news aggregator

It pays not to be Huawei, and the US military can be lucrative, too

Comment A vendor establishing a business unit dedicated to government sales is not new or unusual. But Finnish telecommunications giant Nokia’s decision to do so in the USA this week tells a bigger story about Washington’s paranoia regarding the security of critical communications infrastructure security.…

Apple has announced several new experiences launching with their upcoming Vision Pro spatial computing headset, including 3D content from Disney Plus. "Other apps announced with Vision Pro support include ESPN, MLB, PGA Tour, Max, Discovery Plus, Amazon Prime Video, Paramount Plus, Peacock, Pluto TV, Tubi, Fubo, Crunchyroll, Red Bull TV, IMAX, TikTok, and MUBI," reports The Verge, noting that Netflix's existing app "will work unmodified on Apple's new headset." From the report: The announcement lists some of the movies that will be in 3D, and naturally, Avatar: The Way of Water is among them. But Vision Pro owners will also get 3D versions of movies like Avengers: Endgame, Star Wars: The Force Awakens, and Encanto. The movies will be available to rent through the Apple TV app, and the company says that anyone who has already bought the movies will now get 3D versions without paying extra. Otherwise, "more titles, including those available exclusively to Disney Plus subscribers, will be announced at a later date." Among the four screening environments for Disney Plus subscribers, one is called the Disney Plus Theater, which the company says takes inspiration from Hollywood's El Capitan Theatre, as well as others based on Pixar's Monsters, Inc., the fictional Avengers Tower from Marvel Avengers films, and one set in the cockpit of a landspeeder sitting in Star Wars' Tatooine desert. Besides Disney content, Apple mentioned the Apple TV app will have some free "immersive entertainment" that includes Alicia Keys: Rehearsal Room and a film from Planet Earth producers called Prehistoric Planet Immersive. The $3,499 Vision Pro headset will start shipping on February 2nd. Pre-orders begin January 19th at 8AM ET.

Read more of this story at Slashdot.

Infecting networks via years-old CVEs that should have been patched by now

Crooks are exploiting years-old vulnerabilities to deploy Androxgh0st malware and build a cloud-credential stealing botnet, according to the FBI and the Cybersecurity and Infrastructure Security Agency (CISA).…

Uber is shutting down alcohol delivery service Drizly three years after the company acquired it for $1.1 billion. Axios reports: Drizly was always a bit of an odd match for Uber, in that it didn't hire or contract its own delivery workers. Instead, Drizly provided backend tech that let local liquor stores provide their own deliveries. The bigger issue, however, might have been cybersecurity. Drizly in 2020 confirmed a hack that exposed information on around 2.5 million customers. What it didn't say, however, was that the company had been aware of the security flaw for two years without fixing it. That information was discovered by the Federal Trade Commission, after Uber's acquisition of Drizly, and led to an FTC order that restricted the types of customer information that Drizly could collect and retain. "After three years of Drizly operating independently within the Uber family, we've decided to close the business and focus on our core Uber Eats strategy of helping consumers get almost anything -- from food to groceries to alcohol -- all on a single app," said Pierre-Dimitri Gore-Coty, Uber's SVP of delivery. "We're grateful to the Drizly team for their many contributions to the growth of the BevAlc delivery category as the original industry pioneer."

Read more of this story at Slashdot.

Video game record keepers Twin Galaxies finish messy four-year fight with Billy Mitchell

Retro Tech Week The world-beating video game scores of self-styled arcade legend Billy Mitchell have been reinstated following a settlement with record-keeping org Twin Galaxies, which had wiped his achievements in 2018 following allegations of cheating.…

An LG washing machine owner discovered that his smart home appliance was uploading an average of 3.66GB of data daily. "Concerned about the washer's internet addiction, Johnie forced the device to go cold turkey and blocked it using his router UI," reports Tom's Hardware. From the report: Johnie's initial screenshot showed that on a chosen day, the device uploaded 3.57GB and downloaded about 100MB, and the data traffic was almost constant. Meanwhile, according to the Asus router interface screenshot, the washing machine accounted for just shy of 5% of Johnie's internet traffic daily. The LG washing machine owner saw the fun in his predicament and joked that the device might use Wi-Fi for "DLCs (Downloadable Laundry Cycles)." He wasn't entirely kidding: The machine does download presets for various types of apparel. However, the lion's share of the data transferred was uploaded. Working through the thread, we note that Johnie also pondered the possibility of someone using his washing machine for crypto mining. "I'd gladly rent our LPU (Laundry Processing Unit) by the hour," he quipped. Again, there was the glimmer of a possibility that there could be truth behind this joke. Another social media user highlighted a history of hackers taking over LG smart-connected appliances. The SmartThinQ home appliances HomeHack vulnerability was patched several weeks after being made public. A similar modern hack might use the washing machine's computer resources as part of a botnet. Taking control of an LG washing machine as part of a large botnet for cryptocurrency mining or nefarious networking purposes wouldn't be as far-fetched as it sounds. Large numbers of relatively low-power devices can be formidable together. One of the more innocent theories regarding the significant data uploads suggested laundry data was being uploaded to LG so it could improve its LLM (Large Laundry Model). It sought to do this to prepare for the launch of its latest "AI washer-dryer combo" at CES, joked Johnie. For now, it looks like the favored answer to the data mystery is to blame Asus for misreporting it. We may never know what happened with Johnie, who is now running his LG washing machine offline. Another relatively innocent reason for the supposed high volume of uploads could be an error in the Asus router firmware. In a follow-up post a day after his initial Tweet, Johnie noted "inaccuracy in the ASUS router tool," with regard to Apple iMessage data use. Other LG smart washing machine users showed device data use from their router UIs. It turns out that these appliances more typically use less than 1MB per day.

Read more of this story at Slashdot.

Apple has announced changes to its U.S. App Store, allowing developers to link to alternative payment methods, "provided that the app also offer purchases through Apple's own In-App Purchase system," reports 9to5Mac. The change comes in light of the Supreme Court declining to hear Apple's appeal in its legal battle with Epic Games. From the report: The guideline says that developers can apply for an entitlement that allows them to include buttons or links directing users to out-of-app purchasing mechanisms: "Developers may apply for an entitlement to provide a link in their app to a website the developer owns or maintains responsibility for in order to purchase such items. Learn more about the entitlement. In accordance with the entitlement agreement, the link may inform users about where and how to purchase those in-app purchase items, and the fact that such items may be available for a comparatively lower price. The entitlement is limited to use only in the iOS or iPadOS App Store on the United States storefront. In all other storefronts, apps and their metadata may not include buttons, external links, or other calls to action that direct customers to purchasing mechanisms other than in-app purchase." According to Apple, the link to an alternative payment platform can only be displayed on "one app page the end user navigates to (not an interstitial, modal, or pop-up), in a single, dedicated location on such page, and may not persist beyond that page." Apple has provided templates that developers can use for communicating with customers about alternative in-app payment systems [...]. Apple has also confirmed that it will charge a commission on purchases made through alternative payment platforms. This commission will be 12% for developers who are a member of the App Store Small Business Program and 27% for other apps. The commission will apply to "purchases made within seven days after a user taps on an External Purchase Link and continues from the system disclosure sheet to an external website." Apple says developers will be required to provide accounting of qualifying out-of-app purchases and remit the appropriate commissions. [...] However, Apple also says that collecting this commission will be "exceedingly difficult and, in many cases, impossible." [...] The other anti-steering change that Apple is required to make is to allow developers to communicate with customers outside of their apps about alternative purchasing options, such as via email. Apple made this change in 2021 as part of its settlement of a class-action lawsuit brought on by small developers.

Read more of this story at Slashdot.

An anonymous reader quotes a report from 404 Media: Google search really has been taken over by low-quality SEO spam, according to a new, year-long study by German researchers (PDF). The researchers, from Leipzig University, Bauhaus-University Weimar, and the Center for Scalable Data Analytics and Artificial Intelligence, set out to answer the question "Is Google Getting Worse?" by studying search results for 7,392 product-review terms across Google, Bing, and DuckDuckGo over the course of a year. They found that, overall, "higher-ranked pages are on average more optimized, more monetized with affiliate marketing, and they show signs of lower text quality ... we find that only a small portion of product reviews on the web uses affiliate marketing, but the majority of all search results do." They also found that spam sites are in a constant war with Google over the rankings, and that spam sites will regularly find ways to game the system, rise to the top of Google's rankings, and then will be knocked down. "SEO is a constant battle and we see repeated patterns of review spam entering and leaving the results as search engines and SEO engineers take turns adjusting their parameters," they wrote. They note that Google, Bing, and DuckDuckGo are regularly tweaking their algorithms and taking down content that is outright spam, but that, overall, this leads only to "a temporary positive effect." "Search engines seem to lose the cat-and-mouse game that is SEO spam," they write. Notably, Google, Bing, and DuckDuckGo all have the same problems, and in many cases, Google performed better than Bing and DuckDuckGo by the researchers' measures. The researchers warn that this rankings war is likely to get much worse with the advent of AI-generated spam, and that it genuinely threatens the future utility of search engines: "the line between benign content and spam in the form of content and link farms becomes increasingly blurry -- a situation that will surely worsen in the wake of generative AI. We conclude that dynamic adversarial spam in the form of low-quality, mass-produced commercial content deserves more attention."

Read more of this story at Slashdot.

Version 9.0 of Wine, the free and open-source compatibility layer that lets you run Windows apps on Unix-like operating systems, has been released. "Highlights of Wine 9.0 include an experimental Wayland graphics driver with features like basic window management, support for multiple monitors, high-DPI scaling, relative motion events, as well as Vulkan support," reports 9to5Linux. From the report: The Vulkan driver has been updated to support Vulkan 1.3.272 and later, the PostScript driver has been reimplemented to work from Windows-format spool files and avoid any direct calls from the Unix side, and there's now a dark theme option on WinRT theming that can be enabled in WineCfg. Wine 9.0 also adds support for many more instructions to Direct3D 10 effects, implements the Windows Media Video (WMV) decoder DirectX Media Object (DMO), implements the DirectShow Audio Capture and DirectShow MPEG-1 Video Decoder filters, and adds support for video and system streams, as well as audio streams to the DirectShow MPEG-1 Stream Splitter filter. Desktop integration has been improved in this release to allow users to close the desktop window in full-screen desktop mode by using the "Exit desktop" entry in the Start menu, as well as support for export URL/URI protocol associations as URL handlers to the Linux desktop. Audio support has been enhanced in Wine 9.0 with the implementation of several DirectMusic modules, DLS1 and DLS2 sound font loading, support for the SF2 format for compatibility with Linux standard MIDI sound fonts, Doppler shift support in DirectSound, Indeo IV50 Video for Windows decoder, and MIDI playback in dmsynth. Among other noteworthy changes, Wine 9.0 brings loader support for ARM64X and ARM64EC modules, along with the ability to run existing Windows binaries on ARM64 systems and initial support for building Wine for the ARM64EC architecture. There's also a new 32-bit x86 emulation interface, a new WoW64 mode that supports running of 32-bit apps on recent macOS versions that don't support 32-bit Unix processes, support for DirectInput action maps to improve compatibility with many old video games that map controller inputs to in-game actions, as well as Windows 10 as the default Windows version for new prefixes. Last but not least, the kernel has been updated to support address space layout randomization (ASLR) for modern PE binaries, better memory allocation performance through the Low Fragmentation Heap (LFH) implementation, and support memory placeholders in the virtual memory allocator to allow apps to reserve virtual space. Wine 9.0 also adds support for smart cards, adds support for Diffie-Hellman keys in BCrypt, implements the Negotiate security package, adds support for network interface change notifications, and fixes many bugs. For a full list of changes, check out the release notes. You can download Wine 9.0 from WineHQ.

Read more of this story at Slashdot.

According to Bloomberg, China's chip import value dropped significantly by 15.4% in 2023, from $413 billion to $349 billion. "Chip sales were down across the board in 2023 thanks to a weakening global economy, but China's chip imports indicate that its economy might be in trouble," reports Tom's Hardware. "The country's inability to import cutting-edge silicon is also certainly a factor in its decreasing chip imports." From the report: In 2022, the value of chip imports to China stood at $413 billion, and in 2023 the country only imported chips worth a total of $349 billion, a 15.4% decrease in value. That a drop happened at all isn't surprising; even TSMC, usually considered to be one of the most advanced fabbing corporation in the world, saw its sales decline by 4.5%. However, a 15.4% decrease in shipments is much more significant, and indicates China has particular issues other than weaker demand across the world. China's ongoing economic issues, such as its high deflation could play a part. Deflation is when currency increases in value, the polar opposite of inflation, when currency loses value. As inflation has been a significant problem for countries such as the U.S. and UK, deflation might sound much more appealing, but economically it can be problematic. A deflationary economy encourages consumers not to spend, since money is increasing in value, meaning buyers can purchase more if they wait. In other words, deflation decreases demand for products like semiconductors. However, shipment volume only decreased by 10.8% compared to the 15.4% decline in value, meaning the chips that China didn't buy in 2023 were particularly valuable. This likely reflects U.S. sanctions on China, which prevents it from buying top-end graphics cards, especially from Nvidia. The H100, H200, GH200, and the RTX 4090 are illegal to ship to China, and they're some of Nvidia's best GPUs. The moving target for U.S. sanctions could also make exporters and importers more tepid, as it's hard to tell if more sanctions could suddenly upend plans and business deals.

Read more of this story at Slashdot.

Just days after ban on 'military and warfare' applications goes away, Davos hears the details

OpenAI is developing AI-powered cybersecurity capabilities for the US military, and shifting its election security work into high gear, the lab's execs told the World Economic Forum (WEF) in Davos this week.…

An anonymous reader quotes a report from Ars Technica: Google is updating the warning on Chrome's Incognito mode to make it clear that Google and websites run by other companies can still collect your data in the web browser's semi-private mode. The change is being made as Google prepares to settle a class-action lawsuit that accuses the firm of privacy violations related to Chrome's Incognito mode. The expanded warning was recently added to Chrome Canary, a nightly build for developers. The warning appears to directly address one of the lawsuit's complaints, that the Incognito mode's warning doesn't make it clear that Google collects data from users of the private mode. Many tech-savvy people already know that while private modes in web browsers prevent some data from being stored on your device, they don't prevent tracking by websites or Internet service providers. But many other people may not understand exactly what Incognito mode does, so the more specific warning could help educate users. The new warning seen in Chrome Canary when you open an incognito window says: "You've gone Incognito. Others who use this device won't see your activity, so you can browse more privately. This won't change how data is collected by websites you visit and the services they use, including Google." The wording could be interpreted to refer to Google websites and third-party websites, including third-party websites that rely on Google ad services. The new warning was not yet in the developer, beta, and stable branches of Chrome as of today. It also wasn't in Chromium. The change to Canary was previously reported by MSPowerUser. Incognito mode in the stable version of Chrome still says: "You've gone Incognito. Now you can browse privately, and other people who use this device won't see your activity." Among other changes, the Canary warning replaces "browse privately" with "browse more privately." The stable and Canary warnings both say that your browsing activity might still be visible to "websites you visit," "your employer or school," or "your Internet service provider." But only the Canary warning currently includes the caveat that Incognito mode "won't change how data is collected by websites you visit and the services they use, including Google." The old and new warnings both say that Incognito mode prevents Chrome from saving your browsing history, cookies and site data, and information entered in forms, but that "downloads, bookmarks and reading list items will be saved." Both warnings link to this page, which provides more detail on Incognito mode.

Read more of this story at Slashdot.

Today's safety guardrails won't catch these backdoors, study warns

Analysis AI biz Anthropic has published research showing that large language models (LLMs) can be subverted in a way that safety training doesn't currently address.…

Google Maps is about to get better at showing directions inside tunnels. A new feature spotted by SmartDroid allows the Android version of the app to use Bluetooth beacons to track your location in areas where GPS signals typically can't reach. The Verge: These beacons transmit Bluetooth signals that give location data to your phone, according to the Google-owned Waze, which already supports the feature. The app then uses this information along with the device's mobile connectivity to "provide real-time traffic data as it would with a typical GPS connection."

Read more of this story at Slashdot.

Remedy Entertainment, the developer that created the Max Payne and Alan Wake video game franchises, is embroiled in a trademark dispute with Take-Two Interactive over claims that Remedy's new "R" logo too closely resembles that of its subsidiary Rockstar Games. From a report: As first reported by RespawnFirst, the Rockstar parent company has objected to trademark filings Remedy submitted to the Intellectual Property Offices in the UK and EU last year, over grounds that the logo is likely to cause "confusion on the part of the public." Remedy publicly unveiled its updated "R" logo in a blog post on April 14th, 2023 -- one day after the company filed its trademark application with the EU -- saying that the "bullet in the letter R in the old logo represented the era of Max Payne," and that it no longer reflected its wider game portfolio.

Read more of this story at Slashdot.

No, that does not mean machines can replace primary care physicians

An AI chatbot was better at diagnosing medical ailments and communicating results than human physicians in text-based conversations, a research paper from Google claims. …

Banking giant believes Quantinuum key to optimizing investment portfolios

The wave of generative AI may have captured the world's attention, but that hasn't stopped the flow of capital into quantum computing as JPMorgan Chase and others plow more cash into the emerging tech.…

AI tools already allow people to generate eerily convincing voice clones and deepfake videos. Soon, AI could also be used to mimic a person's handwriting style. Bloomberg: Researchers at Abu Dhabi's Mohamed bin Zayed University of Artificial Intelligence (MBZUAI) say they have developed technology that can imitate someone's handwriting based on just a few paragraphs of written material. To accomplish that, the researchers used a transformer model, a type of neural network designed to learn context and meaning in sequential data. The team at MBZUAI, which calls itself the world's first AI university, has been granted a patent by the US Patent and Trademark Office for the artificial intelligence system. The researchers have not yet released the feature, but it represents a step forward in an area that has drawn interest from academics for years. There have been apps and even robots that can generate handwriting, but recent advances in AI have accelerated character recognition techniques dramatically. As with other AI tools, however, it's unclear if the benefits will outweigh the harms. The technology could help the injured to write without picking up a pen, but it also risks opening the door to mass forgeries and misuse. The tool will need to be deployed thoughtfully, two of the researchers said in an interview.

Read more of this story at Slashdot.

Google is laying off hundreds of employees in its advertising sales team, the Alphabet-owned company said on Tuesday, marking the latest cuts at the search giant. From a report: The move adds to signs that job cuts will continue this year, as companies look to adopt AI software and automation to lighten workloads. Last week, Google said it would lay off several employees in its Voice Assistant units, hardware teams responsible for Pixel, Nest and Fitbit, as well as in its augmented reality team. Google's customer solutions unit, which serves medium-level advertiser clients, will be the core team for growth moving forward, the company said.

Read more of this story at Slashdot.

Get ready for links to non-Cupertino payment systems, America, hopefully

Apple fans in the US may soon see links appearing in some of their iOS apps to non-Apple payment systems through which they can purchase stuff. That's because the nation's Supreme Court has decided not to hear appeals from the iGiant and Epic Games in the pair's long-standing spat over this processing of in-app payments.…