The Financial Times tells how the head of a Ukrainian cybersecurity company recruited dozens of "high-level Ukrainian hackers" and borrowed a Starlink internet satellite for "the large-scale infiltration of internet-connected security cameras to surveil Russian-occupied territory, and honey-trapping Russian soldiers into revealing their bases." [T]hey hacked thousands of security and traffic cameras in Belarus and parts of Ukraine that Russia had occupied. To filter the information, the team wrote machine-learning code that helped them separate military movements from ordinary traffic, and they funnelled the information to the military via a public portal.

In one example, described to the Financial Times with photographs and locations, they identified a remote Russian base near occupied Melitopol in southern Ukraine. Then, using fake profiles of attractive women on Facebook and Russian social media websites, they tricked soldiers into sending photos that they geolocated, and shared with the Ukrainian military....

A few days later, they watched on TV as the base was blown up by Ukrainian artillery.

Windows' "Defender" software is supposed to detect malware. But its Microsoft team is now investigating reports that it's mistakenly flagging Electron-based or Chromium-based applications — as malware.

"It's a false positive, and your computer is OK," wites the blog Windows Central: This morning, many people worldwide experienced Microsoft Defender warning them of a recurring virus threat.... People on Reddit are "freaking out" over not just a reported threat from Microsoft Defender but one that keeps popping up and recurring despite the alleged threat being blocked.

The threat is revealed in a pop-up message noting that "Behavior:Win32/Hive.ZY" has been detected and is listed as "severe." However, after taking action to rectify the issue, it does not go away, and the user will keep receiving the same prompt. The reminder may return after 20 seconds, with the cycle repeating endlessly.

This detection appears to be a false positive, according to a Microsoft Support forum... From DaveM121, an Independent Advisor: [I]t is a bug currently being reported by hundreds of people at the moment, it seems to be related to all Chromium based web browsers and Electron based apps like Whatsapp, Discord, Spotify, etc....
Also affected are Google Chrome and even Microsoft Edge, as well as "anything that runs Visual Studio Code," according to the article.

"The problem seems to originate from Defender's Definition/Update Version 1.373.1508.0, meaning Microsoft needs to update that file, and the issue should be resolved."

Slashdot reader artmancc writes: Like aircraft, many of the world's ocean-going vessels are required to have transponders that broadcast their location. The information is public and can be seen on websites such as AIS Marine Traffic. But according to an analysis reported in The New York Times , a maritime data company called Windward "has uncovered more than 500 cases of ships manipulating their satellite navigation systems to hide their locations."

The article, by Anatoly Kurmanaev, highlights the Cyprus-registered tanker Reliant, which was observed taking on oil at a Venezuelan refinery last December. At the same time, however, the ship was reporting its position as some 300 nautical miles (about 500 kilometers) away, "drifting innocuously off the coast of St. Lucia."
It's illegal (under international law), but the rapidly-growing practice lets ships circumvent international laws and sanctions, the Times reports, and "could transform how goods are moved around the world, with profound implications for the enforcement of international law, organized crime and global trade." Its use has included Chinese fishing fleets hiding operations in protected waters off South America, tankers concealing stops in Iranian oil ports, and container ships obfuscating journeys in the Middle East. A U.S. intelligence official, who discussed confidential government assessments on the condition of anonymity, said the deception tactic had already been used for weapons and drug smuggling. After originally discovering the deception near countries under sanction, Windward has since seen it spread as far as Australia and Antarctica.

"It's a new way for ships to transmit a completely different identity," said Matan Peled, a founder of Windward. "Things have unfolded at just an amazing and frightening speed...." The spread of AIS manipulation shows how easy it has become to subvert its underlying technology — the Global Positioning System, or GPS — which is used in everything from cellphones to power grids, said Dana Goward, a former senior U.S. Coast Guard official and the president of Resilient Navigation and Timing Foundation, a Virginia-based GPS policy group. "This shows just how vulnerable the system is," he said.

It's the 29-year-old "compatibility layer" that lets Windows software run on Unix-like systems (including games). And Neowin reports that Wine's latest version has "meaningful fixes" for Steam Deck, HoloISO, and Chimera OS gamers.

Slashdot reader segaboy81 writes: Saint's Row players rejoice! Wine 7.16 has been released and ships with fixes for this, Metal Gear Solid and Star Citizen. [As well as Ragnarok Online.] Though Deck owners may have to wait for these changes to be merged upstream.
"There are a lot of fixes for other non-gaming Windows-y stuff," Neowin adds, "and you can check out those changes at WineHQ."

Variety reports: Instagram has suspended Pornhub's widely followed account on the social platform. Before the sex site's account was removed from Instagram, Pornhub had 13.1 million followers and more than 6,200 posts.

Reps for Meta, Instagram's parent company, did not respond to a request for comment.

The move comes one month after Visa and Mastercard cut off payment privileges of TrafficJunky, the advertising arm of Pornhub parent company MindGeek. That followed a federal court ruling in July rejecting Visa's request to be removed from a case in which MindGeek is being sued for allegedly distributing child pornography and that alleges Visa knowingly facilitated MindGeek's ability to monetize the illegal content... In June, MindGeek CEO Feras Antoon and COO David Tassillo resigned. The Montreal, Quebec-based company also laid off an unknown number of employees.
The article notes that two dozen individual plaintiffs sued Pornhub and MindGeek last year alleging, among other things, "exploitation and monetization of child pornography."

The Seattle Times reports: Meta, Facebook's parent company, repeatedly and intentionally violated Washington campaign-ad transparency law and must pay penalties yet to be determined, a judge ruled Friday.

The court also denied Meta's attempt to invalidate Washington's decades-old transparency law, according to Attorney General Bob Ferguson, whose office has repeatedly sued Meta over its failure to abide by the law.... In a statement, Ferguson said his office defeated Facebook's "cynical attempt" to gut Washington's campaign-finance transparency law. "On behalf of the people of Washington, I challenge Facebook to accept this decision and do something very simple — follow the law," he said.

Meta did not immediately respond to a request for comment.

Washington's transparency law, originally passed by voters through an initiative in 1972, requires ad sellers such as Meta to disclose the names and addresses of political ad buyers, the targets of such ads and the total number of views of each ad.
Meta says that rather than comply with the law, Facebook has stopped serving campaign ads altogether in Washington, GeekWire reports, "after determining that the company wouldn't be able to reasonably comply with the law."

But "The current suit against Meta, filed in April 2020, asserts that the company continued to accept political ads in the state after promising to stop." The judge will now consider fines and a potential injunction against the social media giant, reported Eli Sanders, a Seattle journalist who covered the dispute for years for The Stranger newspaper and more recently in his Wild West newsletter....

In court filings, Meta called Washington state "an outlier," arguing that the disclosure law violates the First Amendment by unfairly targeting political speech, and imposing onerous timelines for disclosing what Meta considers unreasonable degrees of detail to people who request information about political ads.

An anonymous reader quotes a report from Ars Technica: Google is slowly opening up the Play Store's billing policies. The "user choice billing" pilot program that was announced in March is now accepting sign-ups. Google describes the program in a support article, saying, "This pilot is designed to test offering an alternative billing option next to Google Play's billing system and to help us explore offering this choice to users. We are looking to gain feedback in different countries and ensure we can maintain a positive user experience." Developers interested in billing through an alternative provider can fill out Google's sign-up form, and it sounds like Google will manually review each application. Google won't let developers use the pilot program for games -- the biggest money makers -- but only for apps.

Barring a few promotional tiers, Google and Apple both take around 30 percent not just for purchases of newly downloaded apps but also for digital purchases inside already downloaded apps. Many developers view these fees as excessive, and the push inside both ecosystems to allow third-party billing was originally pitched as a solution to high app store fees. Various regulatory bodies have forced the Google/Apple app store duopoly to open up payments, but Google and Apple have each done so without fixing the core problem of high app store fees. Apple takes a 27 percent cut of purchases processed outside the app store -- basically the original 30 percent fee minus the typical 3 percent processing fee charged by credit card companies. Google is doing something similar with this new program and will only reduce its fees by 4 percent. You'll still need to pay some kind of fee to your third-party payment processor, so with only a 4 percent reduction from Google, developers won't really save money.

In an article published by the Atlantic, writer and Director of Film and Media Studies at Washington University in St. Louis, Ian Bogost, claims e-bikes have an identity crisis and "represent not the fusion of two modes of transit, but a conflict between them." Here's an excerpt from his report: I'd like to drive less, exercise more, commune with nature, and hate myself with a lesser intensity because I am driving less, exercising more, and communing with nature. One way to accomplish all of these goals, I decided earlier this year, was to procure an e-bike. (That's a bicycle with a motor, if you didn't know.) I could use it for commuting, for errands, for putting my human body to work, and for reducing my environmental impact. A cyclist I have never been, but perhaps an e-biker I could become. [...] But I've been trying to live with one, and brother, I've got some bad news. These things are freaks. Portraying e-bikes as a simple, obvious, and inevitable evolution of transportation (or even of bicycling) doesn't fully explain these strange contraptions. The same was said of Segways, and then of Bird scooters, and both flamed out spectacularly.

Bikes have always worn many helmets: cycling as exercise, cycling as leisure, cycling as sport, cycling as transit. These roles often conflict with one another. The commuter sneers at the spinner, who pedals pointlessly to nowhere. The leisure-rider spurs the Lycra-racer, who endangers pedestrians and inspires drivers to hate cyclists. E-bikes continue, and worsen, that disorder by jumbling up aspects of bicycles and motorcycles. Strapping a motor to a bike turns out to alter more than just speed and exertion. It produces a chameleon that takes on, under various conditions, both the best and worst features of a variety of transportation technologies. The result is less an evolution of a two-wheeled machine than a pastiche of the many things such a device represents. It's a monster made from bicycles and motorbikes.

Here's what I mean: A bike can be exerting to ride, which is both a feature and a defect. Biking to the store or office offers an opportunity to move one's body instead of spreading it into the seat of a car (or even a train). Depending on distance and terrain, biking can raise your heart rate, making it an effective workout. But working out can make you sweaty and smelly, a feature incompatible with using a bike for commuting (or even errands). E-bikes, by contrast, allow a motor to assist the rider, reducing exertion and thereby delivering you to the office or cheesemonger with a dry brow and dry armpits. But in exchange for that polish, an e-bike rider gets less exercise than the equivalent trip under full pedal. [...] The truth will differ based on circumstance, but the result is the same: a weird ambiguity. An e-bike sure seems like a way to cheat at exercise, even if it really facilitates it. [...] Further reading: America Has An E-Bike Problem That Can't Be Solved With More E-Bikes (Motherboard)

An anonymous reader quotes a report from MarketWatch: The Internal Revenue Service inadvertently posted what is normally confidential information involving about 120,000 individuals before discovering the error and removing the data from its website, officials said Friday. The data are from Form 990-T (PDF), which is often required for people with individual retirement accounts who earn certain types of business income within those retirement plans. That typically includes people whose IRAs are invested in master limited partnerships, real estate or other assets that generate income, not those whose IRAs are solely invested in securities.

The disclosures included names, contact information and financial information about income within those IRAs. It didn't include Social Security numbers, full individual income information or other data that could affect a taxpayer's credit, the Treasury Department determined, according to a letter that the administration is sending to key members of Congress on Friday. The IRS and Treasury Department blamed a human coding error that happened last year when Form 990-T began to be electronically filed. The nonpublic data was mistakenly included with the public data and all of it was available for searching and downloading on the agency's website. The Wall Street Journal, which routinely analyzes nonprofit tax filings, downloaded at least some of the data before its removal.

The US Army is taking delivery of a first batch of high-tech combat goggles made by Microsoft, citing encouraging results from testing in the field. From a report: Assistant Secretary for Acquisition Douglas Bush has "cleared the Army to begin accepting" some of the 5,000 sets of goggles, spokesman Jamal Beck said in a statement. Their delivery had been placed on hold over concern about the device's performance until more rigorous testing took place. Based on the test results so far the service "is adjusting its fielding plan to allow for time to correct deficiencies and also field to units that are focused on training activities," Beck said.

Microsoft's Integrated Visual Augmentation System, or IVAS, is expected to provide a "heads-up display" for U.S. ground forces, similar to those for fighter pilots. The system -- a customized version of Microsoft's HoloLens goggles -- would let commanders project information onto a visor in front of a soldier's face and would include features such as night vision. The Army projects spending as much as $21.9 billion over a decade on Microsoft's combat goggles, spare parts and support services if all options are exercised.

T-Mobile won the lion's share of spectrum licenses in the latest Federal Communications Commission auction, helping it fill rural network gaps that evoked comparisons to Swiss cheese. T-Mobile's winning bids totaled $304.3 million, letting it obtain 7,156 licenses out of 7,872 that were sold, the FCC announced yesterday. From a report: T-Mobile's licenses are spread across 2,724 counties (out of 3,143 total in the US). The second-highest bidder in dollar terms was PTI Pacifica, which spent $17.7 million on nine licenses in five counties. "With most of the available spectrum in the 2.5 GHz band located in rural areas, this auction provides vital spectrum resources to support wireless services in rural communities," the FCC said. The auction provided up to three blocks of spectrum, totaling 117.5MHz in each county. In terms of the number of licenses won, the second-place finisher was the North American Catholic Educational Programming Fund. Its winning bids totaled $7.8 million and cover 107 licenses in 84 counties. There were 63 winning bidders overall, and the auction raised $427.8 million. Small entities and rural service providers were given discounts on the license costs. The 2.5 GHz spectrum was originally set aside for educational institutions but has been repurposed for commercial service.

Some train journeys in Spain will be free of charge from 1 September to 31 December. From a report: The scheme, announced by Prime Minister Pedro Sanchez on 12 July, applies to short and medium distance trains run by the national rail operator Renfe. It is open to all nationalities, including international tourists. Free tickets are available on all Renfe commuter trains (Cercanias and Rodalies) and mid-distance regional lines covering journeys of less than 300km (Media Distancia routes). The 100 per cent discount is only available on multi-trip tickets, not singles. Travel on other services, including long distance trains and those operated by other companies, will not come under the measures. This could mean free train travel between cities like Barcelona and Seville or Madrid and Bilbao -- if you are willing to commit to buying a season ticket. Although the tickets are free, a deposit of $10 or $20 is required to take advantage of the offer. You must have made at least 16 journeys by the end of December for this to be refunded.

Brian Krebs, reporting at Krebs on Security: In mid-June 2022, a flood of SMS phishing messages began targeting employees at commercial staffing firms that provide customer support and outsourcing to thousands of companies. The missives asked users to click a link and log in at a phishing page that mimicked their employer's Okta authentication page. Those who submitted credentials were then prompted to provide the one-time password needed for multi-factor authentication. The phishers behind this scheme used newly-registered domains that often included the name of the target company, and sent text messages urging employees to click on links to these domains to view information about a pending change in their work schedule.

The phishing sites leveraged a Telegram instant message bot to forward any submitted credentials in real-time, allowing the attackers to use the phished username, password and one-time code to log in as that employee at the real employer website. But because of the way the bot was configured, it was possible for security researchers to capture the information being sent by victims to the public Telegram server. This data trove was first reported by security researchers at Singapore-based Group-IB, which dubbed the campaign "0ktapus" for the attackers targeting organizations using identity management tools from Okta.com. "This case is of interest because despite using low-skill methods it was able to compromise a large number of well-known organizations," Group-IB wrote. "Furthermore, once the attackers compromised an organization they were quickly able to pivot and launch subsequent supply chain attacks, indicating that the attack was planned carefully in advance." It's not clear how many of these phishing text messages were sent out, but the Telegram bot data reviewed by KrebsOnSecurity shows they generated nearly 10,000 replies over approximately two months of sporadic SMS phishing attacks targeting more than a hundred companies.

Big U.S. tech companies have flocked to the World Artificial Intelligence Conference that opened Thursday in Shanghai, drawing a stark contrast with Washington's ongoing efforts to distance itself economically from China. From a report: The opening ceremony included a virtual address by Qualcomm CEO Cristiano Amon, who said the company will supply the most complete and comprehensive technology and solutions in China and the world. Apple, Advanced Micro Devices, Facebook parent Meta and GE HealthCare also have executives or booths at the event, according to Chinese media. Europe's semiconductor industry is represented as well, with executives from Netherlands-based NXP Semiconductors, a major supplier of automotive chips, and Germany's Infineon Technologies discussing development plans.

The strong American showing is good news for China, which needs advanced chip technology to power its AI development and is keen to win over companies that can provide it. The business opportunities afforded by the massive Chinese market remain essential to many American companies. China is a leading information technology production hub, as well as the world's top auto production center -- an increasingly important field for chipmakers as the number of semiconductors used in vehicles continues to rise. Qualcomm generated roughly two-thirds of its sales last year in China, a major production base for many of the smartphone manufacturers that are among its main customers. The country accounts for just under 30% of sales at AMD and Intel, 20% at Micron Technology and over 30% at NXP.

Earlier this week, Royal Caribbean Cruise Lines announced it will be adding Starlink to its whole fleet, "after a pilot service on one of its ships got rave reviews," reports TechCrunch. From the report: The test deployment aboard the Freedom of the Seas "received tremendous positive feedback," and if you've ever been on one of these boats, you can probably guess why. Current satellite at sea options aren't great: expensive and slow, having enjoyed a market with little competition or innovation for the last couple decades. Starlink Maritime will be a real kick in the pants for existing providers, considering how quickly a huge customer like Royal Caribbean decided to buy in to the new satellite on the block. Even though its coverage is limited to coastal waters for now, the speed is way better and will probably pay for itself with onboard "premium Wi-Fi" charges in the first month.

The service costs the company roughly $5,000 monthly and has at least a $10,000 upfront hardware fee for the special terminals you'll need to use it. That's a rounding error in the rolling costs of running vessels as large as modern cruise ships. (An image provided by Celebrity Cruises suggests additional dishes will be used -- I've asked for more information.) Although the Starlink constellation doesn't yet work mid-ocean (such as on container ships), the plan is to provide that capability in the northern hemisphere by the end of the year and the southern hemisphere in early 2023.

The dishes will be added to all vessels in the Royal Caribbean International, Celebrity Cruises and Silversea Cruises fleets, in case you're planning a trip. No specific dates yet, but the company says they should have the service on all ships by the end of Q1 2023.

sdinfoserv writes: Yet another setback for automated driverless vehicle grail, Cruise recalls its robotaxis after a passenger was injured in a crash. The robotaxi was turning left at an intersection, assumed an oncoming vehicle would turn in front of it and stopped, resulting in the oncoming vehicle striking the robotaxi. A Cruise spokeswoman declined to say what the robotaxi could have done differently, and declined to release video of the crash. Nevertheless, Cruise said in a statement that it made the recall "in the interest of transparency to the public."

The company also said it's issued a software update to improve the ability to predict what other vehicles will do, including in conditions similar to the crash.

According to Twitter user @runews, someone hacked the largest taxi service in Russia, Yandex Taxi, and ordered all the available taxis to an address on Kutuzovsky Prospekt. The tweet includes a video showing the traffic jam that this caused in the middle of Moscow. It's not known who was behind the attack.

In a statement to SouthFront, the company said: "The security service promptly stopped attempts to artificially accumulate cars. Drivers spent about 40 minutes in traffic due to fake orders. The issue of compensation will be resolved in the very near future." The company stressed that in order to exclude such incidents in the future, "the algorithm for detecting and preventing such attacks has already been improved."

The next generation of USB devices might support data transfer speeds as high as 80 Gbps, which would be twice as fast as current-gen Thunderbolt 4 products. From a report: The USB Promotor Group says it plans to publish the new USB4 version 2.0 specification ahead of this year's USB Developer Days events scheduled for November, but it could take a few years before new cables, hubs, PCs, and mobile devices featuring the new technology are available for purchase. According to the group, the new protocol will make use of the same USB Type-C cables and connectors as USB4 version 1.0. In fact, if you've already got a USB Type-C passive cable that's capable of 40 Gbps speeds, you should be able to use that same cable with next-gen hardware to achieve speeds up to 80 Gbps. But the new standard will also introduce a new USB Type-C active cable designed specifically for speeds up to 80 Gbps. The new standard is also backward compatible, which means that if you buy a new device with USB 4 v2 support, it will still work with older hardware featuring USB 2.0, 3.2, or Thunderbolt 3 connectivity. You just won't be able to take advantage of the full speeds.

Micron will invest about $15 billion over the next 10 years in a new memory-chip manufacturing facility in Boise, Idaho, where it is based, the company said on Thursday. From a report: The investment takes into account anticipated federal grants and credits under the CHIPS and Science Act and will create 17,000 jobs by the end of the decade. President Joe Biden last month signed a bill to provide $52.7 billion in subsidies for semiconductor production and research and to boost efforts to make the United States more competitive. "Today's announcement by Micron is another big win for America," Biden said in a statement. "We will make EVs, chips, fiber optics and other critical components here in America and we will have an economy built from the bottom up and middle out." Micron did not provide details of the new facility's capacity or the kind of chips it will produce. The expansion comes at a time when Micron has cut its fourth-quarter revenue forecast due to weak demand. Peer Seagate too has slashed its first-quarter expectations.

Google has announced $20 million in new commitments to expand computer science education among communities that are underrepresented in the field. The company expects its funds to improve educational access for more than 11 million American students. From a report: "If we don't get this right, the gaps that exist today will be exacerbated," Google CEO Sundar Pichai said on Wednesday. "Technology will end up playing such a big role in the future. That's the fundamental reason we do it." Google's goal in distributing funds, Pichai says, was to support groups with "deep expertise in education" who work with underrepresented communities -- including students in rural areas, as well as racial and gender minorities.

The slate includes a mix of newer organizations and longtime Google partners. 4-H, receiving $5 million, has been working with the company since 2017. The Oakland-based Hidden Genius Project, also receiving funds, was a winner of Google's 2015 Impact Challenge. Other beneficiaries include UT Austin's Expanding Computing Education Pathways (ECEP) Alliance, CUNY's Computing Integrated Teacher Education project, and the nonprofit CodePath. Urban funding will focus on Atlanta, Chicago, New York, Washington, DC, and Los Angeles. "Living in the Bay Area... it's clear to me how many schools here have already transitioned and incorporated exposure to CS education as part of their curriculum," Pichai says. "It's important that this happens across the country, to rural areas, to places that are historically underrepresented."