U.S. lawmakers are introducing "Right to Repair" legislation this week to ensure consumers can get vehicles, electronic devices and agriculture equipment serviced by independent outlets. Reuters reports: Representative Bobby Rush, a Democrat, said Thursday he had introduced legislation to ensure vehicle owners and independent repair shops have equal access to repair and maintenance tools as automakers' dealerships. Representatives Mondaire Jones, a Democrat, and Republican Victoria Spartz introduced separate legislation Wednesday dubbed the Freedom to Repair Act to reform copyright law to make it easier for consumers to get repairs. Public Knowledge Policy Counsel Kathleen Burke said the bill would allow "consumers to repair their own devices without needing to get the Copyright Office's permission every three years."

Rush's bill would require all tools and equipment, wireless transmission of repair and diagnostic data and access to on-board diagnostic systems needed for repairs be made available to the independent repair industry. Rush said it would "end manufacturers' monopoly on vehicle repair and maintenance and allow Americans the freedom to choose where to repair their vehicles." Rush's bill would create a committee to provide recommendations to the FTC on addressing barriers to vehicle repairs. Yesterday, Sen. Jon Tester (D-Mont.) introduced a bill to allow farmers to fix their own equipment. Specifically, the bill "would require agriculture equipment manufacturers to make spare parts, instruction manuals and software codes publicly available, allowing farmers to fix devices by themselves or hire third-party mechanics of their own choosing," reports NBC News.

To make it harder for stalkers to abuse them, Apple included (and has since upgraded) several safety features that will alert someone to the presence of a nearby AirTag that's not their own, including an audible beep. But according to PCMag, one Etsy seller was, up until very recently, selling AirTags with the speaker physically disabled, raising privacy concerns once again. From a report: The AirTag, a small, easy-to-carry device about the size of a quarter, relies on Apple's Find My network which leverages millions of Apple devices to discreetly keep tabs on the location of the trackers and report that information back to each tag's registered user. The general idea behind the AirTag was that users could attach one to their keys, their backpack, or to other valuable items, and be able to quickly locate them if lost. To prevent their misuse, such as using an AirTag to track someone without their knowledge, iOS users would be eventually notified if a tracker registered to someone else was nearby, while Android users would have to rely on an audible beep that would start chirping three days after an AirTag was separated from its owner.

The product was ripe for abuse -- a concern we emphasized in our initial review of the AirTags -- and a couple of months after their debut Apple addressed those concerns with promised updates that would see Android users getting similar notifications as iOS users when an AirTag was nearby through a new Tracker Detect app that allowed Android users to more easily spot the devices. And the timeframe for when the trackers would start beeping after being away from its registered owner was shortened to a "random time inside a window that lasts between 8 and 24 hours," according to a CNET report.

After a years-long process, data protection officials across the European Union have ruled that Europe's ad tech industry has been operating unlawfully. Engadget reports: The decision, handed down by Belgium's APD (.PDF) and agreed by regulators across the EU, found that the system underpinning the industry violated a number of principles of the General Data Protection Regulations (GDPR). The Irish Council for Civil Liberties has declared victory in its protracted battle against the authority which administers much of the advertising industry on the continent: IAB Europe. At the heart of this story is the use of the Transparency and Consent Framework (TCF), a standardized process to enable publishers to sell ad-space on their websites. This framework, set by IAB Europe, is meant to provide legal cover -- in the form of those consent pop-ups which blight websites -- enabling a silent, digital auction system known-as Real-Time Bidding (RTB). But both the nature of the consent given when you click a pop-up, and the data collected as part of the RTB process have now been deemed to violate the GDPR, which governs privacy rights in the bloc.

The APD has ruled that any and all data collected as part of this Real-Time Bidding process must now be deleted. This could have fairly substantial implications for many big tech companies with their own ad businesses, including Google and Facebook, as well as big data companies. It may also have a large impact on many media platforms and publishers on the continent who will now need to address the fallout from the finding. Regulators have also handed down an initial fine of 250,000 euros to IAB Europe and ordered the body to effectively rebuild the ad-tech framework it currently uses. This includes making the system GDPR compliant (if such a thing is possible) and appoint a dedicated Data Protection Officer. Until now, IAB Europe has maintained that it did not create any personal data, and said in December that it was a standards setter and trade association, rather than a data processor in its own right. IAB Europe says the ruling did not ban the use of Transparency and Consent Frameworks, adding that it's looking to reform the process and "submit the Framework for approval as a GDPR transnational Code of Conduct."

According to Engadget, [I]t may launch a legal challenge to fight the accusation that it is a data controller, a decision it says will "have major unintended negative consequences going well beyond the digital advertising industry."

An anonymous reader quotes a report from The Guardian: The FBI has confirmed that it obtained NSO Group's powerful Pegasus spyware, suggesting that it bought access to the Israeli surveillance tool to "stay abreast of emerging technologies and tradecraft." In a statement released to the Guardian, the bureau said it had procured a "limited license" to access Pegasus for "product testing and evaluation only," and suggested that its evaluation of the tool partly related to security concerns if the spyware fell into the "wrong hands." The bureau also claimed it had never used Pegasus in support of any FBI investigation. "There was no operational use in support of any investigation, the FBI procured a limited license for product testing and evaluation only," it said.

The statement marks a direct acknowledgment by the FBI that it acquired Pegasus, one of the world's most sophisticated hacking tools. [...] A person with close knowledge of the FBI deal, who spoke to the Guardian on the condition of anonymity, claimed that it occurred after a "long process" of negotiations between US officials and NSO. It is claimed one disagreement centered on how much control NSO would retain over its software. The source claimed that NSO usually kept sensors on its technology so that the company could be alerted in Israel if the technology was moved by a government client. But the source claimed the FBI did not want the technology to be fitted with sensors that would have allowed NSO to track its physical location.

The source also claimed that the FBI did not want NSO's own engineers to install the technology and did not want to integrate the spyware into its own systems. Ultimately, it is understood that NSO and the FBI agreed to keep the technology in a large container. The FBI was also concerned about possible "leakage" of any data to another foreign intelligence service, the source said. The source claimed the Pegasus license was acquired by the FBI using a financial "vehicle" that was not easily identified as being linked to the bureau. In the end, the source claimed, the FBI did not actually use Pegasus. "They weren't using it at all. Like, not even switching it on. But they kept paying for it, and they wanted to renew. It was a one-year test project and it cost about $5 million, and they renewed for another $4 million," the source claimed. "But they didn't use it." In response to the claims, the FBI said: "The FBI works diligently to stay abreast of emerging technologies and tradecraft -- not just to explore a potential legal use but also to combat crime and to protect both the American people and our civil liberties. That means we routinely identify, evaluate, and test technical solutions and problems for a variety of reasons, including possible operational and security concerns they might pose in the wrong hands. There was no operational use in support of any investigation, the FBI procured a limited license for product testing and evaluation only."

An anonymous reader quotes a report from NBC News: A bill introduced Tuesday in the Senate could help make it easier for farmers [...] to repair their tractors independently. The legislation would require agriculture equipment manufacturers to make spare parts, instruction manuals and software codes publicly available, allowing farmers to fix devices by themselves or hire third-party mechanics of their own choosing. The bill's sponsor, Sen. Jon Tester, D-Mont., said in an interview that he has heard from many farmers who reported that difficulties repairing equipment hurt their businesses. "We've got to figure out ways to empower farmers to make sure they can stay on the land. This is one of the ways to do it," Tester said. "I think that the more we can empower farmers to be able to control their own destiny, which is what this bill does, the safer food chains are going to be."

Tester said farmers often reported that company-authorized repairs were costly and could be handled only by licensed technicians who may take days, or even weeks, to show up. That type of delay can have serious impacts on the delicate harvest cycle for planting and reaping crops. [...] The rules about farming equipment could help boost the wider "right to repair" movement, which has gained steam across the country in recent years. Consumer rights groups like U.S. PIRG, a federation of nonprofit public interest research groups, or PIRGs, say people have a fundamental right to control devices they already own, especially when they need to be fixed. Over the last few decades, they say, companies have made third-party repairs nearly impossible by locking software, writing prohibitive warranties or restricting spare parts.

The Senate bill is the latest effort to tackle the issue in Congress, following similar legislation sponsored in the House last year by Rep. Joseph Morelle, D-N.Y. But unlike some of the other proposed laws, the Senate bill narrowly targets farmers, who have become one of the most vocal groups advocating for more repair regulations. Tester said: "I think when you get into other areas like cellphones and TVs and all that kind of stuff, it brings in all sorts of other issues that I am personally not as familiar with as agriculture. That's not to say that those other issues aren't really, really important. What it is to say is that I know this issue reasonably well, and I thought this is an issue that we need to deal with, and the sooner the better."

A whistleblower has alleged that an executive at NSO Group offered a US-based mobile security company "bags of cash" in exchange for access to a global signalling network used to track individuals through their mobile phone, according to a complaint that was made to the US Department of Justice. The Guardian: The allegation, which dates back to 2017 and was made by a former mobile security executive named Gary Miller, was disclosed to federal authorities and to the US congressman Ted Lieu, who said he conducted his own due diligence on the claim and found it "highly disturbing." Details of the allegation by Miller were then sent in a letter by Lieu to the Department of Justice. "The privacy implications to Americans and national security implications to America of NSO Group accessing mobile operator signalling networks are vast and alarming," Lieu wrote in his letter. The letter was shared with the Guardian and other media partners on the Pegasus project, a media consortium led by the Paris-based Forbidden Stories that has investigated NSO and published a series of stories about how governments around the world have used the company's spyware to target activists, journalists, and lawyers, among others.

Mozilla is rolling out new updates to its mobile and desktop VPN offerings, the company announced on Tuesday. From a report: With the launch of Mozilla VPN 2.7, the company is bringing one of Firefox's popular add-ons, Multi-Account Containers, to the desktop platform and also introducing a multi-hop feature to the Android and iOS version of the VPN service. Firefox's Multi-Account Containers allow users to separate different parts of their online activities, such as work, shopping and banking. Instead of having to open a new window or different browser to check your work email, you can isolate that activity in a container tab, which prevents other sites from tracking your activity across the web. The company says combining the add-on with Mozilla's VPN adds an extra layer of protection to users' compartmentalized browsing activity and also adds extra protection to their locational information.

How to analyse data without revealing their secrets? From a report: Data are valuable. But not all of them are as valuable as they could be. Reasons of confidentiality mean that many medical, financial, educational and other personal records, from the analysis of which much public good could be derived, are in practice unavailable. A lot of commercial data are similarly sequestered. For example, firms have more granular and timely information on the economy than governments can obtain from surveys. But such intelligence would be useful to rivals. If companies could be certain it would remain secret, they might be more willing to make it available to officialdom. A range of novel data-processing techniques might make such sharing possible. These so-called privacy-enhancing technologies (PETs) are still in the early stages of development. But they are about to get a boost from a project launched by the United Nations' statistics division. The UN PETs Lab, which opened for business officially on January 25th, enables national statistics offices, academic researchers and companies to collaborate to carry out projects which will test various PETs, permitting technical and administrative hiccups to be identified and overcome.

The first such effort, which actually began last summer, before the PETs Lab's formal inauguration, analysed import and export data from national statistical offices in America, Britain, Canada, Italy and the Netherlands, to look for anomalies. Those could be a result of fraud, of faulty record keeping or of innocuous re-exporting. For the pilot scheme, the researchers used categories already in the public domain -- in this case international trade in things such as wood pulp and clocks. They thus hoped to show that the system would work, before applying it to information where confidentiality matters. They put several kinds of PETs through their paces. In one trial, OpenMined, a charity based in Oxford, tested a technique called secure multiparty computation (SMPC). This approach involves the data to be analysed being encrypted by their keeper and staying on the premises. The organisation running the analysis (in this case OpenMined) sends its algorithm to the keeper, who runs it on the encrypted data. That is mathematically complex, but possible. The findings are then sent back to the original inquirer.

Earlier this month, a German court fined an unidentified website $110 for violating EU privacy law by importing a Google-hosted web font. The Register reports: The decision, by Landgericht Munchen's third civil chamber in Munich, found that the website, by including Google-Fonts-hosted font on its pages, passed the unidentified plaintiff's IP address to Google without authorization and without a legitimate reason for doing so. And that violates Europe's General Data Protection Regulation (GDPR). That is to say, when the plaintiff visited the website, the page made the user's browser fetch a font from Google Fonts to use for some text, and this disclosed the netizen's IP address to the US internet giant. This kind of hot-linking is normal with Google Fonts; the issue here is that the visitor apparently didn't give permission for their IP address to be shared. The website could have avoided this drama by self-hosting the font, if possible.

The decision says IP addresses represent personal data because it's theoretically possible to identify the person associated with an IP address, and that it's irrelevant whether the website or Google has actually done so. The ruling directs the website to stop providing IP addresses to Google and threatens the site operator with a fine of 250,000 euros for each violation, or up to six months in prison, for continued improper use of Google Fonts. Google Fonts is widely deployed -- the Google Fonts API is used by about 50m websites. The API allows websites to style text with Google Fonts stored on remote servers -- Google's or a CDN's -- that get fetched as the page loads. Google Fonts can be self-hosted to avoid running afoul of EU rules and the ruling explicitly cites this possibility to assert that relying on Google-hosted Google Fonts is not defensible under the law.

A Charlotte, North Carolina man has pleaded guilty to charges of mail fraud after stealing and reselling merchandise from an Amazon warehouse, the Department of Justice said in a news release. The Verge reports: Between June 2020 and September 2021, Douglas Wright, Jr., an operations manager at Amazon's Charlotte warehouse, allegedly stole products with a total value of more than $273,000, using his access to get computer parts like internal hard drives and processors, according to the DOJ. Wright said in court on Friday that he shipped the products to his home, then sold them to a computer wholesale company in California. He faces a maximum sentence of 20 years in prison and a $250,000 fine. A sentencing date has not been set.

An anonymous reader quotes a report from Ars Technica: BlackBerry is adding another sad chapter to the downfall of its smartphone business. Today the company announced a sale of its prized patent portfolio for $600 million. The buyer is "Catapult IP Innovations Inc.," a new company BlackBerry describes as "a special purpose vehicle formed to acquire the BlackBerry patent assets." BlackBerry says the patents are for "mobile devices, messaging and wireless networking." These are going to be the patents surrounding BlackBerry's phones, QWERTY keyboards, and BlackBerry Messenger (BBM). BlackBerry most recently weaponized these patents against Facebook Messenger in 2018, which covered ideas like muting a message thread and displaying notifications as a numeric icon badge. BlackBerry -- back when it was called RIM -- was a veteran of the original smartphone patent wars, though, and went after companies like Handspring and Good Technology in the early 2000s.

If the name "Catapult IP Innovations" didn't give it away, weaponizing BlackBerry's patents is the most obvious outcome of this deal. According to the press release, Catapult's funding for the $600 million deal is just a $450 million loan, which will immediately be given to BlackBerry in cash. The remaining $150 million is a promissory note with the first payment due in three years. That means Catapult is now a new company with a huge amount of debt, no products, and no cash flow. Assuming the plan isn't to instantly go bankrupt, Catapult needs to start monetizing BlackBerry's patents somehow, which presumably means suing everyone it believes is in violation of its newly acquired assets.

As a new government website went live in January to offer free Covid-19 test kits, a rash of new domain names were registered. Some had remarkably similar URLs, or were nearly the same but slightly misspelled. From a report: Cybersecurity experts said the goal was likely the same for all of them: bogus domain names that can be used for phishing attacks and other scams. Suspected fraudsters have registered more than 600 suspicious domain registrations since Jan. 15, around the time Biden administration announced details about a program in which the U.S. Postal Service would deliver Covid-19 tests to Americans' homes, email security firm Proofpoint told Bloomberg News. The look-alike URLs are often meant to trick Covid-weary Americans into thinking they are signing up for a free nasal swab, when in fact they might be handing personal data over to a cybercrime syndicate, cybersecurity experts said. The government website for free Covid tests, covidtests.gov, opened for business on Jan. 18, along with a related site, special.usps.com, where users are directed to place an order with the Postal Service.

Ohio promised Intel roughly $2 billion in tax breaks and incentives to attract its $20 billion chip-making factory to the state, according to the Associated Press. The state's development director tells them it may be the biggest economic development deal in history.

Intel's hoping it creates a powerful new technology hub in the Midwest, while also eventually addressing an ongoing chip shortage, according to the article. Unfortunately, the factory's production isn't expected to come online until 2025, though "The complex could grow much larger and more quickly, Intel executives said, if Congress approves a $52 billion bill that would invest in the chip sector and help ensure more production in the U.S." Intel CEO Patrick Gelsinger said the total Ohio investment could top $100 billion over the decade, with six additional factories, making it one of the world's biggest chipmaking sites....

Ohio's offer includes $600 million to help Intel offset the cost of building the factories, which is more expensive than it would be in Asia, said Lydia Mihalik, the state's development director. The state also will pay nearly $700 million for roadwork and water infrastructure upgrades, including a system that will allow the plant to reuse wastewater. The state Legislature this summer approved a 30-year tax break that will allow Intel to save $650 million.

The state's share will be money well spent because the Intel facility will not only create jobs, but also make Ohio more attractive to industries such as auto, aviation and defense that rely on chips, Mihalik said. "These investments will not only ensure that this project is successful here, but will also be supporting the region by increasing local infrastructure to support future growth," Mihalik said.
The article also cites the Semiconductor Industry Association's estimate that America's share of the world's chip manufacturing has declined from 37% in 1990 to 12% today.

America's Internal Revenue Service created an uproar with early plans to require live-video-feed selfies to verify identities for online tax services (via an outside company called ID.me).

But Wired points out that more than 20 U.S. federal agencies are already using a digital identification system (named Login.gov and built on services from LexisNexis) that "can use selfies for account verification."

It's run by America's General Services Administration, or GSA.... The GSA's director of technology transformation services Dave Zvenyach says facial recognition is being tested for fairness and accessibility and not yet used when people access government services through Login.gov. The GSA's administrator said last year that 30 million citizens have Login.gov accounts and that it expects the number to grow significantly as more agencies adopt the system.

"ID.me is supplying something many governments ask for and require companies to do," says Elizabeth Goodman, who previously worked on Login.gov and is now senior director of design at federal contractor A1M Solutions. Countries including the UK, New Zealand, and Denmark use similar processes to ID.me's to establish digital identities used to access government services. Many international security standards are broadly in line with those of the U.S., written by the National Institute of Standards and Technology (NIST).

Goodman says that such programs need to provide offline options such as visiting a post office for people unable or unwilling to use phone apps or internet services....
In fact, Wired argues that in many cases, a selfie or biometric data is virtually required by U.S. federal security guidelines from 2017: NIST's 2017 standard says that access to systems that can leak sensitive data or harm public programs should require verifying a person's identity by comparing them to a photo — either remotely or in person — or using biometrics such as a fingerprint scanner. It says that a remote check can be done either by video with a trained agent, or using software that checks for an ID's authenticity and the "liveness" of a person's photo or video.... California's Employment Development Department said that ID.me blocked more than 350,000 fraudulent claims in the last three months of 2020. But the state auditor said an estimated 20 percent of legitimate claimants were unable to verify their identities with ID.me.

Caitlin Seeley George, director of campaigns and operations with nonprofit Fight for the Future, says ID.me uses the specter of fraud to sell technology that locks out vulnerable people and creates a stockpile of highly sensitive data that itself will be targeted by criminals. ...

"Intel will have to defend itself against claims that the semiconductor goliath knew its microprocessors were defective and failed to tell customers," reports the Register: On Wednesday, Judge Michael Simon, of the US District Court of Oregon, partially denied the tech giant's motion to dismiss a class-action lawsuit arising from the 2018 public disclosure of Meltdown and Spectre, the family of data-leaking chip microarchitecture design blunders....

To defend against Meltdown and Spectre, Intel and other affected vendors have had to add software and hardware mitigations that for some workloads make patched processors mildly to significantly slower. The disclosure of related flaws has continued since that time, as researchers develop variations on the initial attacks and find other parts of chips that similarly expose privileged data. It is a problem that still is not entirely solved...

[L]awsuits have been consolidated into a multi-district proceeding known as "Intel Corp. CPU Marketing, Sales Practices and Products Liability Litigation" (3:18-md-02828-SI). And since 2018, Intel has been trying to get them to go away. Twice before the judge had dismissed the plaintiffs' complaint while allowing the plaintiffs to amend and refile their allegations. This third time, the judge only partially granted Intel's motion to toss the case. Judge Simon dismissed claims based on purchases up through August 2017 because Intel was unaware of the microarchitecture vulnerabilities up to that point. But he allowed seven claims, from September 2017 onward, to proceed, finding the plaintiffs' contention that Intel delayed disclosure of the flaws to maximize holiday season sales plausible enough to allow the case to move forward.

"Based on plaintiffs' allegations, it is not clear that Intel had a countervailing business interest other than profit for delaying disclosure for as long as it did (through the holiday season), for downplaying the negative effects of the mitigation, for suppressing the effects of the mitigation, and for continuing to embargo further security exploits that affect only Intel processors," the judge wrote in his order. [PDF]

Slashdot reader reader Danngggg has been keeping us up-to-date about the case of Marty Gottesfeld, the Anonymous hacktivist initially prosecuted by the same U.S. attorney who prosecuted Aaron Swartz into suicide: Anonymous hacktivist Marty Gottesfeld was first covered by Slashdot in 2016, when he was rescued by at sea by a Disney cruise liner and then arrested by the FBI.... He's been practicing journalism from inside the Bureau of Prisons, most recently highlighting sexual abuse....

Marty's home for the last three years [has been] the "Communications Management Unit" at FCI Terre Haute, in Terre Haute, Indiana. The CMU was created in 9/11 era to hold terrorists.... In August prison officials told him that he was being recommended to "step down" out of the CMU. But this week he was transferred to the other CMU in Marion, Illinois.

They are keeping him in indefinite solitary confinement without cause or explanation; Sunday marked the beginning of month five.

One of these two CMUs is likely where the U.S. will place Assange if extradited.

Moving halfway across America, from Colorado to New York, Austin and Valerie McNulty had a bad experience after hiring a moving company that subcontracted the work to another moving company.

But they'd also included an Apple AirTag in one of their boxes, Newsweek reports: A moving guy reportedly told Austin that he "just picked up the stuff" and would take another day or two. Due to the AirTag, the couple knew the moving guy was not in Colorado but was just less than five hours away in Harrisburg, Pennsylvania. As for the family's possessions, which were supposed to be inventoried and in a safe location, GPS tracking showed that neither action allegedly occurred. "It turns out [the items] just stayed overnight in a sketchy part of New Jersey," Austin told Newsweek.

According to Austin, that same driver who allegedly lied about his whereabouts told Austin in a phone call that he went to see "his lady" and that was part of the delay....

"I think we would have been waiting a lot longer for our home goods to arrive [if we didn't have the AirTag]," Valerie said.... "I would say that AirTags are fairly inexpensive and it's an easy way to hold the third parties accountable."
"When we brought up the fact that we knew his exact location he hung up on us," Valerie McNulty said in a Facebook post (which has been shared more than 4,600 times) — although the driver did eventually call back a few minutes later and the items were delivered the next day.

ABC News reports that the driver "was put on probation" according to his moving company — which also added that it "plans to use AirTags for tracking their drivers in the future."

Valerie McNulty argued to ABC News that "I was never tracking the driver, that was never my intention. I was tracking my belongings." Yet the Washington Post notes the story "comes amid a robust debate about the small plastic-and-metal disks, which launched last spring: Are they creepy or helpful? The trackers have been found on expensive cars, presumably so they could be stolen. But they can also be attached to commonly lost valuables, like keys, to make finding them easier."

Apple Insider reports a Pennsylvania state legislator is even proposing legislation making it a crime to track someone else's location or belongings without their consent, adding that if passed in Pennsylvania the law would "create a precedent for other states to follow suit if passed."

ZDNet quotes a remark from the Director of Cyber-Security at the Electronic Frontier Foundation to the BBC, calling Apple's AirTags "a perfect tool for stalking." But ZDNet columnist Chris Matyszczyk adds "That's the problem with technology, isn't it? For every potential good use, there are at least several pain-inducing, criminal-pleasing, world-ending uses. Too often, the bad outweighs the good, especially in the public eyes and ears. Here, though, is a tale of a woman who's glad she used an AirTag for her own surveillance purposes....

This whole tale makes me wonder, though, what we've come to and where we're going.... If our default is that we can trust no one and fear everyone, how can we ever really get along?

America's Department of Defense "wants to clean up space...at least the increasingly polluted region in low Earth orbit, where thousands of bits of debris, spent rocket stages and dead satellites whiz uncontrollably," writes the Washington Post.

They're reporting that America's Space Force has now launched a program to give companies seed money to develop space-cleaning technology to eventually demo in space (starting with awards of $250,000 that rise as high as $1.5 million). The name of the program: Orbital Prime. The issue also has gotten the attention of the White House. Its Office of Science and Technology Policy recently held a meeting asking for input from space industry leaders about what to do about the problem. Speaker after speaker said that governments around the world need to fund these efforts to help create a market for companies to operate. They also said that it had become an imperative for the governments largely responsible for the problem in the first place. "If the U.S. Navy had had a derelict ship sitting in sovereign waters, creating a safety hazard, the U.S. Navy would go out and grab that ship," said Doug Loverro, a former top Pentagon and NASA space official. "And I'm not sure why we don't see the same responsibility for government for their derelict ships and their derelict bodies that are in space today."

Or as James Lowenthal, a professor of astronomy at Smith College in Michigan, put it: "Just as we rely on the government to protect the air we breathe and the water we drink, we have to rely on the government to protect the resource and the global commons of low Earth orbit."

Europe and Britain have also begun to work toward cleaning up debris — a move that's long overdue, space industry experts say. ClearSpace, a Swiss company, has a contract with the European Space Agency to remove a large piece of debris — a symbol that the issue is finally being addressed. It proposes using a spacecraft with large arms that would grapple the debris like a Venus' flytrap. "This is why we're here. Because we think change is possible," said Luc Piguet, ClearSpace's co-founder and CEO. "And we think we can build a space industry that operates with a different model, where maintenance is just a normal part of it."
"This debris and associated congestion threaten the longer sustainability of the space domain," said Space Force's vice chief of space operations, in a video advertising the seed-money program, adding that America's Department of Defense tracks 40,000 objects in orbit the size of a fist or larger, with at least 10 times as many smaller objects the Pentagon can't reliably track.

The nation of Chile "is in the midst of governmental changes," writes the Free Software Foundation, "and with these changes comes the opportunity for the people of Chile to make their voices heard for long-term benefits to their digital rights and freedoms.

"Chilean activists have submitted three constitutional proposals relating to free software and user freedom, but they need signatures in order to have these proposals submitted to the constitutional debate."

FSF community member Felix Freeman writes: Chile is living a historic moment. For the first time, it is drafting a constitution with constituents elected democratically, on a participatory basis, and with the participation of native peoples. 154 people are in charge of drafting the new fundamental charter of the country, and they have arranged a mechanism of popular participation based on the collection of support: 15,000 signatures are required to submit citizen proposals to the constitutional debate directly.

The opportunity to achieve substantive and long-term change for digital rights and freedom of software and other intellectual works is unique in Chile's history, and may not be repeated in our lifetime. This is why four communities historically related to the use and dissemination of free software in Chile got together to draft three of these proposals, which are:

- Access to knowledge
- Technological and digital sovereignty
- Internet privacy

These constitutional proposals explain principles of the nation, the rights of citizens, and the duties of the state concerning them. The inclusion of the constitutional articles will allow and promote the creation of laws that defend our freedoms and rights effectively. They are not the end of the road for intellectual freedoms and digital rights, but only the beginning....

People of any nationality can support us by spreading the word all over the Internet.

[A Spanish-language version is available HERE.]

Last week America's Internal Revenue Service announced a live-video-feed verification of taxpayer's faces would be required by this summer access online tax service. But now the Washington Post reports that "complaints of confusing instructions and long wait times to complete the sign-up have caused an unknown number to abandon the process in frustration."

"The $86 million ID.me contract with the IRS also has alarmed researchers and privacy advocates who say they worry about how Americans' facial images and personal data will be safeguarded in the years to come." There is no federal law regulating how the data can be used or shared. While the IRS couldn't say what percentage of taxpayers use the agency's website, internal data show it is one of the federal government's most-viewed websites, with more than 1.9 billion visits last year. The partnership with ID.me has drawn anger from some members of Congress, including Sen. Ron Wyden (D-Ore.), who tweeted that he was "very disturbed" by the plan and would push the IRS for "greater transparency." Rep. Ted Lieu (D-Calif.) called it "a very, very bad idea by the IRS" that would "further weaken Americans' privacy." The Senate Finance Committee is working to schedule briefings with the IRS and ID.me on the issue, a committee aide said.... "No one should be forced to submit to facial recognition as a condition of accessing essential government services," Wyden said in a separate statement. "I'm continuing to seek more information about ID.me and other identity verification systems being used by federal agencies."

A Treasury official said Friday that the department was "looking into" alternatives to ID.me, saying Treasury and the IRS always are interested in improving "taxpayers experience...."

About 70 million Americans who have filed for unemployment insurance, pandemic assistance grants, child tax credit payments or other services already have been scanned by the McLean, Va.-based company, which says its client list includes 540 companies; 30 states, including California, Florida, New York and Texas; and 10 federal agencies, including Social Security, Labor and Veterans Affairs.... Equifax, the credit-reporting company that previously confirmed taxpayers' data for the IRS, had its $7 million contract suspended in 2017 after hackers exposed the personal information of 148 million people...

[ID.me] says 9 of 10 applicants can verify their identity through a self-service face scan in five minutes or less. Anyone who hits a snag is funneled into the backup video-chat verification process...But some who have tried to verify their identities through ID.me for other purposes have reported agonizing delays: cryptic glitches in Colorado, website errors in Arizona, five-hour waits in North Carolina, days-long waits in California and weeks-long benefit delays in New York. The security blogger Brian Krebs wrote last week that he faced a three-hour wait trying to confirm his IRS account, three months before the tax-filing deadline.... The company said it intends to expand its workforce beyond the 966 agents who now handle video-chat verification for the entire country. It has also opened hundreds of in-person identity-verification centers — replicating, in essence, what government offices have done for decades.
The article also points out that advertising is also a key part of ID.me's operation, with people signing up through their web site asked if they want to subscribe to "offers and discounts" — though the company stresses people do have to opt in. And in addition, the article adds, "If a person is using ID.me to confirm their identity with a government agency, the company will not use that verification information for 'marketing or promotional purposes,' the company's privacy policy says."

But a senior counsel at the Electronic Privacy Information Center complained to the Post that "We haven't even gone the step of putting regulations in place and deciding if facial recognition should even be used like this. We're just skipping right to the use of a technology that has clearly been shown to be dangerous and has issues with accuracy, disproportionate impact, privacy and civil liberties."

A spokesperson for the U.S. Treasury Department also told Bloomberg News "that any taxpayer who does not want to use ID.me can opt against filing his or her taxes online." "We believe in the importance of protecting the privacy of taxpayers, while also ensuring criminals are not able to gain access to taxpayer accounts," LaManna added, arguing that it's been "impossible" for the IRS to develop its own cutting-edge identification program because of "the lack of funding for IRS modernization."