Government

Six Countries Named as 'Likely' Purchasers of Paragon's Cellphone Spyware (techcrunch.com) 15

The governments of Australia, Canada, Cyprus, Denmark, Israel, and Singapore "are likely customers of Israeli spyware maker Paragon Solutions," reports TechCrunch, "according to a new technical report by a renowned digital security lab." On Wednesday, The Citizen Lab, a group of academics and security researchers housed at the University of Toronto that has investigated the spyware industry for more than a decade, published a report about the Israeli-founded surveillance startup, identifying the six governments as "suspected Paragon deployments."

At the end of January, WhatsApp notified around 90 users that the company believed were targeted with Paragon spyware, prompting a scandal in Italy, where some of the targets live... Paragon's executive chairman John Fleming told TechCrunch that the company "licenses its technology to a select group of global democracies — principally, the United States and its allies." Israeli news outlets reported in late 2024 that U.S. venture capital AE Industrial Partners had acquired Paragon for at least $500 million upfront....

Among the suspected customer countries, Citizen Lab singled out Canada's Ontario Provincial Police (OPP), which specifically appears to be a Paragon customer given that one of the IP addresses for the suspected Canadian customer is linked directly to the OPP.

In a related development the Guardian reports that a prominent activist in Italy "has warned the international criminal court that his mobile phone was under surveillance" when he was providing them confidential information about torture victims in Libya.

Both articles submitted by long-time Slashdot reader ISayWeOnlyToBePolite.
Medicine

New Form of Parkinson's Treatment Uses Real-Time Deep-Brain Stimulation 8

A newly FDA-approved form of adaptive deep-brain stimulation (DBS) for Parkinson's disease adjusts electrical stimulation in real time based on an individual's brain signals, improving symptom control and reducing medication dependence. Scientific American: For decades, Keith Krehbiel took high doses of medications with a debilitating side effect -- severe nausea -- following his diagnosis with early-onset Parkinson's disease at age 42 in 1997. When each dose wore off, he experienced dyskinesia -- involuntary, repetitive muscle movements. In his case, this consisted of head bobbing and weaving. Krehbiel is among one million Americans who live with this progressive neurological disorder, which causes slowed movements, tremors and balance problems. But soon after surgery to implant electrodes into specific areas of his brain in 2020, his life dramatically improved. "My tremor went away almost entirely," says Krehbiel, now age 70 and a professor emeritus of political science at the Stanford Graduate School of Business, whose Parkinson's symptoms began at age 40 and were initially misdiagnosed as repetitive stress injury from computer use. "I reduced my Parkinson's meds by more than two thirds," he adds. "And I no longer have a sensation of a foggy brain, nor nausea or dyskinesia."

Krehbiel was the first participant to enroll in a clinical trial testing a new form of deep-brain stimulation (DBS), a technology that gained approval from the U.S. Food and Drug Administration for Parkinson's tremor and essential tremor in 1997 (it was later approved for other symptoms and conditions). The new adaptive system adjusts stimulation levels automatically based on the person's individual brain signals. In late February it received FDA approval for Parkinson's disease "based on results of the international multicenter trial, which involved participants at 10 sites across a total of four countries -- the U.S., the Netherlands, Canada and France. This technology is suitable for anyone with Parkinson's, not just individuals in clinical trials, says Helen Bronte-Stewart, the recent trial's global lead investigator and a neurologist specializing in movement disorders at Stanford Medicine. "Like a cardiac pacemaker that responds to the rhythms of the heart, adaptive deep-brain stimulation uses a person's individual brain signals to control the electric pulses it delivers," Bronte-Stewart says. "This makes it more personalized, precise and efficient than older DBS methods."

"Traditional DBS delivers constant stimulation, which doesn't always match the fluctuating symptoms of Parkinson's disease," adds neurologist Todd Herrington, another of the trial's investigators and director of the deep-brain stimulation program at Massachusetts General Hospital. With adaptive DBS, "the goal is to adjust stimulation in real time to provide more effective symptom control, fewer side effects and improved patient quality of life." Current FDA approval of this adaptive system is for the treatment of Parkinson's only, not essential tremor, dystonia (a neurological disorder that causes excessive, repetitive and involuntary muscle contractions) or epilepsy, which still rely on traditional, continuous DBS, Herrington says.
Space

Saturn Solidifies Its Title As Moon King With Discovery of 128 New Moons (www.cbc.ca) 54

Astronomers using the Canada-France-Hawaii Telescope have discovered 128 new moons around Saturn, bringing its total to 274 -- more than all the other planets combined. CBC News reports: Jupiter and Saturn have been locked in a battle for the most moons for years -- with Saturn stealing the crown from Jupiter only two years ago when the same group of researchers found 64 additional moons orbiting it. But scientists say this discovery likely settles the score once and for all. [...] He and the other scientists working on the project made the discovery using the Canada France Hawaii Telescope, a 3.6-meter optical telescope on the summit of the dormant volcano Mauna Kea on the Big Island of Hawaii.

Scientists have been capturing pictures of the moons using the telescope since 2019. The researchers aligned and layered 44 of those images on top of one another in order to enhance the appearance of the moons and determine what they were. These moons are nothing like Earth's very own, however. Sara Mazrouei, a planetary scientist and educational developer at Humber Polytechnic, says that while we tend to think of a spherical shape when we hear the word moon, anything that orbits a planet, or another body in space that is not a sun, is considered a moon. Mazrouei says many of the moons surrounding other planets in our solar system -- including the ones observed here -- are in fact only a few kilometers across in size and oddly shaped, like an asteroid.

Music

Team Behind Las Vegas Sphere Plans 5,000-Capacity 'Mini-Spheres' (avinteractive.com) 24

Sphere Entertainment Co, the company behind the Las Vegas Sphere, said they are considering opening scaled-down versions of the immersive venue in other cities. AV Magazine reports: While this has been been feasible for its high-profile residencies such as U2, the Eagles, Dead & Company and Anyma, smaller venues could attract a broader range of artists who might not have the budget or demand to fill the flagship Las Vegas location. By scaling down the size while retaining the signature technology, Sphere Entertainment Co can offer a similar spectacle at a more sustainable cost for artists and spectators.

The possibility of mini-Spheres follows news that a full-scale venue will open in the UAE as a result of a partnership between Sphere Entertainment Co and the Department of Culture and Tourism -- Abu Dhabi. Beyond concerts, the Las Vegas Sphere has proven successful with immersive films such as V-U2: An Immersive Concert Film and the Sphere Expeience featuring Darren Aronofsky's Postcard from Earth, which In January passed 1,000 screenings.
"As we enter a new fiscal year, we see significant opportunities to drive our Sphere business forward in Las Vegas and beyond," said Dolan. "We believe we are on a path toward realizing our vision for this next-generation medium and generating long-term shareholder value."
AI

Microsoft Unveils New Voice-Activated AI Assistant For Doctors 18

Microsoft has introduced Dragon Copilot, a voice-activated AI assistant for doctors that integrates dictation and ambient listening tools to automate clinical documentation, including notes, referrals, and post-visit summaries. The tool is set to launch in May in the U.S. and Canada. CNBC reports: Microsoft acquired Nuance Communications, the company behind Dragon Medical One and DAX Copilot, for about $16 billion in 2021. As a result, Microsoft has become a major player in the fiercely competitive AI scribing market, which has exploded in popularity as health systems have been looking for tools to help address burnout. AI scribes like DAX Copilot allow doctors to draft clinical notes in real time as they consensually record their visits with patients. DAX Copilot has been used in more than 3 million patient visits across 600 health-care organizations in the last month, Microsoft said.

Dragon Copilot is accessible through a mobile app, browser or desktop, and it integrates directly with several different electronic health records, the company said. Clinicians will still be able to draft clinical notes with the assistant like they could with DAX Copilot, but they'll be able to use natural language to edit their documentation and prompt it further, Kenn Harper, general manager of Dragon products at Microsoft, told reporters on the call. For instance, a doctor could ask questions like, "Was the patient experiencing ear pain?" or "Can you add the ICD-10 codes to the assessment and plan?" Physicians can also ask broader treatment-related queries such as, "Should this patient be screened for lung cancer?" and get an answer with links to resources like the Centers for Disease Control and Prevention. [...]
Desktops (Apple)

Microsoft Releases a Copilot App For Mac 14

Microsoft has released a native Copilot app for macOS, offering AI-powered text and image generation, dark mode, and a Command + Space shortcut. The Verge reports: Microsoft is launching this new Copilot Mac app in the US, UK, and Canada today, and the iPad version is also being updated with a split screen mode. You'll also now be able to log into Copilot on an iPhone or iPad with an Apple ID, and upload text or PDF files to ask questions about the documents or generate a summary about them. This document summarization feature is also coming to the macOS app soon. You can download the app here.
Businesses

Technicolor Begins To Shut Down Operations (variety.com) 22

Technicolor Group has filed for a court recovery procedure in France after failing to secure new investors, putting its VFX brands, including MPC, The Mill, Mikros Animation, and Technicolor Games, at risk of closure. Variety reports: A total shutdown of MPC and Technicolor's operations would affect thousands of visual effects workers in countries include the U.S., UK, Canada and India. The turn in business has raised the alarm and sparked sadness within the VFX community. Parot's memo explains, "In each country, the appropriate framework for orderly protection and way forward is currently being put in place to allow, when possible, to remain in business continuity."

Technicolor has already started to shut down U.S. operations. On Friday, it began alerting customers and employees, sending U.S. employees a WARN notice as required by law for large companies that anticipate closings and mass layoffs. At least one recovery effort already started for roughly 100 U.S. employees of The Mill. The creative leadership and most of the creative staff that was Technicolor's The Mill U.S. is joining forces with Dream Machine FX to launch a new venture, Arc Creative, Variety reported exclusively on Monday. A statement from the artists explains they they are working to launch the new entity amid "the complexities of Technicolor's Chapter 7 proceedings."

Questions remain about how studios will finish upcoming projects that are currently housed at MPC, which include Disney's live-action remake of "Lilo and Stitch" and Paramount's "Mission: Impossible -- The Final Reckoning," as well as Mikros' work, such as Paramount and Nickelodeon's upcoming "Teenage Mutant Ninja Turtles" sequel.

Software

Software Engineering Job Openings Hit Five-Year Low (pragmaticengineer.com) 61

Software engineering job listings have plummeted to a five-year low, with postings on Indeed dropping to 65% of January 2020 levels -- a steeper decline than any other tech-adjacent field. According to data from Indeed's job aggregator, software development positions are now at 3.5x fewer vacancies compared to their mid-2022 peak and 8% lower than a year ago.

The decline appears driven by multiple factors including widespread adoption of AI coding tools -- with 75% of engineers reporting use of AI assistance -- and a broader tech industry recalibration after aggressive pandemic-era hiring. Notable tech companies like Salesforce are maintaining flat engineering headcount while reporting 30% productivity gains from AI tools, according to an analysis by software engineer Gergely Orosz.

While the overall job market shows 10% growth since 2020, software development joins other tech-focused sectors in decline: marketing (-19%), hospitality (-18%), and banking/finance (-7%). Traditional sectors like construction (+25%), accounting (+24%), and electrical engineering (+20%) have grown significantly in the same period, he wrote. The trend extends beyond U.S. borders, with Canada showing nearly identical patterns. European markets and Australia demonstrate more resilience, though still below peak levels.
Transportation

Canada Announces First High-Speed Rail Between Toronto and Quebec City (www.cbc.ca) 222

The Canadian government has launched a six-year, $3.9 billion design phase for a high-speed rail project connecting Toronto and Quebec City, with electric trains reaching up to 300 km/h. Construction is expected to begin after the design phase, potentially in four to five years, but future governments could modify or cancel the project. CBC News reports: "Today I'm announcing the launch of Alto, the largest infrastructure project in Canadian history," Trudeau said from Montreal. "A reliable, efficient, high-speed rail network will be a game-changer for Canadians." Trudeau said the new rail network will run all-electric trains along 1,000 kilometers of track, reaching speeds of up to 300 km/hour, with stops in Toronto, Peterborough, Ottawa, Montreal, Laval, Trois-Rivieres and Quebec City. A government statement said the project will stimulate the economy, "boosting GDP by up to $35 billion annually, creating over 51,000 good-paying jobs during construction."

Trudeau said that once built, the new high-speed rail network will take passengers from Montreal to Toronto in three hours -- about half the time it takes to drive and at double the speed of Via Rail's current trains. [...] Trudeau said the consortium Cadence -- made up of CDPQ Infra, Atkins Realis, Keolis, SYSTRA, SNCF Voyageurs and Air Canada -- was selected to build the line. The group was only informed in the last 24 hours that their bid was the best of the three submitted, according to sources that spoke to Radio-Canada. Transport Minister Anita Anand said that Alto, the Crown corporation created to oversee the project, and Cadence will be signing a contract "in the coming weeks" that will outline the first-phase design work, such as where track will be laid and where stations will be built.

AI

Trust in AI is Much Higher in China Than in the US (axios.com) 67

Trust in AI is significantly higher in China than in the United States, according to new data from the Edelman Trust Barometer. Axios: Edelman's latest research found that 72% of people in China trust AI, compared with just 32% in the United States. Not only is trust higher in China, it's higher in much of the developing world than it is in the United States, according to Edelman's research.

Trust in AI was highest in India, at 77%, followed by Nigeria at 76%, Thailand at 73% and then China. Only six of the surveyed countries ranked lower than the U.S. in their trust in the new technology: Canada (30%), Germany (29%), the Netherlands (29%), United Kingdom (28%), Australia (25%) and Ireland (24%). Globally, 52% of men said they trusted AI vs. 46% of women, with younger people significantly more trusting of the technology than older folks. In the U.S., AI was trusted more by Democrats (38%) than Republicans (34%) or independents (23%). Higher-income respondents were also more trusting (51%) than those with middle (45%) or low (36%) incomes.

Earth

World's Largely Unprotected Peatlands Are Ticking 'Carbon Bomb,' Warns Study (theguardian.com) 30

The world's peatlands are "dangerously underprotected" despite the colossal amount of climate-heating carbon dioxide already being emitted due to their destruction, a study has warned. From a report: Peatlands occupy just 3% of all land, but contain more carbon than all of the world's forests. However, farmers and miners are draining the peatlands, releasing so much CO2 that if they were a country, they would be the fourth biggest polluter in the world after China, the US and India.

The first global assessment found that only 17% of the peatlands were within protected areas. This contrasted starkly with other valuable ecosystems such as tropical forests, where 38% were protected, and mangroves (42%). Protection was even lower than the 17% average in the three nations with the most peatlands: Canada, Russia and Indonesia. The US and Brazil completed the top five nations, which contained almost three-quarters of all peatlands, and had higher proportions in protected areas. But the researchers cautioned that protected status on a map did not always translate to strong protection on the ground.

Media

Titan Sub Implosion Audio Released For the First Time (jalopnik.com) 71

An anonymous reader quotes a report from Jalopnik: Experimental submarine the Titan sank in June 2023 while exploring the wreck of the Titanic. The controversial craft imploded while deep beneath the surface of the ocean killing five people onboard, and now a recording of the Titan's final moments has been shared by the National Oceanic and Atmospheric Administration. [...] In the clip, which is available to hear [here], the static sound of the ocean is shattered by a great rumble, which sounds almost like a wave crashing against the beach.

It's this noise that is thought to be the total failure of the Titan, as LBC adds: "It is believed that the noise is the 'acoustic signature' of the sub imploding on 18th June 2023. It was recorded by the National Oceanic and Atmospheric Administration device about 900 miles from where the sub was last seen on radar, south of Newfoundland, Canada, US Coast Guard officials announced. The five crew members who died onboard the sub were British explorer sub were Hamish Harding, 58, British-Pakistani businessman Shahzada Dawood, 48, and his son Suleman, 19, French deep-sea explorer Paul-Henri Nargeolet (known as 'Mr Titanic'), 77, and and co-founder of the submarines owner's company OceanGate, Stockton Rushton, 61."

United States

Trump Orders Treasury Secretary To Stop Minting Pennies 509

President Donald Trump has ordered Treasury Secretary Scott Bessent to halt penny production to cut government spending, according to a Truth Social post on Sunday. The U.S. Mint spent 3.69 cents to produce and distribute each penny last year, resulting in a $85.3 million loss on over three billion new pennies.

The one-cent coin accounts for more than half of all U.S. coin production despite having about 250 billion pieces already in circulation. Canada, Australia and several other countries have eliminated their lowest-denomination coins citing costs over recent decades.

Further reading: Abolish the Penny?
Cellphones

Free 'T-Mobile Starlink' for Six Months Announced During Super Bowl. Also Available to Verizon and AT&T Customers 211

Today T-Mobile announced what they're calling "the next big thing in wireless" — T-Mobile Starlink. But the real surprise is "The beta is now open for absolutely everyone — yes, even Verizon and AT&T customers — to register for free access until July."

And, as they explained to Americans watching the Super Bowl, "If you can see the sky you're connected." Now in public beta, this breakthrough service, developed in partnership with Starlink, uses straight-out-of-a-sci-fi-movie satellite and mobile communications technology to help keep people connected — even you, Verizon and AT&T customers — in the more than 500,000 square miles of the country unreached by any carrier's earth-bound cell towers. That's nearly the size of two Texases...! The beauty of the service is its simplicity: users don't need to do anything out of the ordinary. When a user's cell phone gets out of range of a cell tower, the phone automatically connects to the T-Mobile Starlink network. No need to manually connect. Messages are sent and received just as they are today on a traditional network, even group texts and reactions. And it works on most smartphones from the last four years. It's not limited to a few smartphones or operating systems...

The beta is free until July at which point T-Mobile Starlink will be included at no extra cost on Go5G Next (including variations like Go5G Next 55+), T-Mobile's best plan. Business customers will also get T-Mobile Starlink at no extra cost on Go5G Business Next, first responder agencies on T-Priority plans and other select premium rate plans. T-Mobile customers on any other plan can add the service for $15/month per line. Through February, T-Mobile customers who have registered for the beta can secure a $10/month per line Early Adopter Discount, 33% off the full price.

AT&T and Verizon customers hate dead zones, too

When your service is amazing and different, you want as many people to try it as possible. T-Mobile is giving AT&T and Verizon customers the opportunity to try out T-Mobile Starlink satellite service on their existing phones... During the beta period, Verizon and AT&T customers can experience T-Mobile Starlink text messaging for free, and once the service launches in July, it will be available for $20/month per line... More details and consumer registration can be found here.

A Vision for Universal Coverage

As T-Mobile and Starlink continue to work towards eliminating mobile deadzones, the companies welcome wireless providers from around the world to join their growing alliance, which aims to provide reciprocal roaming for all participating carriers. So far, KDDI (Japan), Telstra (Australia), Optus (Australia), One NZ (New Zealand), Salt (Switzerland), Entel (Chile & Peru), Rogers (Canada) and Kyivstar (Ukraine) are among the providers that have signed on to join the cause and launch satellite-to-mobile technology. Learn more about the alliance and how providers can join at direct.starlink.com.
Science

Twisted Graphene Sheets Reveal 'Unconventional' Superconductivity Governed by Quantum Geometry (sciencealert.com) 8

Twisting two atomically thin sheets of graphene enables "a host of exceptional properties," writes MIT News, "including unconventional superconductivity." (Which makes this graphene "a promising building block for future quantum-computing devices.")

And now "We find the superfluid stiffness to be much larger than expected..." a team of researchers reported this week in Nature. Hackaday explains that "Part of the problem has been that it is hard to make large pieces of multi-layer graphene. By creating two-ply pieces and using special techniques, an international team is finding that quantum geometry explains how graphene superconductors resist changes in current flow more readily than conventional superconductors."

Or, as Science Alert puts it, "Forced to run a labyrinth of carbon atoms uniquely arranged in twisted stacks, electrons do some rather peculiar things." Researchers from the University of British Columbia in Canada, the University of Washington and Johns Hopkins University in the US, and the National Institute for Materials Science in Japan recently discovered a strange new state of matter in the dynamics of currents flowing through layers of graphene.

The findings confirm predictions on how electrons ought to behave when squeezed into crystalline arrangements, and may contribute fresh ideas on how to achieve reliable approaches to quantum computing or reveal ways to develop room-temperature superconduction... Graphene has been increasingly seen as something of a wonder material over recent decades, its lattice of carbon atoms connected in a way that leaves spare electrons to leap about like tokens in a game of quantum checkers. Physicists have consistently bent the rules of this game, finding new and unusual ways to alter properties of resistance or coordinate into exotic states. For these reasons, graphene has become a perfect playground to search for clues on low-resistance conductivity or test the boundaries of various quantum effects.

This week MIT research scientist Joel Wang (a co-lead on the study) said "There's a whole family of 2D superconductors that is waiting to be probed, and we are really just scratching the surface." New Scientist explores where their research could lead: Why do cold thin sheets of carbon offer no resistance to electric currents? Two experiments are bringing us closer to an answer — and maybe even to practical room-temperature superconductors... Past experiments have shown that very cold stacks of two or three layers of graphene can superconduct, or perfectly conduct electricity without resistance and energy loss, if some of the sheets are rotated by a special angle. But why this happens remained mysterious... [B]oth teams had to innovate a setup where the tiny graphene flakes were exposed to microwaves while the researchers slowly varied properties like temperature, which must be kept very low for superconductivity to occur at all...

"We are finding interesting laws which seem to emerge in both these material systems. Maybe what we are uncovering is something deeper," says [Harvard postdoctoral researcher Abhishek Banerjee]. Both teams are planning on performing similar experiments with other very thin superconductors.

Iphone

IPhones and Some Android Phones Will Support Starlink Direct-to-Cell Coverage in US (yahoo.com) 30

"iPhone devices are now eligible to test SpaceX-owned Starlink's direct-to-cell capability," Reuters reported this week, citing an announcement from T-Mobile: T-Mobile and Elon Musk's SpaceX are currently testing the Starlink cell network on a trial basis after receiving approval from the Federal Communications Commission in November last year. The trial offers 'text via satellite', while voice and data features will be added in the future, according to the T-Mobile website. T-Mobile initially only listed a few Android smartphones as eligible devices to test the network, but has now added iPhone devices with the latest iOS 18.3 software update.
The next day stock prices fell for several direct-to-smartphone satellite companies, reports SpaceNews: Shares in Globalstar, which enables connectivity beyond the reach of cellular towers on the latest iPhones via a far-reaching partnership with Apple, closed down nearly 18% the following day. Constellation developer AST SpaceMobile slipped 12%. Canada's MDA, which is building at least 17 satellites for Globalstar after Apple agreed to cover most of the costs to replenish the constellation, also saw its shares fall more than 9%...

"Combined, today's price action in Globalstar and satellite manufacturer MDA suggest a real investor fear that SpaceX could disintermediate the Apple-Globalstar partnership," said Adam Rhodes, a senior telecoms analyst at Octus. "However, it appears to us that there is room for both services. Based on the information we have seen, we do not anticipate that Apple views the T-Mobile-Starlink service as a replacement for the Globalstar MSS network, but rather it is choosing to enable the added feature on its T-Mobile phones...." B. Riley analyst Mike Crawford noted that Apple's two binding contracts with Globalstar extend well into the next decade, ensuring both capital expenditure (capex) and recurring service revenues.

Thanks to Slashdot reader jjslash for sharing the news.
Crime

Drone Pilot To Plead Guilty In Collision That Grounded Aircraft Fighting Palisades Fire (latimes.com) 29

Earlier this month, a civilian drone collided with a Canadian CL-415 firefighting plane combating the Palisades Fire, causing damage that grounded the aircraft and temporarily halted all aerial firefighting operations. Federal and state officials have since identified the operator of that drone as Peter Tripp Akemann of Culver City, who has agreed to plead guilty to a misdemeanor, pay a fine and complete community service. Prosecutors said he could still face up to a year in federal prison. The Los Angeles Times reports: The drone, which authorities say was flying in restricted airspace on Jan. 9, put a fist-sized hole in the left wing of a Super Scooper -- a massive fixed-wing plane that can drop large amounts of water onto a fire. The collision knocked the plane out of commission for about five days and destroyed the drone.

"Like a lot of individuals, he was curious about what was happening in that area," acting U.S. Atty. Joseph T. McNally said on Friday. "The problem with that... is with the amount of firefighting planes you have in that area dropping so they can get water in the Pacific Ocean it interferes with those operations. It's not the time to fly drones anytime that we have these emergencies in Southern California."

As part of the plea agreement, Akemann agreed to pay full restitution to the government of Quebec, Canada, which supplied the plane, and the company that repaired the plane. It cost at least $65,169 to fix the aircraft, prosecutors said. Akemann also agreed to complete 150 hours of community service in support of wildfire relief efforts.

Privacy

Software Flaw Exposes Millions of Subarus, Rivers of Driver Data (securityledger.com) 47

chicksdaddy share a report from the Security Ledger: Vulnerabilities in Subaru's STARLINK telematics software enabled two, independent security researchers to gain unrestricted access to millions of Subaru vehicles deployed in the U.S., Canada and Japan. In a report published Thursday researchers Sam Curry and Shubham Shah revealed a now-patched flaw in Subaru's STARLINK connected vehicle service that allowed them to remotely control Subarus and access vehicle location information and driver data with nothing more than the vehicle's license plate number, or easily accessible information like the vehicle owner's email address, zip code and phone number. (Note: Subaru STARLINK is not to be confused with the Starlink satellite-based high speed Internet service.)

[Curry and Shah downloaded a year's worth of vehicle location data for Curry's mother's 2023 Impreza (Curry bought her the car with the understanding that she'd let him hack it.) The two researchers also added themselves to a friend's STARLINK account without any notification to the owner and used that access to remotely lock and unlock the friend's Subaru.] The details of Curry and Shah's hack of the STARLINK telematics system bears a strong resemblance to hacks documented in his 2023 report Web Hackers versus the Auto Industry as well as a September, 2024 discovery of a remote access flaw in web-based applications used by KIA automotive dealers that also gave remote attackers the ability to steal owners' personal information and take control of their KIA vehicle. In each case, Curry and his fellow researchers uncovered publicly accessible connected vehicle infrastructure intended for use by [employees and dealers was found to be trivially vulnerable to compromise and lack even basic protections around account creation and authentication].

Facebook

Meta's AI Chatbot Taps User Data With No Opt-Out Option (techcrunch.com) 39

Meta's AI chatbot will now use personal data from users' Facebook and Instagram accounts for personalized responses in the United States and Canada, the company said in a blog post. The upgraded Meta AI can remember user preferences from previous conversations across Facebook, Messenger, and WhatsApp, such as dietary choices and interests. CEO Mark Zuckerberg said the feature helps create personalized content like bedtime stories based on his children's interests. Users cannot opt out of the data-sharing feature, a Meta spokesperson told TechCrunch.
Power

Could New Linux Code Cut Data Center Energy Use By 30%? (datacenterdynamics.com) 65

Two computer scientists at the University of Waterloo in Canada believe changing 30 lines of code in Linux "could cut energy use at some data centers by up to 30 percent," according to the site Data Centre Dynamics.

It's the code that processes packets of network traffic, and Linux "is the most widely used OS for data center servers," according to the article: The team tested their solution's effectiveness and submitted it to Linux for consideration, and the code was published this month as part of Linux's newest kernel, release version 6.13. "All these big companies — Amazon, Google, Meta — use Linux in some capacity, but they're very picky about how they decide to use it," said Martin Karsten [professor of Computer Science in the Waterloo's Math Faculty]. "If they choose to 'switch on' our method in their data centers, it could save gigawatt hours of energy worldwide. Almost every single service request that happens on the Internet could be positively affected by this."

The University of Waterloo is building a green computer server room as part of its new mathematics building, and Karsten believes sustainability research must be a priority for computer scientists. "We all have a part to play in building a greener future," he said. The Linux Foundation, which oversees the development of the Linux OS, is a founder member of the Green Software Foundation, an organization set up to look at ways of developing "green software" — code that reduces energy consumption.

Karsten "teamed up with Joe Damato, distinguished engineer at Fastly" to develop the 30 lines of code, according to an announcement from the university. "The Linux kernel code addition developed by Karsten and Damato was based on research published in ACM SIGMETRICS Performance Evaluation Review" (by Karsten and grad student Peter Cai).

Their paper "reviews the performance characteristics of network stack processing for communication-heavy server applications," devising an "indirect methodology" to "identify and quantify the direct and indirect costs of asynchronous hardware interrupt requests (IRQ) as a major source of overhead...

"Based on these findings, a small modification of a vanilla Linux system is devised that improves the efficiency and performance of traditional kernel-based networking significantly, resulting in up to 45% increased throughput..."

Slashdot Top Deals