Google's plan to phase out third-party cookies and replace them with a bundle of new standards referred to as the "Privacy Sandbox" just overcame a key regulatory hurdle. From a report: The UK's competition regulator, the Competition and Markets Authority (CMA), has formally accepted Google's commitments about how it'll develop the new standards so they don't harm competition or unfairly benefit the search giant's own advertising business, the regulator announced today. Google's plans are still in flux, and it's not yet clear exactly what technologies Privacy Sandbox will use to replace third-party cookies. Just last month, Google abandoned one planned approach, FLoC, in favor of a new system called Topics API. Today's approval is for Google's approach, rather than any one specific technology. The regulator notes that in the next phase it will "supervise Google to ensure the Privacy Sandbox is developed in a way that benefits consumers."

An anonymous reader quotes a report from TechCrunch: Use of Google Analytics has now been found to breach European Union privacy laws in France -- after a similar decision was reached in Austria last month. The French data protection watchdog, the CNIL, said today that an unnamed local website's use of Google Analytics is non-compliant with the bloc's General Data Protection Regulation (GDPR) -- breaching Article 44 which covers personal data transfers outside the bloc to so-called third countries which are not considered to have essentially equivalent privacy protections. The U.S. fails this critical equivalence test on account of having sweeping surveillance laws which do not provide non-U.S. citizens with any way to know whether their data is being acquired, how it's being used or to seek redress for any misuse.

France's CNIL has been investigating one of 101 complaints filed by European privacy advocacy group, noyb, back in August 2020 -- after the bloc's top court invalidated the EU-U.S. Privacy Shield agreement on data transfers. Since then (indeed, long before) the legality of transatlantic transfers of personal data have been clouded in uncertainty. While it has taken EU regulators some time to act on illegal data transfers -- despite an immediate warning from the European Data Protection Board of no grace period in the wake of the July 2020 CJEU ruling (aka 'Schrems II) -- decisions are now finally starting to flow. Including another by the European Data Protection Supervisor last month, also involving Google Analytics. In France, the CNIL has ordered the website which was the target of one of noyb's complaints to comply with the GDPR -- and "if necessary, to stop using this service under the current conditions" -- giving it a deadline of one month to comply.

"[A]lthough Google has adopted additional measures to regulate data transfers in the context of the Google Analytics functionality, these are not sufficient to exclude the accessibility of this data for U.S. intelligence services," the CNIL writes in a press release announcing the decision. "There is therefore a risk for French website users who use this service and whose data is exported." The CNIL does leave open the door to continued use of Google Analytics -- but only with substantial changes that would ensure only "anonymous statistical data" gets transferred. The French regulator is also very emphatic that under "current conditions" use of Google Analytics is non-compliant -- and may therefore need to cease in order for the site in question to comply with the GDPR. The CNIL also suggests use of an alternative analytics tool which does not involve a transfer outside the EU to end the breach. Additionally, it says it's launched an evaluation program to determine which website audience measurement and analysis services may be exempt from the need to obtain user consent (i.e. because they only produce anonymous statistical data which can be exported legally under GDPR). Which suggests the CNIL could issue guidance in future that recommends GDPR compliant alternatives to Google Analytics.

Samsung held a launch event for its new Galaxy smartphones in a metaverse this week but many people struggled to gain access as they encountered technical difficulties. CNBC reports: The South Korean tech giant hosted the event Wednesday on Decentraland, a cryptocurrency-focused virtual world that users can create, explore and trade in. Decentraland, one of many metaverse efforts, is accessed via a desktop browser. Users create an avatar which they can then navigate around the blockchain-powered virtual world using a mouse and keyboard -- something that isn't exactly intuitive for non-gamers. The event specifically took place in Samsung 837X, a virtual building that Samsung has built on Decentraland that's designed to be a replica of its flagship New York experience center. Samsung 837X is there all the time but there just happened to be an event inside the building's "Connectivity Theatre" on Wednesday. But CNBC, and many others, struggled to find the 837X building and when we did many of us were unable to gain access to it.

When an avatar is first created on Decentraland, it lands in a sort of atrium where clouds appear to be gliding across the floor. There's a round pool in the middle that has a worrying vortex in the center. Our avatar was soon surrounded by around 20 others. A chat box in the bottom left-hand corner of the screen was full of messages like "help" and "I hate this game." One user named claireinnit#87fa, boldly claimed "we're in the ----in future." On the opposite side of the intimidating pool, three large boards read "classics, events and crowd." An ad for Samsung 837X hang on the "crowd" board. Once clicked (easier said than done), you're then given the option to "jump in." After jumping in, you're transported to Samsung's little world on Decentraland and you can see the 837X building. There's a pizza store next door, but not much else.

CNBC immediately noticed a large line of people at the main entrance to the 837X building. People were struggling to get in. Some users were getting their avatars to jump on other people's heads as they clambered to the front of the queue but it didn't help. The doors wouldn't open and the chatbox was again full of pleas for help. A rumor circulated that a YouTuber had managed to find a way in, while a CNET journalist wrote on Twitter that they had managed to gain access by switching to the "ATHENA" server. It wasn't immediately obvious how to do this. "Many people were unable to actually enter Samsung 837X before the event started," wrote CNET's Russell Holly. [...] After around 30 minutes of trying to access Samsung's building in the metaverse, CNBC gave up and went back to the real world.

An anonymous reader quotes a report from Ars Technica: Starting this year, the federal government will begin doling out $5 billion to states over five years to build a nationwide network of fast chargers. The plan initially focuses on the Interstate Highway System, directing states to build one charging station every 50 miles. Those stations must be capable of charging at least four EVs simultaneously at 150 kW. Once states have completed the Interstate charging network, they'll be able to apply for grants to fill in gaps elsewhere. The Joint Office of Energy and Transportation, a new agency formed to help the Transportation and Energy Departments administer the program, will allow case-by-case exceptions to the 50-mile requirement if, for example, no grid connection is available nearby.

Funding for the initial Interstate portion of the program will be allocated using a formula that mimics how federal highway grants are distributed. Starting in fiscal year 2022, $615 million will be available to build charging stations, and $300 million will be allocated to set up the Joint Office of Energy and Transportation. Ten percent of each year's funding will go toward filling gaps in the network. After the initial $5 billion program is launched, another $2.5 billion in discretionary grants will be available to build chargers in rural and underserved areas.

As part of their plans submitted to the federal government, states will need to ensure that the charging stations will be reliable -- at least one charger per station needs to be working more than 97 percent of the time -- and that they will limit their impact on the electric grid. States are also directed to design stations so they can be easily expanded and upgraded as demand grows and charging rates increase. The new program also encourages states to site chargers near travel centers, convenience stores, visitor centers, or restaurants. To get credit for their Interstate build-out, states will have to install chargers that use the Combined Charging System, also known as CCS. [...] The new program also prioritizes domestic production of chargers, which has already spurred some manufacturers to begin setting up operations in the US. Secretary of Transportation Pete Buttigieg says the agency is looking at how people will pay for charging. "Part of this program is going to be a shared standard. If we're going to use taxpayers' dollars to help private actors put in charging stations, then of course we need to make sure the citizen is getting good value out of it. There may be any number of network benefits through loyalty programs. That's fine," he said, "but we've got to make sure... everybody can benefit."

Google today announced the first developer release of Android 13. These very early releases, which are only meant for developers and aren't available through over-the-air updates, typically don't include too many user-facing changes. From a report: That's true this time as well, but even in this early release, the company is already showing off a few changes that will impact how you'll use your Android phone. Unlike with Android 12, Google plans to have two developer releases and then launch a beta in April, a month earlier than in 2021. The final release could come as early as August, based on Google's roadmap, whereas Android 12 launched in early October. All of this is happening while Android 12L, the Android release for large-screen devices, is still in development, too, though Google notes that it will bring some of those features to Android 13 as well. These include improved support for tablets, foldables and Android apps on Chromebooks. One of the most visible changes in Android 13 so far is that Google will bring the dynamic color feature of Material You, which by default takes its cues from your home screen image to all app icons. Developers will have to supply a monochromatic app icon for this to work, which many will hopefully do, because the current mix of themed and un-themed icons doesn't make for a great look. For now, this will only be available on Pixel devices, though, and Google says it will work with its partners to bring it to more devices. With this release, Google supports the Pixel 6 Pro, Pixel 6, Pixel 5a 5G, Pixel 5, Pixel 4a (5G), Pixel 4a, Pixel 4 XL, and Pixel 4.

A new bipartisan bill, introduced on Wednesday, could mark Congress' first step toward addressing algorithmic amplification of harmful content. The Social Media NUDGE Act, authored by Sens. Amy Klobuchar (D-MN) and Cynthia Lummis (R-WY), would direct the National Science Foundation and the National Academy of Sciences, Engineering and Medicine to study "content neutral" ways to add friction to content-sharing online. From a report: The bill instructs researchers to identify a number of ways to slow down the spread of harmful content and misinformation, whether through asking users to read an article before sharing it (as Twitter has done) or other measures. The Federal Trade Commission would then codify the recommendations and mandate that social media platforms like Facebook and Twitter put them into practice. "For too long, tech companies have said 'Trust us, we've got this,'" Klobuchar said in a statement on Thursday. "But we know that social media platforms have repeatedly put profits over people, with algorithms pushing dangerous content that hooks users and spreads misinformation."

Italian luxury car maker Alfa Romeo has revealed it will be using non-fungible tokens (NFT) to track and store maintenance records on the blockchain for its new Tonale SUV. From a report: Alfa Romeo, which is owned by Stellantis (formerly Fiat Chrysler), appears to be the first carmaker to utilize NFTs in this way, seemingly in a bid to bring transparency and efficiency to a car market that often relies on third parties to track car records. "Digitalization is a key enabler of our metamorphosis," Francesco Calcara, head of marketing at Alfa Romeo, said in a media briefing. "[The NFTs] will sustain the residual values of our models as we are the first in the market to adopt this next-generation technology." The company says the car's NFT will be able to generate a certificate from records of its maintenance data, but only for service done by certified dealers.

The Defense Advanced Research Projects Agency has flown a UH-60A Black Hawk helicopter without a pilot for the first time ever. CNET reports: DARPA's Aircrew Labor In-Cockpit Automation System program was used to fly the helicopter on autopilot over Fort Campbell, Kentucky, on Saturday. The Black Hawk was kitted out with Sikorsky Matrix autonomous flying technology, and DARPA says it repeated the "uninhabited flight" on Monday. "Pilots can focus on mission management instead of the mechanics," Stuart Young, program manager in DARPA's Tactical Technology Office, said in a statement. "ALIAS ... includes the ability to operate aircraft at all times of the day or night, with and without pilots, and in a variety of difficult conditions, such as contested, congested, and degraded visual environments."

According to a recent study published by mobile marketing company URL Genius, YouTube and TikTok track users' personal data more than any other social media apps. However, while YouTube mostly collects your personal data for its own purposes to serve you more relevant ads, TikTok mostly allows third-party trackers to collect your data -- "and from there, it's hard to say what happens with it," reports CNBC. From the report: With third-party trackers, it's essentially impossible to know who's tracking your data or what information they're collecting, from which posts you interact with -- and how long you spend on each one -- to your physical location and any other personal information you share with the app. As the study noted, third-party trackers can track your activity on other sites even after you leave the app.

To conduct the study, URL Genius used the Record App Activity feature from Apple's iOS to count how many different domains track a user's activity across 10 different social media apps -- YouTube, TikTok, Twitter, Telegram, LinkedIn, Instagram, Facebook, Snapchat, Messenger and Whatsapp -- over the course of one visit, before you even log into your account. YouTube and TikTok topped the other apps with 14 network contacts apiece, significantly higher than the study's average number of six network contacts per app. Those numbers are all probably higher for users who are logged into accounts on those apps, the study noted.

Ten of YouTube's trackers were first-party network contacts, meaning the platform was tracking user activity for its own purposes. Four of the contacts were from third-party domains, meaning the social platform was allowing a handful of mystery outside parties to collect information and track user activity. For TikTok, the results were even more mysterious: 13 of the 14 network contacts on the popular social media app were from third parties. The third-party tracking still happened even when users didn't opt into allowing tracking in each app's settings, according to the study. "Consumers are currently unable to see what data is shared with third-party networks, or how their data will be used," the report's authors wrote.

Nvidia is now a larger company than social media giant Meta. PC Gamer reports: In a meteoric turn of events, Nvidia has surged to become the 7th largest company in the US, despite being nowhere close only a few years ago, and helped along by Meta's recent share price collapse. Meta's fall from stock market grace this past week saw 30% of its share value wiped out, leaving it with a total value in shares, or market cap, of just $615.70B (at time of writing). That's clearly still a lot of money, but it's notably less money than it was worth at the beginning of last week -- around $260B less.

Compare that to Nvidia's market cap of $657.06B, and the green team is out on top. Perhaps not for long, but we'll see. That's still a little shy of Berkshire Hathaway in 6th place at over $720B, but it's markedly higher up than Nvidia was only a few years ago, when its share value was a small fraction of what it is today. [...] Nvidia officially terminated its attempt to buy Arm, the UK-based chip designer, for $40B, and that did see some value wiped off its share price in the following days. Though clearly that dark cloud hasn't stuck around Nvidia's Santa Clara HQ, as it's now back up to around $260. That's over 40% up on its lowest point this year, and just under 22% down on its all-time high of $334.

Google's decision to enable two-factor authentication by default has resulted in a 50 percent decrease in account breaches among those users where the feature was auto-enabled. Engadget reports: The company didn't say how rapidly it expected 2FA to spread, but promised to continue the rollout through 2022. More than 150 million people have been auto-enrolled so far, including more than 2 million YouTube creators. The company also promised more security upgrades to help mark Safer Internet Day. As of March, Google will let you opt-in to an account-level safe browsing option that keeps you from visiting known harmful sites. Google is also expanding Assistant's privacy-minded Guest Mode to nine new languages in the months ahead, and has promised to ramp up safeguards for politicians ahead of the US midterm elections.

An anonymous reader quotes a report from Motherboard: Ukraine's Security Service said it has shut down a troll farm in the city of Lviv. "The SSU cyber specialists uncovered and dismantled two bot farms in Lviv with a total capacity of 18,000 fake accounts," an SSU press release said. "According to preliminary information, organizers from Russia supervised the administrators of the bot farms." According to the press release, three people in two different residences were involved. Two gave over their apartments to the operation while a third took care of maintaining the accounts and equipment. "The bot farms worked mostly in social networks: distributed fakes to spread panic," the press release said. "The bots also published false information about bomb threats at various facilities."

The SSU said it seized two sets of GSM gateways, 3,000 SIM cards, laptops, and accounting records. GSM gateways are equipment that allows people to use SIM cards to connect to networks outside the default network they're meant to be connected to. They're popular tools for hackers and other cyber criminals, who can use them to manage several phone numbers, and to connect to Voice Over IP, or VoIP networks. The photos of the bust show dozens of GSM gateways stuffed with blurred SIM cards.

Apple has acknowledged an iOS 15 bug that may have recorded interactions with Siri on some devices, regardless of whether the user opted out, according to a report from ZDNet. From a report: The bug automatically enabled the Improve Siri & Dictation setting that gives Apple permission to record, store, and review your conversations with Siri. Apple tells The Verge that it identified the bug shortly after the release of iOS 15, stopped reviewing any recordings inadvertently received, and is deleting info received from affected devices. After discovering the bug, the company turned off the feature for "many" users and corrected the opt-in setting when it released iOS 15.2. As ZDNet points out, this is the reason why you might get a prompt asking for your permission to enable the Improve Siri & Dictation feature once you install the new 15.4 beta or, eventually, its official release.

Drivers of certain vehicles in Seattle and other parts of Western Washington are shouting at their car radios this week. Not because of any particular song or news item that's being broadcast, but because an apparent technical glitch has caused the radios to be stuck on public radio station KUOW. From a report: The impacted drivers appear to all be owners of Mazda vehicles from between 2014 and 2017. In some cases the in-car infotainment systems have stopped working altogether, derailing the ability to listen to the radio at all or use Bluetooth phone connections, GPS, the rear camera and more. According to Mazda drivers who spoke with GeekWire, and others in a Reddit thread discussing the dilemma, everyone who has had an issue was listening to KUOW 94.9 in recent weeks when the car systems went haywire. KUOW sounded unsure of a possible cause; at least one dealership service department blamed 5G; and Mazda told GeekWire in an official statement that it identified the problem and a fix is planned.

European scientists say they have made a major breakthrough in their quest to develop practical nuclear fusion -- the energy process that powers the stars. tomhath writes: The UK-based JET laboratory has smashed its own world record for the amount of energy it can extract by squeezing together two forms of hydrogen. If nuclear fusion can be successfully recreated on Earth it holds out the potential of virtually unlimited supplies of low-carbon, low-radiation energy. The experiments produced 59 megajoules of energy over five seconds (11 megawatts of power). This is more than double what was achieved in similar tests back in 1997. It's not a massive energy output - only enough to boil about 60 kettles' worth of water. But the significance is that it validates design choices that have been made for an even bigger fusion reactor now being constructed in France. "The JET experiments put us a step closer to fusion power," said Dr Joe Milnes, the head of operations at the reactor lab. "We've demonstrated that we can create a mini star inside of our machine and hold it there for five seconds and get high performance, which really takes us into a new realm."

Meta has frozen development of its Novi digital wallet project, Israeli media Globes reported this week, citing sources familiar with the matter. From the report: The project was originally planned for trading in Facebook's cryptocurrency -- an activity that has been halted. Following this latest step, Facebook will disband several teams in the US and at the company's development center in Israel, new tasks are being sought for the risk management technology division, which was set up to provide services for the digital wallet. This latest step comes as Meta has begun 2022 by cleaning its desk. While suspending the Novi digital wallet project, Meta is examining the possibility of transferring more financial services to Facebook Pay -- another wallet infrastructure that the company has already opened -- thus leaving Novi as an NFT trading platform for creating digital art or animated games accessories. Due to the fact that Novi activities are at the expense of the Facebook Pay infrastructure, which is already used on platforms like Facebook Stores and Facebook Marketplace, the company is grappling with the question of if there is any point in continuing Novi's development. Despite the freezing of most of Novi's financial development activities, the project's pilot in the US and Guatemala, which began last October, will continue.

Twitter told a U.S. senator it is cutting ties with a European technology company that helped it send sensitive passcodes to its users via text message. From a report: The social media firm said in a disclosure to U.S. Senator Ron Wyden, a Democrat from Oregon, that it is "transitioning" its service away from working with Mitto AG, according to a Wyden aide. A co-founder of Mitto operated a service that helped governments secretly surveil and track mobile phones, according to former employees and clients, as Bloomberg News and London-based Bureau of Investigative Journalism reported in December. Twitter cited media reports as the motivating factor behind its decision, the Wyden aide said. Several other companies have allegedly already cut ties with Mitto. In recent weeks, messaging companies Kaleyra and MessageBird have both ceased commercial relationships with Mitto, according to three people familiar with the matter.

An anonymous reader quotes a report from Ars Technica: Setting up a Raspberry Pi board has always required a second computer, which is used to flash your operating system of choice to an SD card so your Pi can boot. But the Pi Foundation is working on a new version of its bootloader that could connect an OS-less Pi board directly to the Internet, allowing it to download and install the official Raspberry Pi OS to a blank SD card without requiring another computer. To test the networked booting feature, you'll need to use the Pi Imager on a separate computer to copy an updater for the bootloader over to an SD card -- Pi firmware updates are normally installed along with new OS updates rather than separately, but since this is still in testing, it requires extra steps.

Once it's installed, there are a number of conditions that have to be met for network booting to work. It only works on Pi 4 boards (and Pi 4-derived devices, like the Pi 400 computer) that have both a keyboard and an Ethernet cable connected. If you already have an SD card or USB drive with a bootable OS connected, the Pi will boot from those as it normally does so it doesn't slow down the regular boot process. And you'll be limited to the OS image selection in the official Pi imager, though this covers a wide range of popular distributions, including Ubuntu, LibreELEC, a couple of retro-gaming emulation OSes, and Homebridge. For other OSes, downloading the image on a separate PC and installing it to an SD card manually is still the best way to go. To learn more about installing the bootloader or download the Pi OS over a network, you can view the Raspberry Pi Foundation's documentation here.

jrepin writes: Plasma is a popular desktop environment, which will also be powering the desktop mode on the Steam Deck hand-held gaming console. Today, KDE Community announced release of KDE Plasma 5.24, a Long Term Support (LTS) release that will receive updates and bug fixes until the final Plasma 5 version, before transition to Plasma 6.

This new Plasma release focuses on smoothing out wrinkles, evolving the design, and improving the overall feel and usability of the environment. Highlights include: Overview effect for managing all your desktops and application windows, easy discovery of KRunner features with the help assistant, and unlocking screen and authentication using fingerprint reader. You will also notice a new Honeywave wallpaper, the ability to pick any color for accent, and critically important Plasma notifications now come with an orange strip on the side to visually distinguish them from less urgent messages.

Major rightsholders and internet companies in Russia have signed a new memorandum of cooperation designed to make pirated movies, TV shows and other content harder to find. In addition to automatically removing reported infringing links within hours, search engines have agreed to completely deindex all domains that carry 100 or more links to infringing content. TorrentFreak reports: Signed in 2018, a memorandum of cooperation signed by major rightsholders and internet companies including Yandex changed the way infringing content is handled. Following the creation of a centralized database of pirated content, the Internet companies agreed to query it every few minutes in order to remove corresponding content from their platforms within six hours. Over a period of three years, more than 40 million infringing links have now been removed from search results. Since its introduction, the memorandum has been renewed several times alongside calls for the system to be opened up to a wider range of rightsholders, such as those operating in the publishing sector. While that is yet to happen, a new memorandum has just been signed by the original signatories containing an even more powerful anti-piracy tool.

Under the current agreement (which is set to expire early September 2022), rightsholders must submit specific URLs to infringing content to the centralized database controlled by the Media Communications Union (ISS). These specific URLs are then delisted by search engines but rightsholders complain that the same content can reappear under a new URL, meaning that the process must be repeated. To deal with this type of 'pirate' countermeasure, the new memorandum requires search companies to take more stringent action. Any domain that has 100 or more 'pirate' links reported to the database will be deindexed entirely by search engines, meaning that they essentially become invisible to anyone using a search engine. This must be carried out quickly too, within 24 hours according to ISS. Given the number of links to infringing content posted to non-pirate sites, safeguards will also be introduced to protect legitimate resources from deindexing. These include media sites, government projects, search engines themselves, social networks, and official content providers. "Alongside the development of the memorandum a new law is being drafted, with the aim of enshrining its voluntary terms into local law," adds TorrentFreak. "That should allow other rightsholders that aren't current signatories to obtain similar benefits. At the time of writing, however, progress on the legal front is taking its time and might still take a few more months."