With people more wary than ever about clicking on suspicious links in emails and text messages, zero-click hacks are being used more frequently by government agencies to spy on activists, journalists and others, according to more than a dozen surveillance company employees, security researchers and hackers interviewed by Bloomberg News. From a report: Once the preserve of a few intelligence agencies, the technology needed for zero-click hacks is now being sold to governments by a small number of companies, the most prominent of which is Israel's NSO Group. Bloomberg News has learned that at least three other Israeli companies -- Paragon, Candiru and Cognyte Software -- have developed zero-click hacking tools or offered them to clients, according to former employees and partners of those companies, demonstrating that the technology is becoming more widespread in the surveillance industry.

There are certain steps that a potential victim can take that might reduce the chances of a successful zero-click attack, including keeping a device updated. But some of the more effective methods -- including uninstalling certain messaging apps that hackers can use as gateways to breach a device -- aren't practical because people rely on them for communication, said Bill Marczak, a senior research fellow at Citizen Lab, a research group at the University of Toronto that focuses on abuses of surveillance technology.

In a desperate bid to get his children offline, some guy in France apparently blitzed his entire town's internet connection -- by accident, that is. He now faces up to six months in prison for the outage. From a report: A report from the outlet France Bleu says the unnamed dad tried to use a multi-wave band jammer to temporarily cut off the internet connection at his residence in the town of Messanges. Jammers, which are illegal in France (and also in the U.S.), work by interfering with telecommunication signals, thus stifling connections. Despite their illegality, people still get arrested for using them, pretty much all the time. In this case, the dad in question deployed the device in the hopes of prying his social-media-addicted children away from the grips of their devices.

When later questioned by a government official, the man apparently admitted that he only wanted to cut off the connectivity to his house at night, between the hours of midnight and 3 a.m. -- probably so his kids would put the phones down and just go to bed already. Unfortunately for the padre, the jamming device was powerful enough to cut connectivity not just to his own residence but, unbeknownst to him, to those of many, many others in the surrounding area. His neighbors eventually started reporting their outages, after which the government was forced to investigate.

An anonymous reader quotes a report from Ars Technica: Now that Windows 11's first major post-release update has been issued, Microsoft has started testing a huge collection of new features, UI changes, and redesigned apps in the latest Windows Insider preview for Dev channel users. By and large, the changes are significant and useful -- there's an overhauled Task Manager, folders for pinned apps in the Start menu, the renewed ability to drag items into the Taskbar (as you could in Windows 10), improvements to the Do Not Disturb and Focus modes, new touchscreen gestures, and a long list of other fixes and enhancements.

But tucked away toward the bottom of the changelog is one unwelcome addition: like the Home edition of Windows 11, the Pro version will now require an Internet connection and a Microsoft account during setup. In the current version of Windows 11, you could still create a local user account during setup by not connecting your PC to the Internet -- something that also worked in the Home version of Windows 10 but was removed in 11. That workaround will no longer be available in either edition going forward, barring a change in Microsoft's plans. While most devices do require a sign-in to fully enable app stores, cloud storage, and cross-device sharing and syncing, Windows 11 will soon stand alone as the only major consumer OS that requires account sign-in to enable even basic functionality.

Roku, the leading supplier of smart TV OS in North America, is looking at possibly building its own TV sets. Nexttv reports: According to Business Insider, Roku convened a focus group earlier this month in which participants were shown "different models, feature sets and names, sizes, price points," of smart TVs, according to an individual "familiar" with the event. This unnamed person told the news site that the moderator made it clear that Roku is exploring the possibility of "going it alone" with its own "manufacturing operation," and not merely attaching its brand to an existing smart TV manufacturer's product line.

Hackers backed by the Russian government have breached the networks of multiple US defense contractors in a sustained campaign that has revealed sensitive information about US weapons-development communications infrastructure, the federal government said on Wednesday. Wired reports: The campaign began no later than January 2020 and has continued through this month, according to a joint advisory by the FBI, the National Security Agency, and the Cybersecurity and Infrastructure Security Agency. The hackers have been targeting and successfully hacking cleared defense contractors, or CDCs, which support contracts for the US Department of Defense and intelligence community. "During this two-year period, these actors have maintained persistent access to multiple CDC networks, in some cases for at least six months," officials wrote in the advisory. "In instances when the actors have successfully obtained access, the FBI, NSA, and CISA have noted regular and recurring exfiltration of emails and data. For example, during a compromise in 2021, threat actors exfiltrated hundreds of documents related to the company's products, relationships with other countries, and internal personnel and legal matters."

The exfiltrated documents included unclassified CDC-proprietary and export-controlled information. This information gives the Russian government "significant insight" into US weapons-platforms development and deployment timelines, plans for communications infrastructure, and specific technologies being used by the US government and military. The documents also include unclassified emails among employees and their government customers discussing proprietary details about technological and scientific research.

The hackers have used a variety of methods to breach their targets. The methods include harvesting network passwords through spear phishing, data breaches, cracking techniques, and exploitation of unpatched software vulnerabilities. After gaining a toehold in a targeted network, the threat actors escalate their system rights by mapping the Active Directory and connecting to domain controllers. From there, they're able to exfiltrate credentials for all other accounts and create new accounts. The hackers make use of virtual private servers to encrypt their communications and hide their identities, the advisory added. They also use "small office and home office (SOHO) devices, as operational nodes to evade detection."

An anonymous reader quotes a report from Gizmodo: It's been less than a month since the New York Times bought Wordle, but it's wasting no time in ruining everyone's favorite word game in all the shitty ways you'd expect from a billion-dollar behemoth. And -- you guessed it -- that means your little daily puzzles are being loaded with ad trackers now, too. Most of us assumed that this was going to happen eventually. I mean, the Times dropped a cool seven-figure sum on a game that's still free to play (at least for right now), so those profits would need to be recouped from somewhere. And this week, some code-savvy Worlders stumbled onto where that "somewhere" was: a dozen different trackers shoved into places where there were literally zero before. Taking a look for ourselves, Gizmodo found that some of the trackers were from the New York Times proper, but most were used to send data to third-party players like Google. [...]

Here's just one nightmare scenario out of the bajillion or so that could come out of a system like this: Ad trackers were created to shove t-shirts and mugs onto all of our timelines, but they can also be used for outright surveillance. There are countless cases of cops using the data gleaned from those shitty ads to track protestors, immigrants, and anyone else they'd want completely warrant-free. And two of the companies that officers tap on the regular for this work -- Google and Oracle (via its infamous Bluekai subsidiary) -- are tied up in Wordle's shiny new trackers. Every time you open the page to see the day's puzzle to complain about how hard it is, the page pings details back to those companies -- and the data it shares can be extremely detailed, as Bluekai's own documents (PDF) lay out. At the very least, it's likely sending broad strokes to say you were on the site at a certain time, while your device was at a certain location.

Sure, adtech players can (and will) pull much shadier shit to share more data on the regular. But as a for instance, if a cop wanted to set a geofence warrant around your neighborhood -- tracking which devices are caught in a specific area at a specific time -- they could easily tap into Bluekai's ad data to get those wheres and whens. And now the fact that you Wordle'd at your local coffee shop on a Tuesday becomes one of the reasons that you ended up on some fed's watch list for a crime you didn't commit but will somehow end up jailed for anyway. This absolute nightmare is almost certainly not what's happening on Wordle right now (phew). And again, this scenario applies to most of the sites you likely visit every day, not just Wordle. But the real scary part about all of this -- at least to me -- is that it can.

As part of Intel's annual investor meeting taking place today, Raja Koduri, Intel's SVP and GM of the Accelerated Computing Systems and Graphics (AXG) Group delivered an update to investors on the state of Intel's GPU and accelerator group, including some fresh news on the state of Intel's first generation of Arc graphics products. AnandTech: Among other things, the GPU frontman confirmed that while Intel will indeed ship the first Arc mobile products in the current quarter, desktop products will not come until Q2. Meanwhile, in the first disclosure of chip volumes, Intel is now projecting that they'll ship 4mil+ Arc GPUs this year. In terms of timing, today's disclosure confirms some earlier suspicions that developed following Intel's CES 2022 presentation: that the company would get its mobile Arc products out before their desktop products. Desktop products will now follow in the second quarter of this year, a couple of months behind the mobile parts. And finally, workstation products, which Intel has previously hinted at, are on their way and will land in Q3.

Federal investigators spent years hunting for clues in the 2016 hacking of the Bitfinex cryptocurrency exchange, when thieves stole bitcoin now worth $4.5 billion. In the end, what helped lead them to two suspects was something much more quotidian: a $500 Walmart gift card. From a report: That card and more than a dozen others like it, including for Uber, Hotels.com and PlayStation, were linked to emails and cloud service providers belonging to a young Manhattan couple, Ilya "Dutch" Lichtenstein and Heather R. Morgan, according to a criminal complaint. Authorities arrested the couple after seizing $3.6 billion worth of bitcoin allegedly in their control -- the Justice Department's largest financial seizure ever. New details have since emerged about the investigation, in particular how it took advantage of not only advanced forensic tools but also the growing push to rein in crypto crime, including by the industry itself. The discoveries would have been less likely to happen around the time of the hack, when bitcoin was far outside the mainstream of the financial world.

Five major Canadian banks went offline for hours blocking access to online and mobile banking as well as e-transfers for customers. From a report: The banks reportedly hit by the outage include Royal Bank of Canada (RBC), BMO (Bank of Montreal), Scotiabank, and the Canadian Imperial Bank of Commerce (CIBC). Canada's five major banks went offline yesterday impeding access to e-Transfers, online and mobile banking services for many.

Recruiters in tech are desperate for workers. But candidates are the ones who hold all the power. From a report: [...] Recruiters working in technology these days do not receive candy, flowers or thank-yous. The recruiter is lucky if she can get someone on the phone -- if she receives so much as an email in response. Technology workers need court no one: Along with microchips, toilet paper and Covid tests, tech workers will be recalled as one of the great, pressing shortages of this pandemic. Estimates of the unemployment rates for tech workers are about 1.7 percent, compared with roughly 4 percent in the general economy; for those with expertise in cybersecurity, it's more like 0.2 percent. Tech employees today tire of the attention from recruiters, the friendly hellos on LinkedIn, the cold calls (which Dyba does not make). "They think we're like used-car salesmen," Dyba said of her quarry. To be a recruiter in tech is to be an in-demand commodity for those companies doing the hiring but to feel like something of a nuisance -- like an essential gear that emits a loud, irritating noise.

Mark Zuckerberg showed off a cartoon version of himself in a virtual world at an event in October as he outlined the company's new focus for the next decade. Zuckerberg demonstrated a bunch of things his virtual avatar could do. But one thing that is still far beyond the capabilities of Meta's current virtual reality is rendering and handling legs or feet. CNN: Meta has been considering for years how to make avatars more realistic. In an Instagram AMA (Ask Me Anything) session earlier last week, Andrew Bosworth, Meta's VP of Reality Labs and incoming CTO, acknowledged the difficulty of the task while saying the company is considering how to solve it. "Tracking your own legs accurately is super hard and basically not workable just from a physics standpoint with existing headsets," Bosworth said.

Companies can track a person's upper body reasonably well with a headset and controllers, but actual leg tracking is practically non-existent in virtual reality right now -- at least when it comes to the kind of VR you're likely to use in your living room. Some apps, such as VRChat, do let people have full-body avatars, but they tend to use software to approximate lower-body motions; it can be silly-looking at best and disconcerting (or even sickening) at worst. Despite all the progress made in perfecting the technology behind VR headsets in recent years, it's still tricky to perfectly track your legs in real life and recreate the same movements in VR without setting up an array of sensors on or around your body. Still, several VR experts told CNN Business they think it's important to bring legs into virtual spaces.

The Department of Transportation's National Highway Traffic Safety Administration (NHTSA) issued a rule Tuesday to allow adaptive driving beam headlights, or smart headlights, in the U.S. Axios reports: The technology, which relies on sensors and LED light, will help prevent crashes by allowing better illumination of pedestrians, animals and objects without impairing the visibility of drivers in other vehicles, NHTSA said. Adaptive driving beam headlight systems, which are commonplace in Europe and Canada, automatically focus beams on darker, unoccupied areas while reducing the intensity of illumination in times of oncoming traffic. Research released in 2019 by the American Automobile Association found that European vehicles with adaptive headlight systems increase roadway lighting by as much as 86% when compared to U.S. low beam headlights. "NHTSA prioritizes the safety of everyone on our nation's roads, whether they are inside or outside a vehicle. New technologies can help advance that mission," said Steven Cliff, NHTSA's deputy administrator, in a statement. "NHTSA is issuing this final rule to help improve safety and protect vulnerable road users."

An anonymous reader quotes a report from Bloomberg: Ericsson may have made payments to the ISIS terror organization to gain access to certain transport routes in Iraq, in a shock admission following years of regulatory investigations. Shares in the Stockholm-based company were down almost 14.5% around lunchtime on Wednesday, its biggest drop in a day since July 2017. In an interview with newspaper Dagens Industri, chief executive officer Borje Ekholm said that Ericsson had identified "unusual expenses dating back to 2018" but the company hasn't yet determined who the final recipient of the money was. "What we are seeing is that transport routes have been purchased through areas that have been controlled by terrorist organizations, including ISIS," Ekholm added. Ekholm's comments follow a statement by the telecommunications equipment manufacturer late on Tuesday, in which the company said that it continues to "invest significantly" into a probe regarding compliance concerns in its Iraq-based operations.

The news of the internal investigation adds another embarrassment for the company following a long running corruption probe, including a $1 billion settlement in 2019. A unit of Ericsson AB pleaded guilty to a years-long campaign of bribery and corruption in Asia and the Middle East. In October last year, the matter resurfaced, after the U.S. Department of Justice accused the company of breaching the agreement by failing to provide certain documents to the D.O.J. The new suspect payments likely formed part of the same corruption probe, according to analysts at Handelsbanken. The analysts don't expect the revelations to trigger further investigations. Ekholm told the newspaper that Ericsson has spent "considerable resources trying to understand this as best we can. Financing terrorism is completely unacceptable and something we do not allow at all."

The Federal Communications Commission has voted to ban the exclusive revenue-sharing deals between landlords and Internet service providers that prevent broadband competition in apartment buildings and other multi-tenant environments. The new ban and other rule changes were adopted in a 4-0 vote announced yesterday. Ars Technica reports: Although the FCC "has long banned Internet service providers from entering into sweetheart deals with landlords that guarantee they are the only provider in the building," evidence submitted to the commission "made it clear that our existing rules are not doing enough and that we can do more to pry open the door for providers who want to offer competitive service in apartment buildings," FCC Chairwoman Jessica Rosenworcel said in her statement on the vote. The broadband industry has sidestepped rules that already exist with "a complex web of agreements between incumbent service providers and landlords that keep out competitors and undermine choice," she said.

With the new rules, "we ban exclusive revenue sharing agreements, where the provider agrees with the building that only it and no other provider can give the building owner a cut of the revenue from the building. We also ban graduated revenue sharing agreements, which increase the percentage of revenue that the broadband provider directs to the landlord as the number of tenants served by the provider go up," Rosenworcel said. Rosenworcel had circulated the proposal to commissioners in late January. The new prohibitions on graduated and exclusive revenue-sharing agreements apply retroactively. "The rules we adopt thus prohibit providers from (1) executing new graduated or exclusive revenue sharing agreements and (2) enforcing existing graduated or exclusive revenue sharing agreements on a going forward basis," the FCC said.

Exclusive marketing agreements are still allowed, but the FCC is requiring broadband providers to disclose those agreements to tenants. "Such disclosure must be included on all written marketing material directed at tenants or prospective tenants of an MTE [multiple tenant environment] subject to the arrangement and must explain in clear, conspicuous, legible, and visible language that the provider has the right to exclusively market its communications services to tenants in the MTE, that such a right does not suggest that the provider is the only entity that can provide communications services to tenants in the MTE, and that service from an alternative provider may be available," the FCC order said. The FCC vote also closes a loophole that ISPs used to enter into exclusive wiring deals with landlords. "We clarify that sale-and-leaseback arrangements violate our existing rules that regulate cable wiring inside buildings," Rosenworcel said. "Since the 1990s, we have had rules that allow buildings and tenants to exercise choice about how to use the wiring in the building when they are switching cable providers, but some companies have circumvented these rules by selling the wiring to the building and leasing it back on an exclusive basis. We put an end to that practice today."

If you live in New York and drive a loud car, you could receive a notice from the city's Department of Environmental Protection telling you your car is too loud. Not because a police officer caught your noisy car, but because a computer did. Road & Track reports: A photo of an official order from the New York City DEP was published to Facebook by a page called Lowered Congress on Monday, directed at a BMW M3 that may have been a bit too loud. The notice reads as follows: "I am writing to you because your vehicle has been identified as having a muffler that is not in compliance with Section 386 of the Vehicle and Traffic Law, which prohibits excessive noise from motor vehicles. Your vehicle was recorded by a camera that takes a pictures of the vehicle and the license plate. In addition, a sound meter records the decibel level as the vehicle approaches and passes the camera."

The order goes on to tell the owner to bring their car to a location specified by the DEP -- a sewage treatment plant, to be precise -- for inspection. Show up, and you'll have the opportunity to get the car fixed to avoid a fine -- much like California's "fix-it" ticket system. The document also informs the owner that if they fail to show up, they could face a maximum fine of $875, plus additional fines for continuing to ignore the summons.

A New York City DEP spokesman confirmed to Road & Track via email the system is part of a small pilot program that's been running since September 2021. From the description above, it sounds like it works much like a speed camera that automatically records a violation and sends it to you in the mail by reading your license plate. Instead of a speed gun, this new system uses a strategically placed sound meter to record decibel levels on the road, matching it to a license plate using a camera. [...] The program will be reevaluated on June 30, according to the DEP. From there it'll likely either be expanded or taken out of commission.

"The OS/2 community is getting close to obtaining a modern browser on their platform," writes Slashdot reader martiniturbide. In an announcement article on Monday, president of the OS/2 Voice community, Roderick Klein, revealed that a public beta of the new Chromium-based Otter Browser will arrive "in the last week of February or the first week of March." XDA Developers reports: OS/2 was the operating system developed jointly by IBM and Microsoft in the late 1980s and early 1990s, with the intended goal of replacing all DOS and Windows-based systems. However, Microsoft decided to focus on Windows after the immense popularity of Windows 3.0 and 3.1, leaving IBM to continue development on its own. IBM eventually stopped working on OS/2 in 2001, but two other companies licensed the operating system to continue where IBM left off -- first eComStation, and more recently, ArcaOS.

BitWise Works GmbH and the Dutch OS/2 Voice foundation started work on Otter Browser in 2017, as it was becoming increasingly difficult to keep an updated version of Firefox available on OS/2 and ArcaOS. Firefox 49 ESR from 2016 is the latest version available, because that's around the time Mozilla started rewriting significant parts of Firefox with Rust code, and there's no Rust compiler for OS/2. Since then, the main focus has been porting Qt 5.0 to OS/2, which includes the QtWebEngine (based on Chromium). This effort also has the side effect of making more cross-platform ports possible in the future.

An anonymous reader quotes a report from TechCrunch: Twitter last fall introduced a new label that would allow what it calls the "good bots" on its service to identify themselves. While the word "bot" can often have a negative connotation, Twitter noted there were useful bots, too, which were automatically tweeting out useful information like Covid-19 updates, earthquake alerts, bills being introduced in Congress, and more. These "good bot" labels, which had been in testing with a small group, are now publicly available to all automated account holders.

As during tests, the Twitter accounts that label themselves as bots will display this information on their Twitter profile. Underneath the account's name and @username, a small, robot icon appears next to the words "Automated by" followed by the name of the account's operator. The Twitter bio, meanwhile, will detail the bot's purpose. When the bots tweet, their automated status will also be visible in users' timelines. Twitter says this information will help users to decide which accounts to follow, engage with and trust. [...] The feature is today available to automated accounts that use the Twitter API. But Twitter says there is no auditing of the system for now.

Microsoft is bringing new touch gestures, Start menu folders, a redesigned Task Manager, and lots more improvements to Windows 11. From a report: A new build of Windows 11 is available to testers today, and it's full of new features that look like they will significantly improve the usability of Windows 11 overall. The new Start menu folders will allow Windows 11 users to customize the pinned section of the Start menu into folders. You drag an app on top of another to create a folder, and you can rearrange apps within folders and remove them. The ability to rename folders is coming in future test builds, but it's good to see more customization on the Start menu, given Windows 11 launched without many ways to tweak the menu design. If you've always been a fan of the gestures in Windows 8, Microsoft is bringing five new touch gestures to Windows 11 soon that will make using tablets a little easier. The first is the ability to swipe up on the taskbar to bring up the Start menu and swipe down to dismiss it again. You'll also be able to swipe between pinned, all apps, and recommended / more on the Start menu. [...] Last but not least, the Task Manager redesign in Windows 11 is now official. It includes a new command bar and a dark theme, alongside an efficiency mode that lets you limit apps from consuming system resources.

The New York Stock Exchange has filed an application to register the term "NYSE" for a marketplace for non-fungible tokens (NFTs), taking a step closer to setting up an online trading place for cryptocurrencies and NFTs. From a report: The hype around cryptocurrencies last year spilled over to NFTs, a form of speculative investment that has attracted fans including former U.S. first lady Melania Trump and Jamaican sprint great Usain Bolt. Companies involved in this sector have also been backed by heavyweights Microsoft and SoftBank Group. If the NYSE launches a new marketplace, it would compete with SuperRare, Rarible and NFT markeplace giant OpenSea, which was valued at $13.3 billion after its latest funding round.

The National Highway Traffic Safety Administration is finally poised to legalize adaptive beam headlights in the US. From a report: The NHTSA announced that it has issued a final rule that will update the Federal Motor Vehicle Safety Standards, which currently only allow for "dumb" high- and low-beam lights. Adaptive beam lights use a matrix of projectors, some of which can be turned off to shape the beam so the lights illuminate the road but don't shine at an oncoming driver. (These are an advancement over the auto-high beam technology that you may have fitted to your current car.) The technology has been around for nearly two decades in Europe and Japan.