An anonymous reader quotes a report from Ars Technica: A few dozen QAnon and 8chan-related sites were knocked offline temporarily yesterday when a DDoS-protection vendor disabled their access, according to an article by security reporter Brian Krebs. The websites [...] are connected to the Internet via the US-based ISP VanwaTech, which in turn "had a single point of failure on its end," Krebs wrote. "The swath of Internet addresses serving the various 8kun/QAnon sites were being protected from otherwise crippling and incessant distributed-denial-of-service (DDoS) attacks by Hillsboro, Ore. based CNServers LLC."

That changed yesterday when security researcher Ron Guilmette called CNServers, which apparently didn't realize it was providing security protection to the websites. "Within minutes of that call, CNServers told its customer -- Spartan Host Ltd., which is registered in Belfast, Northern Ireland -- that it would no longer be providing DDoS protection for the set of 254 Internet addresses that Spartan Host was routing on behalf of VanwaTech," Krebs wrote. Those 254 addresses included the few dozen related to QAnon and 8chan, which is now known as 8kun. The websites didn't remain offline for long because Spartan Host quickly "changed its settings so that VanwaTech's Internet addresses were protected from attacks by ddos-guard[.]net, a company based in St. Petersburg, Russia," Krebs wrote. "VanwaTech CEO Nick Lim in November 2019 defended his company's role in keeping 8kun websites online, writing on Twitter, 'I do what I do because I truly believe in free speech and I believe in protecting people from cyber security attacks,'" adds Ars Technica.

Spartan Host founder Ryan McCully told Krebs yesterday that he intends to keep VanwaTech as a customer. "We follow the 'law of the land' when deciding what we allow to be hosted with us, with some exceptions to things that may cause resource issues etc.," McCully told Krebs. "Just because we host something, it doesn't say anything about [what] we do and don't support; our opinions don't come into hosted content decisions."

Further reading: Is QAnon an 8Chan Game Gone Wrong?

Google's Nest Secure alarm system, which was discussed on Slashdot for featuring an unlisted, disabled microphone, has been discontinued by Google, though it will continue functioning. Android Police reports: Google released the Nest Guard in 2017 as a simple security system with motion sensors and a keypad, but it never received an upgrade, even as other Nest devices were updated again and again. The product page for the Nest Guard on the Google Store was updated last week with a 'No longer available' message, possibly indicating it had been discontinued. Google later confirmed to Android Police that the Nest Guard will no longer be sold, but it will continue to work for people who have already bought it.

An anonymous reader quotes a report from The Guardian: In one chess tournament, five of the top six were disqualified for cheating. In another, the doting parents of 10-year-old competitors furiously rejected evidence that their darlings were playing at the level of the world No 1. And in a third, an Armenian grandmaster booted out for suspicious play accused his opponent of "doing pipi in his Pampers." These incidents may sound extreme but they are not isolated -- and they have all taken place online since the start of the coronavirus pandemic. Chess has enjoyed a huge boom in internet play this year as in-person events have moved online and people stuck at home have sought new hobbies. But with that has come a significant new problem: a rise in the use of powerful chess calculators to cheat on a scale reminiscent of the scandals that have dogged cycling and athletics. One leading 'chess detective' said that the pandemic was "without doubt creating a crisis".

At the heart of the problem are programs or apps that can rapidly calculate near-perfect moves in any situation. To counter these engines, players in more and more top matches must agree to be recorded by multiple cameras, be available on Zoom or WhatsApp at any time, and grant remote access to their computers. They may not be allowed to leave their screens, even for toilet breaks. In some cases they must have a "proctor" or invigilator search their room and then sit with them throughout a match. [E]ye-tracking programs may be a way to raise a red flag if a player appears to be looking away with suspicious frequency. Chess.com, the world's biggest site for online play, said it had seen 12 million new users this year, against 6.5 million last year. The cheating rate has jumped from between 5,000 and 6,000 players banned each month last year to a high of almost 17,000 in August.

The growth in cheating and a corresponding explosion in social media discussion of the problem has created a new atmosphere of suspicion and recrimination. "Paranoia has become the culture," said Le-Marechal, whom a friend declared "the cyber chess detective" when he got the job. "There is this very romantic vision of the game which is being scuppered." Without a significant culture change, most say, the cheats are unlikely to go straight.

Facebook's lead data regulator in Europe has opened another two probes into its business empire -- both focused on how the Instagram platform processes children's information. TechCrunch reports: The action by Ireland's Data Protection Commission (DPC), reported earlier by the Telegraph, comes more than a year after a U.S. data scientist reported concerns to Instagram that its platform was leaking the contact information of minors. David Stier went on to publish details of his investigation last year -- saying Instagram had failed to make changes to prevent minors' data being accessible. He found that children who changed their Instagram account settings to a business account had their contact info (such as an email address and phone number) displayed unmasked via the platform -- arguing that "millions" of children had had their contact information exposed as a result of how Instagram functions.

Facebook disputes Stier's characterization of the issue -- saying it has always made it clear that contact info is displayed if people choose to switch to a business account on Instagram. It also does now let people opt out of having their contact info displayed if they switch to a business account. Nonetheless, its lead EU regulator has now said it has identified "potential concerns" relating to how Instagram processes children's data.

"The DPC has been actively monitoring complaints received from individuals in this area and has identified potential concerns in relation to the processing of children's personal data on Instagram which require further examination," it writes. The regulator's statement specifies that the first inquiry will examine the legal basis Facebook claims for processing children's data on the Instagram platform, and also whether or not there are adequate safeguards in place. [...] The DPC says the second inquiry will focus on the Instagram profile and account settings -- looking at "the appropriateness of these settings for children." "Amongst other matters, this Inquiry will explore Facebook's adherence with the requirements in the GDPR in respect to Data Protection by Design and Default and specifically in relation to Facebook's responsibility to protect the data protection rights of children as vulnerable persons," it adds. A Facebook company spokesperson said in a statement: "We've always been clear that when people choose to set up a business account on Instagram, the contact information they shared would be publicly displayed. That's very different to exposing people's information. We've also made several updates to business accounts since the time of Mr. Stier's mischaracterization in 2019, and people can now opt out of including their contact information entirely. We're in close contact with the IDPC and we're cooperating with their inquiries."

As part of the October 2020 Patch Tuesday security updates, Microsoft has added a new option to Windows to let system administrators disable the JScript component inside Internet Explorer. ZDNet reports: The JScript scripting engine is an old component that was initially included with Internet Explorer 3.0 in 1996 and was Microsoft's own dialect of the ECMAScript standard (the JavaScript language). Development on the JScript engine ended, and the component was deprecated with the release of Internet Explorer 8.0 in 2009, but the engine remained in all Windows OS versions as a legacy component inside IE. Across the years, threat actors realized they could attack the JScript engine, as Microsoft wasn't actively developing it and only rarely shipped security updates, usually only when attacked by threat actors. [...]

Now, 11 years after deprecating the component, Microsoft is finally giving system administrators a way to disable JScript execution by default. According to Microsoft, the October 2020 Patch Tuesday introduces new registry keys that system administrators can apply and block the jscript.dll file from executing code. Details on how this can be done are available below, as taken from Microsoft's documentation.

An anonymous reader quotes a report from Bloomberg: It's about the size of Tesla Inc.'s Powerwall, but can store up to three times as much energy over a longer period. That's the promise of a new hydrogen-based energy-storage system for homes and businesses being developed by Australian startup Lavo Hydrogen Technology Ltd. The technology, developed with scientists at the University of New South Wales, uses power from rooftop solar panels to produce hydrogen from water by electrolysis. The gas is stored in a metal hydride container and converted back into electricity when needed using a fuel cell.

Australia's world-beating rooftop-solar take-up rates make it an ideal early market, said Lavo Chief Executive Officer Alan Yu. The unit will go on sale from November, with installations starting in June 2021, subject to final approvals. The company plans to sell 10,000 units a year by 2022. At about triple the price of a Powerwall, the Lavo unit's main selling point will be its ability to store more energy for longer. Each system will initially cost A$34,750 ($24,620) and will be able to hold 40 kilowatt-hours of power -- enough to supply an average household for more than two days, according to the company. Tesla's Powerwall holds about 13.5 kilowatt-hours. Lavo's Yu acknowledged that the higher cost of the system might initially limit interest to energy-technology enthusiasts initially, but he also sees it as a solution for small off-grid rural villages to replace diesel generators or a compact solution for communities and homes cut off from the main grid by natural disasters such as bushfires.

ArchieBunker writes: The OpenBSD project has turned 25 years old and is celebrating this with release 6.8.

It will become illegal for anyone in the UK to pick up and use their mobile phone while driving, under new legislation to be enacted next year. From a report: The change will end a loophole that can allow drivers to escape punishment for using a hand-held phone to take a photo or play a game. Mobiles will still be able to be used to pay for a drive-through takeaway. And drivers will still be able to use devices hands-free under the plans, the Department for Transport said. At present, making phone calls and sending text messages are banned while driving. Ministers have rejected calls to also ban the use of hands-free function, for example using a sat-nav in a phone cradle. Roads minister Baroness Vere said hand-held phone use behind the wheel was "distracting and dangerous" and that "for too long risky drivers have been able to escape punishment." The change in law would apply across the UK and is expected to come into effect early next year, depending on the outcome of the consultation.

The Raspberry Pi Foundation is launching a new product today -- the Compute Module 4. From a report: If you've been keeping an eye on the Raspberry Pi releases, you know that the flagship Raspberry Pi 4 was released in June 2019. The Compute Module 4 features the same processor, but packed in a compute module for industrial use cases. A traditional Raspberry Pi is a single-board computer with a ton of ports sticking out. Compute Modules are somewhat different. Those system-on-module variants are more compact single-board computers without any traditional port. It lets you create a prototype using a traditional Raspberry Pi, and then order a bunch of Compute Modules to embed in your commercial products. "Over half of the seven million Raspberry Pi units we sell each year go into industrial and commercial applications, from digital signage to thin clients to process automation," Eben Upton wrote on the Raspberry Pi blog. Some things are strictly similar between the Raspberry Pi 4 and the Compute Module 4, such as the 64-bit ARM-based processor with VideoCore VI graphics. This is going to represent a huge upgrade for previous Compute Module customers. In particular, you get much better video performance with 4Kp60 hardware decode for H.265 videos, 1080p60 hardware decode for H.264 videos, 1080p30 hardware encode of H.264 videos. You can also take advantage of the dual HDMI interfaces to connect up to two 4K displays at 60 frames per second.

Google's $2.1 billion deal for Fitbit might go down as the only merger to qualify as both pre-pandemic and post-pandemic. From a report: European Union antitrust regulators have again extended their decision deadline, this time to Jan. 8, 2021. And it could be further complicated by U.S. authorities, who are drawing up a broader antitrust case against Google and/or its parent company Alphabet. The deal was originally announced on Nov. 1, 2019. The delay is about data: Google has always said the acquisition is centered on devices, but that alone hasn't allayed regulator fears over what happens to the information those devices collect. Reuters reports that Google recently offered concessions to the European Commission: It would "restrict the use of Fitbit data for Google ads, facilitate rival makers of wearables seeking to connect to the Android platform and allow third parties' continued access to Fitbit users' data with their consent." These revisions appear to have satisfied the EC, but that could change once analyzed by outside critics. Plus, again, there are those pesky Americans.

Japan will join forces with the United States and Europe to take on any market abuses by the four Big Tech companies, the new head of its antitrust watchdog said on Monday, a sign Tokyo will join global efforts to regulate digital platform operators. From a report: Kazuyuki Furuya, chairman of Japan's Fair Trade Commission (FTC), also said Tokyo could open a probe into any merger or business tie-up involving fitness tracker maker Fitbit if the size of such deals are big enough. "If the size of any merger or business-tie up is big, we can launch an anti-monopoly investigation into the buyer's process of acquiring a start-up (like Fitbit)," he told Reuters. "We're closely watching developments including in Europe." EU antitrust regulators in August launched an investigation into a $2.1 billion deal by Google's bid to buy Fitbit that aimed to take on Apple and Samsung in the wearable technology market. Japan is laying the groundwork to regulate platform operators. Among them are big tech giants dubbed "GAFA" - Google, Apple, Amazon and Facebook -- that face various antitrust probes in western nations.

The Verge's senior news editor complains that without permission, Windows 10 restarted to install "unsolicited, unwanted web app versions of Word, PowerPoint, Excel and Outlook onto my computer." OK, it's not as bad as when my entire computer screen got taken over by an unwanted copy of Microsoft Edge. That was truly egregious. No, this time Microsoft is merely sneaking unwanted web apps onto my PC — and using my Windows 10 Start Menu as free advertising space. Did I mention that icons for Microsoft Office apps have magically appeared in my Start Menu, even though I've never once installed Office on this computer?

These aren't full free copies of Office, by the way. They're just shortcuts to the web version you could already access in any web browser of your choice, which double as advertisements to pay for a more fully featured copy... They're the latest proof that Microsoft doesn't respect your ownership of your own PC, the latest example of Microsoft installing anything it likes in a Windows update up to and including bloatware, and the latest example of Microsoft caring more about the bottom line than whether a few people might lose their work when Windows suddenly shuts down their PC. Luckily, I didn't lose any work today, but a friend of mine recently did...

Microsoft seems to think our computers are free advertising space, a place where it can selfishly promote its other products — even though they were told roundly in the '90s that even bundling a web browser was not OK. Now, they're bundling a browser you can't uninstall, and a set of PWA web apps that launch in that same browser. (Yes, they fire up Edge even if you've set a different browser as default.)

A publicly-funded social network run by the Australian Broadcasting Corporation "has been proposed as one possible response if Facebook and Google limit services in Australia when the mandatory news code becomes law this year," reports the Guardian: Facebook has warned it will block Australians from sharing news if the landmark plan to make digital platforms pay for news content becomes law. Google has been running a public campaign against the code and launched an international campaign targeting YouTube users when the government announced it would force the company to pay news publishers for content... The proposal for a platform hosted by the ABC is among a raft of risk mitigation proposals in a report commissioned by the Centre for Responsible Technology, "Tech-Xit: Can Australia survive without Google and Facebook?"

The proposed platform would connect the community without harvesting data in the way Google and Facebook do, and could rely on the wide reach of the ABC across local, regional and national communities, as well as the trust the invested in the institution by the public. "An ABC platform which engages the community, allows for a genuine exchange and influence on decision making, and applying principles of independent journalism and storytelling would provide real value to local communities starved of civic engagement," the report says. "[We should] develop viable alternatives to Google and Facebook, such as national online social platform hosted through the ABC..."

The report argues the arrival of the mandatory news code is a chance to push back against the profit or surveillance imperative of the tech giants and look for alternatives. "Google and Facebook's response to the ACCC mandatory news code has placed in stark relief our national over-reliance on them," the director of the Australia Institute's Centre for Responsible Technology, Peter Lewis, said. "This analysis shows that two global corporations that play a dominant role in our civic and commercial institutions are prepared to threaten to withdraw those services to protect their own commercial self-interest."

The Times of London reports that "a Russian disinformation campaign designed to undermine and spread fear about the Oxford University coronavirus vaccine has been exposed by a Times investigation." Pictures, memes and video clips depicting the British-made vaccine as dangerous have been devised in Russia and middlemen are now seeking to "seed" the images on social media networks around the world. The crude theme of the distorted images is that the vaccine, millions of doses of which will be manufactured by the pharmaceutical giant Astrazeneca, could turn people into monkeys because it uses a chimpanzee virus as a vector. The campaign is being targeted at countries where Russia wants to sell its own Sputnik V vaccine, as well as western nations.
CNN points out that this "monkey vaccine" narrative "has been voiced by Russian officials and the state media before."

"China is implementing stricture measures in its bid to keep kids away from addictive digital content," reports Engadget: The state-backed news agency Xinhua reported (via Reuters) that China has voted for a revamped law that will ban internet products and services which "induce addiction" in kids. Game creators, livestream services and social networks also have to set up time and consumption limits. The revised measures also give kids and their parents the right to ask internet providers to take "necessary measures" to thwart cyberbullying, including blocking and deleting content. The updated law will take effect on June 1st, 2021.

Cloudflare has released the beta of its new "browser isolation" service, which runs a web browser in the cloud, reports TechRadar. As more and more computing is done inside a browser as opposed to on a system itself, many enterprise organizations have begun to deploy browser isolation services where the browser doesn't actually run on a user's computer. Instead the browser runs on a virtual machine inside a cloud provider's data center. This means that any threats from the browser will stay in that virtual machine and won't be able to infect a corporate laptop or move laterally across an organization's network...

Cloudflare Browser Isolation does thing a bit differently by sending the final output of a browser's web page rendering. As a result, the only thing every sent to a user's device is a package of draw commands to render the webpage and this also means that the company's new service will be compatible with any HTML5 compliant browser including Chrome, Safari, Edge and Firefox.

As Cloudflare has data centers in 200 cities around the world, its browser isolation service should be able to deliver a responsive web browsing experience regardless of where a user is located.
It's part of a larger push, since this week Cloudflare also released their network-as-a-service solution "Cloudflare One," which according to Cloudflare "protects and accelerates the performance of devices, applications, and entire networks to keep workforces secure." "After decades of building legacy corporate networks, organizations are left with clunky systems designed to protect their now empty offices. The only way to secure today's work-from-anywhere economy is to secure each individual employee, protecting their individual networks, devices, and access to business-critical applications," said Matthew Prince, CEO of Cloudflare... Companies have traditionally used a castle-and-moat approach to security, creating a barrier between the enterprise network and external threats. Now that applications have moved to the cloud, and more employees have moved outside of the office, that model is broken.

Employees are frustrated with the speed and experience of VPNs, and organizations want an alternative to the expensive patchwork of legacy solutions required to secure and connect corporate offices to each other and the internet. Today's new landscape requires a zero trust approach, where organizations do not automatically trust any requests to corporate data or resources, and instead, verify every attempt to connect to corporate systems before allowing them access... This unified solution enables fast and safe connections to workplace applications, allows teams to use an app without exposing it to the public internet, makes personal devices safe for business use, and works in any environment with any cloud provider.

The Information reports: Google's engineering directors are grappling with a worrisome trend: internal data that indicate productivity during the coronavirus shutdowns deteriorated among engineers, particularly newly hired ones.

One internal survey viewed by The Information found that in the three months ended in June, only 31% of the company's engineers polled felt they had been highly productive, down 8 percentage points from a record high in the March quarter. That decline and more recent data on engineers' coding output from the third quarter caused its head of engineering productivity, Michael Bachman, last week to email senior Google managers and executives, drawing attention to the data. He said the findings are "still relevant for all teams across the company," not just engineers.
Inside.com's developer newsletter supplies some context: The news comes as reports reveal Microsoft's CEO Satya Nadella is tired of working from home, while Stanford economics professor Nicholas Bloom adds he believes remote work is, for many, a "productivity disaster" that he fears will hurt innovation.

However, these statements contradict a recent report unveiled during the September DevOpsWorld 2020 conference examining the impact of Covid-19 on software development, where many reported an increase in productivity.

Last month Eric Raymond suggested Microsoft might be moving to a Linux kernel that emulates Windows. ZDNet contributing editor Steven J. Vaughan-Nichols argued such a move "makes perfect sense", and open source advocate Jack Wallen even suggested Microsoft abandon Windows altogether for a new distro named Microsoft Linux.

It eventually drew the attention of Canonical's engineering manager for Ubuntu on WSL, who published a blog post with his own personal thoughts. Its title? "No, Microsoft is not rebasing Windows to Linux." The NT kernel in Windows offers a degree of backward compatibility, long-term support, and driver availability that Linux is just now approaching. It would cost millions of dollars to replicate these in Linux. Microsoft has plenty of paying customers to continue supporting Windows as-is, some for decades. Windows is not a drain on Microsoft that would justify the expense of rebasing to Linux for savings, as Raymond has argued... It is unclear if the Windows user space could even be rebased from NT to the Linux kernel and maintain the compatibility that Windows is known for, specifically what enterprise clients with mission-critical applications are paying to get....

Microsoft has doubled down on Windows in recent years. Microsoft has invested in usability, new features, and performance improvements for Windows 10 that have paid off. These improvements, collaborations with OEMs, and the Surface helped revitalize a PC market that at one point looked in danger of falling to iPads and Chromebooks... Internal reorganizations in 2018 and 2020 show that the future of the Surface and Windows are now inextricably linked. Windows powers the Xbox and we are in a resurgence of mostly Windows-based PC gaming. Microsoft also has ideas for Windows 10X, the next operating system concept following Windows 10 (that I think we will get in gradual pieces), with future hardware like the Surface Neo in mind...

The much more interesting question is not whether Microsoft is planning to rebase Windows to Linux, but how far Windows will go on open source. We are already seeing components like Windows Terminal, PowerToys, and other Windows components either begin life as or go open source. The more logical and realistic goal here is a continued opening of Windows components and the Windows development process, even beyond the Insiders program, in a way that benefits other operating systems...

Raymond is correct in one key part of his blog. I do think the era of the desktop OS wars is ending. We are entering a new era where your high-end workstation will run multiple operating systems simultaneously, like runtimes, and not necessarily all locally. The choice will not really be Windows or Linux, it will be whether you boot Hyper-V or KVM first, and Windows and Ubuntu stacks will be tuned to run well on the other. Microsoft contributes patches to the Linux kernel to run Linux well on Hyper-V and tweaks Windows to play nicely on KVM. The best parts of Ubuntu will come to Windows and the best open source parts of Windows will come to Ubuntu, thanks to an increasing trend towards open source across Microsoft.

The key take-away though is that open source has won. And Raymond can be proud of helping to articulate the case for the open source development model when he did.
The post also explores "the reasons why I think this fantasy this keeps cropping up on Slashdot and Hacker News," calling the idea "a long-held fantasy for open source and Linux advocates."

But instead he concludes "Neither Windows nor Ubuntu are going anywhere. They are just going to keep getting better through open source."

CNBC reports: On September 24th, physician Dr. Ali Vaziri was unpleasantly surprised by a mobile alert from his bank, which said he had just purchased a $4,280 upgrade for his Tesla Model 3. The large transaction, he quickly surmised, was a "butt dial" or accidental purchase made through the Tesla app on his iPhone. "My phone was in my jeans," Vaziri told CNBC. "I took it out, put it on this charger that comes with your Tesla and that's it. A minute later? I got the text. I've never purchased anything through the Tesla app before...."

Moments after he received the mobile alert from his bank, Vaziri called his local Tesla store and service center. They couldn't help directly, but gave him the number for a customer service hotline. He called the number, and requested a refund. Instead of processing the doctor's refund request on the spot, the customer service rep told Vaziri to click on the refund button in his Tesla app to process his request. Vaziri informed them there was no such button in the Tesla app, just some text and a link to the refund policy. An e-mail he received from Tesla confirming the unauthorized purchase contained only vague information about a refund, and no buttons to click or links to a page where he could process a refund request either. The email, which Vaziri shared with CNBC, drove him to Tesla's support web site, which in turn told him to call his local service center.

To this date, Vaziri says, Tesla customer service has not provided him with a refund, nor has the call center provided him with so much as a confirmation number or e-mail to acknowledge his calls about the refund. Instead, he processed a stop payment request through his credit card company.

An anonymous reader quotes a report from CNN: Oceanbird might look like a ship of the future, but it harks back to ancient maritime history -- because it's powered by the wind. The transatlantic car carrier is being designed by Wallenius Marine, a Swedish shipbuilder, with support from the Swedish government and several research institutions. With capacity for 7,000 vehicles, the 650 foot-long vessel is a similar size to conventional car carriers, but it will look radically different. The ship's hull is topped by five telescopic "wing sails," each 260 feet tall. Capable of rotating 360 degrees without touching each other, the sails can be retracted to 195 feet in order to clear bridges or withstand rough weather.

The sails, which will be made of steel and composite materials, need to be this size to generate enough propulsive power for the 35,000-ton ship. Although "the general principles of solid wing sails is not new," designing the Oceanbird's sails has been a challenge, says Mikael Razola, a naval architect and research project manager for Oceanbird at Wallenius Marine. That's because these are the tallest ship sails that have ever been constructed. "This ship, at the top of the mast, will be more than 100 meters (328 feet) above the water surface," says Razola. "When you move up into the sky that much, wind direction and velocity change quite a lot." Oceanbird has a projected top speed of about 10 knots and will take around 12 days to cross the Atlantic. While that's considerably slower than standard car carriers, which can travel at 17 knots, the Oceanbird will emit 90% less CO2 than conventional car carriers.

Razola says their plan is "to see Oceanbird sailing in 2024."