Privacy

Online Gift Card Store Exposed Hundreds of Thousands of People's Identity Documents (techcrunch.com) 15

An anonymous reader quotes a report from TechCrunch: A U.S. online gift card store has secured an online storage server that was publicly exposing hundreds of thousands of customer government-issued identity documents to the internet. A security researcher, who goes by the online handle JayeLTee, found the publicly exposed storage server late last year containing driving licenses, passports, and other identity documents belonging to MyGiftCardSupply, a company that sells digital gift cards for customers to redeem at popular brands and online services.

MyGiftCardSupply's website says it requires customers to upload a copy of their identity documents as part of its compliance efforts with U.S. anti-money laundering rules, often known as "know your customer" checks, or KYC. But the storage server containing the files had no password, allowing anyone on the internet to access the data stored inside. JayeLTee alerted TechCrunch to the exposure last week after MyGiftCardSupply did not respond to the researcher's email about the exposed data. [...]

According to JayeLTee, the exposed data -- hosted on Microsoft's Azure cloud -- contained over 600,000 front and back images of identity documents and selfie photos of around 200,000 customers. It's not uncommon for companies subject to KYC checks to ask their customers to take a selfie while holding a copy of their identity documents to verify that the customer is who they say they are, and to weed out forgeries.
MyGiftCardSupply founder Sam Gastro told TechCrunch: "The files are now secure, and we are doing a full audit of the KYC verification procedure. Going forward, we are going to delete the files promptly after doing the identity verification." It's not known how long the data was exposed or if the company would commit to notifying affected individuals.
AI

Meta's AI Profiles Are Indistinguishable From Terrible Spam That Took Over Facebook (404media.co) 22

Meta's AI-generated social media profiles, which sparked controversy this week following comments by executive Connor Hayes about plans to expand AI characters across Facebook and Instagram, have largely failed to gain user engagement since their 2023 launch, 404 Media reported Friday.

The profiles, introduced at Meta's Connect event in September 2023, stopped posting content in April 2024 after widespread user disinterest, with 15 of the original 28 accounts already deleted, Meta spokesperson Liz Sweeney told 404 Media. The AI characters, including personas like "Liv," a Black queer mother, and "Grandpa Brian," a retired businessman, generated minimal engagement and were criticized for posting stereotypical content.

Washington Post columnist Karen Attiah reported that one AI profile admitted its purpose was "data collection and ad targeting." Meta is now removing these accounts after identifying a bug preventing users from blocking them, Sweeney said, adding that Hayes' recent Financial Times interview discussed future AI character plans rather than announcing new features.
Businesses

Boeing Adds More Surprise Quality Checks in Its Factories (msn.com) 46

Boeing is conducting more surprise inspections at its factories as part of a broader plan to prevent manufacturing snafus like the one that led to a jet-panel blowout on an Alaska Air flight a year ago. From a report: The jet maker outlined on Friday more than a dozen steps it has taken in recent months to tackle a manufacturing quality crisis that has forced Boeing to slow production and has put it under the microscope of federal regulators. Some of the steps have been previously reported.

Boeing restarted production at its 737 factory in December after a machinists strike stopped work for several months. The company is still producing far fewer 737 MAXs per month than it was in the months before the Alaska Airlines accident. Among the new procedures are another layer of random quality checks where plane parts are commonly removed and then put back. In the case of the MAX involved in last January's incident, workers failed to replace bolts needed to hold a door-plug in place. The plug had been opened to repair faulty rivets.

Privacy

Cloudflare's VPN App Among Half-Dozen Pulled From Indian App Stores (techcrunch.com) 12

More than half-a-dozen VPN apps, including Cloudflare's widely-used 1.1.1.1, have been pulled from India's Apple App Store and Google Play Store following intervention from government authorities, TechCrunch reported Friday. From the report: The Indian Ministry of Home Affairs issued removal orders for the apps, according to a document reviewed by TechCrunch and a disclosure made by Google to Lumen, Harvard University's database that tracks government takedown requests globally.
Science

New 'All-Optical' Nanoscale Sensors of Force Access Previously Unreachable Environments (phys.org) 8

ZipNada shares a report from Phys.org: In a paper published today in Nature, a team led by Columbia Engineering researchers and collaborators report that they have invented new nanoscale sensors of force. They are luminescent nanocrystals that can change intensity and/or color when you push or pull on them. These "all-optical" nanosensors are probed with light only and therefore allow for fully remote read-outs -- no wires or connections are needed. They have 100 times better force sensitivity than the existing nanoparticles that utilize rare-earth ions for their optical response, and an operational range that spans more than four orders of magnitude in force, a much larger range -- 10-100 times larger -- than any previous optical nanosensor. "We expect our discovery will revolutionize the sensitivities and dynamic range achievable with optical force sensors, and will immediately disrupt technologies in areas from robotics to cellular biophysics and medicine to space travel," said Jim Schuck, associate professor of mechanical engineering.

"The importance of developing new force sensors was recently underscored by Ardem Patapoutian, the 2021 Nobel Laureate who emphasized the difficulty in probing environmentally sensitive processes within multiscale systems -- that is to say, in most physical and biological processes," Schuck notes. "We are excited to be part of these discoveries that transform the paradigm of sensing, allowing one to sensitively and dynamically map critical changes in forces and pressures in real-world environments that are currently unreachable with today's technologies."
Windows

With 10 Months of Support Remaining, Windows 10 Still Dominates (theregister.com) 164

Despite Microsoft's push for Windows 11, Windows 10 continues to dominate the desktop OS market, rising to 62.7% market share in December 2024. The Register reports: Figures for December 2024 from Statcounter -- used because Microsoft rarely shares usage data unless it has something to boast about -- confirm Windows 10's market share has inched up to 62.7 percent compared to the previous month while Windows 11's share fell back to 34.12 percent (from 34.94 percent in November 2024). Even though Windows 11's percentage of the pie is still bigger than it was this time last year (when Statcounter pegged it at 26.54 percent), the fact the new OS is still nowhere near to overtaking Windows 10 may alarm some Microsoft executives. [...]

Canalys analyst, Kieren Jessop, noted that when looking at the more than 230 countries and regions tracked by Statcounter, Windows 10 share had actually only increased in just under a quarter of them, but that increase made an outsized impacted. Jessop cited the example of the US, where Windows 10 market share had gone from 58 percent in October 2024 to 67 percent in December. [...] Many editions of Windows 10 are due to drop out of free support on October 14, 2025. Affected users will then have the option to purchase Extended Security Updates (ESU) to keep the lights on a little longer or keep using the operating system and risk falling foul of unpatched vulnerabilities.
Further reading: Ex-Microsoft Designer Reveals Windows 11's Dynamic Wallpapers That May Have Been Shelved
Windows

Ex-Microsoft Designer Reveals Windows 11's Dynamic Wallpapers That May Have Been Shelved (windowscentral.com) 17

Former Microsoft designer Sergey Kisselev has shared previously unseen concepts for Windows 11 dynamic wallpapers, intended for educational devices. The animated backgrounds were designed to complement Windows 11's centered interface but never shipped with the operating system's 23H2 update as initially planned.
Facebook

Nick Clegg Is Leaving Meta After 7 Years Overseeing Its Policy Decisions (engadget.com) 8

Nick Clegg, former British Deputy Prime Minister and Meta's President of Global Affairs, is stepping down after seven years, with longtime policy executive Joel Kaplan set to replace him. Engadget reports: Clegg will be replaced by Joel Kaplan, a longtime policy executive and former White House aide to George W. Bush known for his deep ties to Republican circles in Washington. As Chief Global Affairs Officer, Kaplan -- as Semafor notes -- will be well-positioned to run interference for Meta as Donald Trump takes control of the White House. In a post on Threads, Clegg said that "this is the right time for me to move on from my role as President, Global Affairs at Meta."

"My time at the company coincided with a significant resetting of the relationship between 'big tech' and the societal pressures manifested in new laws, institutions and norms affecting the sector. I hope I have played some role in seeking to bridge the very different worlds of tech and politics -- worlds that will continue to interact in unpredictable ways across the globe."

He said that he will spend the next "few months" working with Kaplan and "representing the company at a number of international gatherings in Q1 of this year" before he formally steps away from the company.

Further reading: Meta Says It's Mistakenly Moderating Too Much
United States

US Appeals Court Blocks Biden Administration Effort To Restore Net Neutrality Rules (reuters.com) 115

A U.S. appeals court ruled on Thursday the Federal Communications Commission did not have legal authority to reinstate landmark net neutrality rules. From a report: The decision is a blow to the outgoing Biden administration that had made restoring the open internet rules a priority. President Joe Biden signed a 2021 executive order encouraging the FCC to reinstate the rules.

A three-judge panel of the Cincinnati-based 6th U.S. Circuit Court of Appeals said the FCC lacked authority to reinstate the rules initially implemented in 2015 by the agency under Democratic former President Barack Obama, but then repealed by the commission in 2017 under Republican former President Donald Trump.

The rules also forbid special arrangements in which ISPs give improved network speeds or access to favored users. The court cited the Supreme Court's June decision in a case known as Loper Bright to overturn a 1984 precedent that had given deference to government agencies in interpreting laws they administer, in the latest decision to curb the authority of federal agencies. "Applying Loper Bright means we can end the FCC's vacillations," the court ruled.

United Kingdom

UK Develops Quantum Clock To Cut Military GPS Dependence (www.gov.uk) 42

Britain's Defence Science and Technology Laboratory has developed a quantum atomic clock that will lose less than one second over billions of years, the Ministry of Defence announced on Thursday.

The UK-built device aims to reduce military reliance on GPS technology, which can be disrupted by adversaries. It will be deployable in military operations within five years, supporting navigation systems, encrypted communications, and advanced weapons systems. The $34.6 million project involves partners including Infleqtion UK, Aquark Technologies, and Imperial College London. The clock was tested outside laboratory conditions for the first time in collaboration with the Royal Navy and Army Futures team.
Operating Systems

SvarDOS: DR-DOS is Reborn as an Open Source OS (theregister.com) 68

SvarDOS, a compact open-source operating system derived from DR-DOS, has switched to using the EDRDOS kernel, marking a shift from its FreeDOS distribution roots. The change allows the operating system to fit on a single 1.4MB floppy disk while offering a network-capable package manager that can fetch from a repository of over 400 packages.

Unlike its rival FreeDOS, SvarDOS can run Microsoft Windows 3.1 natively, though the capability currently requires additional configuration. The system maintains compatibility with legacy DOS applications while providing modern features like FAT32 support and network connectivity.
The Military

NATO Plans To Build Satellite Links As Backups To Undersea Cables (tomshardware.com) 65

Tom's Hardware reports that NATO is developing an advanced system to address the growing number of undersea cable disruptions observed in recent years. Known as HEIST (Hybrid Space-Submarine Architecture Ensuring Infosec of Telecommunications), the project is designed to significantly enhance the resilience of undersea communication networks. HEIST will enable damage detection with an accuracy of one meter, facilitate rapid data rerouting through satellite networks when disruptions occur, and establish open-source protocols to foster global collaboration. From the report: Satellites are the primary backups to undersea cables, but their bandwidth is far behind physical connections. For example, Google's latest fiber-optic lines can hit 340 terabits per second. In contrast, the frequency used by most satellites -- 12 to 18GHz -- can only handle about 5 gigabits per second or about 0.0015% of the maximum throughput of Google's fiber connection.

Work is underway to upgrade satellites from radio transmissions to lasers, increasing the speed by about 40 times to 200 Gbps. Starlink already uses this technology to communicate between its satellites, while Amazon is also developing it for its own Project Kuiper. However, it still faces challenges, like poor visibility and targeting precision between the satellite and ground station.

Because this is a major NATO project, the alliance plans to open-source part of the process. Making it public would allow anyone interested to find holes and make many iterations. Gregory Falco, the NATO Country Director for HEIST, believes that this is the fastest way for the project to achieve its goals and help prevent any catastrophic loss of data transmission in case of deliberate attacks against these underwater infrastructures in international waters.

Social Networks

Venezuela Issues $10 Million Fine For TikTok Over Deadly Viral Challenges (apnews.com) 32

Venezuela's Supreme Court on Monday fined TikTok $10 million for failing to prevent viral challenges allegedly linked to the deaths of three children. It also ordered the platform to establish a local office to oversee content compliance with national laws. The Associated Press reports: Judge Tania D'Amelio said TikTok had acted in a negligent manner and gave it eight days to pay the fine [...]. The judge did not explain how Venezuela would force TikTok, whose parent company is based in China, to pay the fine. Venezuela has blocked dozens of websites in previous years for not complying with regulations set by its telecommunications commission.

In November, Venezuelan President Nicolas Maduro blamed TikTok for the death of a 12-year-old girl who allegedly died after participating in a TikTok challenge that involved taking tranquilizer pills and not falling asleep. Venezuela's Education Minister Hector Rodriguez also said last month that a 14-year-old died after taking part in a TikTok challenge that involved sniffing substances. And on Nov. 21, Venezuela's attorney general blamed video challenges on TikTok for the death of a third child.

United States

New York Retires Iconic Subway Cars 24

The Metropolitan Transportation Authority has announced plans to retire its iconic R46 subway cars, triggering nostalgia among New Yorkers who cherished their distinctive seating arrangement. The fleet -- which has served A, C, N, R, Q, and W lines for five decades -- will be replaced by R211 cars expected for delivery in 2027.

The R46's perpendicular seating configuration, designed for comfort during long trips to destinations like Coney Island, encouraged social interaction among passengers, according to New York Transit Museum director Concetta Bencivenga. The new R211 cars will feature longitudinal seating to improve passenger flow and reduce platform waiting times. Currently, 696 of the original 754 R46 cars remain in service. The replacement R211 cars will include security cameras, wider seats, improved signage, and better lighting.
Social Networks

Trump Urges Supreme Court To Delay TikTok Ban (bbc.com) 119

President-elect Donald Trump has asked the Supreme Court to delay the upcoming TikTok ban while he works on a "political resolution." In a legal brief (PDF) on Friday, his lawyer said Trump "opposes banning TikTok" and "seeks the ability to resolve the issues at hand through political means once he takes office." The BBC reports: Trump had met with TikTok's CEO, Shou Zi Chew, at his Mar-a-Lago estate in Florida last week. In his court filing on Friday, Trump said the case represents "an unprecedented, novel, and difficult tension between free-speech rights on one side, and foreign policy and national security concerns on the other." While the filing said that Trump "takes no position on the underlying merits of this dispute", it added that pushing back the 19 January deadline would grant Trump "the opportunity to pursue a political resolution" to the matter without having to resort to the court. [...]

Trump has publicly said he opposes the ban, despite supporting one in his first term as president. "I have a warm spot in my heart for TikTok, because I won youth by 34 points," he claimed at a press conference earlier in December, although a majority of young voters backed his opponent, Kamala Harris. "There are those that say that TikTok has something to do with that," he added.
Earlier this month, TikTok asked the Supreme Court to block the ban, saying that the law violates both its First Amendment rights and those of its 170 million American users.
Technology

QR-Style Codes Could Replace Barcodes 'Within Two Years' (theguardian.com) 80

Traditional barcodes are set to be replaced by next-generation QR-style codes by 2027, offering enhanced functionality such as embedding sell-by dates, allergens, and recycling information. The Guardian reports: Tesco has started using them on some products, and other trials have suggested that waste of perishable food such as poultry can be cut by embedding sell-by dates in the new QR-style codes, allowing for more dynamic discounting. QR (quick response) codes will allow customers to instantly access more information about the product, including how to recycle batteries, clothes and building materials when tougher environmental regulations bite. But they will also put a greater demand on the world's cloud computing resources, where the extra data they contain will be stored -- meaning a potentially greater carbon footprint.

The first barcode was read in an Ohio supermarket in June 1974 when a packet of Juicy Fruit chewing gum was rung up. It was devised by Joe Woodland, an inventor who had been implored by a retailer frustrated at losing profits, to speed up checkout queues and stocktaking. Coca-Cola has used the new generation of codes in parts of Latin America for refillable bottles, with the QR code allowing the counting of refills so that a requirement of 25 before recycling can be enforced. The Australian supermarket chain Woolworths is said to have reduced food waste by up to 40% in some areas, as the codes allow stores to better spot products approaching expiry and discount more efficiently.
"We've defined an ambition that by the end of 2027 all retailers in the world will be able to read those next-generation barcodes," said Renaud de Barbuat, the president and chief executive of GS1. "We think it's doable ... It represents some investment on the part of retailers to adapt their point-of-sale systems, but it's already well under way."

Anne Godfrey, the chief executive of GS1 UK, said: "This has been in the works for some time, but Covid really accelerated it. During the pandemic, everyone got used to pointing their phones at QR codes in pubs and restaurants to access the menu."
Transportation

Mercedes-backed Volocopter Files for Bankruptcy 35

German electric air taxi company Volocopter has filed for bankruptcy protection, the latest in a string of similar startups to hit financial turbulence. From a report: Volocopter is one of the more well-funded electric air taxi startups, having raised hundreds of millions of dollars over nearly a decade with backing from major automakers like Germany's Mercedes-Benz and China's Geely.
Google

Google CEO Warns of High Stakes in 2025 AI Race (cnbc.com) 48

Google CEO Sundar Pichai has warned employees the company faces critical challenges in 2025 as it races to catch up in AI amid rising competition and regulatory scrutiny. "The stakes are high," Pichai said at a strategy meeting, details of which were reported by CNBC. "I think it's really important we internalize the urgency of this moment, and need to move faster as a company. The stakes are high. These are disruptive moments. In 2025, we need to be relentlessly focused on unlocking the benefits of this technology and solve real user problems."

The meeting revealed employee concerns about ChatGPT "becoming synonymous to AI the same way Google is to search." In response, DeepMind co-founder Demis Hassabis outlined plans to "turbo charge" Google's Gemini app, which executives hope will become their next product to reach 500 million users. Pichai showed a chart positioning Gemini 1.5 ahead of OpenAI's GPT, though he expects "some back and forth" in 2025. The report adds: [Pichai] acknowledged that Google has had to play catchup. "In history, you don't always need to be first but you have to execute well and really be the best in class as a product," he said. "I think that's what 2025 is all about."
Government

Most Safety Complaints From Plane-Industry Whistleblowers 'Go Nowhere', Risk Retaliation (seattletimes.com) 41

America's aerospace industry is overseen by the Federal Aviation Administration (or FAA) — which also handles safety warnings from the industry's whistleblowers. But the Seattle Times says an analysis of reports to Congress found "an overwhelmed system delivering underwhelming results for whistleblowers... More than 90% of safety complaints from 2020 through 2023 ended with no violation found by the FAA, while whistleblowers reported them at great personal and professional risk." Aside from the FAA's in-house program, employees of Boeing, Spirit and the FAA can report safety hazards to the Office of Special Counsel, which has no FAA ties, or through internal employer complaint programs, such as Boeing's Speak Up and Spirit's Quality 360, to trigger company reviews... In the aftermath of the door-plug blowout over Portland, Boeing specifically asked its employees to use the Speak Up program or the FAA's internal process to report any concerns, according to Boeing spokesperson Jessica Kowal. Both have done a poor job protecting whistleblowers from retaliation, according to a congressionally appointed expert panel... While both were designed to guard against retaliation, critics say they have instead become enablers of it...

A panel of aviation safety experts in February rebuked Boeing's Speak Up program in a report to Congress. Whistleblower advocates criticized Speak Up for commonly outing whistleblowers to the supervisors they're complaining about, exposing them to retaliation. Managers sometimes investigated complaints against themselves. Employees mistrusted the program's promise of anonymity. Collectively, the befuddling maze of whistleblower options sowed "confusion about reporting systems that may discourage employees from submitting safety concerns," according to the expert panel's report....

[Boeing quality inspector Sam Mohawk, who alleged the 737 MAX line in Renton was losing track of subpar aircraft parts], continues to pursue his FAA claim, originally submitted through Boeing's Speak Up program. Months passed before Boeing addressed Mohawk's complaint. When it did, Mohawk's report was passed to the managers he was complaining about, according to Brian Knowles, Mohawk's South Carolina-based lawyer. "If you do Speak Up, just know that your report is going to go straight to the guys you're accusing of wrongdoing. They aren't going to say, 'Thanks for speaking up against us,'" Knowles said.

The article includes this quote about the FAA's in-house whistleblower program from Tom Devine, a whistleblower attorney with nearly a half-century of experience across a spectrum of federal agencies, and legal director of the nonprofit Government Accountability Project, which helps whistleblowers navigate the federal system. "It's been a disaster from the beginning. We tell everyone to avoid it because it's a trap... We've warned whistleblowers not to entrust their rights there."

Slashdot Top Deals