Briefly banned in Ukraine, U.S. mobile-phone app Premise does defense work globally and has faced contributor safety issues. From a report: In 2019, Ukrainian users of a U.S.-based mobile-phone app offering paid, short-term tasks got what sounded like a straightforward assignment: Go into rural Ukraine and take smartphone photos of certain fields and farms around Odessa and Kyiv. But for one contributor, the job turned out to be anything but ordinary when one of the fields turned out to lie next to a military checkpoint. The contributor was chased off by armed soldiers, according to people familiar with the matter. The app's owner, Premise Data, said it immediately deleted the task from its platform after learning of the military checkpoint.

What that and other Ukrainian gig workers were doing was harvesting data for a U.S. Defense Department-funded research project. Descartes Labs, a government contractor that works with U.S. military and intelligence agencies, hired Premise to have its gig workers gauge how accurately the company's satellite algorithms were performing, the people said. Could they, for example, accurately tell barley from wheat in photos taken from space? Descartes's work was funded by DARPA, a research arm of the Pentagon, a Defense Department spokesperson said. Descartes declined to comment. Based in San Francisco, Premise is one of a number of companies offering a service that uses iPhone and Android smartphones around the world as tools for gathering intelligence and commercial information from afar, sometimes without the users knowing specifically who they are working for. The business model of companies like Premise has prompted questions about the safety and propriety of enlisting such people for government work --especially in potential or active conflict zones.

Last month a reporter for the New York Times tracked her husband using Apple AirTags, Tiles, and a GPS tracker. (With his permission...) "I was prepared for her to violate my privacy for the sake of journalism," that husband writes today.

"But what I was not prepared for was how easily my actions could be misinterpreted." [O]ne day I had to go into New York City for work — and Todd Heisler, a Times photographer, secretly followed me. [My wife] Kashmir was sending him live updates of my location. Confusion reigned almost immediately. As soon as I arrived in Manhattan, Todd captured me walking — or had I been caught in a potentially compromising position? A friend made light of the situation on Twitter after the article was published, saying it was "a nice touch" that the main picture with the article "shows you apparently emerging from a bar at 10 a.m." Needless to say, I was not drinking before lunch, but the diner where I had just eaten breakfast had a "cocktails" sign in the window....

Next, I entered the 72nd Street subway station but quickly doubled back, apparently losing my camera-toting tail in the process. Little did I know, Todd and Kashmir were texting in real time; he was worried I had "made" him. My Jason Bourne-like escape had spooked him. [When Kashmir received the text from the Times' photographer, "I reassured him that my husband is extremely unobservant and was probably just lost."] I was, in fact, oblivious to his presence. In truth, I had left my mask at the diner and had needed to buy another before I could get on the train to Brooklyn.

At lunch time, Kashmir texted me, "Are you somewhere fancy?" Perplexed, I responded no. I learned later her location trackers suggested that I had stopped at the private club Dumbo House. Imagine the interpretations! In fact, I was at a food court directly below Dumbo House eating a taco...

[W]hen I heard and saw all of these misinterpretations about my day, I couldn't help but think of all the people who might be surveilled without their consent, whether it's by a spouse, an employer or law enforcement.
His conclusion? While trackers have legitimate uses, there's also many ways they could be abused — and misinterpreted. Seeing a map of his every movement after the experiment, "it was unnerving to realize that the devices knew where I was, but that they had no idea what I was doing."

Or, as his wife puts it, "Even with location trackers and a photographer trailing my husband, I couldn't figure out what he was actually doing that day."

U.S. states and municipalities are launching new programs covering the costs of college tuition — or expanding existing programs, reports the Washington Post: At least seven tuition-free initiatives have publicly launched since November, according to the College Promise campaign, which advocates making the first two or more years of college free. The governors of Pennsylvania and Maine are pushing for new programs, while the University of Texas System Board of Regents recently approved a $300 million endowment to cover tuition for more students at its public institutions. College Promise programs, as tuition-free initiatives are commonly known, enjoy widespread support across the political spectrum. Forty-seven states and D.C. have at least one such program at the college, city or state level. There are 33 statewide programs that cover tuition at community colleges or universities and higher education, and experts say the number is likely to grow.

Critics of universal public college say the price tag is unsustainable. Opponents of tuition-free community college say too many of the schools have poor outcomes, with fewer than 40 percent of students earning a degree within six years. Advocates argue that could be remedied by providing more institutional dollars and financial aid to keep students on track....

A number of states have used federal pandemic funds to shore up College Promise programs. Michigan Gov. Gretchen Whitmer (D) used some of the state's allocation to create Futures for Frontliners, a scholarship for essential workers to attend community college. After the scholarship rolled out in 2020, about 100,000 people signed up, Whitmer said in an interview last year. Those who did not qualify were encouraged to apply for Michigan Reconnect, which covers community college tuition for residents 25 and older without a degree.

Cogent Communications, one of the world's largest internet intercontinental backbone providers, has cut ties with Russian customers over its invasion of Ukraine. The Verge reports: In a letter to Russian customers obtained by The Washington Post, Cogent cited "economic sanctions" and "the increasingly uncertain security situation" as the motives behind its total shutdown in the country. Cogent similarly told The Verge that it "terminated its contracts" with Russian customers in compliance with the European Union's move to ban Russian state-backed media outlets.

As Doug Madory, an internet analyst at network tracking company Kentik points out... unplugging Russia from Cogent's global network will likely result in slower connectivity, but won't completely disconnect Russians from the internet... Traffic from Cogent's former customers will instead fall back on other backbone providers in the country, potentially resulting in network congestion. There isn't any indication as to whether other internet backbone providers will also suspend services in Russia.

Digital rights activists have criticized Cogent's decision to disconnect itself from Russia, arguing that it could prevent Russian civilians from accessing credible information about the invasion. "Cutting Russians off from internet access cuts them off from sources of independent news and the ability to organize anti-war protests," Eva Galperin, the director of cybersecurity at the digital rights group Electronic Frontier Foundation, said on Twitter....

Cogent's goal is to prevent the Russian government from using the company's networks for cyberattacks and propaganda, The Post reports.
The Post argues that on a larger scale,"these moves bring Russia closer to the day when its online networks face largely inward, their global connections weakened, if not cut off entirely." "I am very afraid of this," said Mikhail Klimarev, executive director of the Internet Protection Society, which advocates for digital freedoms in Russia. "I would like to convey to people all over the world that if you turn off the Internet in Russia, then this means cutting off 140 million people from at least some truthful information. As long as the Internet exists, people can find out the truth. There will be no Internet — all people in Russia will only listen to propaganda...."

[E]ven two weeks ago, Russia's Internet was comparatively free and integrated into the larger online world, allowing civil society to organize, opposition figures to deliver their messages and ordinary Russians to gain ready access to alternative sources of news in an era when Putin was strangling his nation's free newspapers and broadcast stations.... Patrick Boehler, head of digital strategy at Radio Free Europe, said CrowdTangle data showed that independent news stories in the Russian language worldwide were getting shared many more times on social media than stories from state-run media. He said that once the Kremlin lost control of the narrative, it would have been hard to regain.

Now the last independent journalistic outposts are gone, and the Internet options are increasingly constricted through a combination of forces — all spurred by war in Ukraine but coming from both within and outside Russia.... Government censors also blocked access to the BBC, Voice of America, Radio Free Europe/Radio Liberty and Deutsche Welle, as well as major Ukrainian websites. The BBC, CNN and other international news organizations said they were suspending reporting in Russia because of a new law that could result in 15 years of prison for publishing what government officials deem false news on the war.
Meanwhile, Politico reminds us that even Oracle has shut down its Russian cloud service operations. Laura Manley, the executive director of Harvard University's Shorenstein Center on Media, Politics and Public Policy, said Russia is creating a perfect situation to control its narrative and limit outside coverage of its Ukrainian invasion by Western social media sources. "You have the lack of eyewitness information because you have critical infrastructure being shut off," she said. "So it's sort of a worst case scenario in terms of getting real-time accurate information."

America's National Security Agency (NSA) released a new report "that gives all organizations the most current advice on how to protect their IT network infrastructures from cyberattacks," writes ZDNet: NSA's report 'Cybersecurity Technical Report (CTR): Network Infrastructure Security Guidance' is available freely for all network admins and CIOs to bolster their networks from state-sponsored and criminal cyberattacks. The report covers network design, device passwords and password management, remote logging and administration, security updates, key exchange algorithms, and important protocols such as Network Time Protocol, SSH, HTTP, and Simple Network Management Protocol (SNMP).

The U.S. Cybersecurity and Infrastructure Security Agency is encouraging tech leaders to view the NSA document as part of its new push for all organizations in the US and elsewhere to raise defenses after the recent disk wiper malware targeting Ukrainian organizations. The document, from NSA's cybersecurity directorate, encourages the adoption of 'zero trust' networks....

The new report follows NSA's guidance to help people and organizations choose virtual private networks (VPN). VPN hardware for securing connections between remote workers to corporate networks became a prime target during the pandemic.
Thanks to long-time Slashdot reader Klaxton for sharing the link!

The Register reported this week on a group of software developers launching a group called Open Web Advocacy "to help online apps compete with native apps and to encourage or compel Apple to relax its iOS browser restrictions." The group (OWA), organized by UK-based developers Stuart Langridge, Bruce Lawson, and others, aims to promote a more open web by explaining subtle technical details to lawmakers and to help them understand anti-competitive aspects of web technology. Over the past few months, group members have been communicating with the UK Competitions and Markets Authority (CMA) to convince the agency that Apple's iOS browser policy harms competition.

In conjunction with the debut of the group's website, the OWA plans to release a technical paper titled "Bringing Competition to Walled Gardens," that summarizes the group's position and aims to help regulators in the UK and elsewhere understand the consequences of web technology restrictions.

The group is looking for like-minded developers to take up its cause.... The primary concern raised by Langridge and Lawson is that Apple's iOS App Store Guidelines require every browser running on iPhones and iPads to be based on WebKit, the open source project overseen by Apple that serves as the rendering engine for the company's Safari browser.
"The OWA is now urging Apple users to contact regulators and legislators in other jurisdictions to galvanize support and force Apple to end its restrictions around WebKit," reports MacRumors, "although such a move could make sideloading apps from the web a real possibility, and that is something Apple appears equally reluctant to allow.

Reuters reported today that Apple has now written to U.S. lawmakers "to dispute assertions that its concerns about the dangers of sideloading apps into phones were overblown...." Reuters points out that the U.S. Congress "is currently considering a bill aimed at reining in app stores run by Apple and Alphabet's Google, which would require companies to allow sideloading. Apple has argued that such a practice would be a security risk as it keeps tight control of the apps in the store in order to keep users safe."

But OWA organizer Bruce Lawson tells the Register that as things stand now, "at the moment, every browser on iOS, whether it be badged Chrome, Firefox or Edge is actually just a branded skin of Safari, which lags behind [other browsers] because it has no competition on iOS."

And something funny happened when the Register contacted Apple for a comment about why they're against App Store rule changes: To our astonishment, after having queries ignored for months, an Apple spokesperson responded, asking whether the company could correspond off-the-record. We replied that we would be happy to communicate off-the-record and then never heard back.

Or if we did, we couldn't say.

An anonymous reader quotes a report from ABC News: State attorneys general have launched a nationwide investigation into TikTok and its possible harmful effects on young users' mental health, widening government scrutiny of the wildly popular video platform. The investigation was announced Wednesday by a number of states led by California, Florida, Kentucky, Massachusetts, Nebraska, New Jersey, Tennessee and Vermont. U.S. lawmakers and federal regulators have criticized TikTok, citing practices and computer-driven promotion of content they say can endanger the physical and mental health of young users. The platform has an estimated 1 billion monthly users and is especially popular with teens and younger children. Last month, Texas opened an investigation into TikTok's alleged violations of children's privacy and facilitation of human trafficking.

"Our children are growing up in the age of social media -- and many feel like they need to measure up to the filtered versions of reality that they see on their screens," California Attorney General Rob Bonta said in a news release. "We know this takes a devastating toll on children's mental health and well-being." Bonta said the investigation aims determine if TikTok is violating the law in promoting its platform to young people. Government officials and child-safety advocates maintain that TikTok's computer algorithms pushing video content to users can promote eating disorders and even self-harm and suicide to young viewers. "We care deeply about building an experience that helps to protect and support the well-being of our community, and appreciate that the state attorneys general are focusing on the safety of younger users," the company said Wednesday. "We look forward to providing information on the many safety and privacy protections we have for teens."

An anonymous reader quotes a report from TechCrunch: When Erik Johnson couldn't get his university's mobile student ID app to reliably work, he sought to find a workaround. The app is fairly important, since it allows him and every other student at his university to pay for meals, get into events and even unlock doors to dorm rooms, labs and other facilities across campus. The app is called GET Mobile, and it's developed by CBORD, a technology company that brings access control and payment systems to hospitals and universities. But Johnson -- and the many who left the app one-star reviews in frustration -- said the app was slow and would take too long to load. There had to be a better way.

And so by analyzing the app's network data at the same time he unlocked his dorm room door, Johnson found a way to replicate the network request and unlock the door by using a one-tap Shortcut button on his iPhone. For it to work, the Shortcut has to first send his precise location along with the door unlock request or his door won't open. Johnson said as a security measure students have to be physically in proximity to unlock doors using the app, seen as a measure aimed at preventing accidental door openings across campus. It worked, but why stop there? If he could unlock a door without needing the app, what other tasks could he replicate?

Johnson didn't have to look far for help. CBORD publishes a list of commands available through its API, which can be controlled using a student's credentials, like his. But he soon found a problem: The API was not checking if a student's credentials were valid. That meant Johnson, or anyone else on the internet, could communicate with the API and take over another student's account without having to know their password. Johnson said the API only checked the student's unique ID, but warned that these are sometimes the same as a university-issued student username or student ID number, which some schools publicly list on their online student directories, and as such cannot be considered a secret. Johnson described the password bug as a "master key" to his university -- at least to the doors that are controlled by CBORD. As for needing to be in close proximity to a door to unlock it, Johnson said the bug allowed him to trick the API into thinking he was physically present -- simply by sending back the approximate coordinates of the lock itself. The vulnerability was fixed and session keys were invalidated shortly after TechCrunch shared details of the bug with CBORD.

An anonymous reader quotes a report from TorrentFreak: Sci-Hub founder Alexandra Elbakyan says that following a legal process, the Federal Bureau of Investigations has gained access to data in her Google account. Google itself informed her of the data release this week noting that due to a court order, the company wasn't allowed to inform her sooner. In January 2021, Twitter suspended the official Sci-Hub account so when site updates are published, they now tend to appear on Elbakyan's personal account. A new tweet this week reveals that Google was also required to hand over her account data.

In an email to Elbakyan dated March 2, 2022, Google advises that following a legal process issued by the FBI, Google was required to hand over data associated with Elbakyan's account. Exactly what data was targeted isn't made clear but according to Google, a court order required the company to keep the request a secret. [...] Google notes that since it is "not in a position" to provide Elbakyan with legal advice or to discuss the substance of the legal process, the Sci-Hub founder may wish to contact an attorney. The big question remains -- what exactly is the investigation about?

Given the scale of Sci-Hub and its notoriety around the world, it's certainly possible that a criminal copyright infringement investigation is underway in the United States that could feasibly lead to an indictment for Elbakyan and any cohorts involved in the operation. However, more serious allegations have been made in the past. Back in December 2019, The Washington Post reported that Elbakyan was being investigated by the US Justice Department on suspicion that she "may" be working with Russian intelligence to "steal U.S. military secrets from defense contractors." No solid evidence was published to back up those allegations but the publication did note that Elbakyan may have collected log-in credentials from journal subscribers in order to access academic literature, presumably so that it can be offered on Sci-Hub. "I know there are some reasons to suspect me: after all, I have education in computer security and was a hobby hacker in teenage years," said Elbakyan in a statement. "But hacking is not my occupation, and I do not have any job within any intelligence, either Russian or some another."

She added: "I think that whether I can be a Russian spy is being investigated by U.S. government since they learned about Sci-Hub, because that is very logical: a Russian project, that uses university accounts to access some information, of course that is suspicious. But in fact Sci-Hub has always been my personal enterprise."

BrendaEM shares a report from The Register: Ukrainian news website Ukrainska Pravda says the nation's Centre for Defense Strategies think tank has obtained the personal details of 120,000 Russian servicemen fighting in Ukraine. The publication has now shared this data freely on its website. The Register and others have been unable to fully verify the accuracy of the data from the leak. The records include what appears to be names, addresses, passport numbers, unit names, and phone numbers. Some open source intelligence researchers on Twitter said they found positive matches, as did sources who spoke confidentially to El Reg; others said they couldn't verify dip-sampled data. Rumors swirled on the internet that activists were behind the disclosure. The Ukrainian news agency said the personnel records were obtained from "reliable sources." Whether or not the database's contents is real, the impact on Russian military morale -- knowing that your country's enemies have your personal details and can contact your family if you're captured, killed, or even still alive -- won't be insignificant.

New submitter briaguya shares a report from VideoCardz: Hackers that infiltrated NVIDIA systems are now threatening to release more confidential information unless the company commits to open sourcing their drivers. It is unclear what the stolen data contains, but the group confirmed that there are 250GB of hardware related data in their possession. Furthermore, the group confirmed they have evaluated NVIDIA position, which means that NVIDIA is might trying to communicate with the group to prevent future leaks. The group has already published information on NVIDIA DLSS technology and upcoming architectures. Yesterday, Nvidia reportedly retaliated against the hacker group known as "Lapsus$" by sneaking back into the hacker's system and encrypting the stolen data. The group claimed that it had a backup of the data, though.

An anonymous reader quotes a report from Ars Technica: Mykhailo Fedorov, the vice prime minister and minister of digital transformation of Ukraine, has publicly called on "all game development companies" to "temporarily block all Russian and Belorussian accounts" in response to Russia's ongoing invasion of Ukraine. In a tweet from his verified account, Fedorov also called on esports platforms to "temporarily stop the participation of Russian and Belorussian teams and gamers in all international esports events and cancel all international events holding [sic] on the territory of Russia and Belarus."

These moves, Fedorov suggests, "will motivate the citizens of Russia to proactively stop the disgraceful military aggression" by the Russian government. "In 2022, modern technology is perhaps the best answer to the tanks, multiple rocket launchers... and missiles." In an additional note directed at the Xbox and PlayStation Twitter accounts, Fedorov wrote that "if you support human values, you should [leave] the Russian market!" In a follow-up tweet, Fedorov also asked Riot Games, EA, Ubisoft, Gameloft, and Wargaming to "close your office in Russia" in solidarity with Ukraine. "There's no place for [an] aggressor on the global technological map!"

For years, the tiny startup Kytch worked to invent and sell a device designed to fix McDonald's notoriously broken ice cream machines, only to watch the fast food Goliath crush their business like the hopes of so many would-be McFlurry customers. Now Kytch is instead seeking to serve out cold revenge -- nearly a billion dollars worth of it. Wired: Late Tuesday night, Kytch filed a long-expected legal complaint against McDonald's, accusing the company of false advertising and tortious interference in its contracts with customers. Kytch's cofounders, Melissa Nelson and Jeremy O'Sullivan, are asking for no less than $900 million in damages.

Since 2019, Kytch has sold a phone-sized gadget designed to be installed inside McDonald's ice cream machines. Those Kytch devices would intercept the ice cream machines' internal communications and send them out to a web or smartphone interface to help owners remotely monitor and troubleshoot the machines' many foibles, which are so widely acknowledged that they've become a full-blown meme among McDonald's customers. The two-person startup's new claims against McDonald's focus on emails the fast food giant sent to every franchisee in November 2020, instructing them to pull Kytch devices out of their ice cream machines immediately.

Those emails warned franchisees that the Kytch devices not only violated the ice cream machines' warranties and intercepted their "confidential information" but also posed a safety threat and could lead to "serious human injury," a claim that Kytch describes as false and defamatory. Kytch also notes that McDonald's used those emails to promote a new ice cream machine, built by its longtime appliance manufacturing partner Taylor, that would offer similar features to Kytch. The Taylor devices, meanwhile, have yet to see public adoption beyond a few test installations.

An anonymous reader quotes a report from Ars Technica, written by Kyle Orland: Second Life, the long-lived online metaverse that still attracts nearly a million monthly active users, has announced it will start charging US users local sales tax on many in-game purchases for the first time since its launch in 2003. That could be a significant drag on the online universe's robust in-game economy and serve as a warning for other nascent metaverse efforts hoping to sell virtual goods to US residents. In announcing the move Monday, Second Life developer Linden Labs cited the 2018 Supreme Court decision South Dakota v. Wayfair, Inc., Et Al. That decision established that states and localities could charge sales tax even for products sold by online companies that don't have a physical presence in that state. Following that decision, Linden Labs says it has "done our best to shield our residents from these taxes as long as possible, but we are no longer able to absorb them."

As such, starting March 31, Second Life users will be billed for local taxes on recurring billings such as subscriptions and land fees. Linden Labs will continue to absorb any taxes charged on one-time purchases like name changes and purchases of L$ in-game currency. But those costs will be passed on to users "at some point in the future" Linden Labs writes. "This is news we don't enjoy sharing, but for the health of the business and of Second Life, we can no longer continue absorbing these tax burdens," Linden Labs writes. "Thank you for your understanding and your continued support of Second Life."

Linden Labs' experience could serve as a cautionary tale as other major companies all rush to launch their own metaverse offerings. That includes companies using so-called "web3" technologies like cryptocurrencies and NFTs to power their virtual economies. Aside from possible local sales tax exposure, cryptocurrencies can be taxed as income or capital gains when they're earned, sold, or converted to another form. NFTs, meanwhile, could likely be taxed as collectibles, attracting a top capital gains tax rate of 28 percent in the US. And the IRS is starting to crack down on enforcement for crypto-based earnings thanks to a provision in last year's bipartisan infrastructure bill.

BitConnect founder Satish Kumbhani, charged criminally in the U.S. last week with a $2.4 billion Ponzi scheme, has vanished from his native India, officials said. From a report: Last September, the Securities and Exchange Commission separately sued Kumbhani, claiming he fraudulently raised more than $2 billion from investors in his cryptocurrency exchange platform. But the SEC didn't know where he was and couldn't serve him with the lawsuit. The mystery deepened a bit Monday. Kumbhani, 36, "has likely relocated from India to an unknown address in a foreign country," SEC attorney Richard Primoff said in a court filing. "Since November, the commission has been consulting with that country's financial regulatory authorities in an attempt to locate Kumbhani's address. At present, however, Kumbhani's location remains unknown."

In the most important environmental case in more than a decade, the Supreme Court on Monday will hear arguments in a dispute that could restrict or even eliminate the Environmental Protection Agency's authority to control the pollution that is heating the planet. From a report: A decision by the high court, with its conservative supermajority, could shred President Biden's plans to halve the nation's greenhouse emissions by the end of the decade, which scientists have said is necessary to avert the most catastrophic impacts of climate change. "They could handcuff the federal government's ability to affordably reduce greenhouse gases from power plants," said Michael Oppenheimer, a professor of geosciences and international affairs at Princeton University. But the outcome could also have repercussions that stretch well beyond air pollution, restricting the ability of federal agencies to regulate health care, workplace safety, telecommunications, the financial sector and more.

[...] At issue is a federal regulation that broadly governs emissions from power plants. But in a curious twist, the regulation actually never took effect and does not currently exist. The legal wrangling began in 2015 when President Barack Obama announced the Clean Power Plan, his chief strategy to fight climate change. Citing its authority under the Clean Air Act, the Obama administration planned to require each state to lower carbon dioxide emissions from the electricity sector -- primarily by replacing coal-fired power plants with wind, solar and other clean sources. Electricity generation is the second largest source of greenhouse gas emissions in the United States, behind transportation.

Though the Russian government has tried geofencing access to crucial web sites, the Jerusalem Post reports that two Russian government web site still went offline Saturday — the Kremlin and the Ministry of Defense. "Gosuslugi, Russia's web portal of state services, went offline on Saturday night as well, with the Russian Ministry of Digital Development, Communications and Mass Media telling TASS that the site is facing cyberattacks on an 'unprecedented scale.'"

Meanwhile, the Washington Post interviews 22-year-old Alex Horlan, a Ukrainian cybersecurity expert in Spain "helping take down some of Russia's most powerful websites — including state media and even the official page of the Kremlin." The attacks he and others are helping to carry out on Russian websites are part of a wide information war in the background of the much larger conflict here, as Ukrainians target Russian websites to rewrite the narrative Moscow is presenting to Russians back home. "We are creating an IT army," Ukrainian Vice Prime Minister Mykhailo Fedorov tweeted on Saturday. Horlan is a cybersecurity expert who recently launched an app called disBalancer that helps take down scam websites by overwhelming them with online traffic. He has redirected his team's efforts in recent days to instead target Russian websites he says are spreading dangerous disinformation about the Russian invasion of Ukraine....

Thousands of people are joining Horlan and others' efforts to target the Russian sites, with around 2,000 logging into his app at any given time, he said. The main challenge is that many are losing WiFi when air raid sirens force them to retreat to underground bunkers....

Volunteers are gathering information on attacks and casualties to fact check and challenge Russia's version of events, posting messages on Telegram and other Russian social media platforms [according to Liuba Tsbulska, a Ukrainian analyst and activist who has tracked Russian disinformation for eight year]. Others work to educate international audiences or produce patriotic content. Some also target Russian military and intelligence officers, flooding their emails and other platforms with messages. Volunteers are reaching out to the mothers of Russian soldiers to convince them to call for Russian President Vladimir Putin to bring their boys back home.

In Kharkiv, after reports that Russian troops and armored vehicles entered Ukraine's second largest city early Sunday, one local Telegram channel with more than 400,000 subscribers urged people to continue to document the adversary's movements as a way to aid Ukraine's forces in the area. In one message, the Truha Kharkiv channel asked citizens to "carefully film and send information about the movement of Russian troops to our channel. This is vital to the defense of our city."

Another message instructed citizens on how to make molotov cocktails.

America's power grid consists of 3,000 public and private sector power companies, with 55,000 substations scattered across the country. On the CBS News show 60 Minutes, reporter Bill Whitaker notes that each grid hold grid-powering transformers — then tells the story of "the most serious attack on our power grid in history" on the night of April 16, 2013: For 20 minutes, gunmen methodically fired at high voltage transformers at the Metcalf Power substation. Security cameras captured bullets hitting the chain link fence.

Jon Wellinghoff: They knew what they were doing. They had a specific objective. They wanted to knock out the substation.

At the time, Jon Wellinghoff was chairman of FERC, the Federal Energy Regulatory Commission, a small government agency with jurisdiction over the U.S. high voltage transmission system.... [T]he attackers had reconnoitered the site and marked firing positions with piles of rocks. That night they broke into two underground vaults and cut off communications coming from the substation.

Jon Wellinghoff: Then they went from these vaults, across this road, over into a pasture area here. There were at least four or five different firing positions.

Bill Whitaker: No real security?

Jon Wellinghoff: There was no security at all, really.

They aimed at the narrow cooling fins, causing 17 of 21 large transformers to overheat and stop working.

Jon Wellinghoff: They hit them 90 times, so they were very accurate. And they were doing this at night, with muzzle flash in their face.

Someone outside the plant heard gunfire and called 911. The gunmen disappeared without a trace about a minute before a patrol car arrived. The substation was down for weeks, but fortunately PG&E had enough time to reroute power and avoid disaster.

Bill Whitaker: If they had succeeded, what would've happened?

Jon Wellinghoff: Could've brought down all of Silicon Valley.

Bill Whitaker: We're talking Google, Apple; all these guys--

Jon Wellinghoff: Yes, yes. That's correct.

Bill Whitaker: Who do you think this could have been?

Jon Wellinghoff: I don't know. We don't know if they were a nation state. We don't know if they were domestic actors. But it was somebody who did have competent people who could in fact plan out this kind of a very sophisticated attack....

A few months before the assault on Metcalf, Jon Wellinghoff of FERC commissioned a study to see if a physical attack on critical transformers could trigger cascading blackouts... The report was leaked to the Wall Street Journal. It found the U.S. could suffer a coast-to-coast blackout if saboteurs knocked out just nine substations....

In 2016, an eco terrorist in Utah shot up a large transformer, triggering a blackout. He said he'd planned to hit five substations in one day to shut down the West Coast. In 2020, the FBI uncovered a white supremacist plot called "lights out" to simultaneously attack substations around the country.
While the threats can also come from the internet, America's deputy national security advisor for cyber (formerly at the NSA) tells the reporter "We've taken any information we have about malicious software or tactics that the Russian government has used, shared that with the private sector with very practical advice of how to protect against it."

The reporter later spoke to the president's homeland security advisor, who points out there's no specific national regulation for the power plants, arguing that one of the system's strengths is "the resources for energy are different in different regions."

But they also acknowledged the federal government is now setting standards "in a variety of arenas."

Remember when Google threatened to leave Australia if the country implemented a "news media bargaining code" forcing social media platforms to pay news publishers? Wired reports: Google and Facebook did not leave; they paid up, striking deals with news organizations to pay for the content they display on their sites for the first time. The code was formally approved on March 2, 2021... One year after the media code was introduced, Google has 19 content deals with news organizations and Facebook has 11, according to [Australia's communications minister Paul] Fletcher. Now countries around the world are looking at Australia's code as a blueprint of how to subsidize the news and stop the spread of "news deserts" — communities that no longer have a local newspaper.

Canada is expected to propose its own version in March. Media associations in both the U.S. and New Zealand are calling for similar policies. Reports suggest the UK culture secretary, Nadine Dorries, is also planning to require platforms to strike cash-for-content deals.

The international interest has prompted fierce debate about how well Australia's code works.

"We know it works, we can see the evidence," says Fletcher. He points to how the deals are funding journalism in rural areas. Broadcaster The ABC said its deals with Facebook and Google enabled it to hire 50 regional journalists. Google, however, disagrees. It has accused the media code of stifling media diversity by giving media giants a better deal than smaller publishers. "The primary benefactors of such a code would be a small number of incumbent media providers," Google said in a submission to the U.S. Copyright Office, which is currently reviewing its own media laws....

The criticism of Australia's system focuses on its lack of transparency, which means that media companies cannot compare notes on the deals they are offered and there is a lack of clarity on which outlets are entitled to negotiate.... Concerns about the code's flaws are leaking into Canada, where Justin Trudeau's Liberal Party is drafting its own Australia-style legislation. "We're locking down the incumbent publishers, and we're locking down Google and Facebook's dominance as opposed to countering the dominance that exists on both sides," says Dwayne Winseck, journalism professor at Canada's Carleton University.... Yet Canada's news industry is willing to overlook these limitations because it considers the cash as a lifeline, according to Paul Deegan, president and chief executive of News Media Canada.... They are running out of time to save some of the media landscape, he explains — 40 newspapers have closed permanently since the start of the pandemic. "We've got a number of titles and even chains of titles that are quite literally teetering on the brink."

Deegan agrees the code isn't perfect. This is not a magic bullet, he says, "this is a badly needed Band-Aid."

From the Hindustan Times: BitConnect founder Satish Kumbhani was indicted by a U.S. grand jury on charges he orchestrated a global Ponzi scheme that raised $2.4 billion from investors in a fraudulent cryptocurrency investment platform, according to a Justice Department statement. Kumbhani, 36, was charged in San Diego with misleading investors about BitConnect's purported propriety technology... BitConnect used money from new investors to pay earlier ones and also operated as an unlicensed money transmitting business, the U.S. said.
More details from the San Diego Union-Tribune: Investors around the world, including those in San Diego, were encouraged to buy BitConnect's open-source, decentralized cryptocurrency, called BCC, using Bitcoin for the purchase. Investors would then "lend" their BCC tokens to Bitconnect, which would purportedly invest the proceeds using proprietary technology known as the Trading Bot and Volatility Software. The technology was supposedly designed to trade automatically, and profitably, by buying and selling on the volatility of Bitcoin, according to the indictment.

But much of the technology remained a mystery to investors. When someone asked for a demonstration at an event in 2017, Kumbhani was evasive: "So you ask me very hard question," he told one interviewer. He added later, "For privacy reasons we are not disclosing anything..."

Prosecutors say the investments weren't being traded as promised but were instead used to pay out earlier investors, typical of a pyramid scheme. The funds would also be used to pay BitConnect's army of promoters, who would market the investment opportunity on social media and at live events. Glenn Arcaro, described by prosecutors as "one of the most prolific and successful" of the bunch overseeing the United States, also formed his own cryptocurrency education course called Future Money. But the course was really a way to funnel potential investors to BitConnect, prosecutors said.

Arcaro, a Los Angeles resident, pleaded guilty to conspiracy to commit wire fraud in September for his role in the scheme.
After shutting down abruptly, Kumbhani then "directed his network of promoters to fraudulently manipulate and prop up the price" of BCC, "to create the false appearance of legitimate market demand..." according to a press release from the U.S. Department of Justice: Kumbhani is charged with conspiracy to commit wire fraud, wire fraud, conspiracy to commit commodity price manipulation, operation of an unlicensed money transmitting business, and conspiracy to commit international money laundering. If convicted of all counts, he faces a maximum total penalty of 70 years in prison.