The New York State Department of Financial Services (NYDFS) on Thursday issued digital asset guidance to state-regulated banks laying out what information financial institutions must submit before getting approval to engage in virtual currency-related activities. From a reportL: The guidance, one of the clearest paths forward yet for banks to offer cryptocurrency services, instructs banks to submit a business plan with details of the proposed activity, detail how such a service would impact the bank's capital and liquidity and inform NYDFS of its plans at least 90 days beforehand.

In a statement, NYDFS Superintendent Adrienne Harris said the new policies are "critical to ensuring that consumers' hard-earned money is protected" and that New York-regulated banks remain competitive. The regulator will "make a comprehensive assessment" of the information presented under the guidance to determine whether a bank should be permitted to engage in a proposed crypto-related activity, according to an industry letter sent Thursday to regulated institutions.

Jamming and spoofing attacks can cripple GPS connections entirely or make something appear in the wrong location, causing disruption and safety issues. Just ask Russia. From a report: New data analysis reveals that multiple major Russian cities appear to have faced widespread GPS disruption during the past week. The signal interference follows Ukraine launching long-range drone attacks deep into Russian territory, and it may act as a way to potentially stop drones that rely upon GPS for navigation, experts say. The GPS interference has "expanded on a scale that hasn't been seen before," says Erik Kannike, a program manager at Estonian defense intelligence firm SensusQ who has been monitoring the situation. "What we're seeing now, since about a week ago, is GPS jamming bubbles covering hundreds if not thousands of kilometers around tactical cities."

The GPS issues were first spotted by the monitoring system GPSJam, which uses data from planes to track problems with the satellite navigation system. The website has logged an increasing number of GPS disturbances in the Russian cities of Saratov, Volgograd, and Penza since the start of December. All of the cities are in Eastern Russia and within hundreds of kilometers of the border with Ukraine. On December 5, GPSJam logged a limited amount of GPS interference in Russia -- the majority of registered interference took place around Moscow, where the Kremlin for years has tampered with GPS connections. However, since December 11, multiple areas of the country have faced GPS disruption, data gathered by GPSJam shows. In addition, wireless data analytics firm Aurora Insight measured an increase in GPS signal levels in the area at the start of December -- a sign that potential GPS interference could have happened.

The Senate has passed legislation to ban TikTok from US government devices, in a move designed to limit perceived information-security risks stemming from the social media app. From a report: The vote by unanimous consent approved the No TikTok on Government Devices Act, a bill authored by Missouri Republican Sen. Josh Hawley. The move marks lawmakers' latest step against the short-form video app that has become popular with over a billion users worldwide. US officials fear that TikTok's user data could end up in the hands of the Chinese government due to that country's influence over TikTok's parent, ByteDance.

A companion bill was introduced in the House last year by Colorado Republican Rep. Ken Buck. It has yet to be approved by members of the House Oversight Committee. House Speaker Nancy Pelosi said Thursday it isn't yet clear whether the chamber will take up the TikTok bill in light of its Senate passage, saying lawmakers were consulting with White House officials on its language.

The Linux Foundation has partnered with some of the world's biggest technology companies to develop interoperable and open map data, in what is a clear move to counter Google's dominance in the mapping realm. From a report: The Overture Maps Foundation, as the new effort is called, is officially hosted by the Linux Foundation, but the program is driven by Amazon Web Services (AWS), Facebook's parent company Meta, Microsoft, and Dutch mapping company TomTom. The ultimate mission of the Overture Maps Foundation to power new map products through openly available datasets that can be used and reused across applications and businesses, with each member throwing their own data and resources into the mix.

"Mapping the physical environment and every community in the world, even as they grow and change, is a massively complex challenge that no one organization can manage," noted the Linux Foundation's executive director Jim Zemlin in a press release. "Industry needs to come together to do this for the benefit of all." Map and location data plays such a fundamental role across society today, powering everything from IoT (internet of things) devices and self-driving cars, to logistics and big data visualization tools. Having all that data under the auspices of just one or two mega-firms can be hugely restrictive in terms of what companies can do with the data and what features they have at their disposal, not to mention the costs involved in licensing it.

Bloomberg: Last March, brain-computing interface expert Tom Oxley sat down to dinner with Amazon founder Jeff Bezos to talk about Oxley's nascent company, Synchron. That meal in Ojai, Calif., ended with something better than dessert: Bezos told Oxley that he wanted to invest in the business. Synchron said Thursday it completed a $75 million funding round, part of it from Bezos Expeditions. The financing was led by ARCH Venture Partners, and includes a check from Gates Frontier, the venture investment arm of Microsoft co-founder Bill Gates, and others. Existing investors also participated, including Khosla Ventures -- whose founder, Vinod Khosla, introduced Oxley to Gates.

Brain-computer interfaces, known as BCIs, can interpret and stimulate parts of the brain and are seen as a possible treatment for brain injuries. New investors approached Synchron "through the lens of making an impact in neurology in an area of need," Oxley said in an interview. They "saw BCI as a future therapeutic." About 100 million people globally have upper limb impairment, he said, and could benefit from the technology. [...] Synchron's Switch device aims to help paralyzed people, such as those with amyotrophic lateral sclerosis (ALS), communicate by controlling computer cursors with their minds. The company has already enrolled three patients in a six-person US feasibility trial and implanted the device in two of them. Oxley expects the remaining patients to enroll and receive their implants in the next few months.

Microsoft has quietly banned cryptocurrency mining from its online services, and says it did so to protect all customers of its clouds. From a report: The Windows and Azure titan slipped the prohibition into an update of its Universal License Terms for Online Services that came into effect on December 1. That document covers any "Microsoft-hosted service to which Customer subscribes under a Microsoft volume licensing agreement," and on The Register's reading, mostly concerns itself with Azure.

Microsoft's Summary of Changes to the license states: "Updated Acceptable Use Policy to clarify that mining cryptocurrency is prohibited without prior Microsoft approval." Within the license itself there's hardly any more info. A section headed "Acceptable Use Policy" states: "Neither Customer, nor those that access an Online Service through Customer, may use an Online Service: to mine cryptocurrency without Microsoft's prior written approval."

An anonymous reader quotes a report from The Guardian: Rules around taking liquids and laptops through airport security will be eased from June 2024, the government has said. The announcement of the biggest relaxation of aviation security regulations in decades confirms reports last month that the change would come in the year after next. Passengers at most major UK airports will be able to carry liquids in containers holding up to two liters, a huge increase from the current limit of 100ml. Travelers will also no longer need to carry the containers in clear plastic bags, or remove tablets and laptops from hand luggage at checkpoints. The Department for Transport said major airports would be required to install new technology that gives security staff more detailed images of what is in passengers' bags. It will lay new legislation around the changes in parliament on Thursday. The transport secretary, Mark Harper, said: "The tiny toiletry has become a staple of airport security checkpoints, but that's all set to change. I'm streamlining cabin bag rules at airports while enhancing security."

"By 2024, major airports across the UK will have the latest security tech installed, reducing queueing times, improving the passenger experience, and most importantly detecting potential threats."

The US seized dozens of internet domains and charged six people in a sting intended to bring down a network of cyberattack-for-hire services, the Department of Justice announced on Wednesday. Bloomberg reports: In all, the US obtained a court order to seize 48 websites, and six people were criminally charged in relation to the takedowns, according to federal prosecutors. The FBI was in the process of seizing the websites, officials said Wednesday. The websites were used to launch, or attempt to launch, millions of so-called DDoS attacks around the world, the DOJ said in a statement. Short for distributed-denial-of- service, DDoS attacks direct huge amounts of junk internet traffic at a website or computer network to knock it offline.

DDoS-for-hire services often refer to themselves as "stresser" or "booter" tools that purport to offer a way for individuals to test the resilience of websites and services they operate, according to cybersecurity experts. In reality, the services are often used for harassment, extortion and criminal mischief, they say. The sites seized by the FBI include royalstresser, securityteam and dragonstresser, among others.

A new patent granted to Apple suggests the company could use satellite communications for more than just getting help in an emergency. 9to5Mac reports: Emergency SOS via Satellite was one of the headline features of September's Apple event -- so much so that the Far Out event name referenced it. The service launched in the US and Canada last month, and was yesterday extended to the UK, France, Germany, and Ireland. More countries will follow. A patent granted on the same day the service expanded to more countries suggests that Apple satellite plans may extend beyond text, and beyond emergency use.

Patently Apple spotted it: "Satellite communications data conveyed by transceivers #28 and antenna radiators #30 may include media data (e.g., streaming video, television data, satellite radio data, etc.), voice data (e.g., telephone voice data), internet data, and/or any other desired data." Apple has currently committed $450M to support the satellite communications feature, a reasonably sizeable amount of money even by Apple standards for a service that will be of use to a tiny fraction of iPhone owners. But if it's the start of something more, then the investment could look rather modest.

U.S. prosecutors on Wednesday said they have charged eight individuals in a securities fraud scheme, alleging they reaped about $114 million from by using Twitter and Discord to manipulate stocks. Reuters reports: The eight men allegedly purported to be successful traders on the social media platforms and then engaged in a so-called "pump and dump" scheme by hyping particular stocks to their followers with the intent to dump them once prices had risen, according to prosecutors in the Southern District of Texas.

The U.S. Securities and Exchange Commission (SEC) said it has filed related civil charges against the defendants in the scheme, claiming that seven of the defendants used Twitter and Discord to boost stocks. It said the eighth was charged with aiding and abetting the scheme with his podcast. The individuals charged were Texas residents Edward Constantinescu, Perry Matlock, John Rybarczyk and Dan Knight, along with California residents Gary Deel and Tom Cooperman, Stefan Hrvatin of Miami and Mitchell Hennessey of Hoboken, New Jersey.

Twitter co-founder Jack Dorsey said in a blog post on Tuesday that he will give a grant of $1 million per year to encrypted messaging app Signal, the first in a series of grants he plans to make to support "open internet development." Reuters reports: Social media should not be "owned by a single company or group of companies," and needs to be "resilient to corporate and government influence," Dorsey wrote in a post on Revue, a newsletter service owned by Twitter. [Editor's note: The post has been moved to Pastebin since Revue is shutting down early next year.] TechCrunch adds: Dorsey said that his hope to build a Twitter according to his wishes died in 2020 with the entrance of an unnamed activist investor. "I planned my exit at that moment knowing I was no longer right for the company," he wrote. The principles he had hoped to build on -- resilience to corporate and government control, user-controlled content with no exceptions and algorithmic moderation -- are not present in today's Twitter, nor in the one he led, he admitted. Even so, he wrote that, contrary to the insinuations accompanying the so-called Twitter Files, "there was no ill intent or hidden agendas, and everyone acted according to the best information we had at the time."

As to actual solutions, Dorsey is of course hard at work (or at least present) at Bluesky, but he calls out Mastodon and Matrix as other worthwhile avenues for development: "There will be many more. One will have a chance at becoming a standard like HTTP or SMTP. This isn't about a 'decentralized Twitter.' This is a focused and urgent push for a foundational core technology standard to make social media a native part of the internet."

A new feature in Firefox version 108 that may please musicians is the improved support for the Web MIDI API. "The MIDI standard is very close to a remarkable 40 years old, and Web MIDI does just what the name implies: it allows web apps to send and receive MIDI signals to and from musical instruments," reports The Register. "In principle this will allow sequencer apps to be implemented in Javascript." From the report: Amusingly, the last time The Reg mentioned Web MIDI, it was because Apple was taking it off Safari users, allegedly because of security concerns. Firefox 108 addresses that with a new security mechanism for preventing, and optionally permitting, apps inside browser tabs to access hardware resources -- in this instance, your MIDI ports. No, this does not mean that you can listen to CANYON.MID directly within Firefox. .MID files are not the same as General MIDI. But if you are nostalgic for that for some reason, help is at hand. A full list of features and changes can be found here.

An anonymous reader quotes a report from Ars Technica: YouTube has announced a plan to crack down on spam and abusive content in comments and livestream chats. Of course, YouTube will be doing this with bots, which will now have the power to issue timeouts to users and instantly remove comments that are deemed abusive. YouTube's post says, "We've been working on improving our automated detection systems and machine learning models to identify and remove spam. In fact, we've removed over 1.1 billion spammy comments in the first six months of 2022." It later adds, "We've improved our spambot detection to keep bots out of live chats."

When YouTube removes a message, the company says it will warn the poster that the message has been removed. The company adds, "If a user continues to leave multiple abusive comments, they may receive a timeout and be temporarily unable to comment for up to 24 hours." [...] It does not appear that YouTube is involving channel owners in any of these moderation decisions. Note that the post says YouTube will warn the poster (not the channel owner) of automated content removal and that if users disagree with the automated comment removal, they can "submit feedback" to YouTube. The "submit feedback" link on many Google products is a black hole suggestion box and not any kind of comment moderation queue, so it sounds like there will be no one that responds to a moderation dispute. YouTube says this automatic content moderation will only delete comments that violate the community guidelines—a list of pretty basic content bans—so hopefully it will stick to that.

Users of the popular MetaMask Web3 wallet will soon be able to buy the second-most-popular cryptocurrency, Ether, via PayPal. From a report: Similar to PayPal's checkout feature at online stores like Etsy and eBay, the integration with ConsenSys's MetaMask will let users buy and transfer Ether by logging in into MetaMask, tapping the "buy" button, and logging into PayPal before making a purchase.

The company said in a statement that select U.S.-based MetaMask customers will be able to use PayPal to buy Ether as of Wednesday, and that the feature will be rolled out to all U.S. users in the coming weeks. A crypto wallet like MetaMask is often the starting point for interacting with Web3 applications like play-to-earn games and some metaverse platforms. Adding PayPal to MetaMask could broaden the customer base for some of these applications by removing the complexity from buying crypto.

The Z-Wave Alliance, the Standards Development Organization (SDO) dedicated to advancing the smart home and Z-Wave technology, today announced the completion of the Z-Wave Source Code project, which has been published and made available on GitHub to Alliance members. From a report: The Z-Wave Source Code Project opens development of Z-Wave and enables members to contribute code to shape the future of the protocol under the supervision of the new OS Work Group (OSWG). The goal of the project is to provide a rich development environment that contains the relevant source code and sample applications to those seeking to play a direct role in the advancement of the Z-Wave standard. The quality and interoperability of products utilizing Z-Wave Source Code will also be enforced by a new mandatory Silicon & Stack Certification program. Full Z-Wave certification will continue to test and certify for Z-Wave S2 security, network connectivity, range, battery life, and interoperability including backwards and forwards compatibility.

"The Z-Wave Alliance is deeply committed to the global smart home market," said Mitch Klein, Executive Director of the Z-Wave Alliance. "This year the smart home conversations have focused largely on Matter. Shiny and new, and with big brands supporting the initiative, Matter is bringing a lot of attention to the smart home. This makes it easy to overlook Z-Wave as the most established, trusted, and secure smart home protocol, that also happens to have the largest certified interoperable ecosystem in the market. We firmly expect that Z-Wave will play a key role in connecting devices and delivering the experience users really want."

Microsoft aims to secure internet access for 100 million more people in Africa by 2025, teaming up with a satellite provider and setting the stage for longer-term cloud adoption, its President Brad Smith said. From a report: The software maker has long pushed to bring more people online, playing the role of facilitator among telecoms and electricity providers, governments and non-profits. Since 2017, it helped widen connectivity for 50 million people, including nearly 10 million in Africa, under its so-called Airband initiative.

Now, Microsoft is tapping satellite technology for the program for the first time, aiming to reach remote areas that have had little connectivity. In news pegged to the U.S.-Africa Leaders Summit, Microsoft said Wednesday it is working with Viasat to expand access in Nigeria, the Democratic Republic of the Congo and other countries globally. Smith said the effort was "building a new market for access to the internet, for the use of the cloud, for the power of AI, the ability to harness data. All of these things connect with our business."

couchslug writes: Mozilla's Firefox once commanded a large chunk of the browser market share, but now it stands under a pitiful 5 percent. Google money removes need to compete from a management POV as they'll get paid either way but they're still leaving money on the table.

What should Mozilla do to help Firefox regain its lost market share? Not so long ago Internet Explorer was only used to download Firefox when geeks reloaded Windows machines for others. Today, Edge, however pathetic, still outranks Firefox. Were FF not arguably the best available browser for Linux, share would be even less.

Were you the king for a day what would you do to make Firefox great again? If you dropped or deprecated Firefox what shooed you off? This is not about Firefox being good or bad but about regaining casually discarded market share.

Tether said it is winding down its practice of lending out its own stablecoins to customers by next year, addressing a broad risk to the wider crypto world. From a report: In a blog post published on its website Tuesday, the company said it would reduce secured loans issued and denominated in tether to zero throughout 2023. The growth in Tether's secured-loan program was the subject of a Wall Street Journal article earlier this month. With about $66 billion tether in circulation, tether is the market's largest stablecoin, a digital asset that is supposed to have a fixed value pegged to the U.S. dollar. The appeal of tether is that, unlike bitcoin and other cryptocurrencies that experience volatile price swings, one coin could be sold or redeemed for $1.

Tether isn't a household name, but it is a cornerstone to the crypto ecosystem. Traders often use tether as an easier way to buy crypto than through bank accounts or wire transfers. Stablecoin issuers take pains to demonstrate that they have ample funds available for redemptions. Cash and other safe financial instruments easily convertible into dollars make up the vast majority of the assets Tether lists in quarterly financial reports, but the company's secured-loan program has been growing. Tether can't be certain the loans will be paid back, that it could sell the loans to a buyer for dollars in a pinch or that the collateral it holds will be adequate. That could make it difficult for Tether to cover a large volume of redemptions in a crisis.

An anonymous reader shares a report: In mid-2020, FTX's chief engineer made a secret change to the cryptocurrency exchange's software. He tweaked the code to exempt Alameda Research, a hedge fund owned by FTX founder Sam Bankman-Fried, from a feature on the trading platform that would have automatically sold off Alameda's assets if it was losing too much borrowed money. In a note explaining the change, the engineer, Nishad Singh, emphasized that FTX should never sell Alameda's positions. "Be extra careful not to liquidate," Singh wrote in the comment in the platform's code, which it showed he helped author. Reuters reviewed the code base, which has not been previously reported.

The exemption allowed Alameda to keep borrowing funds from FTX irrespective of the value of the collateral securing those loans. That tweak in the code got the attention of the U.S. Securities and Exchange Commission, which charged Bankman-Fried with fraud on Tuesday. The SEC said the tweak meant Alameda had a "virtually unlimited line of credit." Furthermore, the billions of dollars that FTX secretly lent to Alameda over the next two years didn't come from its own reserves, but rather were other FTX customers' deposits, the SEC said.

The auto-liquidation exemption written into FTX code allowed Alameda to continually increase its line of credit until it "grew to tens of billions of dollars and effectively became limitless," the SEC complaint said. It was one of two ways that Bankman-Fried diverted customer funds to Alameda. The other was a mechanism whereby FTX customers deposited over $8 billion in traditional currency into bank accounts secretly controlled by Alameda. These deposits were reflected in an internal account on FTX that was not tied to Alameda, which concealed its liability, the complaint said.

The U.S. Supreme Court on Monday asked the Biden administration to weigh in on song-lyric website Genius' attempt to revive a lawsuit over Google's alleged theft of its work. From a report: The justices are considering whether to hear ML Genius Holdings LLC's bid to overturn a U.S. appeals court's ruling that its case against Google LLC was preempted by federal copyright law. The Supreme Court often asks for the solicitor general's input on cases in which the U.S. government may have an interest.

Genius, formerly known as Rap Genius, keeps a database of song lyrics and annotations maintained by volunteers. It sued Google and its partner LyricFind in New York state court in 2019 for allegedly posting its lyric transcriptions at the top of Google search results without permission. Genius argued Google violated its terms of service by stealing its work and reposting it on Google webpages, decreasing traffic to Genius' site. The 2nd U.S. Circuit Court of Appeals in March affirmed a decision to dismiss the case, finding Genius' breach-of-contract claims were based on copyright concerns and should have been brought under copyright law.