"Elon Musk says SpaceX's Starlink satellites are now active over Ukraine after a request from the embattled country's leadership to replace internet services destroyed by the Russian attack," reports the Independent, in a story shared by Slashdot readers schwit1 and SubMitt: Vladimir Putin's unprovoked invasion has left parts of the country without internet, while SpaceX has launched thousands of communications satellites to bring broadband to hard to reach areas of the world.

"Starlink service is now active in Ukraine. More terminals en route," the entrepreneur tweeted on Saturday.

The move came after Ukraine's vice prime minister urged Mr Musk to help them out, as the SpaceX system does not require any fiber-optic cables.
Newsweek reports that on Friday Ukraine's Vice Prime Minister also asked Apple's Tim Cook to stop providing products and services to Russians — including the Apple Store.

The Huffington Post reports on "the most drastic financial sanction yet on Russian President Vladimir Putin: The United States and key allies will cut Russian banks out of the global financial messaging system SWIFT and begin to target Russia's central bank, according to a White House statement on Saturday...

The statement said the U.S., top European economies, Britain, and Canada would disconnect selected Russian banks from SWIFT, which will severely hurt their ability to operate internationally, and prevent Russia's central bank from using its foreign currency reserves to evade Western sanctions. The pro-Ukraine countries will also make it harder for wealthy Russians to obtain Western citizenship and launch a task force to freeze the assets of Russian elites — a bid to pressure Putin by hurting his friends....

It represents a significant escalation by America's European partners, many of whom worry about the economic toll their own countries will experience if they cut off ties with Russia.

Secret recordings of a surveillance firm's presentation show how much iCloud data Apple surrenders to law enforcement with a warrant -- though it's Google and Facebook that can track a suspect to within three feet. Apple Insider reports: PenLink is a little-known firm from Nebraska which earns $20 million annually from helping the US government track criminal suspects. PenLink also sells its services to local law enforcement -- and it's from such a sales presentation that details of iCloud warrants has emerged. According to Forbes, Jack Poulson of the Tech Inquiry watchdog attended the National Sheriff's Association winter conference. While there, he secretly recorded the event.

During the presentation, PenLink's Scott Tuma described how the company works with law enforcement to track users through multiple services, including the "phenomenal" Apple with iCloud. Apple is open about what it does in the event of a suboena from law enforcement. It's specific about how it will not unlock iPhones, for instance, but it will surrender information from iCloud backups that are stored on its servers. "If you did something bad," said Tuma, "I bet you I could find it on that backup." Tuma also says that in his experience, it's been possible to find people's locations through different services, although not through iCloud. "[Google] can get me within three feet of a precise location," he said. "I cannot tell you how many cold cases I've helped work on where this is five, six, seven years old and people need to put [the suspect] at a hit-and-run or it was a sexual assault that took place." It's also possible for law enforcement and firms like PenLink which help them, to get location data from Facebook and Snapchat. [...]

echo123 shares a report from the Washington Post: The U.S. Postal Service finalized plans Wednesday to purchase up to 148,000 gasoline-powered mail delivery trucks (Warning: paywalled; alternative source), defying Biden administration officials' objections that the multibillion dollar contract would undercut the nation's climate goals. The White House Council on Environmental Quality and the Environmental Protection Agency asked the Postal Service this month to reassess its plan to replace its delivery fleet with 90% gas-powered trucks and 10% electric vehicles, at a cost of as much as $11.3 billion. The contract, orchestrated by Postmaster General Louis DeJoy, offers only a 0.4-mile-per-gallon fuel economy improvement over the agency's current fleet.

Federal climate science officials said the Postal Service vastly underestimated the emissions of its proposed fleet of "Next Generation Delivery Vehicles," or NGDVs, and accused the mail agency of fudging the math of its environmental studies to justify such a large purchase of internal combustion engine trucks. But DeJoy, a holdover from the Trump administration, has called his agency's investment in green transportation "ambitious," even as environmental groups and even other postal leaders have privately questioned it. [...] Environmental advocates assailed the agency's decision, saying it would lock in decades of climate-warming emissions and worsen air pollution. The Postal Service plans call for the new trucks, built by Oshkosh Defense, to hit the streets in 2023 and remain in service for at least 20 years.

DeJoy said in a statement that the agency was open to pursuing more electric vehicles if "additional funding - from either internal or congressional sources -- becomes available." But he added that the agency had "waited long enough" for new vehicles. The White House and EPA had asked the Postal Service to conduct a supplemental environmental impact statement on the new fleet and to hold a public hearing on its procurement plan. The Postal Service rejected those requests: Mark Guilfoil, the agency's vice president of supply management, said they "would not add value" to the mail service's analysis. Now that the Postal Service has finalized it agreement with Oshkosh, environmentalists are expected to file lawsuits challenging it on the grounds that the agency's environmental review failed to comply with the National Environmental Policy Act. They will probably base their case on the litany of problems Biden administration officials previously identified with the agency's technical analysis.

In 2017, Bell Canada, TVA, Videotron, and Rogers teamed up in a lawsuit against the operator of TVAddons, the largest repository of Kodi add-ons. The legal action proved extremely controversial but now, after many twists and turns, the matter is now over. As part of a consent judgment (PDF), TVAddons' founder [Adam Lackman] has admitted liability and agreed to pay a cool US$19.5 million in damages. TorrentFreak reports: In a letter dated February 18, 2022, the media companies and Lackman told the Federal Court that they had resolved their differences by agreeing to a consent judgment. That was reviewed and issued by Justice Rochester, who laid out the agreed terms in her judgment handed down February 22, 2022. Lackman admits to communicating TV shows owned by the plaintiffs to the public, including by directly or indirectly participating in the "development, hosting, distribution or promotion of Kodi add-ons that provide users with unauthorized access" to the plaintiffs' TV shows, contrary to sections 3(1)(f) and 27(1) of the Copyright Act. The TVAddons founder further admits that he made the TV shows available to the public in a manner that provided access "from a place and at a time individually chosen by them" and induced and authorized users of the infringing add-ons to "initiate acts of infringement of the Plaintiffs' right to communicate the Plaintiffs Programs to the public by telecommunication," again by developing, hosting, distributing or promoting Kodi add-ons.

The Federal Court issued a permanent injunction to restrain Lackman (and anyone acting with him, under his authority, or in association) from communicating the plaintiffs' content to the public in any way, including via the development or distribution of infringing add-ons such as the 'FreeTelly' and 'Indigo' tools. The terms of the injunction are lengthy and comprehensive, leaving no doubt that TVAddons and all related tools and services are now dead, with Lackman unable to do anything remotely similar in the future.

"THIS COURT ORDERS the Defendant Mr. Lackman to pay the Plaintiffs the amount of twenty-five million dollars ($25,000,000) in the form of a lump sum for damages, profits, punitive and exemplary damages, and costs," Justice Rochester writes. The judgment is in Canadian dollars but for reference, that's currently around US$19.5 million. The judgment also authorizes the bailiffs and independent supervising solicitor (with the assistance of computer forensics experts) to transfer the evidence obtained during the search of June 2017 to the media companies. Exactly what data was seized is currently unclear but it is likely to be sensitive, particularly if the trove includes user data and/or information about Kodi add-on developers. Finally, it appears the media companies will also be taking control of "login credentials, accounts, domains, subdomains and servers" in order to bring this years-long battle to a conclusion. Adam Lackman announced his relief on Twitter, noting that "It wasn't the outcome I had hoped for, but an outcome nonetheless."

An anonymous reader quotes a report from the New York Times: Three men pleaded guilty on Wednesday in a plot to attack power grids in the United States, which they believed could lead to economic and civil unrest and create the opportunity for white leaders to rise, federal prosecutors said. The men, Christopher Brenner Cook, 20, of Columbus, Ohio; Jonathan Allen Frost, 24, of West Lafayette, Ind., and of Katy, Texas; and Jackson Matthew Sawall, 22, of Oshkosh, Wis., each pleaded guilty in U.S. District Court in Columbus on Wednesday to one count of conspiring to provide material support to terrorists. They will each face up to 15 years in prison when they are sentenced. A date has not been scheduled.

In fall 2019, Mr. Frost and Mr. Cook met in an online chat group, and they began talking about the possibility of attacking a power grid, according to plea agreements. Within weeks, the two men began making efforts to recruit others and began sharing reading material that promoted white supremacy and neo-Nazism. By late 2019, Mr. Sawall, a friend of Mr. Cook's, also joined the efforts, prosecutors said. As part of their plot, each man focused on substations in different regions of the country, and how to attack the power grids with rifles, according to court documents. The three men discussed that by knocking out power across the country for an extended period, civil unrest would spread, a race war could break out and the next Great Depression could be induced, according to court documents.

In February 2020, the three men met in Columbus for more talks about their plot, according to court documents. When they met, Mr. Frost gave Mr. Cook an AR-47, and the two men trained with the rifle at a shooting range, according to court documents. Mr. Frost also gave Mr. Cook and Mr. Sawall suicide necklaces that he had filled with fentanyl, which were to be ingested if they were caught by the police, according to court documents. While they were in Columbus, Mr. Sawall and Mr. Cook bought spray paint and used it to write the phrase "Join the Front" on a swastika flag under a bridge at a park, according to court documents. The men had more plans to spread propaganda while they were in Ohio until they encountered the police during a traffic stop, during which Mr. Sawall ingested his suicide necklace but survived, according to a plea agreement. The F.B.I. searched the homes of the three men in August 2020. Agents found multiple firearms, chemicals that could have been used to create an explosive device, and Nazi-related books and videos, according to court documents. Samuel Shamansky, a lawyer for Mr. Frost, said on Wednesday that Mr. Frost had "accepted complete responsibility for his reprehensible conduct."

"He has completely disavowed the racist viewpoints previously embraced," Mr. Shamansky said. "Regrettably, Mr. Frost fell prey to the misinformation espoused on the internet and now recognizes how dangerous the medium can be. Moreover, Mr. Frost has committed himself toward rehabilitation and doing everything within his power to remedy his misdeeds."

An anonymous reader quotes a report from TechCrunch: Waymo, the autonomous driving arm of Alphabet, was granted a win on Tuesday when a California court ruled it could keep certain details regarding its AV technology secret. The company filed a lawsuit against the California Department of Motor Vehicles in late January in order to keep some information about its autonomous vehicle deployment permit, as well as emails between the DMV and the company, redacted from a public record request, which was originally filed by an undisclosed third party. The ruling by the California Superior Court, Sacramento could set a precedent for broader trade secret protection, at least in the autonomous vehicle industry, involving public access to information that has to do with public safety, but which businesses claim contain trade secrets.

In its lawsuit, Waymo argued being forced to reveal trade secrets would undermine its investments into automated driving technology and have a "chilling effect across the industry" where the DMV is no longer a safe space for companies to transparently share information about their tech. "We're pleased that the court reached the right decision in granting Waymo's request for a preliminary injunction, precluding the disclosure of competitively-sensitive trade secrets that Waymo had included in the permit application it submitted to the CA DMV," a Waymo spokesperson told TechCrunch. "We will continue to openly share safety and other data on our autonomous driving technology and operations, while recognizing that detailed technical information we share with regulators is not always appropriate for sharing with the public." [...] "These R&D efforts take many years and an enormous financial investment," reads Waymo's declaration shared with the court. "Waymo's AV development began as part of Google in 2009 before Waymo became its own company in 2016; therefore, Waymo's AVs have been in development for more than 12 years. Waymo has invested truly significant amounts researching and developing its AV products." It is difficult, however, to determine whether or not the information actually contains trade secrets without being able to see any of it.

"The question is, can the company derive economic value purely from not sharing that information with others?" Matthew Wansley, former general counsel of nuTonomy (which Aptiv acquired) and a law professor at Yeshiva University's Cardozo School of Law in New York, told TechCrunch. [...] "I looked through the complaint that Waymo filed, and the categories of information they're talking about are pretty broad," said Wansley. "Are there trade secrets in that set of information that they sent? Probably, there are some. Does it include all of the information they sent? Almost certainly not. The only thing that would surprise me is if everything they're claiming is a trade secret is actually a trade secret. But without knowing the specific information that they share with regulators, it's just hard to know." And now the public will never know. In an effort to assuage any fears about its technology, the report notes that Waymo "has submitted a safety self-assessment to the U.S. Department of Transportation, and is publishing a law enforcement interaction guide and a detailed description of its safety methodologies."

An anonymous reader quotes a report from TechCrunch, written by security editor Zack Whittaker: Consumer-grade spyware is often sold under the guise of child monitoring software, but also goes by the term "stalkerware" for its ability to track and monitor other people or spouses without their consent. Stalkerware apps are installed surreptitiously by someone with physical access to a person's phone and are hidden from home screens, but will silently and continually upload call records, text messages, photos, browsing history, precise location data and call recordings from the phone without the owner's knowledge. Many of these spyware apps are built for Android, since it's easier to plant a malicious app than on iPhones, which have tighter restrictions on what kind of apps can be installed and what data can be accessed. Last October, TechCrunch revealed a consumer-grade spyware security issue that's putting the private phone data, messages and locations of hundreds of thousands of people, including Americans, at risk. But in this case it's not just one spyware app exposing people's phone data. It's an entire fleet of Android spyware apps that share the same security vulnerability.

On the front line of the operation is a collection of white-label Android spyware apps that continuously collect the contents of a person's phone, each with custom branding, and fronted by identical websites with U.S. corporate personas that offer cover by obfuscating links to its true operator. Behind the apps is a server infrastructure controlled by the operator, which is known to TechCrunch as a Vietnam-based company called 1Byte. TechCrunch found nine nearly identical spyware apps that presented with distinctly different branding, some with more obscure names than others: Copy9, MxSpy, TheTruthSpy, iSpyoo, SecondClone, TheSpyApp, ExactSpy, FoneTracker and GuestSpy. Other than their names, the spyware apps have practically identical features under the hood, and even the same user interface for setting up the spyware. Once installed, each app allows the person who planted the spyware access to a web dashboard for viewing the victim's phone data in real time -- their messages, contacts, location, photos and more. Much like the apps, each dashboard is a clone of the same web software. And, when TechCrunch analyzed the apps' network traffic, we found the apps all contact the same server infrastructure. But because the nine apps share the same code, web dashboards and the same infrastructure, they also share the same vulnerability.

The vulnerability in question is known as an insecure direct object reference, or IDOR, a class of bug that exposes files or data on a server because of sub-par, or no, security controls in place. It's similar to needing a key to unlock your mailbox, but that key can also unlock every other mailbox in your neighborhood. IDORs are one of the most common kinds of vulnerability [...]. But shoddy coding didn't just expose the private phone data of ordinary people. The entire spyware infrastructure is riddled with bugs that reveal more details about the operation itself. It's how we came to learn that data on some 400,000 devices -- though perhaps more -- have been compromised by the operation. Shoddy coding also led to the exposure of personal information about its affiliates who bring in new paying customers, information that they presumably expected to be private; even the operators themselves. After emailing 1Byte with details of the security vulnerability, the email address was shut down along with "at least two of the branded spyware apps," according to TechCrunch. "That leaves us here. Without a fix, or intervention from the web host, TechCrunch cannot disclose more about the security vulnerability -- even if it's the result of bad actors themselves -- because of the risk it poses to the hundreds of thousands of people whose phones have been unknowingly compromised by this spyware."

In a separate report, security editor Zack Whittaker explains how one can remove common consumer-grade spyware.

An anonymous reader quotes a report from Krebs on Security: Missouri Governor Mike Parson made headlines last year when he vowed to criminally prosecute a journalist for reporting a security flaw in a state website that exposed personal information of more than 100,000 teachers. But Missouri prosecutors now say they will not pursue charges following revelations that the data had been exposed since 2011 -- two years after responsibility for securing the state's IT systems was centralized within Parson's own Office of Administration. [...]

On Monday, Feb. 21, The Post-Dispatch published the 158-page report (PDF), which concluded after 175 hours of investigation that [St. Louis Post-Dispatch reporter Josh Renaud] did nothing wrong and only accessed information that was publicly available. Emails later obtained by the Post-Dispatch showed that the FBI told state cybersecurity officials that there was "not an actual network intrusion" and the state database was "misconfigured." The emails also revealed the proposed message when education department leaders initially prepared to respond in October: "We are grateful to the member of the media who brought this to the state's attention," was the proposed quote attributed to the state's education commissioner before Parson began shooting the messenger.

The Missouri Highway Patrol report includes an interview with Mallory McGowin, the chief communications officer for the state's Department of Elementary and Secondary Education (DESE). McGowin told police the website weakness actually exposed 576,000 teacher Social Security numbers, and the data would have been publicly exposed for a decade. McGowin also said the DESE's website was developed and maintained by the Office of Administration's Information Technology Services Division (ITSD) -- which the governor's office controls directly. "I asked Mrs. McGowin if I was correct in saying the website was for DESE but it was maintained by ITSD, and she indicated that was correct," the Highway Patrol investigator wrote. "I asked her if the ITSD was within the Office of Administration, or if DESE had their on-information technology section, and she indicated it was within the Office of Administration. She stated in 2009, policy was changed to move all information technology services to the Office of Administration." The report was a vindication for Renaud and for University of Missouri-St. Louis professor Shaji Khan, who helped the Post-Dispatch verify that the security flaw existed. Khan was also a target of Parson's vow to prosecute "the hackers." Khan's attorney Elad Gross told the publication his client was not being charged, and that "state officials committed all of the wrongdoing here."

"They failed to follow basic security procedures for years, failed to protect teachers' Social Security numbers, and failed to take responsibility, instead choosing to instigate a baseless investigation into two Missourians who did the right thing and reported the problem," Gross told The Post-Dispatch. "We thank the Missouri State Highway Patrol and the Cole County Prosecutor's Office for their diligent work on a case that never should have been sent to them."

Microsoft MVP Rudy Ooms has discovered that the built-in Windows data wiping functions leave user data behind in the latest versions of Windows 10 and Windows 11. "This error applies to both local and remote wiping of PCs running Windows 10 version 21H2 and Windows 11 version 21H2," reports Tom's Hardware. From the report: Ooms first discovered that there were problems with the disk wipe functionality provided by Microsoft when doing a remote wipe via Microsoft Intune system management. However, he has tested several Windows versions and both local and remote wiping over the weekend to compile the following summary table [embedded in the article]. At the bottom of the table you can see that both Wipe and Fresh Start options appear to work as expected in Windows 10 and 11 version 21H1, but are ineffectual in versions 21H2. Ooms installed and tested these four OSes, with local and remote wipe operations, then checked the results. The most common issue was the leaving behind of user data in a folder called Windows.old on the "wiped" or "fresh start" disk. This is despite Microsoft warning users ahead of the action that "This removes all personal and company data and settings from this device."

In his blog post, Oooms notes that some users might feel assured that their personal data was always stored on a Bitlocker drive. However, when a device is wiped, Bitlocker is removed, and he discovered that the Windows.old folder contained previously encrypted data, now non-encrypted. It was also noted that OneDrive files, which had been marked as "Always Keep on this device" in Windows previously, remained in Windows.old too. Ooms has kindly put together a PowerShell Script to fix this security blunder by Microsoft. One needs to run the script ahead of wiping/resetting your old device. Hopefully Microsoft will step up and fix this faulty behavior in the coming weeks, so you don't need to remember to run third party scripts.

An anonymous reader quotes a report from FedScoop: The Internal Revenue Service has committed to Login.gov as a user authentication tool after earlier this month agreeing to abandon the use of a commercial tool that featured third-party facial recognition technology. In a statement on Monday, the Treasury Department said it is working with the General Services Administration to achieve the "security standards and scale" required to adopt the platform.

It comes after IRS earlier this month announced a plan to move away from using a third-party service for facial recognition to authenticate taxpayers creating new online accounts. It was forced to reject the technology following revelations that contractor ID.me uses powerful one-to-many facial recognition technology. "While this short-term solution is in place for this year's filing season, the IRS will work closely with partners across government to roll out login.gov as an authentication tool," IRS said.

While Login.gov is not expected to be ready in time for use by taxpayers during the current tax season, users are now able to sign up for IRS online accounts without the use of any biometric data. Any previously collected biometric data will also be deleted over the next few weeks, according to IRS. Despite the move to Login.gov, taxpayers will still have the option to verify their identity automatically through ID.me's tool if they choose. New requirements are in place to ensure images provided are deleted for the account being created. The IRS said in a statement: "Taxpayers will have the option of verifying their identity during a live, virtual interview with agents; no biometric data -- including facial recognition -- will be required if taxpayers choose to authenticate their identity through a virtual interview."

The Zoom call had about 40 people on it -- or that's what the people who had logged on thought. The all-staff meeting at Madbird, a "glamorous design agency" had been called to welcome the growing company's newest recruits. Its dynamic and inspirational boss, Ali Ayad, wanted everyone on the call to be ambitious hustlers -- just like him. But what those who had turned on their cameras didn't know was that some of the others in the meeting weren't real people. They were listed as participants, and as the BBC reports, some even had active email accounts and LinkedIn profiles but their names were made up and their headshots belonged to other people. The whole thing was fake -- the real employees had been "jobfished." From the report: The company had not been "shipping products and experiences locally and globally for 10 years" as it had claimed. In fact, Ali Ayad only registered Madbird with Companies House on the same day he interviewed Chris Doocey to be a sales manager - 23 September 2020. At least six of the most senior employees profiled by Madbird were fake. Their identities stitched together using photos stolen from random corners of the internet and made-up names. They included Madbird's co-founder, Dave Stanfield -- despite him having a LinkedIn profile and Ali referring to him constantly. Some of the duped staff had even received emails from him. Ali told one employee that if they wanted to get in touch with Mr Stanfield they should email him, because he was too busy with projects for Nike to jump on a call. Using facial recognition technology we were able to match Dave Stanfield's headshot to its actual owner -- a Prague-based beehive maker named Michal Kalis. When we tracked Michal down, he confirmed he had never heard of Madbird, Ali Ayad or Dave Stanfield.

A "massive leak" by a whistleblower revealed the secret details of bank accounts linked to more than 30,000 Credit Suisse clients around the world, reports the Guardian.

They note that Credit Suisse is one of the world's largest private banks, as well as Switzerland's second-biggest lender, with 50,000 employees — and yet the leaked information "points to widespread failures of due diligence by Credit Suisse, despite repeated pledges over decades to weed out dubious clients and illicit funds," including "clients involved in torture, drug trafficking, money laundering, corruption and other serious crimes."

The accounts are worth more than $108 billion USD (that's 100 billion Swiss Francs or £80 billion)... The Guardian is part of a consortium of media outlets given exclusive access to the data. We can reveal how Credit Suisse repeatedly either opened or maintained bank accounts for a panoramic array of high-risk clients across the world. They include a human trafficker in the Philippines, a Hong Kong stock exchange boss jailed for bribery, a billionaire who ordered the murder of his Lebanese pop star girlfriend and executives who looted Venezuela's state oil company, as well as corrupt politicians from Egypt to Ukraine.

One Vatican-owned account in the data was used to spend €350m (£290m) in an allegedly fraudulent investment in London property that is at the centre of an ongoing criminal trial of several defendants, including a cardinal....

This month, Credit Suisse became the first major Swiss bank in the country's history to face criminal charges — which it denies — relating to allegation it helped launder money from the cocaine trade on behalf of the Bulgarian mafia. However, the repercussions of the leak could be much broader than one bank, threatening a crisis for Switzerland, which retains one of the world's most secretive banking laws... Over the past three decades, Credit Suisse has faced at least a dozen penalties and sanctions for offences involving tax evasion, money laundering, the deliberate violation of US sanctions and frauds carried out against its own customers that span multiple decades and jurisdictions. In total, it has racked up more than $4.2bn in fines or settlements. That includes the $2.6bn the Swiss bank agreed to pay US authorities after pleading guilty to conspiring to aid tax evasion in 2014; the $536m it was fined by the US five years before for deliberately circumventing US sanctions against countries including Iran and Sudan in 2009, and other payouts to Germany and Italy over tax evasion allegations.

Jeff Neiman, a Florida-based attorney who represents a number of Credit Suisse whistleblowers, believes the sheer number of scandals involving the bank indicates a deeper problem. "The bank likes to say it's just rogue bankers. But how many rogue bankers do you need to have before you start having a rogue bank?" he said. Neiman alleges there has been a culture at the bank "which encourages its bankers probably from the top down to hear no evil, see no evil, speak no evil, bury their heads in the sand on a good day, and on many days, actively assist folks to skirt whatever the law may be in order to best protect assets under management...."

The debate over whether Switzerland's banking industry has undergone sufficient reforms is likely to be renewed in light of the leak.
"Nearly 50 media organisations have spent months poring over the data," reports the BBC: But the Swiss bank rejected the allegations in a statement on Sunday, saying it strongly rejected the allegations and insinuations about the bank's alleged business practices or lack of due diligence carried out. "The matters presented are predominantly historical, in some cases dating back as far as the 1940s, and the accounts of these matters are based on partial, inaccurate, or selective information taken out of context", it said.... "Approximately 90% of the reviewed accounts are today closed or were in the process of closure prior to receipt of the press inquiries, of which over 60% were closed before 2015," it said, although it would not comment on specific clients mentioned....

In a statement published by German newspaper Süddeutsche Zeitung, the anonymous source explained their motivation for leaking the records more than a year ago. "I believe that Swiss banking secrecy laws are immoral. The pretext of protecting financial privacy is merely a fig leaf covering the shameful role of Swiss banks as collaborators of tax evaders," they wrote....

It follows other scandals for the Swiss bank, including the departure of two of its top executives after allegedly breaking Covid regulations and spying on former staff.

UnknowingFool writes: In November 2021, Roblox sued YouTuber, Benjamin Simon aka "Ruben Sim" for $1.6M accusing him of griefing: harassment of users, harassment of employees, and disrupting the October 2021 Roblox Developers Conference by posting a false bomb threat. Ruben Sim has settled the suit with actions including: paying $150,000, staying off the platform [for several years], staying away from all Roblox facilities, and taking down all his YouTube videos regarding Roblox [if they make false statements, encourage violence, or glamorize Roblox rule-breaking].

tThe Washington Post reports: Clearview AI is telling investors it is on track to have 100 billion facial photos in its database within a year, enough to ensure "almost everyone in the world will be identifiable," according to a financial presentation from December obtained by The Washington Post.

Those images — equivalent to 14 photos for each of the 7 billion people on Earth — would help power a surveillance system that has been used for arrests and criminal investigations by thousands of law enforcement and government agencies around the world. And the company wants to expand beyond scanning faces for the police, saying in the presentation that it could monitor "gig economy" workers and is researching a number of new technologies that could identify someone based on how they walk, detect their location from a photo or scan their fingerprints from afar.

The 55-page "pitch deck," the contents of which have not been reported previously, reveals surprising details about how the company, whose work already is controversial, is positioning itself for a major expansion, funded in large part by government contracts and the taxpayers the system would be used to monitor. The document was made for fundraising purposes, and it is unclear how realistic its goals might be. The company said that its "index of faces" has grown from 3 billion images to more than 10 billion since early 2020 and that its data collection system now ingests 1.5 billion images a month.

With $50 million from investors, the company said, it could bulk up its data collection powers to 100 billion photos, build new products, expand its international sales team and pay more toward lobbying government policymakers to "develop favorable regulation."
The article notes that major tech companies like Amazon, Google, IBM and Microsoft have all limited or ended their own sales of facial recognition technology — adding that Clearview's presentation simple describes this as a major business opportunity for themselves.

In addition, the Post reports Clearview's presentation brags "that its product is even more comprehensive than systems in use in China, because its 'facial database' is connected to 'public source metadata' and 'social linkage' information."

An anonymous reader quotes a report from CNET: The delayed 5G BlackBerry phone is dead, OnwardMobility has confirmed on its website. "It is with great sadness that we announce that OnwardMobility will be shutting down, and we will no longer be proceeding with the development of an ultra-secure smartphone with a physical keyboard," OnwardMobility said in a message posted Friday, as spotted earlier by CrackBerry. "Please know that this was not a decision that we made lightly or in haste. We share your disappointment in this news and assure you this is not the outcome we worked and hoped for." Android Police and CrackBerry originally reported the phone had been cancelled on Feb. 11, saying OnwardMobility, a Texas-based startup seeking to revitalize the iconic brand through an Android-based, next-gen Wi-Fi device, lost the license from BlackBerry Ltd. to use the BlackBerry brand name. OnwardMobility did not expand on why it is shutting down and cancelling production of the phone. The news comes after BlackBerry ended service for its legacy devices in early January. "Before OnwardMobility picked up the license, Chinese manufacturer TCL was the most recent maker of BlackBerry-branded phones," adds CNET.

Most recently, the company sold its prized patent portfolio to "Catapult IP Innovations Inc." for $600 million.

Microsoft last month received a US patent covering modifications to a data-encoding technique called rANS, one of several variants in the Asymmetric Numeral System (ANS) family that support data compression schemes used by leading technology companies and open source projects. The Register reports: The creator of ANS, Jaroslaw Duda, assistant professor at Institute of Computer Science at Jagiellonian University in Poland, has been trying for years to keep ANS patent-free and available for public use. Back in 2018, Duda's lobbying helped convince Google to abandon its ANS-related patent claim in the US and Europe. And he raised the alarm last year when he learned Microsoft had applied for an rANS (range asymmetric number system) patent.

Now that Microsoft's patent application has been granted, he fears the utility of ANS will be diminished, as software developers try to steer clear of a potential infringement claim. "I don't know what to do with it -- [Microsoft's patent] looks like just the description of the standard algorithm," he told The Register in an email. The algorithm is used in JPEG XL and CRAM, as well as open source projects run by Facebook (Meta), Nvidia, and others. "This rANS variant is [for example] used in JPEG XL, which is practically finished (frozen bitstream) and [is] gaining support," Duda told The Register last year. "It provides ~3x better compression than JPEG at similar computational cost, compatibility with JPEG, progressive decoding, missing features like HDR, alpha, lossless, animations. "There is a large team, mostly from Google, behind it. After nearly 30 years, it should finally replace the 1992 JPEG for photos and images, starting with Chrome, Android."

With people more wary than ever about clicking on suspicious links in emails and text messages, zero-click hacks are being used more frequently by government agencies to spy on activists, journalists and others, according to more than a dozen surveillance company employees, security researchers and hackers interviewed by Bloomberg News. From a report: Once the preserve of a few intelligence agencies, the technology needed for zero-click hacks is now being sold to governments by a small number of companies, the most prominent of which is Israel's NSO Group. Bloomberg News has learned that at least three other Israeli companies -- Paragon, Candiru and Cognyte Software -- have developed zero-click hacking tools or offered them to clients, according to former employees and partners of those companies, demonstrating that the technology is becoming more widespread in the surveillance industry.

There are certain steps that a potential victim can take that might reduce the chances of a successful zero-click attack, including keeping a device updated. But some of the more effective methods -- including uninstalling certain messaging apps that hackers can use as gateways to breach a device -- aren't practical because people rely on them for communication, said Bill Marczak, a senior research fellow at Citizen Lab, a research group at the University of Toronto that focuses on abuses of surveillance technology.

Federal investigators spent years hunting for clues in the 2016 hacking of the Bitfinex cryptocurrency exchange, when thieves stole bitcoin now worth $4.5 billion. In the end, what helped lead them to two suspects was something much more quotidian: a $500 Walmart gift card. From a report: That card and more than a dozen others like it, including for Uber, Hotels.com and PlayStation, were linked to emails and cloud service providers belonging to a young Manhattan couple, Ilya "Dutch" Lichtenstein and Heather R. Morgan, according to a criminal complaint. Authorities arrested the couple after seizing $3.6 billion worth of bitcoin allegedly in their control -- the Justice Department's largest financial seizure ever. New details have since emerged about the investigation, in particular how it took advantage of not only advanced forensic tools but also the growing push to rein in crypto crime, including by the industry itself. The discoveries would have been less likely to happen around the time of the hack, when bitcoin was far outside the mainstream of the financial world.