Purism posted an announcement Thursday about their privacy-focused "Librem 5 USA" smartphones. "New orders placed today will ship within our standard 10-business-day window." The Librem 5 USA now joins the Librem Mini and Librem 14 as a post-Just In Time product, one where instead of relying on Just In Time supply chains to manufacture a product just as we need it, we have invested in maintaining much larger inventories so that we can better absorb future supply chain issues that may come our way.

For anyone who is new to the product, the Librem 5 USA is our premium phone that shares the same hardware design and features as our mass-produced Librem 5, but with electronics we make in the USA using a separate electronics supply chain that sources from US suppliers whenever possible. This results in a tighter, more secure supply chain for the Librem 5 USA.

The Librem 5 USA uses the same PureOS as our other computers and so it runs the same desktop Linux applications you might be used to, just on a small screen.

PureOS on the Librem 5 USA demonstrates real convergence, where the device becomes more than just a phone, it becomes a full-featured pocket-sized computer that can act like a desktop when connected to a monitor, keyboard and mouse, or even a laptop (or tablet!) when connected to a laptop docking station. All of your files and all of your software remains the same and follows you where you go. Applications just morph from the smaller screen to the larger screen when docked, just like connecting a external monitor to a laptop.

Everyone who has backed the Librem 5 and Librem 5 USA projects hasn't just supported the production of the hardware itself, they have also supported a massive, multi-year software development effort to bring the traditional Linux desktop to a phone form-factor. Projects such as Phosh (the GUI), Phoc (the Compositor), Squeekboard (the Keyboard), Calls (for calling), Chats (for texting and messaging), and libhandy/libadwaita (libraries to make GTK applications adaptive) all required massive investment and many of these projects have already been moved to the GNOME infrastructure to better share our effort with a larger community.

We are delighted to see that many other mobile projects have recognized the quality of our efforts and adopted our software into their own projects....

The Librem 5 USA was designed for longevity and because we support right to repair, we also offer a number of spare parts in our shop, including replacement modems so you can make sure you support all the cellular bands in a particular continent, replacement batteries for when you ultimately wear out your existing battery, and plenty of other spare parts that haven't had sufficient demand to post formally on our shop (yet). If you need a spare part that isn't yet on the shop, just ask.

Long-time Slashdot reader chicksdaddy writes: Printer maker Epson has programmed some models of its inkjet printers to "stop operating" at a pre-determined time, citing the risk of property damage linked to "ink spills," the Fight to Repair newsletter reports.

Epson printer owners have complained that their functioning printers have suddenly stopped working, displaying an error message declaring that a component of the printer has "reached the end of its service life" and that the device needs to be serviced. According to Epson's website, the message is linked to ink pads, which Epson describes as "porous pads in the printer that collect, distribute, and very importantly contain the ink that is not used on printed pages." Over time, these pads become saturated with ink though generally not "before the printer is replaced for other reasons" (??!)

"Like so many other products, all Epson consumer ink jet products have a finite life span due to component wear during normal use... The printers are designed to stop operating at the point where further use without replacing the ink pads could create risks of property damage from ink spills or safety issues related to excess ink contacting an electrical component," the company said on its website.

Rather than measure the saturation of the ink pads to determine when that point is reached, however, Epson appears to have programmed a counter on its printers that disables the device when a threshold has been reached. For printer owners who use Windows, Epson makes a reset utility that can reset the counter though it can "only be used once and will allow printing for a short period of time." For Mac users, or Windows users who have already run the reset utility once, Epson urges them to have the printer serviced by an Epson authorized service shop or — preferably — to replace the printer with a new printer. "Repair may not be a cost-effective option for lower-cost printers because other components may also be near the end of their usable life," the company said. Despite the company's claims about the unfixability of the ink pad issue, YouTube videos suggest that the ink pads are, in fact, simple to replace, as this video illustrates.

Some legal experts say that Epson's hard coding an end of life for its printers may be illegal — an example of "Deceptive trade practices," unless it is clearly disclosing the existence of the programmed end of life to consumers prior to purchase.
Here's how the Fight to Repair newsletter sees the situation. Epson "pushes its customers to throw away the entire, working printer unit simply because some sponges are saturated with ink.

"In doing so, the company amplifies our epidemic of e-waste and forces customers into an expensive and (as it turns out) unneeded upgrade."

This week Samsung said customers can finally start buying replacement screens, rear glass and charging ports for home repairs from repair resource site iFixit, as well as from Samsung's Experience stores across the country, according to the Washington Post.

But their article warns that for now the program is limited to just "a handful of higher-end models" like the Galaxy S20 and S21 series smartphones. ("We plan to expand to more models as the program matures," said a Samsung spokesperson.) You can't, for example, buy just a screen to replace a broken one in your Galaxy phone. Instead, Samsung says you must purchase an entire screen "assembly," which includes the display itself, the metal frame that surrounds it and another battery. Essentially, that means replacing the entire front of the phone and then some.

That also means that, for the time being, Samsung doesn't have a way for you to purchase a genuine battery on its own to replace the one that isn't holding a long-charge or bloating — a common issue in devices that are used and charged regularly. The Samsung spokesperson told The Washington Post that "additional parts will be added as the program ramps up," though co-founder and CEO Kyle Wiens says iFixit will continue to sell third-party replacement batteries....

And we're not kidding about how fiddly these guides can be: according to iFixit, the process of replacing a Galaxy S20's screen assembly requires 41 steps, and that doesn't include putting the phone back together.

"Students should not have to fear expulsion for expressing themselves on social media after school and off-campus, but that is just what happened to the plaintiff in C1.G v. Siegfried," writes Mukund Rathi via the Electronic Frontier Foundation (DFF). "Last month, the Tenth Circuit Court of Appeals ruled the student's expulsion violated his First Amendment rights. The court's opinion affirms what we argued in an amicus brief last year." From the report: We strongly support the Tenth Circuit's holding that schools cannot regulate how students use social media off campus, even to spread "offensive, controversial speech," unless they target members of the school community with "vulgar or abusive language."

The case arose when the student and his friends visited a thrift shop on a Friday night. There, they posted a picture on Snapchat with an offensive joke about violence against Jews. He deleted the post and shared an apology just a few hours later, but the school suspended and eventually expelled him. [...] The Tenth Circuit held the First Amendment protected the student's speech because "it does not constitute a true threat, fighting words, or obscenity." The "post did not include weapons, specific threats, or speech directed toward the school or its students." While the post spread widely and the school principal received emails about it, the court correctly held that this did not amount to "a reasonable forecast of substantial disruption" that would allow regulation of protected speech.

Migrants who have been convicted of a criminal offense will be required to scan their faces up to five times a day using smartwatches installed with facial recognition technology under plans from the Home Office and the Ministry of Justice. The Guardian reports: In May, the government awarded a contract to the British technology company Buddi Limited to deliver "non-fitted devices" to monitor "specific cohorts" as part of the Home Office Satellite Tracking Service. The scheme is due to be introduced from the autumn across the UK, at an initial cost of 6 million pounds. A Home Office data protection impact assessment (DPIA) from August 2021, obtained by the charity Privacy International through a freedom of information request, assessed the impact of the smartwatch technology before contracting a supplier. In the documents, seen by the Guardian, the Home Office says the scheme will involve "daily monitoring of individuals subject to immigration control," with the requirement to wear either a fitted ankle tag or a smartwatch, carried with them at all times.

A Home Office data protection impact assessment (DPIA) from August 2021, obtained by the charity Privacy International through a freedom of information request, assessed the impact of the smartwatch technology before contracting a supplier. In the documents, seen by the Guardian, the Home Office says the scheme will involve "daily monitoring of individuals subject to immigration control," with the requirement to wear either a fitted ankle tag or a smartwatch, carried with them at all times. Photographs taken using the smartwatches will be cross-checked against biometric facial images on Home Office systems and if the image verification fails, a check must be performed manually. The data will be shared with the Home Office, MoJ and the police, with Home Office officials adding: "The sharing of this data [to] police colleagues is not new."

The number of devices to be produced and the cost of each smartwatch was redacted in the contract and there is no mention of risk assessments to determine whether it is appropriate to monitor vulnerable or at-risk asylum seekers. The Home Office says the smartwatch scheme will be for foreign-national offenders who have been convicted of a criminal offense, rather than other groups, such as asylum seekers. However, it is expected that those obliged to wear the smartwatches will be subject to similar conditions to those fitted with GPS ankle tags, with references in the DPIA to curfews and inclusion and exclusion zones. Those who oppose the 24-hour surveillance of migrants say it breaches human rights and may have a detrimental impact on their health and wellbeing. Lucie Audibert, a lawyer and legal officer for Privacy International, said: "Facial recognition is known to be an imperfect and dangerous technology that tends to discriminate against people of color and marginalized communities. These 'innovations' in policing and surveillance are often driven by private companies, who profit from governments' race towards total surveillance and control of populations.

"Through their opaque technologies and algorithms, they facilitate government discrimination and human rights abuses without any accountability. No other country in Europe has deployed this dehumanizing and invasive technology against migrants."

After a revelation in May that DuckDuckGo's (DDG) privacy-focused web browser allows Microsoft tracking scripts on third-party websites, the company now says it will start blocking those too. From a report: DuckDuckGo's browser had third-party tracker loading protection by default that already blocked scripts embedded on websites from Facebook, Google, and others, but until now Microsoft's scripts from the Bing and LinkedIn domains (but not its third-party cookies) had a pass.

A security researcher named Zach Edwards pointed out the exclusion that he apparently uncovered while auditing the browser's privacy claims, and noted it is especially curious because Microsoft is the partner that delivers ads in DDG's search engine (while promising not to use that data to create a monitored profile of users to target ads, instead relying on context to decide which ones it should show). DuckDuckGo CEO Gabe Weinberg said at the time that the reason for it was a search syndication agreement with Microsoft, and that more updates on third-party tracker preventions were coming. A backlash ensued, with some seizing on DuckDuckGo's own words that "tracking is tracking," a phrase the company used against Google's cookie-replacing "privacy sandbox" ad technology. Now Weinberg writes in a blog post, "I've heard from a number of users and understand that we didn't meet their expectations around one of our browser's web tracking protections." DuckDuckGo is vowing to be more transparent about what trackers its browser and extensions are protecting users from, making its tracker blocklists available and offering users more information on how its tracking protections with a new help page.

Migrants who have been convicted of a criminal offence will be required to scan their faces up to five times a day using smartwatches installed with facial recognition technology under plans from the Home Office and the Ministry of Justice. From a report: In May, the government awarded a contract to the British technology company Buddi Limited to deliver "non-fitted devices" to monitor "specific cohorts" as part of the Home Office Satellite Tracking Service. The scheme is due to be introduced from the autumn across the UK, at an initial cost of $7.24m.

A Home Office data protection impact assessment (DPIA) from August 2021, obtained by the charity Privacy International through a freedom of information request, assessed the impact of the smartwatch technology before contracting a supplier. In the documents, seen by the Guardian, the Home Office says the scheme will involve "daily monitoring of individuals subject to immigration control," with the requirement to wear either a fitted ankle tag or a smartwatch, carried with them at all times. Those obliged to wear the devices will need to complete periodic monitoring checks throughout the day by taking a photograph of themselves on a smartwatch, with information including their names, date of birth, nationality and photographs stored for up to six years. Locations will be tracked "24/7, allowing trail monitoring data to be recorded."

The Attorneys General of all 50 states have joined forces in hopes of giving teeth to the seemingly never-ending fight against robocalls. Engadget reports: North Carolina AG Josh Stein, Indiana AG Todd Rokita and Ohio AG Dave Yost are leading the formation of the new Anti-Robocall Litigation Task Force. In Stein's announcement, he said the group will focus on taking legal action against telecoms, particularly gateway providers, allowing or turning a blind eye to foreign robocalls made to US numbers. He explained that gateway providers routing foreign phone calls into the US telephone network have the responsibility under the law to ensure the traffic they're bringing in is legal. Stein said that they mostly aren't taking any action to keep robocalls out of the US phone network, though, and they're even intentionally allowing robocall traffic through in return for steady revenue in many cases.

Stein said in a statement: "We're... going to take action against phone companies that violate state and federal laws. I'm proud to create this nationwide task force to hold companies accountable when they turn a blind eye to the robocallers they're letting on to their networks so they can make more money. I've already brought one pathbreaking lawsuit against an out-of-state gateway provider, and I won't hesitate to take legal action against others who break our laws and bombard North Carolinians with these harmful, unlawful calls."

An anonymous reader quotes a report from Ars Technica: Charter Communications has agreed to settle piracy lawsuits filed by the major record labels, which accused the cable Internet provider of failing to terminate the accounts of subscribers who illegally download copyrighted songs. Sony, Universal, Warner, and their various subsidiaries sued Charter in US District Court in Colorado in March 2019 in a suit that claimed the ISP helps subscribers pirate music by selling packages with higher Internet speeds. They filed another lawsuit against Charter in the same court in August 2021.

Both cases were settled. The record labels and Charter told the court of their settlements on Tuesday in filings (PDF) that said (PDF), "The Parties hereby notify the Court that they have resolved the above-captioned action." Upon the settlements, the court vacated the pending trials and asked the parties to submit dismissal papers within 28 days. Charter subsidiary Bright House Networks also settled (PDF) a similar lawsuit in US District Court for the Middle District of Florida this week. The record labels' case in Florida was settled one day before a scheduled trial, as TorrentFreak reported Tuesday. The case was dismissed with prejudice (PDF) after the settlement.

No details on any of the settlements were given in the documents notifying the courts. A three-week jury trial in one of the Colorado cases was scheduled to begin in June 2023 but is no longer needed. The question for Internet users is whether the settlements mean that Charter will be more aggressive in terminating subscribers who illegally download copyrighted material. Charter declined to comment today when we asked if it agreed to increase account terminations of subscribers accused of piracy. "Even if the settlements have no specific provision on terminating subscribers, Charter presumably has to pay the record labels to settle the claims," adds Ars' Jon Brodkin. "That could make the country's second-biggest ISP more likely to terminate subscribers accused of piracy in order to prevent future lawsuits."

An anonymous reader shares a report: Real problems are what legislators are supposed to be solving. The Philippines has plenty of those, ranging from (government-endorsed) extrajudicial killings of drug dealers and drug users to abuses of state power to silence journalists to the actual murders of human rights activists. But legislators with their own axes to grind will always find ways to hone this edge, even if it means subjecting themselves to international ridicule. Enter Representative Arnolfo "Arnie" Teves, Jr. The rep has introduced a bill that would criminalize the act of "ghosting." For those unfamiliar with internet slang, it may appear Teves is trying to criminalize the act of being a ghost. (Webster's Ye Olde English Dictionary, perhaps.) But ghosts actually engage in "haunting," which is not the same thing as "ghosting." Ghosting is something else. Ghosting is disengaging from a relationship (short-term or long-term) by ignoring all calls, IMs, text messages, emails, etc. from a paramour until the problem ultimately solves itself. If one interested person can't get a response from a disinterested person, sooner or later the interested person stops trying.

An innocent tweet about a wildly popular online multiplayer game led to a terrifying real-life campaign of doxxing and death threats against employees of game company Bungie. The Record reports: Two employees of Bungie, the American company behind "Destiny 2" -- a first-person shooter with 40 million users -- recently convinced an Ontario judge to order Waterloo-based TextNow to name its customers who made "racist and serious physical threats" against them. TextNow offers users anonymous phone service. [...] The two employees sought an "urgent and confidential" court order requiring TextNow to name the customers who made the threats. The judge agreed on June 15 but waited a month before releasing his reasons due to "the serious nature of the allegations of danger." TextNow collects information about each user, including email address, phone number, IP address, credit card number and logs of calls and texts.

The judge said the employees don't plan to sue the users in Ontario. "Whether they sue in the U.S. or just give the name to the police, I am satisfied that the exceptional equitable remedy ought to be available to identify people who harass others, with base racism, who dox, abuse personal information, and make overt threats of physical harm and death," he said. "Our mission is to provide everyone with an affordable way to communicate, and we place a high value on the safety and privacy of our users," a TextNow spokesperson said in an email to The Record. "From time to time, we receive lawful requests for information. We comply with all valid requests as required by law."

Democratic lawmakers are piling pressure on data brokers to stop collecting information on pregnant people in order to protect those seeking abortions. They're not having much luck. From a report: For years, brokers have sold datasets on millions of expectant parents from their trimester status to their preferred birth methods. Now that the Supreme Court has overturned Roe v. Wade, that same data is becoming a political issue, with abortion-rights groups warning that states with abortion bans are likely to weaponize it. In the three months since POLITICO reported the draft opinion against Roe, numerous congressional Democrats have sent letters to data brokers urging them to stop the practice, promised to interrogate the companies about their collections and introduced bills to restrict reproductive health data from being collected and sold.

But in the absence of federal data privacy legislation or any likely chance of it getting the support needed to pass, many brokers aren't taking heed. POLITICO found more than 30 listings from data brokers offering information on expecting parents or selling access to those people through mass email blasts. Twenty-five of them were updated after the Supreme Court's ruling on Roe v. Wade on June 24. Exact Data, a data broker that offers names, emails and mailing addresses of more than 23,000 expecting parents, updated its inventory as recently as August 1. PK List Marketing also updated its "She's Having a Baby - PRENATAL Mailing List" on August 1, according to its listing on NextMark, a directory of marketing email lists.

The Indian government is withdrawing its long-awaited Personal Data Protection Bill that drew scrutiny from several privacy advocates and tech giants who feared the legislation could restrict how they managed sensitive information while giving government broad powers to access it. From a report: The move comes as a surprise as lawmakers had indicated recently that the bill, unveiled in 2019, could see the "light of the day" soon. New Delhi received dozen of amendments and recommendations from a Joint Committee of Parliament that "identified many issues that were relevant but beyond the scope of a modern digital privacy law," said India's Junior IT Minister Rajeev Chandrasekhar. The government will now work on a "comprehensive legal framework" and present a new bill, he added.

The Personal Data Protection Bill sought to empower Indian citizens with rights relating to their data. India, the world's second largest internet market, has seen an explosion of personal data in the past decade as hundreds of citizens came online for the first time and started consuming scores of apps. But there has been uncertainty on how much power the individuals, private companies and government agencies have over it.

An anonymous reader quotes a report from The Register: The head of WhatsApp will not compromise the security of its messenger service to bend to the UK government's efforts to scan private conversations. Will Cathcart, who has been at parent company Meta for more than 12 years and head of WhatsApp since 2019, told the BBC that the popular communications service wouldn't downgrade or bypass its end-to-end encryption (EE2E) just for British snoops, saying it would be "foolish" to do so and that WhatsApp needs to offer a consistent set of standards around the globe. "If we had to lower security for the world, to accommodate the requirement in one country, that ... would be very foolish for us to accept, making our product less desirable to 98 percent of our users because of the requirements from 2 percent," Cathcart told the broadcaster. "What's being proposed is that we -- either directly or indirectly through software -- read everyone's messages. I don't think people want that."

Strong EE2E ensures that only the intended sender and receiver of a message can read it, and not even the provider of the communications channel nor anyone eavesdropping on the encrypted chatter. The UK government is proposing that app builders add an automated AI-powered scanner in the pipeline -- ideally in the client app -- to detect and report illegal content, in this case child sex abuse material (CSAM).

The upside is that at least messages are encrypted as usual when transmitted: the software on your phone, say, studies the material, and continues on as normal if the data is deemed CSAM-free. One downside is that any false positives mean people's private communications get flagged up and potentially analyzed by law enforcement or a government agent. Another downside is that the definition of what is filtered may gradually change over time, and before you know it: everyone's conversations are being automatically screened for things politicians have decided are verboten. And another downside is that client-side AI models that don't produce a lot of false positives are likely to be easily defeated, and are mainly good for catching well-known, unaltered CSAM examples.

An anonymous reader quotes a report from Forbes: According to cyber security firm Volexity, the threat research team has found the North Korean 'SharpTongue' group, which appears to be part of, or related to, the Kimsuky advanced persistent threat group, deploying malware called SHARPEXT that doesn't need your Gmail login credentials at all. Instead, it "directly inspects and exfiltrates data" from a Gmail account as the victim browses it. This quickly evolving threat, Volexity says it is already on version 3.0 according to the malware's internal versioning, can steal email from both Gmail and AOL webmail accounts, and works across three browsers: Google Chrome, Microsoft Edge, and a South Korean client called Whale.

The U.S. Cybersecurity & Infrastructure Security Agency, CISA, reports that Kimsuky has been operating since 2012, and is "most likely tasked by the North Korean regime with a global intelligence gathering mission." While CISA sees Kimsuky most often targeting individuals and organizations in South Korea, Japan, and the U. S., Volexity says that the SharpTongue group has frequently been seen targeting South Korea, the U. S. and Europe. The common denominator between them is that the victims often " work on topics involving North Korea, nuclear issues, weapons systems, and other matters of strategic interest to North Korea."

The report says that SHARPEXT differs from previous browser extensions deployed by these hacking espionage groups in that it doesn't attempt to grab login credentials but bypasses the need for these and can grab email data as the user reads it. The good news is that your system needs to be compromised by some means before this malicious extension can be deployed. Unfortunately, we know all too well that system compromise is not as difficult as it should be. Once a system has been compromised by phishing, malware, unpatched vulnerabilities, whatever, the threat actors can install the extension using a malicious VB script that replaces the system preference files. Once that's done and the extension runs quietly in the background, it is tough to detect. The user logs in to their Gmail account from their normal browser on the expected system. The security researchers recommend "enabling and analyzing PowerShell ScriptBlock logging" to detect whether you've been targeted by this attack, reports Forbes. Additionally, they recommend reviewing installed extensions regularly, especially looking for ones you don't recognize or are not available from the Chrome Web Store.

Eleven people who ran and promoted cryptocurrency firm Forsage are facing charges of operating a pyramid and Ponzi scheme that raised more than $300 million from millions of investors in the U.S. and elsewhere, according to the Securities and Exchange Commission. From a report: The Forsage executives posted videos that promised huge returns for investors, with one calling it "a powerful long-term source of passive income" and telling viewers, "Forsage means fast and furious." But securities regulators allege the service's founders weren't providing an investment strategy, but rather running a pyramid scheme, where investors made money by recruiting others. Also, earlier investors were paid through the money invested by newer customers, the hallmark of a classic Ponzi structure.

The charges underscore the financial risks of a sector that has drawn a fair share of fraudsters and scammers, aside from the massive price plunges that cryptocurrencies have experienced this year. In the case of Forsage, the service was created in 2020 and targeted retail investors who wanted to enter into crypto transactions via so-called "smart contracts" that operated on the ethereum, tron and binance blockchains. In addition to the four founders, the SEC also charged three U.S.-based promoters hired by Forsage to tout the service as well as several members of the Crypto Crusaders, a promotional group for the service, the SEC said.

Facebook's parent company Meta and major US hospitals violated medical privacy laws with a tracking tool that sends health information to Facebook, two proposed class-action lawsuits allege. From a report: The lawsuits, filed in the Northern District of California in June and July, focus on the Meta Pixel tracking tool. The tool can be installed on websites to provide analytics on Facebook and Instagram ads. It also collects information about how people click around and input information into those websites.

An investigation by The Markup in early June found that 33 of the top 100 hospitals in the United States use the Meta Pixel on their websites. At seven hospitals, it was installed on password-protected patient portals. The investigation found that the tool was sending information about patient health conditions, doctor appointments, and medication allergies to Facebook.

U.S. crypto firm Nomad has been hit by a $190 million theft, blockchain researchers said on Tuesday, the latest such heist to hit the digital asset sector this year. From a report: Nomad said in a tweet that it was "aware of the incident" and was currently investigating, without giving further details or the value of the theft. Crypto analytics firm PeckShield told Reuters $190 million worth of users' cryptocurrencies were stolen, including ether and the stablecoin USDC. Other blockchain researchers put the figure at over $150 million.

An anonymous reader quotes a report from TorrentFreak: You wouldn't steal a car, right? So why are you pirating? With this 2004 message, the movie industry hoped to turn illegal downloaders into paying customers. This campaign eventually turned into a meme and it's not the only anti-piracy advert to miss the mark. A new research paper identifies several behavioral insights that explain common mistakes made in these campaigns. [...] The general assumption of many people is that, by adding more arguments, the message will be more compelling. That's called the 'more-is-better' heuristic but behavioral research has shown that the opposite is often true. When many arguments are presented together, the stronger ones may actually be diluted by weaker ones. So, referencing malware, fines, low quality, Internet disconnections, and losses to the industry, all while associating piracy with organized crime, is not the best idea. The reduced impact of stronger and weaker arguments is also one of the reasons why the "You Wouldn't Steal a Car" campaign didn't work as planned, the researchers suggest.

Anti-piracy campaigns can also focus too much on dry numbers without putting these into context. While these statistics are vital to the industry, the average pirate will simply gloss over them. This 'mistake' can also be explained by behavioral psychology, which has shown that people identify more with a problem or victim if they feel some kind of personal connection. That's often missing from anti-piracy messages. It's worth noting that not all personal messaging is effective either. The paper mentions an Indian anti-piracy campaign where famous Bollywood actors urged people not to download films illegally, equating piracy to theft. However, the Indian public probably has little sympathy for the potential "losses" incurred by these multi-millionaire actors. In fact, the anti-piracy campaign may be seen as an extra motivation to pirate. "All videos starred well-known actors, whose net worth is estimated to be $22-$400 million dollars, in a country where the annual per capita income is a bit less than $2,000." "This can offer to pirates a moral justification: they only steal the rich to 'feed the poor', a form of 'Robin Hood effect' that makes even more sense with some cultural or sport-related goods," the researchers add.

Piracy is a widespread and global phenomenon. This makes it particularly problematic for copyright holders but emphasizing this issue in anti-piracy messages isn't a good idea. This is the third mistake that's highlighted in the article. By pointing out that people are supposed to get content legally while at the same time showing that many people don't, people might actually be encouraged to pirate. Behavioral research has shown that people often prefer to follow the descriptive norm (what people do) rather than the injunctive one (what the law prescribes). "Informing directly or indirectly individuals that many people pirate is counterproductive and encourages piracy by driving the targeted individuals to behave similarly. These messages provide to the would-be pirates the needed rationalization by emphasizing that 'everyone is doing it'," the researchers write.

Chinese tech giant Alibaba is the latest company to run afoul of the US Securities and Exchange Commission, which has threatened delisting from US stock exchanges. The Register reports: Alibaba's addition to the SEC's list of nearly 300 companies -- mostly from China -- means that US officials were unable to complete an audit of the company's finances. The 2020 Holding Foreign Companies Accountable Act (HFCAA) gives the SEC the authority to delist companies if it is suspected that financial audits may not be accurate. The news hit Alibaba stock hard on Friday, causing it to drop from $100.52 to $89.37 through the day. In a statement sent to the SEC on Monday, Alibaba said it would "strive to maintain its listing status," and that it would continue to monitor market developments and comply with applicable laws and regulations.

Addition to the SEC's HFCAA list doesn't mean that Alibaba will immediately be removed from the New York Stock Exchange (NYSE). Instead, the notice marks the company's first "non-inspection" year; Alibaba is only actually in danger of delisting if it hands in two more consecutive annual reports that run afoul of the HFCAA. The report that landed the company under scrutiny covered Alibaba's fiscal year ending on March 31, 2022. Companies on the provisional HFCAA list have 15 business days to dispute addition to the list. Along with Alibaba's inclusion last week, pet company Boqii, Cheetah Mobile, ecommerce platform MOGU, manufacturing business Highway Holdings and logistics company Novagant Corp -- all from China or Hong Kong -- were added.