Dating app Bumble is opening up a restaurant in New York City where single folks can meet up for dates. Engadget reports: Bumble Brew is scheduled to open for breakfast service on July 24th. Lunch and dinner service will start at the Nolita spot in the coming weeks. Along with an 80-seat dining room, there will be a cocktail bar, patio dining and private dining space. The restaurant, which is decked out in the app's recognizable shade of yellow, can be used for events as well. It has an Italian-inspired menu with pickup and delivery options, and the music is primarily from female artists. The new venture builds on the Bumble Hive pop-up community spaces where people can hang out, eat and drink and meet others. Bumble Brew doesn't have a direct tie-in with the Bumble app, at least for now. Still, it's easy to imagine Bumble adding a reservation system that pops up when NYC users try to arrange a date.

The European Union has allocated $4.7 million in funding to upgrade Cerberus, a platform used by EU law enforcement agencies to crack passwords and access encrypted devices. From a report: Developed in 2019 for an initial cost of $2.7 million, Cerberus stands for Child Exploitation Response by Beating Encryption and Research to Unprotect Systems. The platform is a collection of finely tuned algorithms that utilize high-performance computers to crack passwords for devices seized during law enforcement investigations. Sources close to the project have told The Record this week that the new $4.7 million in funding will be used as part of a new project called Overclock, which aims to expand the Cerberus platform with new algorithms that can be used to crack passwords on a broader set of new devices. Once finished, EU law enforcement hopes to be able to expand their digital forensics capabilities in regards to extracting and recovering data from secure devices.

China issued a sweeping warning to its biggest companies, vowing to tighten oversight of data security and overseas listings just days after Didi's contentious decision to go public in the U.S. From a report: While the statement from China's State Council on Tuesday was thin on details, it suggests Beijing is preparing to intensify a crackdown on its corporate sector that has spanned everything from property debt and fintech to antitrust issues and now cybersecurity. Rules for overseas listings will be revised, the State Council said, while publicly-traded firms will be held accountable for keeping their data secure. China also said it will step up its regulatory oversight of companies trading in offshore markets. The move comes after the cyberspace regulator announced a probe into Didi, which controls almost the entire ride-hailing market in China, and pulled the company's app from stores.

The Department of Defense announced Tuesday it's calling off the $10 billion cloud contract that was the subject of a legal battle involving Amazon and Microsoft. From a report: The JEDI, or Joint Enterprise Defense Infrastructure, deal has become one of the most tangled contracts for the Department of Defense. In a press release Tuesday, the Pentagon said that "due to evolving requirements, increased cloud conversancy, and industry advances, the JEDI Cloud contract no longer meets its needs." But the fight over a cloud computing project does not appear to be completely over yet. The Pentagon said in the press release that it still needs enterprise-scale cloud capability and announced a new multi-vendor contract known as the Joint Warfighter Cloud Capability. The agency said it plans to solicit proposals from both Amazon and Microsoft for the contract, adding that they are the only cloud service providers that can meet its needs. But, it added, it will continue to do market research to see if others could also meet its specifications. [...] The lucrative JEDI contract was intended to modernize the Pentagon's IT operations for services rendered over as many as 10 years. Microsoft was awarded the cloud computing contract in 2019, beating out market leader Amazon Web Services.

schwit1 writes: Cathay Pacific is working with Airbus to introduce "reduced crew" long-haul flights with a sole pilot in the cockpit much of the time, industry sources told Reuters. The programme, known within Airbus as Project Connect, aims to certify its A350 jet for single-pilot operations during high-altitude cruise, starting in 2025 on Cathay passenger flights, the sources said. High hurdles remain on the path to international acceptance. Once cleared, longer flights would become possible with a pair of pilots alternating rest breaks, instead of the three or four currently needed to maintain at least two in the cockpit. That promises savings for airlines, amid uncertainty over the post-pandemic economics of intercontinental flying. But it is likely to encounter resistance from pilots already hit by mass layoffs, and safety concerns about aircraft automation.

The Yahoo brand, once an Internet name as iconic as Google, might be worth little to Gen Z-ers more familiar with TikTok and Instagram. But it still has value in Japan, where the once-illustrious marquee just sold for $1.6 billion. From a report: Z Holdings, a unit of Masayoshi Son's SoftBank Group Corp, agreed to buy the rights to the Yahoo name in Japan for 178.5 billion yen to replace an existing licensing agreement. The deal follows the sale of Verizon's media division, the bulk of which is the original U.S. version of the Yahoo web portal, to private equity firm Apollo Global for $5 billion. Yahoo! was one of Son's early big investments, who built a $100 million stake in one of the original web startups in the mid-90s. He subsequently formed the joint venture Yahoo! Japan, which over the years morphed into tech and e-commerce platform Z Holdings as Yahoo sold off its core assets.

Twitter no longer enjoys the liability protection against user-generated content in India, the government said in a court filing this week as tension escalates between the two over the South Asian nation's new IT rules. From a report: In a court filing on Monday, New Delhi said Twitter has lost its immunity in India after the American social network failed to comply with the new local IT rules, which were unveiled in February and went into effect in late May. Experts have said in recent weeks that the Indian court -- and not the Indian government -- holds the power to decide whether Twitter gets to keep its safe harbor protections in the world's second largest internet market.

Internet services enjoy what is broadly referred to as "safe harbor" protection that say that tech platforms won't be held liable for the things their users post or share online. If you insult someone on Twitter, for example, the company may be asked to take down your post (if the person you have insulted has approached the court and a takedown order has been issued) but it likely won't be held legally responsible for what you said or did. Without the protection, Twitter -- which according to mobile insight firm App Annie, has over 100 million users in India -- is on paper responsible for everything those users say on its platform.

Facebook, Twitter, and Alphabet's Google have privately warned the Hong Kong government that they could stop offering their services in the city if authorities proceed with planned changes to data-protection laws that could make them liable for the malicious sharing of individuals' information online. From a report: A letter sent by an industry group that includes the internet firms said companies are concerned that the planned rules to address doxing could put their staff at risk of criminal investigations or prosecutions related to what the firms' users post online. Doxing refers to the practice of putting people's personal information online so they can be harassed by others. Hong Kong's Constitutional and Mainland Affairs Bureau in May proposed amendments to the city's data-protection laws that it said were needed to combat doxing, a practice that was prevalent during 2019 protests in the city. The proposals call for punishments of up to 1 million Hong Kong dollars, the equivalent of about $128,800, and up to five years' imprisonment. "The only way to avoid these sanctions for technology companies would be to refrain from investing and offering the services in Hong Kong," said the previously unreported June 25 letter [PDF] from the Singapore-based Asia Internet Coalition, which was reviewed by The Wall Street Journal.

It's now being called "the single biggest global ransomware attack on record," with thousands of victims in at least 17 different countries breached with ransomware Friday, reports the Associated Press, citing new details provided by cybersecurity researchers.

An affiliate of the Russia-linked gang REvil deployed the ransomware "largely through firms that remotely manage IT infrastructure for multiple customers." A broad array of businesses and public agencies were hit by the latest attack, apparently on all continents, including in financial services, travel and leisure and the public sector — though few large companies, the cybersecurity firm Sophos reported... The Swedish grocery chain Coop said most of its 800 stores would be closed for a second day Sunday because their cash register software supplier was crippled. A Swedish pharmacy chain, gas station chain, the state railway and public broadcaster SVT were also hit. In Germany, an unnamed IT services company told authorities several thousand of its customers were compromised, the news agency dpa reported...

CEO Fred Voccola of the breached software company, Kaseya, estimated the victim number in the low thousands, mostly small businesses like "dental practices, architecture firms, plastic surgery centers, libraries, things like that." Voccola said in an interview that only between 50-60 of the company's 37,000 customers were compromised. But 70% were managed service providers who use the company's hacked VSA software to manage multiple customers. It automates the installation of software and security updates and manages backups and other vital tasks...

Dutch researchers said they alerted Miami-based Kaseya to the breach and said the criminals used a "zero day," the industry term for a previously unknown security hole in software. Voccola would not confirm that or offer details of the breach — except to say that it was not phishing. "The level of sophistication here was extraordinary," he said. When the cybersecurity firm Mandiant finishes its investigation, Voccola said he is confident it will show that the criminals didn't just violate Kaseya code in breaking into his network but also exploited vulnerabilities in third-party software...

Kaseya, which called on customers Friday to shut down their VSA servers immediately, said Sunday it hoped to have a patch in the next few days.
The attacks may have been timed to exploit America's three-day weekend celebrating the nation's founding, according to experts interviewed by the Associated Press. America's National Security advisor is now urging all who believed they were compromised to alert the FBI.

"The attack comes less than a month after Biden pressed Russian President Vladimir Putin to stop providing safe haven to REvil and other ransomware gangs whose unrelenting extortionary attacks the U.S. deems a national security threat."

UPDATE: Bleeping Computer notes the exploited vulnerability "had been previously disclosed to Kaseya by security researchers from the Dutch Institute for Vulnerability Disclosure (DIVD), and Kaseya was validating the patch before they rolled it out to customers."

In a statement today, DIVD posted that "During the last 48 hours, the number of Kaseya VSA instances that are reachable from the internet has dropped from over 2,200 to less than 140 in our last scan today... A good demonstration of how a cooperative network of security-minded organizations can be very effective during a nasty crisis."

"Make America weird again," quipped CNBC, describing Mark Zuckerberg's Instagram post today commemorating America's national Independence Day holiday MarketWatch explains: Yes, that's the Facebook Inc. chief executive wakeboarding while holding an American flag to the tune of John Denver's "Take Me Home, Country Roads."

Because: America.

In fairness, Zuckerberg did have reason to celebrate, as the Federal Trade Commission's antitrust case against Facebook was shot down (at least temporarily) last Monday, and a similar suit by [a coalition of 48] state attorneys general was dismissed outright. Facebook's valuation shot above the $1 trillion mark for the first time following the dismissals, and its shares rose about 4% on the week.
"If the plaintiffs had prevailed in the antitrust lawsuits, Facebook might have been required to divest Instagram and WhatsApp," notes CNBC."

Instead, he's using it to post a picture of himself flying an American flag on a $12,000 electronic surfboard.

"A federal judge on Wednesday blocked for the time being a new Florida law that sought to punish large social media businesses like Facebook and Twitter if they remove content or ban politicians," reports the Associated Press: U.S. District Judge Robert Hinkle granted a preliminary injunction stopping the new law from being enforced. The law — which was supposed to take effect on Thursday — enabled the state to fine large social media companies $250,000 a day if they remove an account of a statewide political candidate, and $25,000 a day if they remove an account of someone running for a local office. The legislation was challenged in federal court in Tallahassee by NetChoice, a lobbying firm that represents Twitter, Facebook and other online companies, and the Computer and Communications Industry Association. Both said the new law was unconstitutional and violated federal law.

The plaintiffs were likely to prevail on their claim that the new law violated the First Amendment if the case went to trial, the judge said.

Hinkle said the new law was aimed at only large social media businesses, not smaller ones that provide the same services, and made exceptions for Disney and their apps by including that theme park owners wouldn't be subject to the law.
The judge also argued that the law "compels providers to host speech that violates their standards."

An anonymous reader quotes a report from Ars Technica: Google has given the boot to nine Android apps downloaded more than 5.8 million times from the company's Play marketplace after researchers said these apps used a sneaky way to steal users' Facebook login credentials. In a bid to win users' trust and lower their guard, the apps provided fully functioning services for photo editing and framing, exercise and training, horoscopes, and removal of junk files from Android devices, according to a post published by security firm Dr. Web. All of the identified apps offered users an option to disable in-app ads by logging into their Facebook accounts. Users who chose the option saw a genuine Facebook login form containing fields for entering usernames and passwords.

Then, as Dr. Web researchers wrote: "These trojans used a special mechanism to trick their victims. After receiving the necessary settings from one of the C&C servers upon launch, they loaded the legitimate Facebook web page https://www.facebook.com/login... into WebView. Next, they loaded JavaScript received from the C&C server into the same WebView. This script was directly used to hijack the entered login credentials. After that, this JavaScript, using the methods provided through the JavascriptInterface annotation, passed stolen login and password to the trojan applications, which then transferred the data to the attackers' C&C server. After the victim logged into their account, the trojans also stole cookies from the current authorization session. Those cookies were also sent to cybercriminals. Analysis of the malicious programs showed that they all received settings for stealing logins and passwords of Facebook accounts. However, the attackers could have easily changed the trojans' settings and commanded them to load the web page of another legitimate service. They could have even used a completely fake login form located on a phishing site. Thus, the trojans could have been used to steal logins and passwords from any service."

The majority of the downloads were for an app called PIP Photo, which was accessed more than 5.8 million times. The app with the next greatest reach was Processing Photo, with more than 500,000 downloads. The remaining apps were: Rubbish Cleaner: more than 100,000 downloads; Inwell Fitness: more than 100,000 downloads; Horoscope Daily: more than 100,000 downloads; App Lock Keep: more than 50,000 downloads; Lockit Master: more than 5,000 downloads; Horoscope Pi: 1,000 downloads; and App Lock Manager: 10 downloads. A search of Google Play shows that all apps have been removed from Play.

An anonymous reader quotes a report from TechCrunch: Twitter has a history of sharing feature and design ideas it's considering at very early stages of development. Earlier this month, for example, it showed off concepts around a potential "unmention" feature that would let users untag themselves from others' tweets. Today, the company is sharing a few more of its design explorations that would allow users to better control who can see their tweets and who ends up in their replies.

The first of the new ideas builds on work that began last year with the release of a feature that allows an original poster to choose who's allowed to reply to their tweet. Today, users can choose to limit replies to only people mentioned in the tweet, only people they follow, or they can leave it defaulted to "everyone." But even though this allows users to limit who can respond, everyone can see the tweet itself. And they can like, retweet or quote tweet the post. With the proposed Trusted Friends feature, users could tweet to a group of their own choosing. This could be a way to use Twitter with real-life friends, or some other small network of people you know more personally. Perhaps you could post a tweet that only your New York friends could see when you wanted to let them know you were in town. Or maybe you could post only to those who share your love of a particular TV show, sporting event or hobby. Twitter says the benefit of this private, "friends only" format is that it could save people from the workarounds they're currently using -- like juggling multiple alt accounts or toggling between public to protected tweets.

Another new feature under consideration is Reply Language Prompts. This feature would allow Twitter users to choose phrases they don't want to see in their replies. When someone is writing back to the original poster, these words and phrases would be highlighted and a prompt would explain why the original poster doesn't want to see that sort of language. For instance, users could configure prompts to appear if someone is using profanity in their reply. The feature wouldn't stop the poster from tweeting their reply -- it's more a gentle nudge that asks them to be more considerate. The third, and perhaps most complicated, feature is something Twitter is calling "Facets." This is an early idea about tweeting from different personas from one account. The feature would make sense for those who often tweet about different aspects of their lives, including their work life, their side hustles, their personal life or family, their passions and more. Unlike Trusted Friends, which would let you restrict some tweets to a more personal network, Facets would give other users the ability to choose whether they wanted to follow all your tweets, or only those about the "facet" they're interested in. This way, you could follow someone's tweets about tech, but ignore their stream of reactions they post when watching their favorite team play. Or you could follow your friend's personal tweets, but ignore their work-related content. And so on.

Legislators in Norway have passed new regulations requiring influencers and advertisers to label retouched photos in a bid to fight unrealistic beauty standards. Motherboard reports: The new regulations were passed as an amendment to the nation's Marketing Act via a landslide 72 to 15 vote on June 2. The King of Norway will later decide when it will go into effect. Under the recently-passed rules, advertisements where a body's shape, size, or skin has been retouched -- even through a filter before a photo is taken -- will need a standardized label designed by the Norwegian Ministry of Children and Family Affairs. Examples of manipulations requiring labeling include enlarged lips, narrowed waists, and exaggerated muscles, but it's not clear if the same will apply to adjustments of lighting or saturation.

The law also covers images from influencers and celebrities if they "receive any payment or other benefit" in relation to the post, including on social media platforms Facebook, Instagram, Snapchat, TikTok, and Twitter. Any violations are punishable with escalating fines and, in extreme cases, even imprisonment. The move comes amidst continued public debate in Norway surrounding "kroppspress" (literally "body pressure"), which very roughly translates to beauty standards. In its proposal to the Norwegian parliament, the Ministry of Children and Family cites studies that found what it calls "body pressure," or beauty standards, to be pervasive and a contributing factor to low self-esteem in young people. The ministry conceded, however, that the requirement could be difficult to enforce because it's not always easy to determine if a photo has been edited. It also noted that an unintended consequence of the law could be that influencers feel more pressure to undergo cosmetic surgery "in order to live up to beauty ideals."

Instagram doesn't see itself as a platform where people go to share photos anymore. From a report: That's the main takeaway from a series of recent comments made by the head of the company, Adam Mosseri. "We're no longer a photo-sharing app or a square photo-sharing app," Mosseri said in a video he posted to his social media accounts this week. According to Mosseri, the main reason for that is that people come to Instagram "to be entertained," and it's not the only app that offers that in what is a crowded marketplace. "Let's be honest, there's some really serious competition right now," Mosseri said. "TikTok is huge, YouTube is even bigger and there are a lot of other upstarts as well." To stay competitive, Mosseri said Instagram has to embrace that aspect of itself, "and that means change." One way the app will change is with Instagram handing out more recommendations

Too much has been lost already. The glue that holds humanity's knowledge together is coming undone. From a report: It turns out that link rot and content drift are endemic to the web, which is both unsurprising and shockingly risky for a library that has "billions of books and no central filing system." Imagine if libraries didn't exist and there was only a "sharing economy" for physical books: People could register what books they happened to have at home, and then others who wanted them could visit and peruse them. It's no surprise that such a system could fall out of date, with books no longer where they were advertised to be -- especially if someone reported a book being in someone else's home in 2015, and then an interested reader saw that 2015 report in 2021 and tried to visit the original home mentioned as holding it. That's what we have right now on the web.

[...] People tend to overlook the decay of the modern web, when in fact these numbers are extraordinary -- they represent a comprehensive breakdown in the chain of custody for facts. Libraries exist, and they still have books in them, but they aren't stewarding a huge percentage of the information that people are linking to, including within formal, legal documents. No one is. The flexibility of the web -- the very feature that makes it work, that had it eclipse CompuServe and other centrally organized networks -- diffuses responsibility for this core societal function.

Some Facebook users in the United States are being served a prompt that asks if they are worried that someone they know might be becoming an extremist. Others are being notified that they may have been exposed to extremist content. From a report: It is all part of a test the social media company is running that stems from its Redirect Initiative, which aims to combat violent extremism, Andy Stone, a Facebook spokesperson, told CNN. Screen shots of the alerts surfaced on social media Thursday. "This test is part of our larger work to assess ways to provide resources and support to people on Facebook who may have engaged with or were exposed to extremist content, or may know someone who is at risk," Stone said. "We are partnering with NGOs and academic experts in this space and hope to have more to share in the future," Stone added. One of the alerts, a screen grab of which made the rounds on social media Thursday, asks users, "Are you concerned that someone you know is becoming an extremist?" "We care about preventing extremism on Facebook," explained that alert, according to a screen grab posted on social media. "Others in your situation have received confidential support."

According to Axios, Jason Miller, an aide and close advisor to Donald Trump, is launching a new social app called "Gettr" in the coming days. From the report: The app, which is in beta testing, appears in the Apple App Store and is described as "a non-bias social network for people all over the world." Gettr, which is still in its infancy, appears to have a few thousand users, according to follower counts of some of the more prominent, suggested accounts. Many users, however, appear anonymous, lacking much profile information. The app looks like Twitter, with a scrolling news feed with a small pencil at the bottom for users to compose a message. It has a search function and like Twitter, a trending topics function. While a quick scroll through the accounts suggests patterns pro-conservatism, there's no obvious suggestion that the app is built by Trump allies. Many of the more prominent suggested accounts, including a general news account called "Daily News" appear to have been created in May of this year. [...] It's unclear how Miller plans to debut the app, but sources tell Axios that other former Trump aides will help aide the rollout. "Data shows that almost every major conservative social network has seen a dramatic decrease in downloads since the Capitol insurrection," notes Axios.

One of the most recent conservative social media sites to be launched was FRANK, a social media site envisioned by Mike Lindell of MyPillow. It's off to a rough start though, as it not only resulted in a legal threat before being launched, but it suffered from many "amateur-hour mistakes" during its rollout. A Drupal expert described the code as "not even student work," adding that "they basically launched the site while it was still in development mode."

UPDATE: The Daily Beast notes that Gettr "is backed by a fugitive Chinese billionaire who once invited Steve Bannon to live on his yacht."
What's not made clear to Gettr's new users is that the site received initial funding from a foundation owned by Chinese billionaire Guo Wengui and his family... "Some of the initial seed money has come from his family foundation," Trump adviser Jason Miller said of Guo, who also goes by the name Miles Kwok...

The Trump adviser said the company was backed by a "consortium of international investors," but declined to name them, beyond the Guo foundation, or the total amount of money that has been invested in the new social-media property so far. But while Miller downplayed Guo's connection, sites associated with the billionaire have suggested that Gettr is Guo's brainchild. In a June video on GTV, a media outlet that serves as a mouthpiece for Guo, a host summarizing a recent comment Guo made about Gettr said that the social media platform was "the concentration of Miles's whole life work...."

Guo's legions of social media supporters and trolls were among the first and most vocal adopters of Gettr starting on June 14, the day the app's site went live.
Citing a report from Bloomberg, New York Magazine adds that former U.S. president Trump "is not yet desperate enough to follow one of his aides in a venture that has no financial benefit to him."

Russian spies accused of interfering in the 2016 U.S. presidential election have spent much of the past two years abusing virtual private networks (VPNs) to target hundreds of organizations worldwide, U.S. and British authorities said on Thursday. Reuters reports: The governments said in a joint advisory that Unit 26165, the arm of Russia's military spy agency whose officers were indicted for allegedly breaking into Democratic Party emails, had been using VPNs and Tor - a privacy-focused network - to conduct "widespread, distributed, and anonymized brute force access attempts against hundreds of government and private sector targets." The advisory did not identify any of the targets by name, saying only that they were mainly in the United States and Europe and included government offices, political parties, energy companies, law firms and media organizations. The National Security Agency (NSA) today also disclosed details of "brute force" methods they say have been used by Russian intelligence to try to break into the cloud services of hundreds of government agencies, energy companies and other organizations.

Earlier this week, law enforcement seized the servers and customer logs for DoubleVPN, a Russian-based VPN service that was reportedly used by cyber criminals to hide their activities while conducting ransomware attacks, phishing campaigns and other malicious hacking operations.

Microsoft is changing its famous Blue Screen of Death (BSOD) to black in Windows 11. The Verge reports: The software giant started testing its new design changes in a Windows 11 preview earlier this week, but the Black Screen of Death isn't fully enabled yet. The Verge understands Microsoft will be switching to a Black Screen of Death for Windows 11, matching the new black logon and shutdown screens. It's the first major change to the BSOD since Microsoft added a sad face to the screen in Windows 8 in 2012, and QR codes in 2016. Microsoft first introduced the BSOD in Windows 3.0, offering a way for IT professionals and support personnel to diagnose hardware and memory faults. A BSOD is Windows' own kernel error or bug check, and it usually includes a dump of data that can help system administrators analyze what system fault caused the blue screen. While Microsoft is switching to a Black Screen of Death in Windows 11, the screen is identical to the one found in Windows 10 otherwise. The sad face remains, as does the stop code and crash dump. The current preview of Windows 11 includes a green BSOD, a color that Microsoft has been using for Windows Insider builds since 2016.