InfoWorld reports: Firefox users can expect improved JavaScript performance in the Firefox 83 browser, with the Warp update to the SpiderMonkey JavaScript engine enabled by default.

Also called WarpBuilder, Warp improves responsiveness and memory usage and speeds up page loads by making changes to JiT (just-in-time) compilers... Warp has been shown to be faster than Ion, SpiderMonkey's previous optimizing JiT, including a 20 percent improvement on Google Docs load time. Other JavaScript-intensive websites such as Netflix and Reddit also have shown improvement...

Warp has replaced the front end — the MIR building phase — of the IonMonkey JiT... Mozilla also will continue to incrementally optimize the back end of the IonMonkey JiT, as Mozilla believes there is still room for improvement for JavaScript-intensive workloads.

Slashdot reader Charlotte Web quote The Street: Tesla CEO Elon Musk says that he has "fully" recovered from his bout with a mild fever or cold about a week after he took to Twitter to say he tested positive for coronavirus... [T]his week, Musk took a more reliable PCR test that he said showed "unequivocal" evidence that he had Covid...

On Wednesday, Morgan Stanley raised Tesla to overweight for the first time in more than three years, predicting that the electric carmaker is on the verge of a "profound model shift" from selling cars to generating high-margin software and services revenue. "To only value Tesla on car sales alone ignores the multiple businesses embedded within the company," Adam Jones said in a research note to clients as he upgraded the shares from equal-weight and raised his price target by 50% to $540 from $360, suggesting 22% additional upside for the stock.
The analyst believes Tesla's electric vehicle business is Tesla's "entry ticket" for "unlocking much larger" potential markets, according to an earlier article in The Street: To better gauge Tesla's future earnings potential, Jones said his team was now including software/connected vehicle services revenue in their earnings and valuation forecasts. With the total number of Tesla's out in the world expected to reach 2.1 million next year, "a more in-depth understanding of the revenue streams derived from each car is warranted right now," he wrote.

Rudra Saraswat is the creator of the Ubuntu Unity distro (which uses the Unity interface in place of Ubuntu's GNOME shell).

But this week they released Ubuntu Web Remix, "a privacy-focused, open source alternative to Google Chrome OS/Chromium OS" using Firefox instead of Google Chrome/Chromium. Liliputing reports: If the name didn't give it away, this operating system is based on Ubuntu, but it's designed to offer a Chrome OS-like experience thanks to a simplified user interface and a set of pre-installed apps including the Firefox web browser, some web apps from /e/, and Anbox, a tool that allows you to run Android apps in Linux...

You don't get the long battery life, cloud backup, and many other features that make Chromebooks different from other laptops (especially other cheap laptops). But if you're looking for a simple, web-centric operating system that isn't made by a corporate giant? Then I guess it's nice to have the option.
Rudra Saraswat writes: An easy web-app (wapp) format has been created to package web-apps for the desktop. You can now create your own web apps using web technologies, package them for the desktop and install them easily.

An experimental wapp store can be found at store.ubuntuweb.co, for distributing web apps. Developers and packagers can do pull requests at gitlab.com/ubuntu-web/ubuntu-web.gitlab.io to contribute wapps.

"Fraudsters redirected email and web traffic destined for several cryptocurrency trading platforms over the past week," reports security researcher Brian Krebs: The attacks were facilitated by scams targeting employees at GoDaddy, the world's largest domain name registrar, KrebsOnSecurity has learned...

This latest campaign appears to have begun on or around Nov. 13, with an attack on cryptocurrency trading platform liquid.com. "A domain hosting provider 'GoDaddy' that manages one of our core domain names incorrectly transferred control of the account and domain to a malicious actor," Liquid CEO Kayamori said in a blog post. "This gave the actor the ability to change DNS records and in turn, take control of a number of internal email accounts. In due course, the malicious actor was able to partially compromise our infrastructure, and gain access to document storage."

In the early morning hours of Nov. 18 Central European Time (CET), cyptocurrency mining service NiceHash disclosed that some of the settings for its domain registration records at GoDaddy were changed without authorization, briefly redirecting email and web traffic for the site. NiceHash froze all customer funds for roughly 24 hours until it was able to verify that its domain settings had been changed back to their original settings. "At this moment in time, it looks like no emails, passwords, or any personal data were accessed, but we do suggest resetting your password and activate 2FA security," the company wrote in a blog post. NiceHash founder Matjaz Skorjanc said the unauthorized changes were made from an Internet address at GoDaddy, and that the attackers tried to use their access to its incoming NiceHash emails to perform password resets on various third-party services, including Slack and Github. But he said GoDaddy was impossible to reach at the time because it was undergoing a widespread system outage in which phone and email systems were unresponsive. "We detected this almost immediately [and] started to mitigate [the] attack," Skorjanc said in an email to this author. "Luckily, we fought them off well and they did not gain access to any important service. Nothing was stolen...."

[S]everal other cryptocurrency platforms also may have been targeted by the same group, including Bibox.com, Celcius.network, and Wirex.app. None of these companies responded to requests for comment.

In response to questions from KrebsOnSecurity, GoDaddy acknowledged that "a small number" of customer domain names had been modified after a "limited" number of GoDaddy employees fell for a social engineering scam.

"In a historic test, a U.S. Navy guided missile destroyer shot down an intercontinental ballistic missile (ICBM) warhead aimed at a patch of ocean off the Hawaiian Islands," reports Popular Mechanics: Once the missile launched, a network of sensors picked it up. The data was then handed off to the guided missile destroyer USS John Finn, which launched a SM-3 Block IIA interceptor. Just as the ICBM released a [simulated] nuclear warhead, the SM-3 released an Exoatmospheric Kill Vehicle (EKV) designed to smash itself into the incoming warhead. Infrared cameras recorded a visible explosion as the EKV took out the simulated nuclear warhead.

Most types of ballistic missiles are basically small payload space rockets designed to boost nuclear warheads into low-Earth orbit. Once in space, the warhead coasts through orbit at several thousand miles per hour — the so-called midcourse phase when the warhead is midway between its launch point and target. The warhead then de-orbits into a trajectory that sends it plunging toward its target.

Meanwhile, space-based infrared sensors pick up the hot launch plume of the ballistic missile. A launch alert is passed on to ground-based long range radars, which search the skies for the incoming threat. As the missile falls away and the warhead continues on to its target, missile defense radars track the target, plot its trajectory, and alert any "shooters" in the flight path capable of shooting down the warhead. The shooter then launches an interceptor, and the EKV steers itself into the warhead path...
The article includes video of the test, and concludes that the ability to shoot down missiles is "terrible news for China" — while adding this "could very well cause Beijing to increase its nuclear arsenal."

According to a facebook post from the police department of Corvallis, Oregon, a Tesla Model 3 crashed at over 100mph, causing batteries from the Tesla to enter two different residences by breaking through the windows, one landing on a person's lap and the second landing on a bed, catching the bedding on fire. "A tire was ripped from the car during the collision and struck the second story siding of a nearby apartment complex with such force that it ruptured the water pipes within the wall, destroying the bathroom to the apartment and flooding the downstairs portion of the apartment as well," adds ExtremeTech. From the report: Tesla goes to some trouble to make certain that the battery cells in its vehicles don't go flying in the event of a collision. But the nature of this impact was obviously sufficient to break whatever solution the manufacturer has developed for dealing with the problem. Previous teardowns of the Model 3 battery pack have shown that the cells are sealed in place with high-strength epoxy.

With that said, there does appear to be a unique problem for BEVs in a situation like this. According to a follow-up post, the Model 3 battery cells can remain hot to the touch and might cause burns for up to 24 hours following involuntary dispersal. That kind of hazard -- specifically, the length of time you might be at risk from harm due to leftover detritus -- seems a potentially significant issue in certain situations. Tesla's epoxy solution shows it has considered the problem, but there may be reason to revisit things. It is unclear if individual cells remain at significant risk for secondary ignition after being separated from the main battery for any length of time or if the majority of fire risk is in the immediate period post-impact. The driver, incidentally, survived, which seems to say something good about Tesla's crash survival measures, at the least. The vehicle, needless to say, did not.

New submitter LeeLynx shares a report from The Register: A new group called the "Inclusive Naming Initiative" has revealed its existence and mission "to help companies and projects remove all harmful and unclear language of any kind and replace it with an agreed-upon set of neutral terms." Akamai, Cisco, the Cloud Native Computing Foundation, IBM, the Linux Foundation, Red Hat, and VMware are all participants. The group has already offered a Word replacement list that suggests alternatives to the terms whitelist, blacklist, slave, and master. There's also a framework for evaluating harmful language that offers guidance on how to make changes.

Red Hat's post announcing its participation in the Initiative links to a dashboard listing all instances of terms it wants changed and reports over 330,000 uses of "Master" and 105,000 uses of "Slave," plus tens of thousands and whitelists and blacklists. Changing them all will be a big job, wrote Red Hat's senior veep and CTO Chris Wright. "On a technical level, change has to be made in hundreds of discrete communities, representing thousands of different projects across as many code repositories," Wright wrote. "Care has to be taken to prevent application or API breakage, maintain backward compatibility, and communicate the changes to users and customers." The Initiative nonetheless hopes to move quickly, with its roadmap calling for best practices to be defined during Q1 2021, case studies to be available in Q3 2021 and a certification program delivered in Q4 2021.

The Internet Archive is now emulating Flash animations, games and toys in our software collection. Jason Scott writes in a blog post: Utilizing an in-development Flash emulator called Ruffle, we have added Flash support to the Internet Archive's Emularity system, letting a subset of Flash items play in the browser as if you had a Flash plugin installed. While Ruffle's compatibility with Flash is less than 100%, it will play a very large portion of historical Flash animation in the browser, at both a smooth and accurate rate.

We have a showcase of the hand-picked best or representative Flash items in this collection. If you want to try your best at combing through a collection of over 1,000 flash items uploaded so far, here is the link. You will not need to have a flash plugin installed, and the system works in all browsers that support Webassembly. For many people: See you later! Enjoy the Flash stuff!

Global internet companies Facebook, Google and Twitter and others have banded together and threatened to leave Pakistan after the South Asian nation granted blanket powers to local regulators to censor digital content. From a report: Earlier this week, Pakistan Prime Minister Imran Khan granted the Pakistan Telecommunication Authority the power to remove and block digital content that pose "harms, intimidates or excites disaffection" toward the government or in other ways hurt the "integrity, security, and defence of Pakistan." Through a group called the Asia Internet Coalition (AIC), the tech firms said that they were "alarmed" by the scope of Pakistan's new law targeting internet firms." In addition to Facebook, Google, and Twitter, AIC represents Apple, Amazon, LinkedIn, SAP, Expedia Group, Yahoo, Airbnb, Grab, Rakuten, Booking.com, Line, and Cloudflare.

If the message sounds familiar, it's because this is not the first time these tech giants have publicly expressed their concerns over the new law, which was proposed by Khan's ministry in February this year. After the Pakistani government made the proposal earlier this year, the group had threatened to leave, a move that made the nation retreat and promise an extensive and broad-based consultation process with civil society and tech companies. That consultation never happened, AIC said in a statement on Thursday, reiterating that its members will be unable to operate in the country with this law in place.

Tom Warren, writing for The Verge: The PC revolution started off life 35 years ago this week. Microsoft launched its first version of Windows on November 20th, 1985, to succeed MS-DOS. It was a huge milestone that paved the way for the modern versions of Windows we use today. While Windows 10 doesn't look anything like Windows 1.0, it still has many of its original fundamentals like scroll bars, drop-down menus, icons, dialog boxes, and apps like Notepad and MS paint.

An anonymous reader shares a report: Last year, electric scooters were booming in big cities across the United States and other countries as urbanites embraced a relatively novel way of getting around town. The rentable, battery-boosted rides also brought a rising number of pedestrian-involved crashes as some riders illegally zipped down sidewalks and darted around traffic before the craze was interrupted by the pandemic. Downtowns became ghost towns when businesses told workers to stay home, and e-scooter business slowed, dropping as much as 70 percent. As people reemerge from shutdowns, wary of congested trains and buses, the micromobility industry may enjoy a post-pandemic renaissance, analysts say. People are buying more of the two-wheelers in some markets. China-based Niu saw sales rise sales 6.3 percent internationally as cities such as Boston, New York and Minneapolis expanded bike lanes to encourage social distancing, setting the framework for a potential e-scooter comeback.

By the time the novel coronavirus is in the rearview mirror, riders could be encountering a new type of e-scooter, one that picks up safety tools from modern cars. Last week, micromobility companies Luna and Voi Technology came together to kick off a test fleet of e-scooters with pedestrian detection. The test scooters are deployed in Northampton, England. Luna, a Dublin-based start-up, developed the system of cameras and sensors that it says will enable the scooters to learn and respond to their environments. Voi, a Swedish e-scooter manufacturer, integrated Luna's computer vision system into 50 of its e-scooters. [...] The immediate goal for Voi and Luna is to have the devices detect people and objects in a scooter's path, even if the rider doesn't see them. The idea is to make scooter users and pedestrians feel safe as they navigate busy streets, which is the most significant issue plaguing cities with legalized shared e-scooters, according to Fredrik Hjelm, CEO of Voi.

YouTube, Facebook and Twitter have said they will join forces with fact-checkers, governments and researchers to try to come up with a new way of tackling misinformation. From a report: Vaccine misinformation has been rife on Facebook, Twitter and YouTube, with many questioning their efficacy. At the same time, countries are preparing to roll out coronavirus vaccines in a bid to end the pandemic. It is unclear how the initiative will improve the fight against fake news. Fact-checking charity Full Fact will co-ordinate the collaboration. Taking part in the effort alongside Facebook, Google-owned YouTube and Twitter are the UK's Department for Digital, Culture, Media and Sport; the Reuters Institute for the Study of Journalism; Africa Check; Canada's Privacy Council Office; and five other international fact-checking organisations. With funding from Facebook, an initial framework will launch in January, setting out new standards for tackling misinformation, as well as a set of aims on the best way to respond to such information.

Apple has slammed Facebook and other internet giants for their ad-targeting practices in response to a letter questioning a decision by the iPhone maker to delay a new privacy feature. From a report: The Cupertino, California-based technology company criticized Facebook's approach to advertising and user tracking, according to a written reply sent to several human rights and privacy organizations, including the Electronic Frontier Foundation and Human Rights Watch: "By contrast, Facebook and others have a very different approach to targeting. Not only do they allow the grouping of users into smaller segments, they use detailed data about online browsing activity to target ads. Facebook executives have made clear their intent is to collect as much data as possible across both first and third party products to develop and monetize detailed profiles of their users, and this disregard for user privacy continues to expand to include more of their products."

Apple's letter, reviewed by Bloomberg News, defended the company's decision to delay an iPhone feature that requires users to give explicit permission before letting apps track them for advertising purposes. The enhancement was added as part of the company's iOS 14 operating system in September, but a requirement that all apps use it was delayed until early 2021 after several developers, including Facebook, said the change would hurt their businesses. The human rights and privacy organizations criticized the delay in a letter earlier this year to Apple.

Google's Stadia game-streaming service, which has been limited to Android phones, computers and TVs, will launch for the iPhone in the coming weeks. The Verge reports: Google on Thursday announced iOS support for its Stadia cloud gaming service, following in the footsteps of Microsoft in turning to the mobile web to circumvent Apple's App Store restrictions. Google says it has been building a progressive web app version of Stadia that will run in the mobile version of Apple's Safari browser, similar to how Microsoft intends to deliver its competing xCloud service on iOS sometime next year. But Google intends to beat Microsoft to the punch with public testing of its version in the coming weeks. Nvidia also announced today that it a beta web app version of its GeForce Now cloud gaming service on iOS is available today.

Apple in late August clarified its rules around cloud gaming, telling providers like Google and Microsoft that their apps were not allowed on the App Store due to restrictions Apple imposes on software that streams games to the iPhone and iPad. Apple eventually loosened its restrictions after public criticism from Microsoft and others, but the App Store still requires companies to submit individual games for App Store review. Microsoft called the compromise a "bad experience for consumers" before deciding it would develop a web app version of xCloud for iOS instead. Now, Google is doing the same.

Go SMS Pro, one of the most popular messaging apps for Android, is exposing photos, videos and other files sent privately by its users. Worse, the app maker has done nothing to fix the bug. TechCrunch reports: Security researchers at Trustwave discovered the flaw in August and contacted the app maker with a 90-day deadline to fix the issue, as is standard practice in vulnerability disclosure to allow enough time for a fix. But after the deadline elapsed without hearing back, the researchers went public. Trustwave shared its findings with TechCrunch this week.

When a Go SMS Pro user sends a photo, video or other file to someone who doesn't have the app installed, the app uploads the file to its servers, and lets the user share a web address by text message so the recipient can see the file without installing the app. But the researchers found that these web addresses were sequential. In fact, any time a file was shared -- even between app users -- a web address would be generated regardless. That meant anyone who knew about the predictable web address could have cycled through millions of different web addresses to users' files. Go SMS Pro has more than 100 million installs, according to its listing in Google Play.

A group of state attorneys general, led by New York Attorney General Letitia James, is on track to file antitrust charges against Facebook in early December, according to a report Thursday from the Washington Post. CNET: The move comes as the US Federal Trade Commission is also reportedly finalizing its antitrust probe into the social media giant. State and federal investigators plan to bring antitrust charges against Facebook over its acquisitions of Instagram and WhatsApp, alleging that the deals "helped create an anti-competitive social networking juggernaut," according to the Post. Investigators may also reportedly argue that Facebook weaponized its vast trove of user data to help quash rivals.

An anonymous reader quotes a report from ZDNet: A team of academics has detailed this week novel research that converted a smart vacuum cleaner into a microphone capable of recording nearby conversations. Named LidarPhone, the technique works by taking the vacuum's built-in LiDAR laser-based navigational component and converting it into a laser microphone. [...] They tested the LidarPhone attack with various objects, by varying the distance between the robot and the object, and the distance between the sound origin and the object. Tests focused on recovering numerical values, which the research team said they managed to recover with a 90% accuracy. But academics said the technique could also be used to identify speakers based on gender or even determine their political orientation from the music played during news shows, captured by the vacuum's LiDAR.

But while the LidarPhone attack sounds like a gross invasion of privacy, users need not panic for the time being. This type of attack revolves around many prerequisites that most attacks won't bother. There are far easier ways of spying on users than overwriting a vacuum's firmware to control its laser navigation system, such as tricking the user on installing malware on their phone. The LidarPhone attack is merely novel academic research that can be used to bolster the security and design of future smart vacuum robots. In fact, the research team's main recommended countermeasure for smart vacuum cleaning robot makers is to shut down the LiDAR component if it's not rotating. Additional details about the research are available in a research paper titled "Spying with Your Robot Vacuum Cleaner: Eavesdropping via Lidar Sensors."

YouTube has updated its Terms of Service to include a new section that gives it the right to monetize videos from channels not big enough to be part of its Partner Program. Engadget reports: That doesn't mean new creators can start earning from their videos right away, though -- YouTube said in a forum post explaining the changes to its ToS that non-YPP members won't be getting a cut from those ads. To become eligible for the YouTube Partner Program, a creator has to be living in a country where it's active, has to have 4,000 public watch hours in the last 12 months and has to have over 1,000 subscribers. YouTube only used to run ads on videos from channels that don't meet those criteria under special circumstances, such as if the channel was previously a YPP member. Going forward, though, the website can monetize any video, so long as it meets its ad-friendly guidelines.

In addition to this change to its Right to Monetize section, YouTube has also added "faces" to the kinds of information people aren't allowed to collect from its service. It explained that the website never allowed the collection of personally identifiable information, but it altered its language in the ToS "to be extremely explicit about what kind of data users" can't collect. YouTube is rolling out these changes in the US first, but they will be effective worldwide by the end 2021.

Facebook for the first time on Thursday disclosed numbers on the prevalence of hate speech on its platform, saying that out of every 10,000 content views in the third quarter, 10 to 11 included hate speech. Reuters reports: The world's largest social media company, under scrutiny over its policing of abuses, particularly around November's U.S. presidential election, released the estimate in its quarterly content moderation report. On a call with reporters, Facebook's head of safety and integrity Guy Rosen said that from March 1 to the Nov. 3 election, the company removed more than 265,000 pieces of content from Facebook and Instagram in the United States for violating its voter interference policies.

Facebook also said it took action on 22.1 million pieces of hate speech content in the third quarter, about 95% of which was proactively identified. It took action on 22.5 million in the previous quarter. The company defines 'taking action' as removing content, covering it with a warning, disabling accounts, or escalating it to external agencies. Facebook's photo-sharing site Instagram took action on 6.5 million pieces of hate speech content, up from 3.2 million in Q2. About 95% of this was proactively identified, a 10% increase from the previous quarter. Facebook said it took action on 19.2 million pieces of violent and graphic content in the third quarter, up from 15 million in the second. On Instagram, it took action on 4.1 million pieces of violent and graphic content, up from 3.1 million in the second quarter. Rosen said the company expected to have an independent audit of its content enforcement numbers "over the course of 2021."

The Arecibo telescope's long and productive life has come to an end. From a report: The National Science Foundation (NSF) announced today it will decommission the iconic radio telescope in Puerto Rico following two cable breaks in recent months that have brought the structure to near collapse. The 57-year-old observatory, a survivor of numerous hurricanes and earthquakes, is now in such a fragile state that attempting repairs would put staff and workers in danger. "This decision was not an easy one to make," Sean Jones, NSF's assistant director for mathematical and physical sciences, said at a news briefing today. "We understand how much Arecibo means to [the research] community and to Puerto Rico." Ralph Gaume, director of NSF's astronomy division, said at the briefing the agency wants to preserve other instruments at the site, as well as the visitor and outreach center. But they are under threat if the telescope structure collapses. That would bring the 900-ton instrument platform, suspended 137 meters above the 305-meter-wide dish, crashing down. Flailing cables could damage other buildings on the site, as could the three support towers if they fell, too. "There is a serious risk of an unexpected and uncontrolled collapse," Gaume said. "A controlled decommissioning gives us the opportunity to preserve valuable assets that the observatory has." Over the next few weeks, engineering firms will develop a plan for a controlled dismantling. It may involve releasing the platform from its cables explosively and letting it fall.