Encrypted communications provider Proton has joined an antitrust lawsuit against Apple, filing a legal complaint that claims the company's App Store practices harm developers, consumers, and privacy. The Switzerland-based firm joined a group of Korean developers who sued Apple in May rather than filing a separate case.

Proton asked the US District Court for Northern California to require Apple to allow alternative app stores, expose those stores through its own App Store, permit developers to disable Apple's in-app payment system, and provide full access to Apple APIs. The company added a privacy-focused argument to typical antitrust complaints, contending that Apple's pricing model particularly penalizes companies that refuse to harvest user data. Developers of free apps typically sell user data to cover costs, while privacy-focused companies like Proton must charge subscriptions for revenue, making Apple's commission cuts more burdensome.

"For-profit companies are pushing the narrative that they can do space inexpensively," writes Slashdot reader RUs1729 in response to an opinion piece from SpaceNews. "Their track record reveals otherwise: cutting corners won't do it for the foreseeable future." Here's an excerpt from the article, written by Robert N. Eberhart: The headlines in the space industry over the past month have delivered a sobering reminder: space is not forgiving, and certainly not friendly to overpromising entrepreneurs. From iSpace's second failed lunar landing attempt (making them 0 for 2) to SpaceX's ongoing Starship test flight setbacks -- amid a backdrop of exploding prototypes and shifting goalposts -- the evidence is mounting that the commercialization of space is not progressing in the triumphant arc that press releases might suggest. This isn't just a series of flukes. It points to a structural, strategic and cultural problem in how we talk about innovation, cost and success in space today.

Let's be blunt: 50 years ago, we did this. We sent humans to the moon, not once but repeatedly, and brought them back. With less computational power than your phone, using analog systems and slide rules, we achieved feats of incredible precision, reliability and coordination. Today's failures, even when dressed up as "learning opportunities," raises the obvious question: Why are we struggling to do now what we once achieved decades ago with far more complexity and far less technology?

Until very recently, the failure rate of private lunar exploration efforts underscored this reality. Over the past two decades, not a single private mission had fully succeeded -- until last March when Firefly Aerospace's Blue Ghost lander touched down on the moon. It marked the first fully successful soft landing by a private company. That mission deserves real credit. But that credit comes with important context: It took two decades of false starts, crashes and incomplete landings -- from Space IL's Beresheet to iSpace's Hakuto-R and Astrobotic's Peregrine -- before even one private firm delivered on the promise of lunar access. The prevailing industry answer -- "we need to innovate for lower cost" -- rings hollow. What's happening now isn't innovation; it's aspiration masquerading as disruption... "This is not a call for a retreat to Cold War models or Apollo-era budgets," writes Eberhart, in closing. "It's a call for seriousness. If we're truly entering a new space age, then it needs to be built on sound engineering, transparent economics and meaningful technical leadership -- not PR strategy. Let's stop pretending that burning money in orbit is a business model."

"The dream of a sustainable, entrepreneurial space ecosystem is still alive. But it won't happen unless we stop celebrating hype and start demanding results. Until then, the real innovation we need is not in spacecraft -- it's in accountability."

Robert N. Eberhart, PhD, is an associate professor of management and the faculty director of the Ahlers Center for International Business at the Knauss School of Business of University of San Diego. He is the author of several academic publications and books. He is also part of Oxford University's Smart Space Initiative and contributed to Berkeley's Space Sciences Laboratory. Before his academic career, Prof. Eberhart founded and ran a successful company in Japan.

Oracle has signed a landmark $30 billion annual cloud deal -- nearly triple the size of its current cloud infrastructure business -- with revenue expected to begin in fiscal year 2028. The deal was disclosed in a regulatory filing Monday without the customer being named. Bloomberg reports: "Oracle is off to a strong start" in its fiscal year 2026, Chief Executive Officer Safra Catz said in the filing. The company has signed "multiple large cloud services agreements," she said, adding that revenue from Oracle's namesake database that runs on other clouds continues to grow more than 100%.

The $30-billion deal ranks among the largest cloud contracts on record. That revenue alone would represent nearly three times the size of Oracle's current infrastructure business, which totaled $10.3 billion over the past four quarters. A major cloud contract awarded in 2022 from the US Defense Department, that runs through 2028 and could be worth as much as $9 billion, is split among four companies, including Oracle. That award was a shift after an earlier contract worth $10 billion was awarded to Microsoft and was contested in court.

HP is developing a "PCFax" system similar to CarFax for used cars that securely collects and stores detailed device usage and health data at the firmware level to extend the life of PCs and reduce e-waste. A team of HP experts outlines the system in a recent IEEE Spectrum report: The secure telemetry protocol we've developed at HP works as follows. We gather the critical hardware and sensor data and store it in a designated area of the SSD. This area is write-locked, meaning only authorized firmware components can write to it, preventing accidental modification or tampering. That authorized firmware component we us is the Endpoint Security Controller, a dedicated piece of hardware embedded in business class HP PCs. It plays a critical role in strengthening platform-level security and works independently from the main CPU to provide foundational protection.

The endpoint security controller establishes a secure session by retaining the secret key within the controller itself. This mechanism enables read data protection on the SSD -- where telemetry and sensitive data are stored -- by preventing unauthorized access, even if the operating system is reinstalled or the system environment is otherwise altered. Then, the collected data is recorded in a timestamped file, stored within a dedicated telemetry log on the SSD. Storing these records on the SSD has the benefit of ensuring the data is persistent even if the operating system is reinstalled or some other drastic change in software environment occurs. The telemetry log employs a cyclic buffer design, automatically overwriting older entries when the log reaches full capacity. Then, the telemetry log can be accessed by authorized applications at the operating system level.

The telemetry log serves as the foundation for a comprehensive device history report. Much like a CarFax report for used cars, this report, which we call PCFax, will provide both current users and potential buyers with crucial information. The PCFax report aggregates data from multiple sources beyond just the on-device telemetry logs. It combines the secure firmware-level usage data with information from HP's factory and supply chain records, digital services platforms, customer support service records, diagnostic logs, and more. Additionally, the system can integrate data from external sources including partner sales and service records, refurbishment partner databases, third-party component manufacturers like Intel, and other original equipment manufacturers. This multi-source approach creates a complete picture of the device's entire lifecycle, from manufacturing through all subsequent ownership and service events.

Freelance workers using AI tools are earning significantly more than their counterparts, with AI-related freelance earnings climbing 25% year over year and AI freelancers commanding over 40% higher hourly rates than non-AI workers, according to new data from Upwork.

The freelance marketplace analyzed over 130 work categories and tracked millions of job posts over six months, finding that generative AI is simultaneously replacing low-complexity, repetitive tasks while creating demand for AI-augmented work. Workers using AI for augmentation outnumber those using it for automation by more than 2 to 1. Freelancers with coding skills comprising at least 25% of their work now earn 11% more for identical jobs compared to November 2022 when ChatGPT launched.

Companies deliberately design customer service friction to discourage refunds and claims, according to research into a practice academics call "sludge." The term, coined by legal scholar Cass R. Sunstein and economist Richard H. Thaler in their updated version of "Nudge," describes tortuous administrative demands, endless wait times, and excessive procedural fuss that impede customers.

ProPublica reported in 2023 that Cigna saved millions of dollars by rejecting claims without having doctors read them. The Consumer Financial Protection Bureau ordered Toyota's motor-financing arm to pay $60 million for alleged misdeeds including deliberately setting up dead-end hotlines for canceling products and services. The 2023 National Customer Rage Survey found that the percentage of American consumers seeking revenge for customer service hassles had tripled in three years.

A founding member of the Xbox team says she believes Xbox hardware is "dead" and that Microsoft appears to be planning a "slow exit" from the gaming hardware business. Microsoft recently announced partnerships with external hardware companies including the ROG Xbox Ally, which runs Windows and functions as a portable PC that can run games from external stores like Steam.

Laura Fryer, one of Microsoft Game Studios' first employees who worked as a producer on the original Gears of War games and served as director of the Xbox Advanced Technology Group, called the partnerships evidence of Microsoft's inability to ship hardware. "Personally, I think Xbox hardware is dead. The plan appears to be to just drive everybody to Game Pass," Fryer said.

Nintendo pulled its products from Amazon's US site after a disagreement over unauthorized sales, meaning the e-commerce company missed out on the recent debut of Nintendo's Switch 2 -- the biggest game console launch of all time. From a report: The Japanese company stopped selling on Amazon after noticing that third-party merchants were offering games for sale in the US at prices that undercut Nintendo's advertised rates, according to a person familiar with the situation. Enterprising sellers were buying Nintendo products in bulk in Southeast Asia and exporting them to the US, said the person, who requested anonymity to discuss confidential information.

Nintendo product listings started disappearing from Amazon's US site last year, gaming news outlets reported at the time. The listings had previously appeared as "Sold by Amazon," which typically denotes merchandise the online retailer buys directly from brands. Some Nintendo products remained on the site, but they were listed by independent merchants who sell their goods on Amazon's sprawling online marketplace.

Mitch Kapor dropped out of MIT's business school in 1979 — and had soon cofounded the pioneering spreadsheet company Lotus. He also cofounded the EFF, was the founding chair of the Mozilla Foundation, and is now a billionaire (and an VC investor at Kapor Capital).

45 years later, when the 74-year-old was invited to give a guest lecture at MIT's business school last year by an old friend (professor Bill Aulet), he'd teased the billionaire that "there's only one problem, Mitch, I see here you haven't graduated from MIT."

The Boston Globe tells the story... After graduating from Yale in 1971 and bouncing around for almost a decade as "a lost and wandering soul," working as a disc jockey, a Transcendental Meditation teacher, and a mental health counselor, Kapor said he became entranced by the possibilities of the new Apple II personal computer. He started writing programs to solve statistics problems and analyze data, which caught the attention of Boston-area software entrepreneurs Dan Bricklin and Bob Frankston, who co-created VisiCalc, one of the first spreadsheet programs. They introduced Kapor to their California-based software publisher, Personal Software.

Midway through Kapor's 12-month master's program, the publisher offered him the then-princely sum of about $20,000 if he'd adapt his stats programs to work with VisiCalc. To finish the project, he took a leave from MIT, but then he decided to leave for good to take a full-time job at Personal. Comparing his decision to those of other famed tech founder dropouts, like Bill Gates, Kapor said he felt the startup world was calling to him. "It was just so irresistible," he said. "It felt like I could not let another moment go by without taking advantage of this opportunity or the window would close...."

When Aulet made his joke on the phone call with his old friend in 2024, Kapor had largely retired from investing and realized that he wanted to complete his degree. "I don't know what prompted me, but it started a conversation" with MIT about the logistics of finally graduating, Kapor said. By the time Kapor gave the lecture in March, Aulet had discovered Kapor was only a few courses short. MIT does not give honorary degrees, but school officials allow students to make up for missing classes with an independent study and a written thesis. Kapor decided to write a paper on the roots and development of his investing strategy. "It's timely, it's highly relevant, and I have things to say," he said.

One 77-page thesis later, Kapor, donning a cap and gown, finally received his master's degree in May, at a ceremony in the Hyatt Regency Hotel in Cambridge, not far from where he founded Lotus.

The Wall Street Journal reports that "consumers have less trust in offerings labeled as being powered by artificial intelligence, which can reduce their interest in buying them, researchers say." The effect is especially pronounced for offerings perceived to be riskier buys, such as a car or a medical-diagnostic service, say the researchers, who were from Washington State University and Temple University. "When we were thinking about this project, we thought that AI will improve [consumers' willingness to buy] because everyone is promoting AI in their products," says Dogan Gursoy, a regents professor of hospitality business management at Washington State and one of the study's authors. "But apparently it has a negative effect, not a positive one."

In multiple experiments, involving different people, the researchers split participants into two groups of around 100 each. One group read ads for fictional products and services that featured the terms "artificial intelligence" or "AI-powered," while the other group read ads that used the terms "new technology" or "equipped with cutting-edge technologies." In each test, members of the group that saw the AI-related wording were less likely to say they would want to try, buy or actively seek out any of the products or services being advertised compared with people in the other group. The difference was smaller for items researchers called low risk — such as a television and a generic customer-service offering...

Meanwhile, a separate, forthcoming study from market-research firm Parks Associates that used different methods and included a much larger sample size came to similar conclusions about consumers' reaction to AI in products. "We straight up asked consumers, 'If you saw a product that you liked that was advertised as including AI, would that make you more or less likely to buy it?' " says Jennifer Kent, the firm's vice president of research. Of the roughly 4,000 Americans in the survey, 18% said AI would make them more likely to buy, 24% said less likely and to 58% it made no difference, according to the study. "Before this wave of generative AI attention over the past couple of years, AI-enabled features actually have tested very, very well," Kent says.

"I wonder who actually uses AI and why," writes Slashdot reader VertosCay: Out of pure curiosity, I have asked various AI models to create: simple Arduino code, business letters, real estate listing descriptions, and 3D models/vector art for various methods of manufacturing (3D printing, laser printing, CNC machining). None of it has been what I would call "turnkey". Everything required some form of correction or editing before it was usable.

So what's the point?
Their original submission includes more AI-related questions for Slashdot readers ("Do you use it? Why?") But their biggest question seems to be: "Do you have to correct it?"

And if that's the case, then when you add up all that correction time... "Is it actually helpful?"

Share your own thoughts and experiences in the comments. Do you use AI — and is it actually helpful?

"Duolingo stock fell for the fourth straight trading day on Wednesday," reported Investor's Business Daily, "as data shows user growth slowing for the language-learning software provider."

Jefferies analyst John Colantuoni said he was "concerned" by this drop — saying it "may be the result of Duolingo's poorly received AI-driven hiring announcement in late April (later clarified in late May)." Also Wednesday, DA Davidson analyst Wyatt Swanson slashed his price target on Duolingo stock to 500 from 600, but kept his buy rating. He noted that the "'AI-first' backlash" on social media is hurting Duolingo's brand sentiment. However, he expects the impact to be temporary.
Colantuoni also maintained a "hold" rating on Duolingo stock — though by Monday Duolingo fell below its 50-day moving average line (which Investor's Business Daily calls "a key sell signal.")

And Thursday afternoon (2:30 p.m. EST) Duolingo's stock had dropped 14% for the week, notes The Motley Fool: While 30 days' worth of disappointing daily active user (DAU) data isn't bad in and of itself, it extends a worrying trend. Over the last five months, the company's DAU growth declined from 56% in February to 53% in March, 41% in April, 40% in May [the month after the "AI-first" announcement], and finally 37% in June.

This deceleration is far from a death knell for Duolingo's stock. But the market may be justified in lowering the company's valuation until it sees improving data. Even after this drop, the company trades at 106 times free cash flow, including stock-based compensation.
Maybe everyone's just practicing their language skills with ChatGPT?

"A second major academic institution has accused Uber of using opaque computer code to dramatically increase its profits at the expense of the ride-hailing app's drivers and passengers," reports the Guardian: Research by academics at New York's Columbia Business School concluded that the Silicon Valley company had implemented "algorithmic price discrimination" that had raised "rider fares and cut driver pay on billions of ... trips, systematically, selectively, and opaquely". The Ivy League business school research — which is based on an analysis of "tens of thousands of trips ... as well as an analysis of over 2 million ... trip requests" — follows a similar academic paper based on 1.5m UK trips that was published last week by the University of Oxford. The British study found that many UK Uber drivers were making "substantially less" each hour since the ride-hailing app introduced a "dynamic pricing" algorithm in 2023 that coincided with the company taking a significantly higher share of fares...

[Len Sherman, the US report's author] added: "Since implementing upfront pricing, Uber has increased rider prices, has cut driver pay, has increased its take rates, and, of course, has greatly improved its cashflow during the period covered by this study...." The Columbia paper, which focused on 24,532 trips made by a single US Uber driver, concluded that the introduction of the new algorithm had allowed Uber to "significantly increase its take rate — the per cent of rider fares net of driver pay captured by the company — from about 32% at the start of upfront pricing to upwards of 42% by the end of 2024". Last week's University of Oxford research found that, since the launch of dynamic pricing, Uber's median take rate per UK driver had "increased from 25% to 29%, and on some trips ... is over 50%".
Thanks to Slashdot reader votsalo for sharing the news.

Japanese politicians failed to pass legislation last month that would have allowed married couples to keep separate surnames, despite surveys showing majority public support for the change. Japan remains the only country requiring married couples by law to share the same surname, with women taking their husband's name in 95% of cases.

The ruling Liberal Democratic Party's skepticism blocked opposition bills aimed at reforming the system. Keidanren, Japan's largest business lobby, says the current law "hinders women's advancement" as name changes complicate professional reputations. A study by NGO Asuniwa suggests reform could prompt 590,000 cohabiting couples to marry legally, potentially boosting Japan's birth rate since strong stigmas discourage births outside marriage.

Some couples have developed workarounds. Teachers Uchiyama Yukari and Koike Yukio have divorced and remarried three times to sidestep the law, living unmarried most of the time but remarrying for each child's birth registration before divorcing again.

Tech companies Google and Palo Alto Networks are sounding the alarm over the "Scattered Spider" hacking group's interest in the aviation sector. From a report: In a statement posted on LinkedIn, Sam Rubin, an executive at Palo Alto's cybersecurity-focused Unit 42, said his company had "observed Muddled Libra (also known as Scattered Spider) targeting the aviation industry."

In a similar statement, Charles Carmakal, an executive with Alphabet-owned Google's cybersecurity-focused Mandiant unit, said his company was "aware of multiple incidents in the airline and transportation sector which resemble the operations of UNC3944 or Scattered Spider." Axios adds: The group of mostly Western, English-speaking hackers has been on a months-long spree that's prompted operational disruptions at grocery suppliers, major retail storefronts and insurance companies in the U.S. and U.K.

Hawaiian Airlines said Thursday it's addressing a "cybersecurity incident" that affected some of its IT systems. Canadian airline WestJet faced a similar incident last week that caused outages for some of its systems and mobile app. A source familiar with the incidents told Axios that Scattered Spider was likely behind the WestJet incident.

Steven J. Vaughan-Nichols writes in an opinion piece for The Register: Microsoft, tactically admitting it has failed at talking all the Windows 10 PC users into moving to Windows 11 after all, is -- sort of, kind of -- extending Windows 10 support for another year. For most users, that means they'll need to subscribe to Microsoft 365. This, in turn, means their data and meta-information will be kept in a US-based datacenter. That isn't sitting so well with many European Union (EU) organizations and companies. It doesn't sit that well with me or a lot of other people either.

A few years back, I wrote in these very pages that Microsoft didn't want you so much to buy Windows as subscribe to its cloud services and keep your data on its servers. If you wanted a real desktop operating system, Linux would be almost your only choice. Nothing has changed since then, except that folks are getting a wee bit more concerned about their privacy now that President Donald Trump is in charge of the US. You may have noticed that he and his regime love getting their hands on other people's data.

Privacy isn't the only issue. Can you trust Microsoft to deliver on its service promises under American political pressure? Ask the EU-based International Criminal Court (ICC) which after it issued arrest warrants for Israeli Prime Minister Benjamin Netanyahu for war crimes, Trump imposed sanctions on the ICC. Soon afterward, ICC's chief prosecutor, Karim Khan, was reportedly locked out of his Microsoft email accounts. Coincidence? Some think not. Microsoft denies they had anything to do with this.

Peter Ganten, chairman of the German-based Open-Source Business Alliance (OSBA), opined that these sanctions ordered by the US which he alleged had been implemented by Microsoft "must be a wake-up call for all those responsible for the secure availability of state and private IT and communication infrastructures." Microsoft chairman and general counsel, Brad Smith, had promised that it would stand behind its EU customers against political pressure. In the aftermath of the ICC reports, Smith declared Microsoft had not been "in any way [involved in] the cessation of services to the ICC." In the meantime, if you want to reach Khan, you'll find him on the privacy-first Swiss email provider, ProtonMail.

In short, besides all the other good reasons for people switching to the Linux desktop - security, Linux is now easy to use, and, thanks to Steam, you can do serious gaming on Linux - privacy has become much more critical. That's why several EU governments have decided that moving to the Linux desktop makes a lot of sense... Besides, all these governments know that switching from Windows 10 to 11 isn't cheap. While finances also play a role, and I always believe in "following the money" when it comes to such software decisions, there's no question that Europe is worried about just how trustworthy America and its companies are these days. Do you blame them? I don't. The shift to the Linux desktop is "nothing new," as Vaughan-Nichols notes. Munich launched its LiMux project back in 2004 and, despite ending it in 2017, reignited its open-source commitment by establishing a dedicated program office in 2024. In France, the gendarmerie now operates over 100,000 computers on a custom Ubuntu-based OS (GendBuntu), while the city of Lyon is transitioning to Linux and PostgreSQL.

More recently, Denmark announced it is dropping Windows and Office in favor of Linux and LibreOffice, citing digital sovereignty. The German state of Schleswig-Holstein is following suit, also moving away from Microsoft software. Meanwhile, a pan-European Linux OS (EU OS) based on Fedora Kinoite is being explored, with Linux Mint and openSUSE among the alternatives under consideration.

Federal Reserve Chair Jerome Powell told the U.S. Senate that while AI hasn't yet dramatically impacted the economy or labor market, its transformative effects are inevitable -- though the timeline remains uncertain. The Register reports: Speaking to the US Senate Banking Committee on Wednesday to give his semiannual monetary policy report, Powell told elected officials that AI's effect on the economy to date is "probably not great" yet, but it has "enormous capabilities to make really significant changes in the economy and labor force." Powell declined to predict how quickly that change could happen, only noting that the final few leaps to get from a shiny new technology to practical implementation can be a slow one.

"What's happened before with technology is that it seems to take a long time to be implemented," Powell said. "That last phase has tended to take longer than people expect." AI is likely to follow that trend, Powell asserted, but he has no idea what sort of timeline that puts on the eventual economy-transforming maturation point of artificial intelligence. "There's a tremendous uncertainty about the timing of [economic changes], what the ultimate consequences will be and what the medium term consequences will be," Powell said. [...]

That continuation will be watched by the Fed, Powell told Senators, but that doesn't mean he'll have the power to do anything about it. "The Fed doesn't have the tools to address the social issues and the labor market issues that will arise from this," Powell said. "We just have interest rates."

An anonymous reader quotes a report from Bloomberg: Canada is proceeding with its digital services tax on technology companies such as Meta despite a Group of Seven agreement that resulted in removing the Section 899 "revenge tax" proposal from U.S. President Donald Trump's tax bill. The first payment for Canada's digital tax is still due Monday, the country's Finance Department confirmed, and covers revenue retroactively to 2022. The tax is three percent of the digital services revenue a firm makes from Canadian users above $20 million in a calendar year.

Keeping the digital tax will not affect the G7 agreement, which focuses on global minimum taxes, the Finance Department said. The Section 899 provision would have targeted companies and investors from countries that the U.S. determines are unfairly taxing American companies. [...] Finance Minister Francois-Philippe Champagne suggested to reporters last week that the digital tax may be negotiated as part of broader, ongoing U.S.-Canada trade discussions. "Obviously all of that is something that we're considering as part of broader discussions that you may have," he said.

Business groups in the country have opposed the tax since it was announced, arguing it would increase the cost of digital services and invite retaliation from the U.S. It also raised the ire of U.S. businesses and lawmakers. A group of 21 members of U.S. Congress wrote to Trump earlier this month asking him to push for the tax's removal, estimating the June 30 payment will cost U.S. companies $2 billion. Before scrapping its digital services tax, Canada wants to see an OECD deal on policies that expand a country's authority to tax profits earned within that country even if a company doesn't have a physical location there -- which is different from a global minimum tax. Earlier today, President Trump said the U.S. is immediately ending trade talks with Canada in response to the tax, calling it a "direct and blatant attack on our country."

"Based on this egregious Tax, we are hereby terminating ALL discussions on Trade with Canada, effective immediately," Trump wrote in a post on Truth Social. "We will let Canada know the Tariff that they will be paying to do business with the United States of America within the next seven day period."

theodp writes: FWD.us, the immigration and criminal justice-focused nonprofit of Meta CEO Mark Zuckerberg -- the world's third richest person, according to Forbes with an estimated $250B net worth -- has released a new research report warning that announced immigration policies will hurt American families, who can't afford it with their meager savings.

The report begins: "Inflation remains a top concern for the majority of Americans. But new immigration policies announced by President Trump, and already underway, such as revoking immigrant work permits, deporting millions of people, and limiting legal immigration, would directly undermine the goal to level out, or even lower, the costs of everyday and essential goods and services. In fact, all Americans, particularly working-class families, are about to unnecessarily see prices for goods and services like food and housing increase substantially again, above and beyond other economic policies like global tariffs that could also raise prices. Announced immigration policies will result in American families paying an additional $2,150 for goods and services each year by the end of 2028, or the equivalent of the average American family's grocery bill for 3 months or their combined electricity and gas bills for the entire year. Such an annual increase would represent a tax that would erase many American families' annual savings, and amount to one of their bi-weekly paychecks each year. Unlike past periods of inflation, Americans have not been saving at the same rate as earlier years, and can't as easily absorb these price increases, squeezing American budgets even further."

In 2021, Zuckerberg's FWD.us teamed with the nation's tech giants to file a brief with the Supreme Court case to help crush WashTech (a tiny programmers' union), who challenged the lawfulness of hiring international students under the Optional Practical Training (OPT) program. "Striking down OPT and STEM OPT," FWD.us and its tech giant partners argued in their filing, [PDF] "would create a sudden labor shortage in the United States for many companies' most important technical jobs" and "hurt U.S. workers." The brief also dismissed WashTech's contention that the programs coupled with a talent surplus would shut U.S. workers out of the labor market, citing Microsoft's President Brad Smith's claim of an acute talent shortage and a 2.4% unemployment rate for computer occupations (that was then, this is now).

An anonymous reader quotes a report from SecurityWeek: Hundreds of printer models from Brother and other vendors are impacted by potentially serious vulnerabilities discovered by researchers at Rapid7. The cybersecurity firm revealed on Wednesday that its researchers identified eight vulnerabilities affecting multifunction printers made by Brother. The security holes have been found to impact 689 printer, scanner and label maker models from Brother, and some or all of the flaws also affect 46 Fujifilm Business Innovation, five Ricoh, six Konica Minolta, and two Toshiba printers. Overall, millions of enterprise and home printers are believed to be exposed to hacker attacks due to these vulnerabilities.

The most serious of the flaws, tracked as CVE-2024-51978 and with a severity rating of 'critical', can allow a remote and unauthenticated attacker to bypass authentication by obtaining the device's default administrator password. CVE-2024-51978 can be chained with an information disclosure vulnerability tracked as CVE-2024-51977, which can be exploited to obtain a device's serial number. This serial number is needed to generate the default admin password. "This is due to the discovery of the default password generation procedure used by Brother devices," Rapid7 explained. "This procedure transforms a serial number into a default password. Affected devices have their default password set, based on each device's unique serial number, during the manufacturing process."

Having the admin password enables an attacker to reconfigure the device or abuse functionality intended for authenticated users. The remaining vulnerabilities, which have severity ratings of 'medium' and 'high', can be exploited for DoS attacks, forcing the printer to open a TCP connection, obtain the password of a configured external service, trigger a stack overflow, and perform arbitrary HTTP requests. Six of the eight vulnerabilities found by Rapid7 can be exploited without authentication. Brother has patched most of the flaws, but CVE-2024-51978 requires a new manufacturing process to fully resolve, which will apply only to future devices.