresses that are not normally viewable to the public on the official LinkedIn site.
Medicine

CDC Panel Endorses Pfizer COVID-19 Booster Shots For People 65 and Older (cnbc.com) 84

A key Centers for Disease Control and Prevention advisory group unanimously voted Thursday to recommend distributing Pfizer and BioNTech's Covid-19 booster shots to older Americans and nursing home residents, clearing the way for the agency to give the final OK as early as this evening. CNBC reports: The agency's Advisory Committee on Immunization Practices specifically endorsed giving third Pfizer shots to people 65 and older in the first of four votes. The panel will also vote on whether to recommend the shots for adults with medical conditions that put them at risk of severe disease and those who are more frequently exposed to the virus -- possibly including people in nursing homes and prisons, teachers, front-line health employees and other essential workers. The elderly were among the first groups to get the initial shots in December and January.

The vote is seen as mostly a win for President Joe Biden, whose administration has said it wants to give booster shots to all eligible Americans 16 and older as early as this week. While the CDC panel's recommendation doesn't give the Biden administration everything it wanted, boosters will still be on the way for millions of Americans. The endorsement comes a day after the Food and Drug Administration granted emergency use authorization to administer third Pfizer shots to many Americans six months after they complete their first two doses. While the CDC's panel's recommendation isn't binding, Director Dr. Rochelle Walensky is expected to accept the panel's endorsement shortly.

Privacy

A Stalkerware Firm Is Leaking Real-Time Screenshots of People's Phones Online (vice.com) 11

A stalkerware company that's designed to let customers spy on their spouses's, children's, or employees' devices is exposing victims' data, allowing anyone on the internet to see screenshots of phones simply by visiting a specific URL. From a report: The news highlights the continuing lax security practices that many stalkerware companies use; not only do these companies sometimes market their tools specifically for illegal surveillance, but the targets are re-victimized by these breaches. In recent years the Federal Trade Commission (FTC) has acted against stalkerware companies for exposing victim data. The stalkerware company, called pcTattleTale, offers the malware for Windows computers and Android phones. "Discover their secret online lives right from your phone or computer," a Facebook post from pcTattleTale reads. "pcTattletale is a popular keylogger and montoring [sic] app that you can use to see what you [sic] kids, spouse, or employees are doing online." Security researcher Jo Coscia showed Motherboard that pcTattleTale uploads victim data to an AWS server that requires no authentication to view specific images.
The Courts

Judge Releases Redacted Lunar Lander Lawsuit From Bezos' Blue Origin Against NASA-SpaceX Contract (cnbc.com) 36

ytene writes: As reported by CNBC, the US Court of Federal Claims has released a redacted version of the lawsuit, filed by Jeff Bezos' Blue Origin, in a complaint against NASA. Earlier this year, the agency had awarded a $2.9 billion contract to SpaceX for the design and development of a lunar lander.

Although NASA has a long history of awarding contracts to promote innovation and competition, the Blue Origin suit seemed a little unusual given the company's current lack of launch experience (they have completed numerous successful tests, including a high-altitude "edge of space" flight for Bezos, his brother and guests, but have yet to place any vehicle in orbit, let alone establish a credible, commercial space flight presence).

As was also reported by CNBC, the Government Accountability Office conducted an investigation in to the initial Blue Origin complaint, after NASA suspended the process, but found no evidence that NASA awarded the contract incorrectly and denied the initial Blue Origin complaint.

Slashdot Top Deals