×
Canada

After Big Drop in ISP Competition, Canada Mandates Fiber-Network Sharing (arstechnica.com) 28

In an attempt to boost broadband competition, Canada's telecom regulator is forcing large phone companies to open their fiber networks to competitors. Smaller companies will be allowed to buy network capacity and use it to offer competing broadband plans to consumers. From a report: Evidence received during a comment period "shows that competition in the Internet services market is declining," the Canadian Radio-television and Telecommunications Commission (CRTC) said in its announcement. The CRTC said the "decrease is most significant in Ontario and Quebec, where independent competitors now serve 47 percent fewer customers than they did just two years ago. At the same time, several competitors have been bought out by larger Internet providers. This has left many Canadians with fewer options for high-speed Internet services."

The CRTC hasn't made a final decision on fiber resale. But in the meantime, until a more permanent ruling is made, large telcos in Ontario and Quebec will be "required to provide competitors with access to their fibre-to-the-home networks within six months," the CRTC said. The six-month period is intended to give companies time to prepare their networks and develop information technology and billing systems, the agency said. "On a temporary and expedited basis, the CRTC is providing competitors with a workable way to sell Internet services using the fibre-to-the-home networks of large telephone companies in Ontario and Quebec, where competition has declined most significantly," the agency said. "The CRTC is also setting the interim rates that competitors will pay when selling services over these fibre-to-the-home networks. These rates were chosen to allow Canada's large Internet companies to continue investing in their networks to deliver high-quality services to Canadians."

Crime

'Encryption King' Arrested In Turkey (404media.co) 31

An anonymous reader quotes a report from 404 Media: Hakan Ayik, an infamous drug trafficker who also popularized the use of certain brands of encrypted phones around the world, was arrested during a series of dramatic raids in Turkey last week. At one point a group of heavily armed Turkish tactical officers in brown and gray camouflage piled outside an apartment and banged on the door repeatedly. They then smashed the door down and moved inside with a riot shield, according to a video tweeted by Turkey's Minister of the Interior. The video then showed a photograph of Ayik, shirtless and on his knees while staring straight ahead, surrounded by multiple officers.

It was a moment that capped off the arrest of Australia's most wanted man, and a sign that Turkey is no longer a safe haven to organized criminals. But it was also something of a closing act on Anom, a brand of encrypted phone that the FBI secretly took over and managed for years after inserting a backdoor into the product, allowing agents to read tens of millions of messages sent across it. Ayik unknowingly helped the FBI gain that piercing insight into organized crime by selling the devices to other criminal associates. Given Ayik's position as a trusted authority on what communications tools drug traffickers should use, one associate even referred to him as the 'encryption king' in an Anom message I've seen.
According to the Sydney Morning Herald, Ayik will not be extradited to Australia. Instead, Australian police are encouraging Turkish authorities to investigate and prosecute him as a Turkish citizen.
The Media

Will 'News Influencers' Replace Traditional Media? (msn.com) 123

The Washington Post looks at the "millions of independent creators reshaping how people get their news, especially the youngest viewers." News consumption hit a tipping point around the globe during the early days of the coronavirus pandemic, with more people turning to social media platforms such as TikTok, YouTube and Instagram than to websites maintained by traditional news outlets, according to the latest Digital News Report by the Reuters Institute for the Study of Journalism. One in 5 adults under 24 use TikTok as a source for news, the report said, up five percentage points from last year. According to Britain's Office of Communications, young adults in the United Kingdom now spend more time watching TikTok than broadcast television. This shift has been driven in part by a desire for "more accessible, informal, and entertaining news formats, often delivered by influencers rather than journalists," the Reuters Institute report says, adding that consumers are looking for news that "feels more relevant...."

While a few national publications such as the New York Times and The Washington Post have seen their digital audiences grow, allowing them to reach hundreds of thousands more readers than they did a decade ago, the economics of journalism have shifted. Well-known news outlets have seen a decline in the amount of traffic flowing to them from social media sites, and some of the money that advertisers previously might have spent with them is now flowing to creators. Even some outlets that began life on the internet have struggled, with BuzzFeed News shuttering in April, Vice entering into bankruptcy and Gawker shutting down for a second time in February. The trend is likely to continue. "There are no reasonable grounds for expecting that those born in the 2000s will suddenly come to prefer old-fashioned websites, let alone broadcast and print, simply because they grow older," Reuters Institute Director Rasmus Kleis Nielsen said in the report, which is based on an online survey of roughly 94,000 adults in 46 national markets, including the United States...

While many online news creators are, like Al-Khatahtbeh, trained journalists collecting new information, others are aggregators and partisan commentators sometimes masquerading as journalists. The transformation has made the public sphere much more "chaotic and contradictory," said Jay Rosen, an associate professor of journalism at New York University and author of the PressThink blog, adding that it has never been easier to be both informed and misinformed about world events. "The internet makes possible much more content, and reaching all kinds of people," Rosen said. "But it also makes disinformation spread."

The article notes that "some content creators don't follow the same ethical guidelines that are guideposts in more traditional newsrooms, especially creators who seek to build audiences based on outrage."

The article also points out that "The ramifications for society are still coming into focus."
Businesses

Amazon Made $1 Billion Through Secret Price Raising Algorithm, Says FTC (reuters.com) 60

Amazon used a secret algorithm to boost prices to U.S. households by more than $1 billion, says the FTC in ia new court filing. "The FTC lawsuit was filed in September but many details were withheld until Thursday when a version of the lawsuit with fewer redactions was made public in U.S. District Court in Seattle," notes Reuters. From the report: Amazon, which has 1 billion items in its online superstore, created a "secret algorithm internally code named 'Project Nessie' to identify specific products for which it predicts other online stores will follow Amazon's price increases. ... Amazon used Project Nessie to extract more than a billion dollars directly from Americans' pocketbooks," the FTC said.

Amazon began testing the pricing algorithm in 2010 to see if other online retailers tracked its prices and to raise prices for products that were likely to be tracked by competitors, the complaint said. After outside retailers began matching or increasing their own prices, Amazon would continue to sell the product at an inflated price, the FTC alleged, which resulted in $1 billion in excess profit. Amazon paused the algorithm during its Prime Day sales events and the holiday shopping season when there was more media and customer attention on the online retailer, the FTC said.

"After the public's focus turned elsewhere, Amazon turned Project Nessie back on and ran it more widely to make up for the pause," the lawsuit said. Amazon in April 2018 used it to set prices for more than 8 million items purchased by customers that collectively cost almost $194 million, the complaint said, before pausing it in 2019. Amazon retail executive Doug Herrington in January 2022 asked about using "old friend Nessie, perhaps with some new targeting logic" to boost profits for Amazon's retail arm, the complaint said. The FTC complaint also accuses Amazon of seeking to hide information about operations from antitrust enforcers by using the Signal messaging app's disappearing message feature and said the company destroyed communications from June 2019 to early 2022.
Amazon also required sellers using its Prime feature to utilize its logistics and delivery services, leading to increased fees for sellers who used its fulfillment services from 27% in 2014 to 39.5% in 2018, as per the FTC. Furthermore, the complaint mentioned that Amazon treated Walmart.com differently, not allowing it to sell on its platform and allegedly deterring Walmart from offering discounts to shoppers who picked up their purchases from Walmart stores.

Further reading: Amazon Boosted Junk Ads and Deleted Messages To Thwart Antitrust Probe, FTC Says
Businesses

Amazon Boosted Junk Ads and Deleted Messages To Thwart Antitrust Probe, FTC Says (bloomberg.com) 28

Amazon doubled the number of junk ads to boost profits and deleted internal communications to thwart a federal antitrust probe, according to fresh details released by the US Federal Trade Commission in a less redacted complaint against the online retail giant Thursday. From a report: Amazon's founder and former Chief Executive Officer Jeff Bezos personally ordered executives to accept more ads, even ones the company had internally labeled as "defects," indicating they weren't relevant to user searches, according to the new version of the complaint. The FTC alleges that Amazon's increased use of ads boosts profits while it harms sellers and consumers, making it harder for shoppers to find products they are searching for. "We'd be crazy not to" increase the number of advertisements shown to shoppers," the FTC quoted Amazon executives as saying.

One executive compiled a number of the defective ads showing "buck urine" showing up in response to searches for "water bottles" or T-shirts for the Los Angeles Lakers basketball team in response to queries for the Seattle Seahawks football team merchandise. In third quarter 2023 earnings announced last week, Amazon reported advertising revenue of $12.1 billion, making the company's ad unit its fastest-growing business. The company also deleted internal communications using the "disappearing message" feature of Signal and destroyed more than two years' worth of such communications, from June 2019 to at least early 2022, the FTC alleged.

Media

YouTube Is Getting Serious About Blocking Ad Blockers (theverge.com) 286

Emma Roth reports via The Verge: YouTube is broadening its efforts to crack down on ad blockers. The platform has "launched a global effort" to encourage users to allow ads or try YouTube Premium, YouTube communications manager Christopher Lawton says in a statement provided to The Verge. If you run into YouTube's block, you may see a notice that says "video playback is blocked unless YouTube is allowlisted or the ad blocker is disabled." It also includes a prompt to allow ads or try YouTube Premium. You may get prompts about YouTube's stance on ad blockers but still be able to watch a video, though, for one Verge staffer, YouTube now fully blocks them nearly every time.

YouTube confirmed that it was disabling videos for users with ad blockers in June, but Lawton described it as only a "small experiment globally" at the time. Now, YouTube has expanded this effort. Over the past several weeks, more users with ad blockers installed have found themselves unable to watch YouTube videos, with a post from Android Authority highlighting the increase in reports. Lawton maintains that the "use of ad blockers" violates the platform's terms of service, adding that "ads support a diverse ecosystem of creators globally and allow billions to access their favorite content on YouTube."

Crime

SEC Charges SolarWinds CISO With Fraud and Cybersecurity Failures (securityweek.com) 32

wiredmikey shares a report from SecurityWeek: In a surprising development on Monday that is spooking the cybersecurity community, the SEC filed charges against SolarWinds and its Chief Information Security Officer (CISO), Timothy G. Brown, alleging that the software company misled investors about its cybersecurity practices and known risks. The charges stem from alleged fraud and internal control failures related to known cybersecurity weaknesses that took place between the company's October 2018 initial public offering (IPO) and its December 2020 revelation of the infamous supply chain cyberattack dubbed "SUNBURST." [...] The SEC's complaint also points to internal communications among SolarWinds employees, including Brown, in 2019 and 2020, which raised questions about the company's ability to protect its critical assets from cyberattacks.
Network

Internet Access In Gaza Partially Restored After Blackout (techcrunch.com) 262

An anonymous reader quotes a report from TechCrunch: After a weekend of almost complete internet blackout, connectivity in Gaza has been partially restored. On Friday, internet monitoring firms and experts reported that access to the internet had significantly degraded in the Palestinian enclave. The local internet service NetStream "collapsed," according to NetBlocks, a firm that tracks internet access across the world. At the same time, IODA, another internet monitoring system, showed outages and degradation across several Palestinian internet providers. The lack of internet communications caused emergency lines to stop ringing, made it hard for paramedics to locate the wounded, and for family members to reach relatives and friends, according to The New York Times.

On Sunday, IODA reported "marginal restoration" of internet connectivity in Gaza. Abdulmajeed Melhem, chief executive of the Palestinian main telecommunications company Paltel Group, told The Times that the internet had come back even though the company had not made any repairs. Then on Monday, Gaza had roughly the same access to internet connectivity as before Friday, according to several experts and firms that are monitoring the internet in the region, including Doug Madory, an expert who for years has focused on monitoring networks across the world. "There was the 34 hour complete blackout from Friday to Sunday -- a first for Gaza. Then there was last night's partial outage in northern Gaza," Madory, who is the director of internet analysis at Kentik, told TechCrunch on Monday. "The situation is still very precious: no power, little water. Service could potentially drop out again at any time." [...]

It's unclear what caused the internet outages in Gaza on Friday and what caused the improvements on Sunday and Monday. The Washington Post reported on Sunday that the U.S. government put pressure on the Israeli government to switch the internet back on in Gaza, citing an unnamed U.S. official. "We made it clear they had to be turned back on," the official said. "The communications are back on. They need to stay on," The Post quoted the official as saying. Also on Sunday, The Times reported that the U.S. government believed that the Israeli government was responsible for the near-blackout of the internet in Gaza.

Government

America's Net Neutrality Question: Should the FCC Define the Internet as a 'Common Carrier'? (fcc.gov) 132

The Washington Post's editorial board looks at America's "net neutrality" debate.

But first they note that America's communications-regulating FCC has "limited authority to regulate unless broadband is considered a 'common carrier' under the Telecommunications Act of 1996." The FCC under President Barack Obama moved to reclassify broadband so it could regulate broadband companies; the FCC under President Donald Trump reversed the change. Dismayed advocates warned the world that, without the protections in place, the internet would break. You'll never guess what happened next: nothing. Or, at least, almost nothing. The internet did not break, and internet service providers for the most part did not block and they did not throttle.

All the same, today's FCC, under Chairwoman Jessica Rosenworcel, has just moved to re-reclassify broadband. The interesting part is that her strongest argument doesn't have much to do with net neutrality, but with some of the other benefits the country could see from having a federal watchdog keeping an eye on the broadband business... Broadband is an essential service... Yet there isn't a single government agency with sufficient authority to oversee this vital tool. Asserting federal authority over broadband would empower regulation of any blocking, throttling or anti-competitive paid traffic prioritization that they might engage in. But it could also help ensure the safety and security of U.S. networks.

The FCC has, on national security grounds, removed authorization for companies affiliated with adversary states, such as China's Huawei, from participating in U.S. telecommunications markets. The agency can do this for phone carriers. But it can't do it for broadband, because it isn't allowed to. Or consider public safety during a crisis. The FCC doesn't have the ability to access the data it needs to know when and where there are broadband outages — much less the ability to do anything about those outages if they are identified. Similarly, it can't impose requirements for network resiliency to help prevent those outages from occurring in the first place — during, say, a natural disaster or a cyberattack.

The agency has ample power to police the types of services that are becoming less relevant in American life, such as landline telephones, and little power to police those that are becoming more important every day.

The FCC acknowledges this power would also allow them to prohibit "throttling" of content. But the Post's editorial also makes the argument that here in 2023 that's "unlikely to have any major effect on the broadband industry in either direction... Substantial consequences have only become less likely as high-speed bandwidth has become less limited."
The Internet

Comcast and Xfinity Lose Customers - Thanks to Cord-Cutters and Competition from Wireless Internet Carriers (yahoo.com) 98

Bloomberg reports that Comcast's stock price took its biggest drop in over a year on Thursday, "after reporting drops in broadband and cable subscribers, and predicting more losses to come." Cord-cutting and increasing competition have eroded Comcast's traditional customer base. The company, which owns Xfinity, the NBCUniversal media empire and SkyTV, lost 490,000 cable-TV customers in the third quarter, better than analysts expected but part of an ongoing trend as consumers switch to streaming services like Netflix. It also lost 18,000 broadband subscribers in the quarter, with nearly all of those residential customers. Analysts had predicted Comcast would instead gain 10,900 residential broadband customers.

Shares fell as much as 8% on the news Thursday, their biggest intraday decline since July 2022.

"Growth has halted for Comcast — the largest US broadband provider, with 32 million homes," said Bloomberg Intelligence senior media analyst Geetha Ranganathan. "The company derives 80% of profit from cable, where, even after a pandemic-demand surge, broadband has been hurt by fierce competition and low-move activity among customers." Comcast expects "somewhat higher subscriber losses" in the fourth quarter due to pullback on promotional offers that targeted lower-end customers, Chief Financial Officer Jason Armstrong said on a call with investors. Revenue per customer climbed, however, in part because of price increases and promotions of higher-rate plans.

Broadband is becoming increasingly competitive as mobile providers move into the market with improved wireless internet offerings. In the past week, the Big Three — T-Mobile US Inc., AT&T Inc. and Verizon Communications Inc. — all reported subscriber gains.

NASA

NASA's First Two-Way End-to-End Laser Communications System (nasa.gov) 14

NASA is demonstrating laser communications on multiple missions -- showcasing the benefits infrared light can have for science and exploration missions transmitting terabytes of important data. NASA: The International Space Station is getting a "flashy" technology demonstration this November. The ILLUMA-T (Integrated Laser Communications Relay Demonstration Low Earth Orbit User Modem and Amplifier Terminal) payload is launching to the International Space Station to demonstrate how missions in low Earth orbit can benefit from laser communications. Laser communications uses invisible infrared light to send and receive information at higher data rates, providing spacecraft with the capability to send more data back to Earth in a single transmission and expediting discoveries for researchers.

Managed by NASA's Space Communications and Navigation (SCaN) program, ILLUMA-T is completing NASA's first bi-directional, end-to-end laser communications relay by working with the agency's LCRD (Laser Communications Relay Demonstration). LCRD launched in December 2021 and is currently demonstrating the benefits of laser communications from geosynchronous orbit by transmitting data between two ground stations on Earth in a series of experiments. Some of LCRD's experiments include studying atmospheric impact on laser signals, confirming LCRD's ability to work with multiple users, testing network capabilities like delay/disruption tolerant networking (DTN) over laser links, and investigating improved navigation capabilities.

Wireless Networking

Millions of Smart Meters Will Be Defunct When 2G and 3G Turns Off (theregister.com) 137

Paul Kunert reports via The Register: A gaggle of MPs are calling for government to put together a timetable for the replacement of millions upon millions of smart meters that will be defunct when 2G and 3G mobile networks are switched off. The Public Accounts Committee (PAC) comprised of cross-party MPs penned a report to update the rollout of the smart meters, with multiple deadlines missed along the way of the $17 billion billion project. The report echoes an earlier one by the National Audit Office (NAO), which found that as of March 2023, energy companies had rolled out the devices to just 57 percent (roughly 32.4 million out of a potential install base of 57.1 million) homes and businesses. Of these devices, around 9 percent were not functioning properly.

The PAC says in its latest report: "A fifth more (an estimated seven million) will lose functionality when the 2G and 3G mobile communications networks are closed if they do not receive costly hardware upgrades (the cost of which will ultimately be borne by the billpayers)." UK comms regulator Ofcom announced last month that UK mobile operators do not intend to provide 2G and 3G mobile networks past 2033. "The switch-off will affect customers using older mobile devices and services." The PAC wants to know what the Department for Energy Security and Net Zero (DESNZ), as well as energy regulator Ofgem, are doing to plan the smooth running of a replacement scheme.

It asks both to set out "what they will do to ensure suppliers assign more importance than at present to replacing those smart meters not functioning properly" and "a timetable for replacing the communication hub element of smart meters that will lose functionality when the 2G and 3G mobile networks are switched off." [...] The PAC also want DESNZ and Ofgem to outline "measures to ensure that suppliers use future-proofed technology -- for example, by excluding 2G or 3G connectivity -- in all new smart meter installations." And it wants the department and the energy watchdog to detail program costs to Parliament on an annual basis to inform decisions about the rollout.

Cellphones

20 Carriers Face Call-Blocking in the US for Submitting Fake 'Robocall Mitigation Plans' (arstechnica.com) 67

"Twenty phone companies may soon have all their voice calls blocked by US carriers," reports Ars Technica, "because they didn't submit real plans for preventing robocalls on their networks." The 20 carriers include a mix of US-based and foreign voice service providers that submitted required "robocall mitigation" plans to the Federal Communications Commission about two years ago. The problem is that some of the carriers' submissions were blank pages and others were bizarre images or documents that had no relation to robocalls. The strange submissions, according to FCC enforcement orders issued Monday, included "a .PNG file depicting an indiscernible object," a document titled "Windows Printer Test Page," an image "that depicted the filer's 'Taxpayer Profile' on a Pakistani government website," and "a letter that stated: 'Unfortunately, we do not have such a documents.'"

Monday's FCC announcement said the agency's Enforcement Bureau issued orders demanding that "20 non-compliant companies show cause within 14 days as to why the FCC should not remove them from the database for deficient filings." The orders focus on the certification requirements and do not indicate whether these companies carry large amounts of robocall traffic. Each company will be given "an opportunity to cure any deficiencies in its robocall mitigation program description or explain why its certification is not deficient." After the October 30 deadline, the companies could be removed from the FCC's Robocall Mitigation Database.

Removal from the database would oblige other phone companies to block all of their calls.

Security

The Latest High-Severity Citrix Vulnerability Under Attack Isn't Easy To Fix (arstechnica.com) 3

A critical vulnerability that hackers have exploited since August, which allows them to bypass multifactor authentication in Citrix networking hardware, has received a patch from the manufacturer. Unfortunately, applying it isn't enough to protect affected systems. ArsTechnica: The vulnerability, tracked as CVE-2023-4966 and carrying a severity rating of 9.8 out of a possible 10, resides in the NetScaler Application Delivery Controller and NetScaler Gateway, which provide load balancing and single sign-on in enterprise networks, respectively. Stemming from a flaw in a currently unknown function, the information-disclosure vulnerability can be exploited so hackers can intercept encrypted communications passing between devices. The vulnerability can be exploited remotely and with no human action required, even when attackers have no system privileges on a vulnerable system.

Citrix released a patch for the vulnerability last week, along with an advisory that provided few details. On Wednesday, researchers from security firm Mandiant said that the vulnerability has been under active exploitation since August, possibly for espionage against professional services, technology, and government organizations. Mandiant warned that patching the vulnerability wasn't sufficient to lock down affected networks because any sessions hijacked before the security update would persist afterward.

Communications

FCC Greenlights Superfast Wi-Fi Tethering for AR and VR Headsets (theverge.com) 5

The FCC has unanimously approved plans by several tech companies to use the 6GHz band for wireless devices. From a report: FCC Chair Jessica Rosenworcel proposed the new rules, which would authorize very low power (VLP) operations -- meaning their signals won't be able to go very far -- in about 850MHz of the spectrum, on September 27th. The rules will also allow devices to "use higher power levels" so long as they're geofenced to keep from interfering with actual licensed 6GHz usage, and the FCC will be taking comments on other ways it can expand 6GHz spectrum usage by technology devices.

A September Bloomberg report pointed to some of the kinds of devices the FCC's affirmative vote could open up, including in-car connections, mobile virtual or augmented reality devices, and more. The FCC originally opened up 1,200MHz of the 6GHz spectrum for unlicensed use by Wi-Fi routers and client devices (think smartphones or laptops), giving home networks far more wireless overhead than existing Wi-Fi standards already had. This new approval expands the spectrum for much more general use.

Your Rights Online

FCC Moves Ahead With Title II Net Neutrality Rules in 3-2 Party-Line Vote (arstechnica.com) 68

The U.S. FCC voted Thursday to advance a proposal to reinstate landmark net neutrality rules and assume new regulatory oversight of broadband internet that was rescinded under former President Donald Trump. From a report: In a 3-2 party-line vote, the FCC approved Chairwoman Jessica Rosenworcel's Notice of Proposed Rulemaking (NPRM), which seeks public comment on the broadband regulation plan. The comment period will officially open after the proposal is published in the Federal Register, but the docket is already active and can be found here. The proposal would reclassify broadband as a telecommunications service, a designation that allows the FCC to regulate ISPs under the common-carrier provisions in Title II of the Communications Act. The plan is essentially the same as what the FCC did in 2015 when it used Title II to prohibit fixed and mobile Internet providers from blocking or throttling traffic or giving priority to Web services in exchange for payment.

The Obama-era net neutrality rules were eliminated during Trump's presidency when then-Chairman Ajit Pai led a repeal that reclassified broadband as an information service, returning it to the less strict regulatory regime of Title I. The current FCC likely would have acted much sooner but there was a 2-2 deadlock until last month when the Senate confirmed Biden nominee Anna Gomez to fill the empty spot. After the comment period, the FCC is likely to finalize the rulemaking and put the 2015 rules back in place. The broadband industry will likely then sue the FCC in an attempt to nullify the rulemaking.

Social Networks

Reddit is Killing Blockchain-Based Community Points (techcrunch.com) 10

Reddit is winding down Community Points -- the blockchain-based "internet points" program designed to reward creators and developers -- in favor of prioritizing rewards programs that are less difficult to scale. From a report: "Though we saw some future opportunities for Community Points, the resourcing needed was unfortunately too high to justify," Reddit's director of consumer and product communications Tim Rathschmidt told TechCrunch. "The regulatory environment has since added to that effort. Though the moderators and communities that supported Community Points have been incredible partners -- as it's evolved, the product is no longer set up to scale."

Community Points, which will be phased out by early November, were promoted as a chance for Redditors to "own" a piece of their community. First launched in 2020, Community Points were awarded to users who positively engaged in select subreddits in order to incentivize better content and conversation. The points were essentially interchangeable Ethereum tokens stored in Reddit's Vault, which operated as a cryptocurrency wallet.

United Kingdom

Binance To Halt New UK Customers From Using Crypto Exchange (bloomberg.com) 6

Binance has suspended access to its crypto exchange for new users based in the UK, after a partnership with a third party to approve communications on its platform under new local rules was terminated by the country's watchdog. From a report: Any customers based in the UK not already signed up to Binance's platform were no longer able to join the exchange from 5 p.m. in London on Monday, according to a blog post published by Binance. The move puts the world's largest crypto exchange out of reach for new users in the UK, setting the scene for a battle by Binance to return to one of the sector's biggest markets outside of the US.

The UK's financial promotions regime was widened starting on Oct. 8 to include cryptoasset service providers, regardless of their location. All crypto platforms are now required by the regulator to display clear risk warnings to UK-based consumers and meet higher technical standards, with all communications needing to be approved by an FCA-authorized firm. Penalties for not doing so include being added to the FCA's public warning list, as well as unlimited fines and prison time.

GNU is Not Unix

GNU's 40th Anniversary: the FSF's Meeting with Old and New Friends (fsf.org) 17

Devin Ulibarri, the Free Software Foundation's outreach and communications coordinator, writes up an event he describes as meeting with some old and new friends: On Sunday, October 1, the Free Software Foundation (FSF) hosted a hackday to celebrate the fortieth anniversary of the GNU Project. Folks came from both near and far to join in the festivities at FSF headquarters, Boston, MA... Sadi moma bela loza, the Bulgarian melody from which The Free Software Song is set, could be heard faintly playing in a nearby room, its distinctive odd-metered tune performed by a fully-liberated X200...

All in all, the event succeeded in our goal of welcoming both long-time members as well as introducing new people to free software and our cause. A few college students from local universities, for example, were able to ask questions seeking to better understand free software licenses and GNU Project history. We received multiple requests from attendees to host similar events again in the near future. And one parent, whose son played NetHack at the event, reported that, the following morning, his son asked to go to the FSF office after school to play it again. When playing he mastered the "vi" movement keys immediately. We hope they serve him well...!

Happy hacking and please stay tuned for more FSF-hosted events, including LibrePlanet 2024!

Open Source

Europe Mulls Open Sourcing TETRA Emergency Services' Encryption Algorithms (theregister.com) 18

Jessica Lyons Hardcastle reports via The Register: The European Telecommunications Standards Institute (ETSI) may open source the proprietary encryption algorithms used to secure emergency radio communications after a public backlash over security flaws found this summer. "The ETSI Technical Committee in charge of TETRA algorithms is discussing whether to make them public," Claire Boyer, a spokesperson for the European standards body, told The Register. The committee will discuss the issue at its next meeting on October 26, she said, adding: "If the consensus is not reached, it will go to a vote."

TETRA is the Terrestrial Trunked Radio protocol, which is used in Europe, the UK, and other countries to secure radio communications used by government agencies, law enforcement, military and emergency services organizations. In July, a Netherlands security biz uncovered five vulnerabilities in TETRA, two deemed critical, that could allow criminals to decrypt communications, including in real-time, to inject messages, deanonymize users, or set the session key to zero for uplink interception. At the time ETSI downplayed the flaws, which it said had been fixed last October, and noted that "it's not aware of any active exploitation of operational networks."

At the time ETSI downplayed the flaws, which it said had been fixed last October, and noted that "it's not aware of any active exploitation of operational networks." It did, however, face criticism from the security community over its response to the vulnerabilities -- and the proprietary nature of the encryption algorithms, which makes it more difficult for proper pentesting of the emergency network system.
"This whole idea of secret encryption algorithms is crazy, old-fashioned stuff," said security author Kim Zetter who first reported the story. "It's very 1960s and 1970s and quaint. If you're not publishing [intentionally] weak algorithms, I don't know why you would keep the algorithms secret."

Slashdot Top Deals