Businesses

Capital One To Pay $80 Million Fine After Data Breach (nytimes.com) 19

Capital One Financial Corp will pay an $80 million penalty to a U.S. bank regulator after the bank suffered a massive data breach one year ago. From a report: The fine, announced Thursday by the Office of the Comptroller of the Currency, punishes the bank for failing to adequately identify and manage risk as it moved significant portions of its technological operations to the cloud. "Safeguarding our customers' information is essential to our role as a financial institution," said a bank representative in a statement. "In the year since the incident, we have invested significant additional resources into further strengthening our cyber defenses, and have made substantial progress in addressing the requirements of these orders." In July 2019, the bank disclosed that personal information including names and addresses of about 100 million individuals in the United States and 6 million people in Canada were obtained by a hacker. The suspected hacker was a former employee of Amazon Web Services, a cloud provider where the bank had moved some of its data.
Android

Google Announces Pixel 4a and Pixel 4a 5G (blog.google) 52

Google today unveiled two Pixel smartphones. First is the $349 Pixel 4A, which is available for preorder now and will ship on August 20th. And second, there's the Pixel 4A 5G, which will cost $499 and also ship sometime this fall. From a blog post: With the same incredible camera experiences from Pixel 4 and a redesigned hole-punch design, Pixel 4a brings the same features that have helped millions of Pixel owners take great shots. HDR+ with dual exposure controls, Portrait Mode, Top Shot, Night Sight with astrophotography capabilities and fused video stabilization -- they're all there. The Pixel 4a comes in Just Black with a 5.8-inch OLED display. It has a matte finish that feels secure and comfortable in your hand and includes Pixel's signature color pop power button in mint. Check out the custom wallpapers that have some fun with the punch-hole camera. In addition to features like Recorder, which now connects with Google Docs to seamlessly save and share transcriptions and recordings (English only), Pixel 4a will include helpful experiences like the Personal Safety app for real-time emergency notifications and car crash detection.

Pixel 4a also has Live Caption, which provides real-time captioning (English only) for your video and audio content. New with the Pixel 4a launch -- and also rolling out for Pixel 2, 3, 3a and 4 phones -- Live Caption will now automatically caption your voice and video calls. The Pixel 4a has a Qualcomm Snapdragon 730G Mobile Platform, Titan M security module for on-device security, 6 GB of RAM and 128 GB of storage with an even bigger battery that lasts all day1. [...] This fall, we'll have two more devices to talk about: the Pixel 4a (5G), starting at $499, and Pixel 5, both with 5G2 to make streaming videos, downloading content and playing games on Stadia or other platforms faster and smoother than ever. Pixel 4a (5G) and Pixel 5 will be available in the U.S., Canada, the United Kingdom, Ireland, France, Germany, Japan, Taiwan and Australia. In the coming months, we'll share more about these devices and our approach to 5G.

Businesses

SpaceX Asks FCC To Allow 5 Times More Internet Terminals for Starlink's Satellites (cnbc.com) 150

CNBC reports: SpaceX said Starlink, its nascent satellite internet service, has already seen "extraordinary demand" from potential customers, with "nearly 700,000 individuals" across the United States indicating they are interested in the company's coming service. Due to the greater-than-expected interest, SpaceX filed a request with the Federal Communications Commission on Friday — asking to increase the number of authorized user terminals to 5 million from 1 million. User terminals are the devices consumers would use to connect to the company's satellite internet network...

SpaceX is beginning a private beta test of Starlink's service this summer, which it says will be "followed by public beta testing." Elon Musk's company told the FCC that Starlink will begin offering commercial service in the northern United States and southern Canada" before the end of this year, "and then will rapidly expand to near-global coverage of the populated world in 2021...."

Earth

Western Bumblebee Population Drops Up To 93% Over the Last 20 Years (timesunion.com) 76

The western bumblebee is one of around 30 bumblebee species in the western U.S. and Canada. Now a federal review "unveils an alarming trend for the western bumblebee population, which has seen its numbers dwindle by as much as 93% in the last two decades," reports the Associated Press: The find by the U.S. Geological Survey will help inform a species status assessment to begin this fall by the U.S. Fish and Wildlife Service, which may ultimately add the insect to its endangered species list. Tabitha Graves, senior author of the study and a research ecologist with the survey, said the trend with the western bumblebee documented between 1998 and 2018 is troubling because of their important role as pollinators...

There are multiple factors at play that are contributing to the demise of the bumblebee, including pesticides, habitat fragmentation, a warming climate and pathogens, researchers say... "This bumblebee that was once very widespread and common is something that people started to see less frequently," said Diana Cox-Foster, research leader and location coordinator at the U.S. Department of Agriculture's Pollinating Insects Research Unit at Utah State University. "There are localized populations where it is still happy and healthy, but there have been declines in large parts of its previous distributions. ... Asking why these declines are happening is very important."

Businesses

Huawei CFO Asks For Extradition Case To Be Stayed, Says US Misled Canada (globalnews.ca) 41

hackingbear writes: Lawyers for Meng Wanzhou, the chief financial officer of Huawei Technologies, have applied to a Canadian court seeking stays in the proceedings for her extradition to the United States, documents released on Thursday showed. The applications are based in part on what Meng's lawyers allege was a destruction of the integrity of the judicial process by United States President Donald Trump and other senior members of the administration by their intention to use Meng "as a bargaining chip in a trade dispute." As trading with Iran was legal in Canada, the extradition case hinges on whether Meng misled HSBC about Huawei's relationship with a company operating in Iran, putting HSBC at risk of fines and penalties for breaking U.S. sanctions on Tehran. However, Meng's lawyers allege that the United States misled Canada about the evidence in the case against her, by "selectively summariz(ing) information and omit(ting) highly relevant information" about the knowledge that Huawei accurately shared with HSBC about its operations in Iran.

The omissions are "far below the expected standard of diligence, candor and accuracy," the lawyers wrote. Meng's lawyers also cite comments by U.S. President Donald Trump and Canadian PM Trudeau on the case as proof of political interventions. "Trudeau described how he asked the U.S. to include the applicant in any trade deal it signed with China: 'We've said that the United States should not sign a final and complete agreement with China that does not settle the question of Meng Wanzhou and the two Canadians.'" "Where the requesting state engages in conduct that offends our Canadian sense of fair play and decency, the court must intervene to safeguard the integrity of the judicial process. This is such a case," Meng's lawyers say in their new submissions.

Crime

Surveillance Software Scanning File-Sharing Networks Led To 12,000 Arrests (nbcnews.com) 106

Mr. Cooper was a retired high school history teacher using what NBC News calls those peer-to-peer networks where "the lack of corporate oversight creates the illusion of safety for people sharing illegal images."
Police were led to Cooper's door by a forensic tool called Child Protection System, which scans file-sharing networks and chatrooms to find computers that are downloading photos and videos depicting the sexual abuse of prepubescent children. The software, developed by the Child Rescue Coalition, a Florida-based nonprofit, can help establish the probable cause needed to get a search warrant... Cooper is one of more than 12,000 people arrested in cases flagged by the Child Protection System software over the past 10 years, according to the Child Rescue Coalition... The Child Protection System, which lets officers search by country, state, city or county, displays a ranked list of the internet addresses downloading the most problematic files...

The Child Protection System "has had a bigger effect for us than any tool anyone has ever created. It's been huge," said Dennis Nicewander, assistant state attorney in Broward County, Florida, who has used the software to prosecute about 200 cases over the last decade. "They have made it so automated and simple that the guys are just sitting there waiting to be arrested." The Child Rescue Coalition gives its technology for free to law enforcement agencies, and it is used by about 8,500 investigators in all 50 states. It's used in 95 other countries, including Canada, the U.K. and Brazil. Since 2010, the nonprofit has trained about 12,000 law enforcement investigators globally. Now, the Child Rescue Coalition is seeking partnerships with consumer-focused online platforms, including Facebook, school districts and a babysitter booking site, to determine whether people who are downloading illegal images are also trying to make contact with or work with minors...

The tool has a growing database of more than a million hashed images and videos, which it uses to find computers that have downloaded them. The software is able to track IP addresses — which are shared by people connected to the same Wi-Fi network — as well as individual devices. The system can follow devices even if the owners move or use virtual private networks, or VPNs, to mask the IP addresses, according to the Child Rescue Coalition.... Before getting a warrant, police typically subpoena the internet service provider to find out who holds the account and whether anyone at the address has a criminal history, has children or has access to children through work.

A lawyer who specializes in digital rights tells NBC that these tools need more oversight and testing. "There's a danger that the visceral awfulness of the child abuse blinds us to the civil liberties concerns. Tools like this hand a great deal of power and discretion to the government. There need to be really strong checks and safeguards."
Mozilla

'Mozilla VPN' Launches in Six Countries (mozilla.org) 69

"Starting today, there's a VPN on the market from a company you trust," Mozilla announced Wednesday.

Mozilla VPN is now officially available for Windows and Android in six countries: the U.S., Canada, the U.K., Singapore, Malaysia, and New Zealand, and it'll be coming to even more countries later this year, reports the Verge: The service is available for $4.99 a month, and, like other VPNs, it's designed to make your web-browsing more private and secure. As part of the move, the service is being rebranded from Firefox Private Network to Mozilla VPN, a change that was announced last month.

Mozilla argues that its VPN service has a couple of advantages over its many competitors. It says it should offer a faster browsing experience in many cases because it's based on a protocol with less than a third of the lines of code of an average VPN service provider. The company is also banking on the reputation it's built up with its privacy-focused browser, and it adds that it only collects the information it needs to run a service and doesn't keep user data logs.

The VPN's launch follows beta trials in the US, which also included tests of a VPN built directly into the Firefox browser. Last month, Mozilla announced that it would be testing asking users to pay $2.99 a month for unlimited usage of the extension, which is designed to mask your traffic within the browser rather than at a system-wide level.

Medicine

Russian Hackers Are Linked To Sweeping Bid To Steal Vaccine Data (bloomberg.com) 69

Russian state intelligence is hacking international research centers that are racing to develop a Covid-19 vaccine, the U.K., U.S. and Canadian governments said. From a report: It is unclear whether research facilities have been damaged or if the vaccine programs have been set back as a result of the hacks but officials warned that the cyber attacks are ongoing. In a dramatic statement on Thursday, Britain's National Cyber Security Centre (NCSC) said vaccine and therapeutic sectors in multiple countries have been targeted by a group known as APT29, which it said is "almost certainly" part of Russian state intelligence. Security agencies in the U.S. and Canada later issued their own statements backing up the findings. "It is completely unacceptable that the Russian intelligence services are targeting those working to combat the coronavirus pandemic," British Foreign Secretary Dominic Raab said. "While others pursue their selfish interests with reckless behavior, the U.K. and its allies are getting on with the hard work of finding a vaccine and protecting global health."
Canada

Canadian Genetic Non-Discrimination Act Upheld (www.cbc.ca) 57

Long-time Slashdot reader kartis writes: Canada's Supreme Court upheld the Genetic Non-Discrimination Act (GINA) which prohibits under criminal penalty, employers or insurers from demanding or using genetic information. This was a result of a private member's bill in Parliament, which meant it passed without the government's support, and in fact both the Federal government and Quebec government (which had gotten it declared unconstitutional as outside federal powers) argued that it extended criminal powers into a provincial jurisdiction. Well, the Supreme Court has surprisingly upheld it in a 5-4 decision, which means great things for Canadians' privacy, and also suggests a wider ability for federal privacy legislation than many jurists had thought.
AI

Australia, UK Open Probe Into Clearview Over Data Privacy (bloomberg.com) 9

Australian and British privacy regulators opened a joint probe into Clearview AI, saying they want to examine how the company's facial-recognition technology uses people's data, just days after the company suspended operations in Canada. From a report: The Australian Information Commissioner and the U.K. Information Commissioner's Office said they will focus on the company's use of "scraped" data and biometrics of individuals. Clearview is facing growing scrutiny of the billions of images it has scraped from social media platforms and how the New York-based company shares those with law enforcement agencies. It suspended a contract with its last Canadian client, the Royal Canadian Mounted Police, after regulators there said they were investigating allegations Clearview collected personal information without consent and shared it with police. Clearview will cooperate with the U.K. and Australian regulators, Chief Executive Officer Hoan Ton-That said in a statement. The company searches publicly available photos from the Internet in accordance with applicable laws, he said.
Microsoft

Microsoft Is Interested In Acquiring Warner Bros. Gaming Unit (thestreet.com) 27

According to a new report from The Information, Microsoft is interested in bidding on Warner Bros. Interactive Entertainment, which is currently a division of AT&T. From a report: Warner Bros. Interactive Entertainment, or WB Games, is known for publishing the "Batman: Arkham" series, "Middle-Earth: Shadow of Mordor," many "Lego" and "Harry Potter" games, "Mortal Kombat," and "The Witcher 3: Wild Hunt." The unit consists of game-development studios in the U.S., Canada and the U.K. AT&T acquired the gaming business as part of the 2018 buyout of Time Warner assets. This deal and the 2014 acquisition of DirecTV increased AT&T's debt and the company has been looking to ways to cut costs and unload assets.
Canada

Facial-Recognition Firm Ends Operations in Canada, Watchdog Says (bloomberg.com) 11

Canada's privacy watchdog said facial recognition software provider Clearview AI will no longer offer its services in the country, suspending a contract with its last remaining client, the Royal Canadian Mounted Police. From a report: The move comes almost five months after privacy authorities at the federal level and in three provinces launched an investigation into the New York-based firm over allegations it collected personal information without consent and provided data to law enforcement. That probe is still ongoing, the Office of the Privacy Commissioner of Canada said in a statement Monday. At the end of February, the national watchdog opened a separate investigation into the RCMP's use of Clearview AI's facial recognition technology and it also plans to complete that inquiry.
Facebook

Is Slashdot the Answer to Facebook's Fake News Problem? (wordpress.com) 284

David Collier-Brown led the Sun Microsystems Canada team specializing in performance and capacity planning. He later becoming a consulting systems programmer and performance engineer, as well as an O'Reilly author (co-authoring the 2003 book Using Samba). He's also davecb, Slashdot reader #6,526, and today submitted a story headlined "Slashdot is the answer to Facebook's 'fake news' problem."

"OK, not the whole answer, but I argue that /. is part of a defense in depth against the propagation of lies, sophistries and deliberate disinformation in discussion groups like ours and Facebook's."

There's more details on his technical blog: William Gibson once said The future is already here — It's just not very evenly distributed.

That also applies to the solutions to problems, like that of finding out who's telling the truth in widespread discussion. By Gibson's dictum, we should expect to find different parts of the solution, but not together, and likely in all sorts of unexpected places. It's up to us to find them all and compose them together...

With luck, machine learning (ML) can be trained to recognize minor variants of a banned article, and refer them to the staff to be sure that's what is being recognized. Those can be treated the same way as the original posting. But how can we credibly detect the lies in time? The kind of team a site can afford are always going to be behind.

That is solved for a distantly related problem, one that is as as unexpectedly helpful as looking at policing stock trades. Slashdot.

The post describes Slashdot as "One of the older big discussion groups" that "from its inception in 1997 needed to deal with overenthusiastic commentators, flamers and trolls. In 2020, it's still easy to 'read at 4 or 5', and see a measured, reasonable and informative discussion of a difficult subject.

"Or you could 'read at -1', and listen to the madmen and flamers that elsewhere would drown out the insightful comments."

It's an interesting read, and ultimately proposes solving Facbook's "fake news" problem by empowering readers with moderation points, overseen by a staff of double-checking humans who then pass along their conclusions for execution by an automated system.

Is Slashdot the answer to Facebook's fake news problem?
Medicine

Study Finds Hydroxychloroquine May Have Boosted Survival. Other Researchers Have Doubts (cnn.com) 173

"A surprising new study found the controversial antimalarial drug hydroxychloroquine helped patients better survive in the hospital," reports CNN. "But the findings, like the federal government's use of the drug itself, were disputed." A team at Henry Ford Health System in southeast Michigan said Thursday their study of 2,541 hospitalized patients found that those given hydroxychloroquine were much less likely to die. Dr. Marcus Zervos, division head of infectious disease for Henry Ford Health System, said 26% of those not given hydroxychloroquine died, compared to 13% of those who got the drug. The team looked back at everyone treated in the hospital system since the first patient in March. "Overall crude mortality rates were 18.1% in the entire cohort, 13.5% in the hydroxychloroquine alone group, 20.1% among those receiving hydroxychloroquine plus azithromycin, 22.4% among the azithromycin alone group, and 26.4% for neither drug," the team wrote in a report published in the International Journal of Infectious Diseases.

It's a surprising finding because several other studies have found no benefit from hydroxychloroquine, a drug originally developed to treat and prevent malaria...

"Our results do differ from some other studies," Zervos told a news conference. "What we think was important in ours ... is that patients were treated early. For hydroxychloroquine to have a benefit, it needs to begin before the patients begin to suffer some of the severe immune reactions that patients can have with Covid," he added. The Henry Ford team also monitored patients carefully for heart problems, he said...

Researchers not involved with the study were critical. They noted that the Henry Ford team did not randomly treat patients but selected them for various treatments based on certain criteria. "As the Henry Ford Health System became more experienced in treating patients with COVID-19, survival may have improved, regardless of the use of specific therapies," Dr. Todd Lee of the Royal Victoria Hospital in Montreal, Canada, and colleagues wrote in a commentary in the same journal. "Finally, concomitant steroid use in patients receiving hydroxychloroquine was more than double the non-treated group. This is relevant considering the recent RECOVERY trial that showed a mortality benefit with dexamethasone." The steroid dexamethasone can reduce inflammation in seriously ill patients...

Eli Rosenberg [lead author of a New York study of hydroxychloroquine], also pointed out that the Detroit paper excluded 267 patients — nearly 10% of the study population — who had not yet been discharged from the hospital. He said this might have skewed the results to make hydroxychloroquine look better than it really was.

"There's a little bit of loosey-goosiness here in all this," he told CNN.

Medicine

China Approves COVID-19 Vaccine Candidate For Military Use 113

schwit1 writes: Same vaccine being tested in Canada. But China just skipped ahead and approved it for one year for its soldiers without full long-term data. The COVID-19 vaccine (Ad5-nCoV) in question is developed by China's Academy of Military (AMS) research unit and CanSino Biologics. Clinical trials proved it was safe and showed some efficacy, according to the company.

Reuters says the company has not disclosed whether the inoculation of the vaccine candidate is mandatory or optional, citing commercial secrets. "AMS received an approval earlier this month to test its second experimental coronavirus vaccine in humans," adds Reuters.
The Courts

Are Uber Drivers Employees? Uber Faces Two Big Court Challenges (reuters.com) 104

Strider- (Slashdot reader #39,683) shares a story from Reuters: Canada's Supreme Court on Friday ruled in favor of a driver in a gig economy case that paves the way for a class action suit calling for Uber Technologies Inc to recognize drivers in Canada as company employees.

UberEats driver David Heller had filed a class action suit, challenged by Uber, aiming to secure a minimum wage, vacation pay and other benefits like overtime pay. Drivers are now classified as independent contractors and do not have such benefits.

A lower court had already ruled that Uber's contracts included an arbitration clause that was "invalid and unenforceable," Reuters, reports, and it was Uber's attempt to appeal of that ruling that was dismissed by Canada's Supreme Court in an 8-1 vote. Reuters notes that "The arbitration process, which must be conducted in the Netherlands where Uber has its international headquarters, costs about C$19,000 ($14,500)."

Meanwhile, CNN also reports that Uber and Lyft "could soon be forced to reclassify their drivers in California as employees or cease operating in the state as part of an escalating legal battle over a new law impacting much of the on-demand economy." California Attorney General Xavier Becerra and a coalition of city attorneys intend to file for a preliminary injunction this week to force the two ride-hailing companies to comply with the new state law, according to a press release issued Wednesday...

"It's time for Uber and Lyft to own up to their responsibilities and the people who make them successful: their workers," said Becerra in a statement concerning the injunction the state is intending to file. "Misclassifying your workers as 'consultants' or 'independent contractors' simply means you want your workers or taxpayers to foot the bill for obligations you have as an employer.

Privacy

Journalist's Phone Hacked: All He Had To Do Was Visit a Website. Any Website. (thestar.com) 123

The iPhone that Moroccan journalist Omar Radi used to contact his sources also allowed his government to spy on him (and at least two other journalists), reports the Toronto Star, citing new research from Amnesty International.

A Slashdot reader shares their report: Their government could read every email, text and website visited; listen to every phone call and watch every video conference; download calendar entries, monitor GPS coordinates, and even turn on the camera and microphone to see and hear where the phone was at any moment.

Yet Radi was trained in encryption and cyber security. He hadn't clicked on any suspicious links and didn't have any missed calls on WhatsApp — both well-documented ways a cell phone can be hacked. Instead, a report published Monday by Amnesty International shows Radi was targeted by a new and frighteningly stealthy technique. All he had to do was visit one website. Any website.

Forensic evidence gathered by Amnesty International on Radi's phone shows that it was infected by "network injection," a fully automated method where an attacker intercepts a cellular signal when it makes a request to visit a website. In milliseconds, the web browser is diverted to a malicious site and spyware code is downloaded that allows remote access to everything on the phone. The browser then redirects to the intended website and the user is none the wiser.

Two more human rights advocates in Morocco have been targeted by the same malware, the article reports.
Google

Alphabet Reportedly Buying Smart Glasses Maker North (9to5google.com) 10

According to The Globe and Mail, Alphabet is rumored to be acquiring smart glasses maker North for $180 million. 9to5Google reports: This comes after North in December stopped selling Focals to focus on launching second-generation smart glasses sometime in 2020. "Focals 2.0" has been teased over the past several months with North claiming that they would be the "most significant product introduction to date in the category." A "lighter" and "sleeker" design would have a "10x display," while miniaturizing the technology by 40%.

Sales of the first-generation device are described as "minuscule" in today's report: "One person close to the sales operations says it's unlikely North sold many more than 1,000 pairs. Its only retail stores, in Toronto and Brooklyn, N.Y., often went days without a single sale." In ending sales, North has not been bringing in any revenue, and the company is running out of money even after slashing monthly spending in half to $3 million. Despite taking on additional investment and loans, North is said to have started looking for a buyer earlier this year.

Microsoft

Microsoft is Permanently Closing All Physical Retail Stores (venturebeat.com) 103

Microsoft has announced it will permanently close all of its physical retail stores and transfer most of its resources to online channels. From a report: This comes after the computing giant shuttered the outlets in late March due to the COVID-19 crisis. In what Microsoft is touting as a "new approach to retail," the company said its retail store employees will be transitioned to its corporate hubs and will provide customers remote sales, training, and support. The company will focus its efforts on existing digital stores on Microsoft.com and through Windows and Xbox, which have a collective reach of 1.2 billion people globally. Microsoft added that the closures will result in a pre-tax charge of around $450 million, which it said consists mostly of asset write-offs and impairments. The Seattle-based tech titan debuted its first physical retail experience back in 1999 at the Sony-owned Metreon shopping complex in San Francisco, though that closed around a decade later. Microsoft's first real foray into brick-and-mortar retail was in Scottsdale, Arizona in 2009. This grew to around a hundred similar outlets across the U.S., including its New York flagship, which opened in 2015. The company later went international, opening seven retail stores in Canada, one in Australia, and one in the U.K.
Businesses

Amazon Launches Counterfeit Crimes Unit To Fight Knockoffs On Its Store (theverge.com) 75

Amazon has announced that it's launching a new Counterfeit Crimes Unit as the latest effort by the online retailer to fight counterfeit products on its website. The Verge reports: The new team is said to be made up of "former federal prosecutors, experienced investigators, and data analysts," who will work to proactively "go on the offensive" against counterfeiters, instead of just reacting by trying to identify and block bad listings. According to Amazon, the new Counterfeit Crimes Unit will make it easier for the company to file civil lawsuits, aid brands in their own investigations, and work with law enforcement officials in fighting counterfeiters. Earlier this month, 3M sued merchants who used Amazon to sell 3M and counterfeit masks for more than 18 times their standard price. The Trump administration also took aim at Amazon by recently including the company's foreign websites in Canada, the U.K., Germany, France and India in its annual report on "notorious markets" for counterfeit foreign goods.

Slashdot Top Deals