Google agreed to a record $391.5 million privacy settlement with a 40-state coalition of attorneys general on Monday for charges that it misled users into thinking they had turned off location tracking in their account settings even as the company continued collecting that information. From a report: Under the settlement, Google will also make its location tracking disclosures clearer starting in 2023. The attorneys general said that the agreement was the biggest internet privacy settlement by U.S. states. It capped a four-year investigation into the internet search giant's practices from 2014-2020, which the attorneys general said violated the states' consumer protection laws. Google said it had already corrected some of the practices mentioned in the settlement. "Consistent with improvements we've made in recent years, we have settled this investigation which was based on outdated product policies that we changed years ago," said Jose Castaneda, a spokesman for the company. States have taken an increasingly central role in reining in the power and business models of Silicon Valley corporations, amid a vacuum of action from federal lawmakers.

Amazon plans to lay off approximately 10,000 people in corporate and technology jobs starting as soon as this week, The New York Times reported Monday, citing people with knowledge of the matter, in what would be the largest job cuts in the company's history. From the report: The cuts will focus on Amazon's devices organization, including the voice-assistant Alexa, as well as at its retail division and in human resources, said the people, who spoke on condition of anonymity because they were not authorized to speak publicly. The total number of layoffs remains fluid. But if it stays around 10,000, that would represent roughly 3 percent of Amazon's corporate employees and less than 1 percent of its global work force of more than 1.5 million, which is primarily composed of hourly workers. Amazon's planned retrenchment during the critical holiday shopping season -- when the company typically has valued stability -- shows how quickly the souring global economy has put pressure on it to trim businesses that have been overstaffed or underdelivering for years.

Thousands of smartphone applications in Apple and Google's online stores contain computer code developed by a technology company, Pushwoosh, that presents itself as based in the United States, but is actually Russian, Reuters reported Monday. From the report: The Centers for Disease Control and Prevention (CDC), the United States' main agency for fighting major health threats, said it had been deceived into believing Pushwoosh was based in the U.S. capital. After learning about its Russian roots from Reuters, it removed Pushwoosh software from seven public-facing apps, citing security concerns. The U.S. Army said it had removed an app containing Pushwoosh code in March because of the same concerns. That app was used by soldiers at one of the country's main combat training bases.

According to company documents publicly filed in Russia and reviewed by Reuters, Pushwoosh is headquartered in the Siberian town of Novosibirsk, where it is registered as a software company that also carries out data processing. It employs around 40 people and reported revenue of 143,270,000 rubles ($2.4 mln) last year. Pushwoosh is registered with the Russian government to pay taxes in Russia. On social media and in U.S. regulatory filings, however, it presents itself as a U.S. company, based at various times in California, Maryland and Washington, D.C., Reuters found.

India has lifted the download ban on VLC, more than nine months after it mysteriously blocked the official website of the popular media playback software in the South Asian market. From a report: VideoLAN, the popular software's developer, filed a legal notice last month seeking an explanation from the nation's IT and Telecom ministries for the block order. The Ministry of Electronics and IT has removed its ban on the website of VLC media player, New Delhi-based advocacy group Internet Freedom Foundation, which provided legal support to VideoLAN, said on Monday. VideoLAN confirmed the order. Indian telecom operators began blocking VideoLAN's official website, where it lists links to downloading VLC, in February of this year, VideoLAN president and lead developer Jean-Baptiste Kempf told TechCrunch in an earlier interview. India is one of the largest markets for VLC.

Apple's next major product -- a mixed-reality headset that it hopes will vault the company into a new era of computing -- isn't set to arrive until next year. But job listings and personnel changes at the company give a preview of some of the device's capabilities. From a report: Now we're gleaning additional details, thanks to Apple job listings published over the last several months and changes to the team behind the future headset -- the Technology Development Group, or TDG. A few job listings indicate that Apple is ramping up its work to bolster the device with content. The company is searching for a software producer with experience in visual effects and game asset pipelines who can create digital content for augmented- and virtual-reality environments.

The listings also imply that Apple is looking to build a video service for the headset featuring 3D content that can be played in virtual reality. This would follow the company's 2020 acquisition of NextVR, which partnered with artists and professional sports leagues to transmit VR content to headsets. Apple is also looking for engineers who can work on development tools geared toward virtual and augmented reality. Unsurprisingly, it appears that the company wants its new operating system to use App Intents, which lets apps work with features like Siri and Shortcuts.

"We are looking for a software engineer who will work on the App Intents framework to help design and implement solutions to unlock deep system intelligence, enable new developer tools, and facilitate novel user interactions from application data models which are leveraged by a variety of system services such as Shortcuts, Siri, Search, and more," one job listing for the TDG department says. The most interesting job listing is one that specifically calls out the development of a 3D mixed-reality world, suggesting that Apple is working on a virtual environment that is similar to the metaverse -- though don't expect Apple to embrace that term. Its marketing chief said at a recent event that metaverse is "a word I'll never use."

346 people died in two separate crashes of the Boeing 737 MAX — one in 2018 and one in 2019. And then in 2021, a Boeing 737-500 crashed in Indonesia, killing all 62 people on board.

Thursday Indonesia's national transportation safety committee (KNKT) released its final report on that 737-500 crash. It found that after takeoff the plane's autothrottle system (which automatically adjusts power to the jet's two engines) became stuck on the right engine, "as a result of friction or binding within the mechanical system," according to the Seattle Times. The newspaper also notes that the same system "had repeatedly malfunctioned on the aircraft before the crash."

The report also blames an inadequate response from the pilots. As the jet climbed away from the runway in Jakarta and the pilots adjusted the autopilot mode to reduce thrust, the autothrottle duly eased back power to the left engine but the right engine continued at full power. The resultant asymmetric thrust caused the plane to turn to the left even as the pilots steered the control wheel to the right and the autopilot followed by moving control surfaces on the wing to roll right. Another system on the plane designed to monitor for asymmetric thrust also malfunctioned and delayed disengaging the autothrottle as it should have.

But as this was happening, the pilots were unaware of it. The pilots should have seen from the instrument panel attitude display that the plane was deviating from its flight path to the left. And they should have noted the right thrust lever not having moved backward like the left lever, alerting them to the asymmetric thrust. They apparently missed both clues.

Just under 5 minutes after takeoff, as the jet banked steeply left, a warning alert sounded in the cockpit: "BANK ANGLE." Two seconds after the alert sounded, at an altitude of 10,700 feet, the pilot in command disengaged the autopilot system to take manual control. This pilot, 54 years old with almost 18,000 hours of flight time, half of that in a 737, clearly didn't realize that the autopilot had been compensating and masking the effect of the asymmetric thrust in the engines. With the autopilot gone, the countering forces from the control surfaces on the wings were removed and "the yaw and roll forces of the asymmetric power rolled the aircraft to the left," the investigation report states.

The pilot was so unaware of what was happening that he steered the control wheel further left instead of right, which "increased the roll tendency of the aircraft to the left." The plane rolled more than 45 degrees left and went nose down.

At that moment, the autothrottle finally disengaged. But it was too late to recover. The flight data stopped recording as the plane crashed into the sea.

The report faults the pilots for their lack of recognition of the situation.

It blames "pilot automation complacency" (overreliance on the automated system) and "confirmation bias" (believing that the plane was steering right as commanded, when in fact it was rolling left).

The Indonesian safety authority found that Sriwijaya Air provided "inadequate" training for its pilots in upset recovery, which means righting an airplane if it inadvertently stalls, rolls or pitches to deviate from the intended flight position. Indonesia now mandates detailed upset recovery training for all airline pilots.

The KNKT report also states that the system that was supposed to monitor the 737's autothrottle for asymmetric thrust and disengage it — the Cruise Thrust Split Monitor — may have been misrigged by maintenance personnel, or its failure may have been due to a sensor fault providing an incorrect value for the positions of the control surfaces on the wings to the autothrottle computer.

The report notes that Boeing is issuing a bulletin to all 737 operators requiring repetitive inspections of the control surface sensors. An Airworthiness Directive that will make this mandatory is pending from the Federal Aviation Administration.

America's Department of Energy awarded $3 million to Oregon State University "to explore the development of a new rechargeable battery technology that would accelerate the clean energy transition," reports the Associated Press, "without relying on rare finite minerals such as lithium, cobalt and nickel." OSU chemistry professor Xiulei "David" Ji, who will lead a battery research team, said it could be a game-changer. "It's a new paradigm," he told Oregon Public Broadcasting. "We are very excited and very grateful to have this opportunity to work on this project...." His plan is to explore anion batteries that provide the necessary components without using limited minerals like the ones lithium batteries use and that could potentially increase how much energy a battery can hold. "The new battery chemistry does not have to rely on these elements," Ji said. "That's the benefit of the new chemistry. It's a game changer."

Ji said the primary market for these batteries would be electric vehicles, but he doesn't rule out the possibility of anion batteries being used by large-scale utilities, like Portland General Electric's solar, wind and battery facility. He also said they could be commercialized soon and be used in homes.
The article points out that the price of lithium tripled in 2021, and according to the International Energy Agency, the world could face lithium shortages by 2025.

California's EV-funding proposition 30 "has suffered an unambiguous defeat," reports Bay City News.

The measure would've increased taxes by 1.75% on income above $2 million a year (for roughly 43,000 California multimillionaires) to fund electric car rebates and combat wildfires. "In the statewide vote count as of late Wednesday, 59% rejected the proposal."

So what happened? Before the election the New York Times described the fight: On one side, environmentalists have teamed up with firefighters, Democrats and Lyft, the ride-share company, which has poured more than $45 million into its campaign to pass a climate initiative. On the other, [Democrat] Governor Gavin Newsom has aligned himself with California billionaires, teachers and Republicans in opposition....

Proponents say the measure would raise money from those who can afford it to fund critical state mandates on electric vehicle sales and ride-share miles that have been highly promoted but not fully funded. Opponents argue it would require taxpayers to foot the bill for electric vehicle subsidies that Uber and Lyft would eventually have to pay for on their own. In August, California regulators voted to ban the sale of all gasoline-powered cars in the state by 2035, which was hailed by environmentalists — and by Newsom — as a significant step in combating climate change. Last year, the state implemented an even earlier standard for ride-share companies like Lyft and Uber: 90 percent of ride-share drivers' miles will have to be in electric vehicles by 2030.

Left out of those mandates was an explanation of who would be expected to pay for the switch to greener cars.... The opposition to the measure, which includes some of the wealthy individuals who would have to pay more in taxes and business groups opposed to tax increases, argues that the proposal benefits corporations, because Uber and Lyft would eventually have to comply with the new state electric vehicle mandates and would have to cough up the money to do so on their own, most likely by offering subsidies for their drivers to buy battery-powered cars.

The "no" campaign got a huge boost over the summer from Newsom, who, despite his focus on fighting climate change, has emerged as its highest-profile opponent and appeared in an television advertisement attacking Lyft in September. "Prop. 30 is being advertised as a climate initiative," Newsom says in the ad as he strolls across the screen. "But in reality, it was devised by a single corporation, to funnel state income taxes to benefit their company."
Currently Lyft's gig workers use their own cars — but was the opposition looking ahead to a future where Lyft owns its own fleet of self-driving (and electric) robo-taxis?

In any case, Proposition 30 "was among the country's top five ballot measures this Election Day in terms of total contributions," reports Axios, "with nearly $73 million spent by parties on either side, per Ballotpedia. The results "are an unfortunate setback for the climate movement," Lyft — which spent about $45 million supporting Prop 30 — said in a statement Wednesday.

On the other side of the country, Massachusetts voters approved a new 4% tax on those making more than $1 million for transportation and education funding, broadly speaking. And New Yorkers OK'd $4.2 billion in bond sales to fund climate change mitigation and resiliency programs.

After 908 days in orbit, the U.S. military's X-37B space plane finally touched down today in Florida, reports Space.com.

And "the Boeing-built space plane also carried a service module on the newly completed mission, a first for the U.S. Space Force's X-37B program." "With the service module added, this was the most we've ever carried to orbit on the X-37B, and we're proud to have been able to prove out this new and flexible capability for the government and its industry partners," Jim Chilton, senior vice president at Boeing Space and Launch, said in a statement today.

The X-37B resembles NASA's now-retired space shuttle but is much smaller, measuring just 29 feet (8.8 meters) from nose to tail. The space shuttle was 122 feet (37 m) long and was piloted — another key difference, as the X-37B is autonomous.

The U.S. Space Force is thought to own two X-37B vehicles, both of which were provided by Boeing. To date, the duo has flown six orbital missions, each of which is known by the signifier OTV ("Orbital Test Vehicle"):

OTV-1: Launched on April 22, 2010 and landed on Dec. 3, 2010 (duration 224 days).
OTV-2: March 5, 2011 to June 16, 2012 (468 days).
OTV-3: Dec. 11, 2012 to Oct. 17, 2014 (674 days).
OTV-4: May 20, 2015 to May 7, 2015 (718 days).
OTV-5: Sept. 7, 2017 to Oct. 27, 2019 (780 days).
OTV-6: May 17, 2020 to Nov. 12, 2022 (908 days).

Thursday the Kudelski Group's cybersecurity division released "a tool for Linux that allows creation of multiple hidden volumes on a storage device in such a way that it is very difficult, even under forensic inspection, to prove the existence of such volumes."

"Each volume is encrypted with a different secret key, scrambled across the empty space of an underlying existing storage medium, and indistinguishable from random noise when not decrypted." Even if the presence of the Shufflecake software itself cannot be hidden — and hence the presence of secret volumes is suspected — the number of volumes is also hidden. This allows a user to create a hierarchy of plausible deniability, where "most hidden" secret volumes are buried under "less hidden" decoy volumes, whose passwords can be surrendered under pressure. In other words, a user can plausibly "lie" to a coercive adversary about the existence of hidden data, by providing a password that unlocks "decoy" data.

Every volume can be managed independently as a virtual block device, i.e. partitioned, formatted with any filesystem of choice, and mounted and dismounted like a normal disc. The whole system is very fast, with only a minor slowdown in I/O throughput compared to a bare LUKS-encrypted disk, and with negligible waste of memory and disc space.

You can consider Shufflecake a "spiritual successor" of tools such as Truecrypt and Veracrypt, but vastly improved. First of all, it works natively on Linux, it supports any filesystem of choice, and can manage up to 15 nested volumes per device, so to make deniability of the existence of these partitions really plausible.
"The reason why this is important versus "simple" disc encryption is best illustrated in the famous XKCD comic 538," quips Slashdot reader Gaglia (in the original submission. But the big announcement from Kudelski Security Research calls it "a tool aimed at helping people whose freedom of expression is threatened by repressive authorities or dangerous criminal organizations, in particular: whistleblowers, investigative journalists, and activists for human rights in oppressive regimes.

"Shufflecake is FLOSS (Free/Libre, Open Source Software). Source code in C is available and released under the GNU General Public License v3.0 or superior.... The current release is still a non-production-ready prototype, so we advise against using it for really sensitive operations. However, we believe that future work will sensibly improve both security and performance, hopefully offering a really useful tool to people who live in constant danger of being interrogated with coercive methods to reveal sensitive information.

According to The Verge, Volkswagen Norway as part of a marketing exercise "claims to have built an office chair that not only looks worthy of a Star Trek captain but also can drive around the office on its own five wheels -- at speeds of up to 20 kilometers per hour (roughly 12mph)." From the report: The company says it can travel a distance of 12 kilometers (roughly 7.5 miles) on its swappable battery. That's not all: it's got more amenities than my last car, with 360-degree collision avoidance sensors, a backup camera with full guidance, a heated embroidered seat, party lights, a touchscreen display, a USB charger, and a tow hitch. LED headlights, a seatbelt, and a horn come standard. There's even a "trunk" (a pocket, anyhow) with 0.17 cubic feet of space for documents and / or a laptop. The company has uploaded a behind-the-scenes video on YouTube on how it was created, including some footage of the final product that "will be available for test drives at various locations."

Four years after Laserlike was acquired by Apple to boost its web search technology, the founders have quit to rejoin Google. AppleInsider reports: Prior to forming Laserlike in 2015, Anand Shukla, Srinivasan Venkatachary and Steven Baker were all Google employees. Their work at Apple is one reason the company has been predicted to launch its own search engine equivalent to Google's. Apple acquired Laserlike in 2018, though the deal wasn't made public until the following year. As part of the acquisition, the company's three founders were, and ultimately they led a 200-strong search team at Apple.

According to The Information, Srinivasan Venkatachary has now returned to Google. He is reportedly the company's new vice president of engineering. Venkatachary reports to James Manyika, senior vice president of technology and society. Baker and Shukla now both work on Manyika's team. It's not known whether all three quit Apple at the same time, or whether Venkatachary is just the latest to move. According to The Information's source, Apple is estimated to be about four years away from launching a Google Search rival.

MachineShedFred writes: Tesla has opened their charging connector and equipment standards as the "North American Charging Standard" (NACS), including links to technical specifications and connector data sheets and CAD files. The formerly proprietary connector, now called NACS, is the most common charging standard in North America: "NACS vehicles outnumber CCS two-to-one, and Tesla's Supercharging network has 60% more NACS posts than all the CCS-equipped networks combined." Tesla noted that charging network operators "already have plans in motion to incorporate NACS at their chargers."

In a post to /r/reddit, Reddit announced that it began rolling out a feature that will allow users to mute specific communities that contain content they don't want to see. Ars Technica reports: If you mute a subreddit using this feature, posts from it won't show up in your notifications, home feed recommendations, or Popular, Reddit's feed of the most upvoted content from across its various communities. Later, Reddit plans to apply muting to other places like "All" and "Discover." Muting a community won't stop you from being able to visit or post it, though. You can mute up to 1,000 communities and tweak your muted list at any time in Settings. The report notes that this new muting feature is only available in Reddit's iOS and Android apps for now. For updates on availability, Reddit directs users to their changelog feed.

Meta is exiting its Portal smart display business and will wind down work on smartwatch projects, reports Reuters citing company executives during an employee townhall meeting on Friday. The news comes two days after Meta announced about 11,000 job cuts, or 13% of its workforce, "the first mass layoffs in the company's 18-year history."

Italy's police said on Friday they had dismantled the country's largest network for online TV piracy, one that accounted for 70% of illegal streaming across the nation. From a report: The network had more than 900,000 users and yielded "millions of euros" in monthly profits, a police statement said. As part of the operation, premises were searched and material seized in more than 20 cities up and down the country, including Rome, Naples and Catania, the statement added. The raids were ordered by prosecutors in Catania, Sicily, who were due to give more details in a press conference later on Friday.

Carvana, the used car dealer that trusts robotic algorithms to buy your car practically sight unseen, was the third-fastest company to ever make it onto the Fortune 500 -- only Amazon and Google did it faster. But for the third day in a row, its stock is trading for just around $7 a share, plummeting 98 percent from its all-time high of over $360 last August. From a report: My first thought on reading the news: maybe the company shouldn't let robots pay people more than their cars cost brand-new? This February, I sold a seven-year-old car to Carvana for more than I paid out the door and wrote a story about the perfect storm of factors that led to that outcome. (Stimulus checks! Chip shortages! Covid fears! Unheard-of demand for vehicles! Blind trust in algorithms!) But after reading through the past six quarters of the company's financial results and shareholder letters, it seems much simpler than algorithms running amok. Carvana's humans bet badly by buying too many cars. Throughout 2021, as Carvana saw its first and only quarterly profit, the company kept telling investors how it planned to scale up production (read: get more used cars ready to sell) to meet the pandemic's unprecedented demand.

Google says it has evidence that a commercial surveillance vendor was exploiting three zero-day security vulnerabilities found in newer Samsung smartphones. From a report: The vulnerabilities, discovered in Samsung's custom-built software, were used together as part of an exploit chain to target Samsung phones running Android. The chained vulnerabilities allow an attacker to gain kernel read and write privileges as the root user, and ultimately expose a device's data. Google Project Zero security researcher Maddie Stone said in a blog post that the exploit chain targets Samsung phones with a Exynos chip running a specific kernel version. Samsung phones are sold with Exynos chips primarily across Europe, the Middle East, and Africa, which is likely where the targets of the surveillance are located.

Stone said Samsung phones running the affected kernel at the time include the S10, A50, and A51. The flaws, since patched, were exploited by a malicious Android app, which the user may have been tricked into installing from outside of the app store. The malicious app allows the attacker to escape the app sandbox designed to contain its activity, and access the rest of the device's operating system. Only a component of the exploit app was obtained, Stone said, so it isn't known what the final payload was, even if the three vulnerabilities paved the way for its eventual delivery.

Modern airliner designs date from the 1950s: a metal tube and swept-back wings with jet engines slung underneath. They get you where you're going and back. But after decades of research, something very different could be flying you on vacation by the late 2030s. From a report: Unconventional designs such as "blended-wing" shapes now used for some military jets, which combine the cabin and wings in one piece, have been floated for years as possibilities for passenger aircraft. Now the rise of climate-change concerns and emergence of new manufacturing materials have brought a rethink a step closer to reality, scientists at the National Aeronautics and Space Administration say. Just about every fuel-saving aerodynamic efficiency has been wrung out of existing aircraft. The next generation will need bolder designs to meet new environmental standards and airline economics, and that's forcing plane makers back to the drawing board.

The designs now exist mainly as artists' renderings, models and small-scale prototypes. That could be set to finally change. NASA in June launched a competition for U.S. companies to design and build a full-scale demonstrator. The rules require entrants to target planes around the size of a Boeing Co. 737 that can carry 150 passengers. The agency wants a prototype that could fly as early as 2027 and be ready for mass production in the next decade. The agency won't comment on the proposals submitted by the September deadline, but points to the recent history of alternative designs by researchers and aircraft makers. These include plane bodies that look like flying wings with passengers seated 10 or more across, compared with rows of six on a Boeing 737. Others have long, thin wings that would have to fold to fit into airport gates. In some designs, jets under the wing are replaced by rear-facing propellers mounted on the back of the plane.

NASA held a similar competition 10 years ago that focused more on the efficiency of the designs than the ability to make them commercially feasible. Now, it is focused on aircraft that are more efficient and can enter the fleet to make a difference to aviation industry emissions. "We've been working on advanced configurations for 20 years, but last time I went to the airport I didn't see any of them flying around," says Brent Cobleigh, NASA's flight demonstrations and capabilities project manager. Aircraft designers have coalesced around three main designs, which people involved in the latest contest said are expected to feature prominently in the entries. They carry exotic names -- such as transonic truss-braced wings, blended-wing bodies and double bubbles -- that reflect how far removed they are from most of the conventional planes that now carry commercial passengers worldwide. NASA earmarked only around $1 billion of its $26 billion fiscal 2023 budget request for aircraft-related activities, in line with past years, but officials say its work has influenced every part of planes now flying.

Kaspersky is stopping the operation and sales of its VPN product, Kaspersky Secure Connection, in the Russian Federation, with the free version to be suspended as early as November 15, 2022. BleepingComputer reports: As the Moscow-based company informed on its Russian blog earlier this week, the shutdown of the VPN service will be staged, so that impact on customers remains minimal. Purchases of the paid version of Kaspersky Secure Connection will remain available on both the official website and mobile app stores until December 2022. Customers with active subscriptions will continue to enjoy the product's VPN service until the end of the paid period, which cannot go beyond the end of 2023 (one-year subscription).

Russian-based users of the free version of Kaspersky Secure Connection will not be able to continue using the product after November 15, 2022, so they will have to seek alternatives. BleepingComputer emailed Kaspersky questions regarding its decision to stop offering VPN products in Russia, but a spokesperson has declined to provide more information. Russia's telecommunications watchdog, Roskomnadzor, announced VPN bans in June 2021 and then again in December 2021. "The reason for banning 15 VPNs in the country was because their vendors refused to connect their services to the FGIS database, which would apply government-imposed censorship in VPN connections, and would also make user traffic and identity subject to state scrutiny," reports BleepingComputer.

"Ever-increasing controls are strangling VPN usage in Russia. On Tuesday, the Ministry of Digital Transformation requested all state-owned companies to declare what VPN products they use, for what purposes, and in what locations."