Transportation

UK Government Backs Scheme For Motorway Cables To Power Lorries (theguardian.com) 124

An anonymous reader quotes a report from The Guardian: The government will fund the design of a scheme to install overhead electric cables to power electric lorries on a motorway near Scunthorpe, as part of a series of studies on how to decarbonize road freight. The electric road system -- or e-highway -- study, will draw up plans to install overhead cables on a 20km (12.4 miles) stretch of the M180 near Scunthorpe, in Lincolnshire. If the designs are accepted and building work is funded the trucks could be on the road by 2024.

The e-highway study is one of several options that will be funded, along with a study of hydrogen fuel cell trucks and battery electric lorries, the Department for Transport said on Tuesday. On the e-highway, lorries fitted with rigs called pantographs -- similar to those used by trains and trams -- would be able to tap into the electricity supply to power electric motors. Lorries would also have a smaller battery to power them over the first and last legs of the journey off the motorway. The project is led by Costain, an infrastructure construction company that also operates some UK motorways, using trucks built by Sweden's Scania and electric technology from Germany's Siemens that is already in use in smaller-scale trials there, Sweden and the US.

Electronic Frontier Foundation

EFF Sues US Postal Office For Records About Covert Social Media Spying Program (eff.org) 57

The Electronic Frontier Foundation (EFF) filed a Freedom of Information Act (FOIA) lawsuit against the U.S. Postal Service and its inspection agency seeking records about a covert program to secretly comb through online posts of social media users before street protests, raising concerns about chilling the privacy and expressive activity of internet users. From the press release: Under an initiative called Internet Covert Operations Program, analysts at the U.S. Postal Inspection Service (USPIS), the Postal Service's law enforcement arm, sorted through massive amounts of data created by social media users to surveil what they were saying and sharing, according to media reports. Internet users' posts on Facebook, Twitter, Parler, and Telegraph were likely swept up in the surveillance program. USPIS has not disclosed details about the program or any records responding to EFF's FOIA request asking for information about the creation and operation of the surveillance initiative. In addition to those records, EFF is also seeking records on the program's policies and analysis of the information collected, and communications with other federal agencies, including the Department of Homeland Security (DHS), about the use of social media content gathered under the program.

Media reports revealed that a government bulletin dated March 16 was distributed across DHS's state-run security threat centers, alerting law enforcement agencies that USPIS analysts monitored "significant activity regarding planned protests occurring internationally and domestically on March 20, 2021." Protests around the country were planned for that day, and locations and times were being shared on Parler, Telegram, Twitter, and Facebook, the bulletin said. "We're filing this FOIA lawsuit to shine a light on why and how the Postal Service is monitoring online speech. This lawsuit aims to protect the right to protest," said Houston Davidson, EFF public interest legal fellow. "The government has never explained the legal justifications for this surveillance. We're asking a court to order the USPIS to disclose details about this speech-monitoring program, which threatens constitutional guarantees of free expression and privacy."

Social Networks

Instagram Makes Under-16s' Accounts Private By Default (bbc.com) 12

Instagram has made new under-16s' accounts private by default so only approved followers can see posts and "like" or comment. The BBC reports: Tests showed only one in five opted for a public account when the private setting was the default, it said. And existing account holders would be sent a notification "highlighting the benefits" of switching to private. But Instagram also said it was pushing ahead with new apps for under-13s, despite a backlash from some groups. "The reality is that they are already online and, with no foolproof way to stop people from misrepresenting their age, we want to build experiences designed specifically for them, managed by parents and guardians," parent company Facebook said. Although it was also developing artificial-intelligence systems to find and remove under-age accounts.

"Historically, we asked young people to choose between a public account or a private account when they signed up for Instagram but our recent research showed that they appreciate a more private experience," the company said. Another of its changes -- preventing accounts showing "potentially suspicious behavior" such as recently having been blocked from messaging or following children's accounts -- would make them "difficult to find for certain adults," Instagram said. Meanwhile, "a more precautionary approach" will see advertisers able to target children based on only age, gender, and location, rather than interests and web-browsing habits. And while defending targeted ads in general and the optout features it has for some types, Instagram said: "We have heard from youth advocates that young people may not be well equipped to make these decisions."

Cloud

Google Cloud Offers a Model For Fixing Google's Product-Killing Reputation (arstechnica.com) 49

An anonymous reader quotes a report from Ars Technica: Google's reputation for aggressively killing products and services is hurting the company's brand. Any new product launch from Google is no longer a reason for optimism; instead, the company is met with questions about when the product will be shut down. It's a problem entirely of Google's own making, and it's yet another barrier that discourages customers from investing (either time, money, or data) in the latest Google thing. The wide public skepticism of Google Stadia is a great example of the problem. A Google division with similar issues is Google Cloud Platform, which asks companies and developers to build a product or service powered by Google's cloud infrastructure. Like the rest of Google, Cloud Platform has a reputation for instability, thanks to quickly deprecating APIs, which require any project hosted on Google's platform to be continuously updated to keep up with the latest changes. Google Cloud wants to address this issue, though, with a new "Enterprise API" designation.

Enterprise APIs basically get a roadmap that promises stability for certain APIs. Google says, "The burden is on us: Our working principle is that no feature may be removed (or changed in a way that is not backwards compatible) for as long as customers are actively using it. If a deprecation or breaking change is inevitable, then the burden is on us to make the migration as effortless as possible." If Google needs to change an API, customers will now get a minimum of one year's notice, along with tools, documentation, and other materials. Google goes on to say, "To make sure we follow these tenets, any change we introduce to an API is reviewed by a centralized board of product and engineering leads and follows a rigorous product lifecycle evaluation."

Despite being one of the world's largest Internet companies and basically defining what modern cloud infrastructure looks like, Google isn't doing very well in the cloud infrastructure market. Analyst firm Canalys puts Google in a distant third, with 7 percent market share, behind Microsoft Azure (19 percent) and market leader Amazon Web Services (32 percent). Rumor has it (according to a report from The Information) that Google Cloud Platform is facing a 2023 deadline to beat AWS and Microsoft, or it will risk losing funding. Ex-Googler Steve Yegge laid out the problems with Google Cloud Platform last year in a post titled "Dear Google Cloud: Your Deprecation Policy is Killing You." Google's announcement seems to hit most of what that post highlights, like a lack of documentation and support, an endless treadmill of API upgrades, and Google Cloud's general disregard for backward compatibility. Yegge argues that successful platforms like Windows, Java, and Android (a group Yegge says is isolated from the larger Google culture) owe much of their success to their commitment to platform stability. AWS is the market leader partly because it's considered a lot more stable than Google Cloud Platform.

Facebook

Facebook Creates New Unit To Build a 'Metaverse' (axios.com) 42

Facebook has announced it is forming a new Metaverse product group to advance its efforts to build a 3D social space using virtual and augmented reality tech. From a report: In an interview with journalist Casey Newton, Facebook CEO Mark Zuckerberg said he sees the metaverse -- a term widely used in both tech and science fiction to describe broadly shared, open virtual environments -- as "the successor to the mobile internet." Zuckerberg also said it was "not something that any one company is going to build." Facebook's new Metaverse product group will report to Andrew Bosworth, Facebook's vice president of virtual and augmented reality, who announced the new organization in a Facebook post. Facebook's Oculus and Portal products have been first steps toward the new vision, Bosworth wrote, "but to achieve our full vision of the Metaverse, we also need to build the connective tissue between these spaces -- so you can remove the limitations of physics and move between them with the same ease as moving from one room in your home to the next."
Social Networks

A Grandfather Died in 'Swatting' Over His Twitter Handle, Officials Say (nytimes.com) 141

Mark Herring had a fatal heart attack after the police swarmed his house after a fake emergency call. A Tennessee man was sentenced to five years in prison in connection with the episode. From a report: Mark Herring was at home in Bethpage, Tenn., one night in April 2020 when the police swarmed his house. Someone with a British accent had called emergency services in Sumner County and reported having shot a woman in the back of the head at Mr. Herring's address. The caller had threatened to set off pipe bombs at the front and back doors if officers came, according to federal court records. When the police arrived, they drew their guns and told Mr. Herring, a 60-year-old computer programmer and grandfather of six, to come out and keep his hands visible. As he walked out, he lost his balance and fell. He was pronounced dead that same night at a nearby hospital. The cause of death was a heart attack, according to court records.

Mr. Herring had been a victim of "swatting," the act of reporting a fake crime in order to provoke a heavily armed response from the police. The caller was a minor living in the United Kingdom, according to federal prosecutors. But the caller knew Mr. Herring's address because Shane Sonderman, 20, of Lauderdale County, Tenn., had posted the information online, prosecutors said. On Wednesday, Mr. Sonderman was sentenced to five years in prison after he pleaded guilty to one count of conspiracy. "The defendant was part of a chain of events," federal prosecutors said in court documents. The police "arrived prepared to take on a life and death situation," prosecutors said. "Mr. Herring died of a heart attack at gunpoint." Mr. Sonderman's lawyer, Bryan R. Huffman, said he had argued for a lesser sentence but believed five years "was fair in light of Shane's culpability."

"Mr. Sonderman has expressed his remorse on multiple occasions. He has expressed his regret regarding Mr. Herring's death," Mr. Huffman said in an email on Saturday. "Mr. Sonderman's family had also expressed their remorse. There are many families affected by Shane's actions, including his own family." Mr. Herring was targeted because he refused to sell his Twitter handle, @Tennessee, according to his family and prosecutors. Smart, blunt and plain-spoken, Mr. Herring had loved computers since he was a teenager and joined Twitter in March 2007, less than a year after it started, his family said. He knew people wanted his handle, which he chose because of his love for the state, where he had been born and raised, and had rebuffed offers of $3,000 to $4,000 to sell it, his daughter Corinna Fitch, 37, said in an interview.

Facebook

Facebook Pauses Sales of the Oculus Quest 2 Due To Face Irritation Concerns (cnet.com) 34

Facebook said on Tuesday that it is temporarily halting sales of the Oculus Quest 2, a month before a planned update to a new entry-level model with more onboard storage. The move comes after several reported cases of skin reactions to the headset's included foam faceplate, the social media giant confirmed. From a report: According to a Facebook post on the issue from earlier this year, the company says a small percent of Quest 2 owners have reported the issue. But some cases reported online have sometimes been bad enough to cause faces to puff up and eyes to close. Facebook changed the manufacturing process of its foam face interfaces earlier this year, but the concerns still prompted Facebook to stopped selling the Quest 2 in coordination with the US Product Safety Commission.

Facebook's adding silicone face-mask covers in future versions of the Quest 2, which will fit over the foam. Existing customers can contact Facebook for the replacement cover as well. This is happening a month before Facebook is updating the Quest 2 with more storage: a new version of the $299 Quest that goes on sale Aug. 24 will have 128GB of storage instead of 64GB. Quest 2 models will include the silicone face-cover in the box from that point onward. It's awkward timing for the move, but also looks like a chance for Facebook to replace Quest 2 stock with models that have the silicone covers.

Security

Google Launches New Bug Hunters Vulnerability Rewards Platform (bleepingcomputer.com) 4

Google has announced a new platform and community designed to host all its Vulnerability Rewards Programs (VRP) under the same roof. From a report: Since launching its first VRP more than ten years ago, the company has rewarded 2,022 security researchers from 84 different countries worldwide for reporting over 11,000 bugs. [...] "To celebrate our anniversary and ensure the next 10 years are just as (or even more) successful and collaborative, we are excited to announce the launch of our new platform, bughunters.google.com," Google said.

"This new site brings all of our VRPs (Google, Android, Abuse, Chrome and Play) closer together and provides a single intake form that makes it easier for bug hunters to submit issues." The new VRP platform should provide researchers with per-country leaderboards, healthier competition via gamification, awards/badges for specific bugs, and more opportunities for interaction. Google also launched a new Bug Hunter University, which would allow bug hunters to brush up on their skills or start a hunting learning streak.

Chrome

Google Updates Timeline For Unpopular Privacy Sandbox, Which Will Kill Third-Party Cookies In Chrome By 2023 (theregister.com) 27

Google has updated the schedule for its introduction of "Privacy Sandbox" browser technology and the phasing out of third-party cookies. The Register reports: The new timeline has split the bundle of technologies in the Privacy Sandbox into five phases: discussion, testing, implementation in Chrome (called "Ready for adoption"), Transition State 1 during which Chrome will "monitor adoption and feedback" and then the next stage that involves winding down support for third-party cookies over a three-month period finishing "late 2023." Although "late 2023" might sound a long way off, the timeline has revealed that "discussion" of the contentious FLoC (Federated Learning of Cohorts) is planned to end in Q3 2021 -- just a couple of months away -- and that discussion for First Party Sets, rejected by the W3C Technical Architecture Group as "harmful to the web in its current form," is scheduled to end around mid-November.

Google said that "extended discussions and testing stages often produce better, more complete solutions, and the timeline for testing and ready for adoption of use cases might change accordingly," so the dates are not set in stone. There is no suggestion that any of the proposals will be withdrawn; the company appears to believe it can alleviate concerns by tweaking rather than abandoning its proposals. Discussion of the various pieces is set to take place in the W3C Web Incubator Community Group (WICG), though at a FLEDGE WICG Call last week, Google's Michael Kleber, tech lead for Privacy Sandbox, suggested that the W3C would not be deciding which technologies are implemented, at least in the context of FLEDGE (formerly TURTLEDOVE), which enables auctions for personalized ads in a more private manner than today.

FLEDGE is competing for attention with the Microsoft-devised PARAKEET and MaCAW. Asked by Julien Delhommeau, staff system architect at adtech company Xandr, if the WICG would get a say in whether FLEDGE or PARAKEET/MaCAW would be adopted, Kleber said: "The W3C doesn't get to be the boss of anyone, the decisions are going to be made at each of the browsers. The goal isn't to have one winner and everyone else losing -- the goal of W3C is to put out a bunch of ideas, understand the positives of each, and come to a chimera that has the most necessary features. Every browser seems to want convergence, long term, so figuring out how to make convergence happen is important." [...] According to Kleber, when asked if personalized advertising could be removed from the web, he said "while most of the sites in the world would lose 50-70 per cent of their revenue in the alternative you're advocating for, Google is not one of them." He made this claim on the basis that "Google makes most of its money from the ads that appear on Google Search," which do not require tracking technology.

Japan

Japan Pitches 'Society 5.0' To Keep Its Edge In Tech and Science (nikkei.com) 21

The Cabinet Office of Japan is co-hosting an event dedicated to "Society 5.0," a future society the government believes Japan should aspire to. Defined by the Cabinet Office as "a human-centered society [helped] by a system that highly integrates cyberspace and physical space," Society 5.0 is a concept intended to broaden the discussion of innovation from science and technology to all of socioeconomic activity. Nikkei Asia Review reports: The government has also established multiple large-scale programs to encourage companies, involved in everything from health care and mobility to energy, to invest in research and development, not only at the level of pure technology but also to bring it to a pilot level. The exhibition includes some achievements from these programs, including Cyberdyne's HAL, standing for "hybrid assistive limb," which the company claims to be the world's first "wearable cyborg." A HAL exoskeleton autonomously walks on a treadmill at the venue. When worn on a leg, HAL can read faint signals sent to muscles from the brain thanks to electrodes attached to the wearer's skin, determining the wearer's desired movements. "Even if your nerves are not connected at first, they gradually recover through the wearing of HAL, and you can eventually move your own body parts without wearing it," said a person from Cyberdyne.

SkyDrive's "flying car" also attracts the attention of visitors, who can observe a full-scale model of the SD-03, which performed the first successful public manned flights of a flying car in Japan in August 2020. Co-founded by former Toyota Motor engineer Tomohiro Fukuzawa, the startup plans to offer commercial mobility service during Expo 2025, to be held in Osaka. "It is as if we are traveling to the future," said Shinji Inoue, a minister of state who heads science and technology policy, when he visited the exhibition last week. Asked by reporters how to make these cutting-edge tools an everyday reality, Inoue spoke of a need to deregulate the market when it comes to obtaining operating permits for such items. Indeed, the government acknowledges challenges in keeping up with the country's capabilities in implementing scientific progress. Digitalization initiatives, the premise for achieving Society 5.0, "could not sufficiently create new business models through data collaboration, like what we see in other countries," said a report from the Cabinet Office analyzing the previous five-year plan through fiscal 2020. Instead, the initiatives aimed at improving the efficiency of existing operations, failing to drive innovation.

Transportation

Toyota Led on Clean Cars. Now Critics Say It Works To Delay Them. (nytimes.com) 304

Toyota bet on hydrogen power, but as the world moves toward electric the company is fighting climate regulations in an apparent effort to buy time. From a report: The Toyota Prius hybrid was a milestone in the history of clean cars, attracting millions of buyers worldwide who could do their part for the environment while saving money on gasoline. But in recent months, Toyota, one of the world's largest automakers, has quietly become the industry's strongest voice opposing an all-out transition to electric vehicles -- which proponents say is critical to fighting climate change.

Last month, Chris Reynolds, a senior executive who oversees government affairs for the company, traveled to Washington for closed-door meetings with congressional staff members and outlined Toyota's opposition to an aggressive transition to all-electric cars. He argued that gas-electric hybrids like the Prius and hydrogen-powered cars should play a bigger role, according to four people familiar with the talks. Behind that position is a business quandary: Even as other automakers have embraced electric cars, Toyota bet its future on the development of hydrogen fuel cells -- a costlier technology that has fallen far behind electric batteries -- with greater use of hybrids in the near term. That means a rapid shift from gasoline to electric on the roads could be devastating for the company's market share and bottom line.

EU

European Commission Starts Legal Action Against 23 EU Countries Over Copyright Rules (reuters.com) 37

France, Spain, Italy and 20 other EU countries may be taken to court for their tardiness in enacting landmark EU copyright rules into national law, the European Commission said on Monday as it asked the group to explain the delays. From a report: The copyright rules, adopted two years ago, aim to ensure a level playing field between the European Union's trillion-euro creative industries and online platforms such as Google, owned by Alphabet, and Facebook. Some of Europe's artists and broadcasters, however, are still not happy, in particular over the interpretation of a key provision, Article 17, which is intended to force sharing platforms such as YouTube and Instagram to filter copyrighted content.

The Commission said it had sent letters of formal notice, the first step of its infringement proceedings, to the countries group asking for explanations. The deadline for enacting the EU rules was June 7. The other countries are Austria, Belgium, Bulgaria, Croatia, Cyprus, the Czech Republic, Denmark, Estonia, Greece, Finland, Ireland, Lithuania, Luxembourg, Latvia, Poland, Portugal, Romania, Sweden, Slovenia and Slovakia.

EU

EU Pushes for Changes To Google's Flight and Hotel Search Results (nypost.com) 37

The European Union is pushing for clarity from Google about how the company processes flight and hotel searches. From a report: The tech giant must explain why it ranks certain flights and hotels above others and provide more clarity about how it calculates prices, European Union regulators demanded Monday, accusing the company of having "misled" consumers. The final prices that Google displays should include all fees and taxes that can be calculated in advance, regulators said in a statement. "EU consumers cannot be misled when using search engines to plan their holidays," EU Justice Commissioner Didier Reynders said. "We need to empower consumers to make their choices based on transparent and unbiased information." The regulators are giving Google two months to propose a fix to the issues or face possible unspecified sanctions.
Facebook

Facebook, Twitter and Other Tech Giants To Target Attacker Manifestos, Far-right Militias in Database (reuters.com) 197

A counterterrorism organization formed by some of the biggest U.S. tech companies including Facebook and Microsoft is significantly expanding the types of extremist content shared between firms in a key database, aiming to crack down on material from white supremacists and far-right militias, the group told Reuters. From the report: Until now, the Global Internet Forum to Counter Terrorism's (GIFCT) database has focused on videos and images from terrorist groups on a United Nations list and so has largely consisted of content from Islamist extremist organizations such as Islamic State, al Qaeda and the Taliban. Over the next few months, the group will add attacker manifestos -- often shared by sympathizers after white supremacist violence -- and other publications and links flagged by U.N. initiative Tech Against Terrorism. It will use lists from intelligence-sharing group Five Eyes, adding URLs and PDFs from more groups, including the Proud Boys, the Three Percenters and neo-Nazis. The firms, which include Twitter and Alphabet 's YouTube, share "hashes," unique numerical representations of original pieces of content that have been removed from their services. Other platforms use these to identify the same content on their own sites in order to review or remove it.
Chrome

Google Explored New Safari-like Redesign for Chrome in 2016 -- But Decided Against It (read.cv) 26

Chris Lee, a former staff interaction designer at Google, writes in a blog post: Chrome Home was an ambitious redesign of mobile Chrome's main UI. It brought Chrome's toolbar to the bottom of the screen and turned in into a peeking panel that could be swiped to expose additional controls. I created the original concept and pitch for Chrome Home in 2016. It was based off two insights:

1. Phones were growing in size, and we had opportunity to innovate in creating a gestural, spatial interface that would still be usable with one hand.
2. Mobile Chrome was also growing in features - but because its minimalist interface kept everything behind a "three dot" menu, these features were underutilized and hard to access.

The idea caught traction internally, eventually becoming a Chrome org priority. I then led a team to execute and iterate on the concept. Executing on Chrome Home required rethinking not just the toolbar, but almost all of Chrome's UI: search, bookmarks, tabs, prompts, etc. To inform our decisions, we used a variety of prototyping and testing approaches of increasing fidelity. Ultimately, such a fundamental change to a web browser required nothing short of building it into the product and testing it in longitudinal studies and live beta experiments. We heard a mixture of reactions. The feature gained a cult following among the tech community. But for some mainstream users, the change felt disorienting. Chrome serves billions of users around the globe with varying tech literacy. I became increasingly convinced that launching Chrome Home would not serve all our users well. So just as I strongly as I had pitched the original concept, I advocated for us to stop the launch -- which took not a small amount of debate.
Lee adds, "oh, and Safari in iOS 15 picked up some similar ideas and criticisms."
Communications

Baseball's Newest Anti-Cheating Technology: Encrypted Transmitters for Catchers' Signals (theverge.com) 75

First Major League Baseball experimented with automated umpiring of balls and strikes in the minor leagues.

Now the Verge reports they're trying a time-saving tactic that might also make it harder to cheat: Baseball has a sign stealing problem — or at least, a technological one, seeing how reading another team's pitches is technically legal, but using Apple Watches or telephoto cameras and then suspiciously banging on trash cans is very much not. But soon the MLB may try fighting fire with fire: on August 3rd, it plans to begin testing an encrypted wireless communication device that replaces the traditional flash of fingers with button taps, according to ESPN.

The device, from a startup called PitchCom, will be tested in the Low-A West minor league first. As you'd expect from something that's relaying extremely basic signals, it's not a particularly complicated piece of kit: one wristband transmitter for the catcher with nine buttons to signal "desired pitch and location," which sends an encrypted audio signal to receivers that can squeeze into a pitcher's cap and a catcher's helmet.

The receivers use bone-conduction technology, so they don't necessarily need to be up against an ear, and might theoretically be harder to eavesdrop on. (Bone conduction stimulates bones in your head instead of emitting audible sound.)

"MLB hopes the devices will cut down on time spent by pitchers stepping off the rubber and changing signals," reports the Associated Press, noting another interesting new rule. "A team may continue to use the system if the opposing club's device malfunctions."

But don't worry about that, reports ESPN: Hacking the system, the company says, is virtually impossible. PitchCom uses an industrial grade encryption algorithm and transmits minimal data digitally, making it mathematically impossible for someone to decrypt intercepted transmissions, according to the company.
Social Networks

'Disinformation for Hire' is Becoming a Booming Industry (nytimes.com) 148

Sunday the BBC reported YouTube influencers were offered money to spread vaccine misinformation.

But according to the New York Times, that's just the tip of the iceberg. "The scheme appears to be part of a secretive industry that security analysts and American officials say is exploding in scale: disinformation for hire: Private firms, straddling traditional marketing and the shadow world of geopolitical influence operations, are selling services once conducted principally by intelligence agencies. They sow discord, meddle in elections, seed false narratives and push viral conspiracies, mostly on social media. And they offer clients something precious: deniability. "Disinfo-for-hire actors being employed by government or government-adjacent actors is growing and serious," said Graham Brookie, director of the Atlantic Council's Digital Forensic Research Lab, calling it "a boom industry."

Similar campaigns have been recently found promoting India's ruling party, Egyptian foreign policy aims and political figures in Bolivia and Venezuela. Mr. Brookie's organization tracked one operating amid a mayoral race in Serra, a small city in Brazil. An ideologically promiscuous Ukrainian firm boosted several competing political parties. In the Central African Republic, two separate operations flooded social media with dueling pro-French and pro-Russian disinformation. Both powers are vying for influence in the country. A wave of anti-American posts in Iraq, seemingly organic, were tracked to a public relations company that was separately accused of faking anti-government sentiment in Israel.

Most trace to back-alley firms whose legitimate services resemble those of a bottom-rate marketer or email spammer... For-hire disinformation, though only sometimes effective, is growing more sophisticated as practitioners iterate and learn. Experts say it is becoming more common in every part of the world, outpacing operations conducted directly by governments. The result is an accelerating rise in polarizing conspiracies, phony citizen groups and fabricated public sentiment, deteriorating our shared reality beyond even the depths of recent years... Commercial firms conducted for-hire disinformation in at least 48 countries last year — nearly double from the year before, according to an Oxford University study. The researchers identified 65 companies offering such services...

Platforms have stepped up efforts to root out coordinated disinformation. Analysts especially credit Facebook, which publishes detailed reports on campaigns it disrupts. Still, some argue that social media companies also play a role in worsening the threat. Engagement-boosting algorithms and design elements, research finds, often privilege divisive and conspiratorial content.

The article also notes "a generation" of populist political leaders around the world who have risen "in part through social media manipulation.

"Once in office, many institutionalize those methods as tools of governance and foreign relations."
Facebook

Facebook is Now Aggressively Courting a New Partner: Churches (yahoo.com) 126

When the 150,000-member "megachurch" Hillsong opened a branch in Atlanta, its pastor Sam Collier says Facebook suggested using it to explore how churches can "go further farther on Facebook..." reports the New York Times: He is partnering with Facebook, he said, "to directly impact and help churches navigate and reach the consumer better."

"Consumer isn't the right word," he said, correcting himself. "Reach the parishioner better."

Facebook's involvement with churches has been intense: For months Facebook developers met weekly with Hillsong and explored what the church would look like on Facebook and what apps they might create for financial giving, video capability or livestreaming. When it came time for Hillsong's grand opening in June, the church issued a news release saying it was "partnering with Facebook" and began streaming its services exclusively on the platform.

Beyond that, Mr. Collier could not share many specifics — he had signed a nondisclosure agreement...

"Together we are discovering what the future of the church could be on Facebook..."

[Facebook] has been cultivating partnerships with a wide range of faith communities over the past few years, from individual congregations to large denominations, like the Assemblies of God and the Church of God in Christ. Now, after the coronavirus pandemic pushed religious groups to explore new ways to operate, Facebook sees even greater strategic opportunity to draw highly engaged users onto its platform. The company aims to become the virtual home for religious community, and wants churches, mosques, synagogues and others to embed their religious life into its platform, from hosting worship services and socializing more casually to soliciting money. It is developing new products, including audio and prayer sharing, aimed at faith groups...

The partnerships reveal how Big Tech and religion are converging far beyond simply moving services to the internet. Facebook is shaping the future of religious experience itself, as it has done for political and social life... The collaborations raise not only practical questions, but also philosophical and moral ones... There are privacy worries too, as people share some of their most intimate life details with their spiritual communities. The potential for Facebook to gather valuable user information creates "enormous" concerns, said Sarah Lane Ritchie, a lecturer in theology and science at the University of Edinburgh...

"Corporations are not worried about moral codes," she said. "I don't think we know yet all the ways in which this marriage between Big Tech and the church will play out."
Last month Facebook held a summit "which resembled a religious service," the Times reports, at which Chief Operating Officer Sheryl Sandberg said churches were a natural fit for Facebook "because fundamentally both are about connection."

But the article also notes the 6-million member Church of God in Christ "received early access to several of Facebook's monetization features," testing paid subscriptions for exclusive church content, as well as real-time donations during services. But "Leaders decided against a third feature: advertisements during video streams."
Security

Microsoft Warns of 'Evolving' LemonDuck Mining Malware Targeting Linux and Windows Machines (microsoft.com) 18

The threat intelligence team for Microsoft's 365 Defender security suite recently focused on an example of "modern mining malware infrastructure," describing how "Anything that can gain access to machines — even so-called commodity malware — can bring in more dangerous threats."

Specifically, it offered a case study of LemonDuck. The blog post's title? "When coin miners evolve..." Today, beyond using resources for its traditional bot and mining activities, LemonDuck steals credentials, removes security controls, spreads via emails, moves laterally, and ultimately drops more tools for human-operated activity.

LemonDuck's threat to enterprises is also in the fact that it's a cross-platform threat. It's one of a few documented bot malware families that targets Linux systems as well as Windows devices. It uses a wide range of spreading mechanisms — phishing emails, exploits, USB devices, brute force, among others — and it has shown that it can quickly take advantage of news, events, or the release of new exploits to run effective campaigns... Notably, LemonDuck removes other attackers from a compromised device by getting rid of competing malware and preventing any new infections by patching the same vulnerabilities it used to gain access... LemonDuck spreads in a variety of ways, but the two main methods are (1) compromises that are either edge-initiated or facilitated by bot implants moving laterally within an organization, or (2) bot-initiated email campaigns.

LemonDuck acts as a loader for many other follow-on activities, but one if its main functions is to spread by compromising other systems. Since its first appearance, the LemonDuck operators have leveraged scans against both Windows and Linux devices for open or weakly authenticated SMB, Exchange, SQL, Hadoop, REDIS, RDP, or other edge devices that might be vulnerable to password spray or application vulnerabilities... Other common methods of infection include movement within the compromised environment, as well as through USB and connected drives. These processes are often kicked off automatically and have occurred consistently throughout the entirety of LemonDuck's operation.

Youtube

YouTube Stars Were Offered Money to Spread Vaccine Misinformation (bbc.com) 255

"A mysterious marketing agency secretly offered to pay social media stars to spread disinformation about Covid-19 vaccines," reports the BBC.

"Their plan failed when the influencers went public about the attempt to recruit them." An influencer marketing agency called Fazze offered to pay [Mirko Drotschmann, a German YouTuber and journalist] to promote what it said was leaked information that suggested the death rate among people who had the Pfizer vaccine was almost three times that of the AstraZeneca jab. The information provided wasn't true. It quickly became apparent to Mirko that he was being asked to spread disinformation to undermine public confidence in vaccines in the middle of a pandemic. "I was shocked," says Mirko "then I was curious, what's behind all that?" In France, science YouTuber Léo Grasset received a similar offer. The agency offered him 2000 euros if he would take part.

Fazze said it was acting for a client who wished to remain anonymous...

Both Léo and Mirko were appalled by the false claims. They pretended to be interested in order to try to find out more and were provided with detailed instructions about what they should say in their videos. In stilted English, the brief instructed them to "Act like you have the passion and interest in this topic." It told them not to mention the video had a sponsor — and instead pretend they were spontaneously giving advice out of concern for their viewers... Since Léo and Mirko blew the whistle at least four other influencers in France and Germany have gone public to reveal they also rejected Fazze's attempts to recruit them.

But German journalist, Daniel Laufer, has identified two influencers who may have taken up the offer.

But who's behind the mysterious influencer marketing agency? Fazze is a part of AdNow, which is a digital marketing company, registered in both Russia and the UK. The BBC has made multiple attempts to contact AdNow by phone, email and even a letter couriered to their Moscow headquarters, but they have not responded. Eventually we managed to contact Ewan Tolladay, one of two directors of the British arm of AdNow - who lives in Durham. Mr. Tolladay said he had very little to do with Fazze — which he said was a joint venture between his fellow director — a Russian man called Stanislav Fesenko — and another person whose identity he didn't know... Both the French and German authorities have launched investigations into Fazze's approaches to influencers. But the identity of the agency's mystery client remains unclear.

There has been speculation about the Russian connections to this scandal and the interests of the Russian state in promoting its own vaccine — Sputnik V.

French YouTuber Léo Grasset believes we'll see more attempts to manipulate public opinion, especially young people — apparently because it's incredibly easy.

"Just spend the same money on TikTok creators, YouTube creators," they tell the BBC. "The whole ecosystem is perfectly built for maximum efficiency of disinformation right now."

Slashdot Top Deals