An anonymous reader quotes a report from Motherboard: A newly obtained document written by the FBI lays out in unusually granular detail how it and other law enforcement agencies can obtain location information of phones from telecommunication companies. Ryan Shapiro, executive director of nonprofit organization Property of the People, shared the document with Motherboard after obtaining it through a public record act request. Property of the People focuses on obtaining and publishing government records. The document, a 139 page slide presentation dated 2019, is written by the FBI's Cellular Analysis Survey Team (CAST). CAST supports the FBI as well as state, local, and tribal law enforcement investigations through the analysis of call data and tower information, the presentation adds. That can include obtaining the data from telecommunications companies in the first place; analyzing tower dumps that can show which phones were in an approximate location at a given time; providing expert witness testimony; and performing drive tests to verify the actual coverage of a cell tower.

"When necessary, CAST will utilize industry standard survey gear drive test equipment to determine the true geographical coverage breadth of a cell site sector," the presentation reads. The presentation highlights the legal process required to obtain information from a telecommunications company, such as a court order or search warrant. The LinkedIn profile of one CAST member Motherboard found says they have a "special emphasis in historical cell site analysis which is typically used for locating phones (and the individuals attached to those phones) for cases such as kidnappings, homicides, missing persons, and robberies." CAST provides its own cell phone data visualization tool to law enforcement officials around the country called CASTViz for free. "CASTViz has the ability to quickly plot call detail records and tower data for lead generation and investigative purposes," the presentation reads. The document includes images of and instructions for the CASTViz software itself.

The document also explains how data requests from Mobile Virtual Network Operators (MVNOs) such as Boost Mobile are handled, explains how to obtain location data from what the FBI describes as "burner phones," and how to obtain information from OnStar, General Motors' in-vehicle system. The document also provides the cost of some of this data for law enforcement to request. The presentation provides more recent figures on how long telecoms retain data for. AT&T holds onto data such as call records, cell site, and tower dumps for 7 years. T-Mobile holds similar information for 2 years, and Verizon holds it for 1 year. The slide also shows that AT&T retains "cloud storage internet/web browsing" data for 1 year. Another section that provides an overview of the different engineering and location datasets held by telecoms and potentially available to law enforcement agencies tells officials to use some AT&T data "cautiously." "AT&T does not validate results," the presentation reads. That section also mentioned that Verizon has a "new" location tool that law enforcement agencies can use. Rich Young, a Verizon spokesperson, told Motherboard in an email that "This is a tool that our security team uses in response to lawful warrants and emergency requests. For example, this tool would be used in response to cases involving armed fugitives or missing children. As a common industry practice, the tool uses network-based cell site location information. All other major providers use a similar approach."

The New York Times describes a six-year grass roots effort to fund historic preservation and natural resource conservation in Montana — and how it collided with Rae Grulkowski, a 56-year-old businesswoman who had never before been involved in politics, and her very influential Facebook group: Ms. Grulkowski had just heard about a years-in-the-making effort to designate her corner of central Montana a national heritage area, celebrating its role in the story of the American West. A small pot of federal matching money was there for the taking, to help draw more visitors and preserve underfunded local tourist attractions.

Ms. Grulkowski set about blowing up that effort with everything she had.

She collected addresses from a list of voters and spent $1,300 sending a packet denouncing the proposed heritage area to 1,498 farmers and ranchers. She told them the designation would forbid landowners to build sheds, drill wells or use fertilizers and pesticides. It would alter water rights, give tourists access to private property, create a new taxation district and prohibit new septic systems and burials on private land, she said.

None of this was true.

Yet it soon became accepted as truth by enough people to persuade Montana's leading Republican figures and conservative organizations, including the farm bureau, Gov. Greg Gianforte and Senator Steve Daines, to oppose the proposal and enact a state law forbidding the federal government to create any heritage area in Montana.

It is a ban that the state has no authority to enforce.
Some comments on the episode (via the New York Times):

• Ellen Sievert, retired historic preservation officer for Cascade County:
  "We've run into the uneducable. I don't know how we get through that."

• Bob Kelly, the mayor of Great Falls:
  "Misinformation is the new playbook. You don't like something? Create alternative facts and figures as a way to undermine reality." (In fact, it's now become an issue in the mayor's race.)

The episode was especially distressing for Richard Ecke, who spent 38 years at the town's local newspaper until being laid off in 2016 — and is also vice chairman of the proposed heritage area's board. The Times reports that "In the paper's place, information and misinformation about the heritage area spread on Facebook and in local outlets that parroted Ms. Grulkowski."

And meanwhile, "Ms. Grulkowski now has ambitions beyond Montana. She wants to push Congress not to renew heritage areas that already exist." [There are 55 of them, in 34 different states.]

Finally the Times interviewed Ed Bandel, who'd led the Montana Farm Bureau's opposition to the Montana heritage area. When asked for his supporting evidence, "Mr. Bandel said he trusted Ms. Grulkowski."

And when asked about the argument that it in fact posed no threat to property rights, Bandel remained unconvinced. "They say, 'Don't worry, we're going to do it right. Don't worry, we'll take care of you. I think Adolf Hitler said that, too, didn't he...?"

Tech billionaire Peter Thiel "believes that people should be more worried about 'surveillance AI' rather than artificial general intelligences," reports CNBC: The venture capitalist, who co-founded big data firm Palantir, said at an event in Miami on Wednesday that on the path to AGI, you get surveillance AI, which he described as a "communist totalitarian technology." Those that are worried about AGI aren't actually "paying attention to the thing that really matters," Thiel said, adding that governments will use AI-powered facial recognition technology to control people.

His comments come three years after Bloomberg reported that "Palantir knows everything about you." Thiel has also invested in facial recognition company Clearview AI and surveillance start-up Anduril. Palantir, which has a market value of $48 billion, has developed data trawling technology that intelligence agencies and governments use for surveillance and to spot suspicious patterns in public and private databases. Customers reportedly include the CIA, FBI, and the U.S. Army....

Thiel, a well-known libertarian who also co-founded PayPal and holds a board seat at Facebook, said Silicon Valley isn't talking about AGI as much today as it was six or seven years ago... In the same talk, Thiel pitted AI against cryptocurrencies, saying that he'd prefer to see the latter one succeed. "If we say crypto is libertarian and that it is fundamentally a force for decentralization, then I think we should also be willing to say that AI, especially in the low-tech surveillance form, is essentially communist."

"If you want to frame it as a technological race ... I want the crypto decentralized world to work," he said.

America's Federal Bureau of Investigation "refrained for almost three weeks from helping to unlock the computers of hundreds of businesses and institutions hobbled by a major ransomware attack this summer," reports the Washington Post, "even though the bureau had secretly obtained the digital key needed to do so, according to several current and former U.S. officials." The key was obtained through access to the servers of the Russia-based criminal gang behind the July attack. Deploying it immediately could have helped the victims, including schools and hospitals, avoid what analysts estimate was millions of dollars in recovery costs. But the FBI held on to the key, with the agreement of other agencies, in part because it was planning to carry out an operation to disrupt the hackers, a group known as REvil, and the bureau did not want to tip them off. Also, a government assessment found the harm was not as severe as initially feared.

The planned takedown never occurred because in mid-July REvil's platform went offline — without U.S. government intervention — and the hackers disappeared before the FBI had a chance to execute its plan, according to the current and former officials... The FBI finally shared the key with Kaseya, the IT company whose software was infected with malware, on July 21 — 19 days after it was hit. Kaseya asked New Zealand-based security firm Emsisoft to create a fresh decryption tool, which Kaseya released the following day. By then, it was too late for some victims...

On Tuesday, FBI Director Christopher A. Wray, testifying before Congress, indicated the delay stemmed in part from working jointly with allies and other agencies. "We make the decisions as a group, not unilaterally," he said, noting that he had to constrain his remarks because the investigation was ongoing... He also suggested that "testing and validating" the decryption key contributed to the delay. "There's a lot of engineering that's required to develop a tool" that can be used by victims, he said at a Senate Homeland Security Committee hearing.

Emsisoft, however, was able to act quickly. It extracted the key from what the FBI provided Kaseya, created a new decryptor and tested it — all within 10 minutes, according to Fabian Wosar, Emsisoft chief technology officer. The process was speedy because the firm was familiar with REvil's ransomware. "If we had to go from scratch," Wosar said, "it would have taken about four hours."

"Facebook has filed a lawsuit on Friday against a Ukrainian national for allegedly scraping its website and selling the personal data of more than 178 million users on an underground cybercrime forum," reports the Record. According to court documents filed Friday, the man was identified as Alexander Alexandrovich Solonchenko, a resident of Kirovograd, Ukraine. Facebook alleges that Solonchenko abused a feature part of the Facebook Messenger service called Contact Importer. The feature allowed users to synchronize their phone address books and see which contacts had a Facebook account in order to allow users to reach out to their friends via Facebook Messenger. Between January 2018 and September 2019, Facebook said that Solonchenko used an automated tool to pose as Android devices in order to feed Facebook servers with millions of random phone numbers. As Facebook servers returned information for which phone numbers had an account on the site, Solonchenko collected the data, which he later collected and offered for sale on December 1, 2020, in a post on RaidForums, a notorious cybercrime forum and marketplace for stolen data.
The article also notes that Facebook's court documents say Solonchenko scraped data from some of the largest companies in the Ukraine, including its largest commercial bank and largest private delivery service.

And the Record points out that he's not the only person known to have this hole to scrape Facebook's user data and then sell it on the forum.) Days after another incident in April involving 533 leaked phone numbers of Facebook user, Facebook "revealed that it retired the Messenger Contact Importer feature back in September 2019 after it discovered Solonchenko and other threat actors abusing it."

Big data "has big designs on a big cloud," reports NBC News: A steady drumbeat from some of the most influential executives in the technology industry has emerged in recent months to push the idea that the U.S. government should invest in a "national research cloud" — a hub for U.S. research into artificial intelligence where researchers from academia and smaller tech companies could share data sets and other resources.

It's an idea that has been backed by a government commission led by ex-Google CEO Eric Schmidt and including executives from Amazon, Microsoft and Oracle, which recommended that the Biden administration create a hub for U.S. research into artificial intelligence. The White House has warmed up to the idea, ordering another report on it due next year with an eye toward competing with China on the development of artificial intelligence. "We should be able to stay ahead of China. We estimated that we are one to two years ahead of China, broadly speaking, in this area. I hope that's true," Schmidt said in an interview with NBC News. "Investments that are targeted in research — new algorithms — should be able to keep us ahead," he said.

The stakes could be enormous. Some experts in artificial intelligence believe it has the potential to transform the economy — automating some jobs, while creating new ones — and the potential military applications have spurred investment by the Pentagon.

But this month, the idea began getting fresh pushback. Research groups including New York University's AI Now Institute and Data & Society, a nonprofit technology research group based in New York, say the very tech companies pushing this idea stand to profit from it, because the national hub would likely be housed in the same companies' commercial cloud computing services. They say that's a conflict, and little more than a cash grab by what's effectively the next generation of military contractors. The plan also could entrench the very same tech companies that President Joe Biden's antitrust enforcers are working to rein in, these critics say.

76-year-old John Gilmore co-founded the EFF in 1990, and in the 31 years since he's "provided leadership and guidance on many of the most important digital rights issues we advocate for today," the EFF said in a statement Friday.

"But in recent years, we have not seen eye-to-eye on how to best communicate and work together," they add, announcing "we have been unable to agree on a way forward with Gilmore in a governance role." That is why the EFF Board of Directors has recently made the difficult decision to vote to remove Gilmore from the Board.

We are deeply grateful for the many years Gilmore gave to EFF as a leader and advocate, and the Board has elected him to the role of Board Member Emeritus moving forward. "I am so proud of the impact that EFF has had in retaining and expanding individual rights and freedoms as the world has adapted to major technological changes," Gilmore said. "My departure will leave a strong board and an even stronger staff who care deeply about these issues."

John Gilmore co-founded EFF in 1990 alongside John Perry Barlow, Steve Wozniak and Mitch Kapor, and provided significant financial support critical to the organization's survival and growth over many years. Since then, Gilmore has worked closely with EFF's staff, board, and lawyers on privacy, free speech, security, encryption, and more. In the 1990s, Gilmore found the government documents that confirmed the First Amendment problem with the government's export controls over encryption, and helped initiate the filing of Bernstein v DOJ, which resulted in a court ruling that software source code was speech protected by the First Amendment and the government's regulations preventing its publication were unconstitutional. The decision made it legal in 1999 for web browsers, websites, and software like PGP and Signal to use the encryption of their choice.

Gilmore also led EFF's effort to design and build the DES Cracker, which was regarded as a fundamental breakthrough in how we evaluate computer security and the public policies that control its use. At the time, the 1970s Data Encryption Standard (DES) was embedded in ATM machines and banking networks, as well as in popular software around the world. U.S. government officials proclaimed that DES was secure, while secretly being able to wiretap it themselves. The EFF DES Cracker publicly showed that DES was in fact so weak that it could be broken in one week with an investment of less than $350,000. This catalyzed the international creation and adoption of the much stronger Advanced Encryption Standard (AES), now widely used to secure information worldwide....

EFF has always valued and appreciated Gilmore's opinions, even when we disagree. It is no overstatement to say that EFF would not exist without him. We look forward to continuing to benefit from his institutional knowledge and guidance in his new role of Board Member Emeritus.
Gilmore also created the alt* hierarchy on Usenet, co-founded the Cypherpunks mailing list, and was one of the founders of Cygnus Solutions (according to his page on Wikipedia).

He's also apparently Slashdot user #35,813 (though he hasn't posted a comment since 2004).

"License plate readers are rapidly reshaping private security in American neighborhoods," reports the Washington Post, as aggressively-marketed $2,500-a-year "safety-as-a-service" packages "spread to cover practically everywhere anyone chooses to live in the United States" and "bringing police surveillance tools to the masses with an automated watchdog that records 24 hours a day." Flock Safety, the industry leader, says its systems have been installed in 1,400 cities across 40 states and now capture data from more than a billion cars and trucks every month. "This is not just for million-dollar homes," Flock's founder, Garrett Langley, said. "This is America at its core..."

Its solar-powered, motion-sensing camera can snap a dozen photos of a single plate in less than a second — even in the dark, in the rain, of a car driving 100 mph up to 75 feet away, as Flock's marketing materials say. Piped into a neighborhood's private Flock database, the photos are made available for the homeowners to search, filter or peruse. Machine-learning software categorizes each vehicle based on two dozen attributes, including its color, make and model; what state its plates came from; and whether it had bumper stickers or a roof rack. Each "vehicle fingerprint" is pinpointed on a map and tracked by how often it had been spotted in the past month. The plates are also run against law enforcement watch lists for abducted children, stolen cars, missing people and wanted fugitives; if there's a match, the system alerts the nearest police force with details on how to track it down...

Flock's customer base has roughly quadrupled since 2019, with police agencies and homeowners associations in more than 1,400 cities today, and the company has hired sales representatives in 30 states to court customers with promises of a safer, more-monitored life. Company officials have also attended town hall meetings and papered homeowners associations with glossy marketing materials declaring its system "the most user-friendly, least invasive way for communities to stop crime": a network of cameras "that see like a detective," "protect home values" and "automate [the] neighborhood watch ... while you sleep." Along the way, the Atlanta-based company has become an unlikely darling of American tech. The company said in July it had raised $150 million from prominent venture capital firms such as Andreessen Horowitz, which said Flock was pursuing "a massive opportunity in shaping the future...."

Flock deletes the footage every 30 days by default and encourages customers to search only when investigating crime. But the company otherwise lets customers set their own rules: In some neighborhoods, all the homeowners can access the images for themselves...

Camera opponents didn't want the neighborhood's leaders to anoint themselves gatekeepers, choosing who does and doesn't belong. And they worried that if someone's car was broken into, but no one knew exactly when, the system could lead to hundreds of drivers, virtually all of them innocent, coming under suspicion for the crime. They also worried about the consequences of the cameras getting it wrong. In San Francisco, police had handcuffed a woman at gunpoint in 2009 after a camera garbled her plate number; another family was similarly detained last year because a thief had swiped their tag before committing a crime. And last year in Aurora, 30 miles from Paradise Hills, police handcuffed a mother and her children at gunpoint after a license plate reader flagged their SUV as stolen. The actual stolen vehicle, a motorcycle, had the same plate number from another state. Police officials have said racial profiling did not play a role, though the drivers in all three cases were Black. (The license plate readers in these cases were not Flock devices, and the company said its systems would have shown more accurate results...)

The Paradise Hills opponents were right to be skeptical about a local crime wave. According to Jefferson County sheriff's records shared with The Post, the only crime reports written up since September 2020 included two damaged mailboxes, a fraudulent unemployment claim and some stuff stolen out of three parked cars, two of which had been left unlocked. "I wouldn't exactly say it's a hot spot," patrol commander Dan Aten told The Post...

The cameras clicked on in August, a board member said. In the weeks since, the neighborhood hasn't seen any reports of crime. The local sheriff's office said it hasn't used the Flock data to crack any cases, nor has it found the need to ask.
Flock's founder, Garrett Langley, nonetheless tells the Washington Post, "There are 17,000 cities in America.

"Until we have them all, we're not done."

"The BBC is reporting that Facebook has been fined a record £50 million by the UK's Competition and Markets Authority," writes long-time Slashdot reader Hope Thelps, "for deliberately failing to provide required information" (pertaining to Facebook's 2020 acquisition of Gif-sharing service Giphy).

The BBC reports: The £50m fine the CMA handed Facebook is more than 150 times higher than the previous record handed down for similar offences, at £325,000.

Speaking about its decision to fine the social media giant, the CMA said in a statement: "This is the first time a company has been found by the CMA to have breached an [order] by consciously refusing to report all the required information."

Giphy is widely used by Facebook's competitors to power animated Gif images used in social media apps, on mobile keyboards, and elsewhere online. That led to potential competition concerns. The CMA issued something called an "initial enforcement order", which limits how companies that are merging, but under investigation, operate. It is designed to keep the entities semi-separate and in competition with each other until the investigation is over. Facebook is obliged to provide updates and information to make clear how it is complying with the order.

"Given the multiple warnings it gave Facebook, the CMA considers that Facebook's failure to comply was deliberate," the CMA said.

That "fundamentally undermined its ability to prevent, monitor and put right any issues".

The fine for that offence is £50m. Separately, the CMA announced a £500,000 fine for Facebook changing its chief compliance officer — twice — "without seeking consent first".

Suppliers to Chinese telecoms giant Huawei and China's top chipmaker SMIC got billions of dollars worth of licenses from November through April to sell them goods and technology despite their being on a U.S. trade blacklist, documents released by Congress showed on Thursday. Reuters reports: According to the documents, first obtained by Reuters, 113 export licenses worth $61 billion were approved for suppliers to ship products to Huawei while another 188 licenses valued at nearly $42 billion were greenlighted for Semiconductor Manufacturing International Corp (SMIC). The data also showed that more than 9 out of 10 license applications were granted to SMIC suppliers while 69% of requests to ship to Huawei were approved over the same period.

[T]he Commerce Department said that the release of an "arbitrary snapshot" of license approvals "risks politicizing the licensing process and misrepresenting the national security determinations" made by the government. It also stressed that approved license applications do not represent actual shipments and around half of all licenses are used. It added that license applications involving Huawei and SMIC are processed under policies developed by the Trump administration and maintained by the Biden administration.

A former senior Commerce Department official in the Trump administration who declined to be named echoed the agency's view. "This very small period of license activity is not an accurate window into the Huawei and SMIC license process," he said, noting that the goal of preventing the companies from obtaining leading edge technology without unnecessarily harming U.S. exports of other goods had been successful. "This [document release] seems designed to mislead people and generate headlines," he added.

According to a survey from Reviews.org, Amazon's Alexa collects more data from users than any of the other digital assistants analyzed, which included the Google Assistant, Siri, Bixby, and Cortana. PCMag reports: All five services collect your name, phone number, device location, and IP address; the names and numbers of your contacts; your interaction history; and the apps you use. If you don't like that information being stored, you probably shouldn't use a voice assistant. In the survey, 60% of respondents were concerned about someone listening to their voice recordings, which is a real fear, since Google and Apple have both been caught doing just that. While Google Assistant and Siri now need your permission to record your interactions, the other options record you by default.

Which option is the most invasive? Analysis by Reviews.org found that Alexa collects 37 of the 48 possible data points, the most data out of any other. Samsung's Bixby collected 34 points of data, and Cortana collects 32 data points. Meanwhile, Siri collects just 30, and Google's smart assistant takes only 28, making them the least invasive. While 76% of Americans report that they use smart assistants, 61% are concerned that these programs and devices are always listening to them in the background. And people have had a hard time alleviating those fearsâ"only 45% of users have tried to disable their smart assistant, with 38% reporting they couldn't figure out how.

An anonymous reader shares a report: Over the last few years the justified fixation on the bad behavior of Google, Amazon, Facebook and other Silicon Valley giants has let the abuses of the telecom sector fly under the radar. But a new FTC report showcases how when it comes to consumer privacy, broadband providers are every bit as terrible as you thought they were. The new FTC report studied the privacy practices of six unnamed broadband ISPs and their advertising arms, and found that the companies routinely collect an ocean of consumer location, browsing, and behavioral data. They then share this data with dodgy middlemen via elaborate business arrangements that often aren't adequately disclosed to broadband consumers.

"Even though several of the ISPs promise not to sell consumers personal data, they allow it to be used, transferred, and monetized by others and hide disclosures about such practices in fine print of their privacy policies," the FTC report said. The FTC also found that while many ISPs provide consumers tools allowing them to opt out of granular data collection, those tools are cumbersome to use -- when they work at all. "Many of the ISPs also claim to offer consumers choices about how their data is used and allow them to access such data," the FTC said. "The FTC found, however, that many of these companies often make it difficult for consumers to exercise such choices and sometimes even nudge them to share even more information." ISPs often provide privacy-specific website portals proclaiming to provide users with a wide variety of opt out options but these choices are often "illusory," the FTC found.

EFF: The Utah Supreme Court is the latest stop in EFF's roving campaign to establish your Fifth Amendment right to refuse to provide your password to law enforcement. Yesterday, along with the ACLU, we filed an amicus brief in State v. Valdez, arguing that the constitutional privilege against self-incrimination prevents the police from forcing suspects to reveal the contents of their minds. That includes revealing a memorized passcode or directly entering the passcode to unlock a device.

In Valdez, the defendant was charged with kidnapping his ex-girlfriend after arranging a meeting under false pretenses. During his arrest, police found a cell phone in Valdez's pocket that they wanted to search for evidence that he set up the meeting, but Valdez refused to tell them the passcode. Unlike many other cases raising these issues, however, the police didn't bother seeking a court order to compel Valdez to reveal his passcode. Instead, during trial, the prosecution offered testimony and argument about his refusal. The defense argued that this violated the defendant's Fifth Amendment right to remain silent, which also prevents the state from commenting on his silence. The court of appeals agreed, and now the state has appealed to the Utah Supreme Court.

An anonymous reader shares a report from Reuters: The ransomware group REvil was itself hacked and forced offline this week by a multi-country operation, according to three private sector cyber experts working with the United States and one former official. Former partners and associates of the Russian-led criminal gang were responsible for a May cyberattack on the Colonial Pipeline that led to widespread gas shortages on the U.S. East Coast. REvil's direct victims include top meatpacker JBS. The crime group's "Happy Blog" website, which had been used to leak victim data and extort companies, is no longer available. Officials said the Colonial attack used encryption software called DarkSide, which was developed by REvil associates.

VMWare head of cybersecurity strategy Tom Kellermann said law enforcement and intelligence personnel stopped the group from victimizing additional companies. "The FBI, in conjunction with Cyber Command, the Secret Service and like-minded countries, have truly engaged in significant disruptive actions against these groups," said Kellermann, an adviser to the U.S. Secret Service on cybercrime investigations. "REvil was top of the list." [...] U.S. government attempts to stop REvil, one of the worst of dozens of ransomware gangs that work with hackers to penetrate and paralyze companies around the world, accelerated after the group compromised U.S. software management company Kaseya in July. That breach opened access to hundreds of Kaseya's customers all at once, leading to numerous emergency cyber incident response calls. Following the attack on Kaseya, the FBI obtained a universal decryption key that allowed those infected via Kaseya to recover their files without paying a ransom. But law enforcement officials initially withheld the key for weeks as it quietly pursued REvil's staff, the FBI later acknowledged. According to three people familiar with the matter, law enforcement and intelligence cyber specialists were able to hack REvil's computer network infrastructure, obtaining control of at least some of their servers.

After websites that the hacker group used to conduct business went offline in July, the main spokesman for the group, who calls himself "Unknown," vanished from the internet. When gang member 0_neday and others restored those websites from a backup last month, he unknowingly restarted some internal systems that were already controlled by law enforcement. "The REvil ransomware gang restored the infrastructure from the backups under the assumption that they had not been compromised," said Oleg Skulkin, deputy head of the forensics lab at the Russian-led security company Group-IB. "Ironically, the gang's own favorite tactic of compromising the backups was turned against them." Reliable backups are one of the most important defenses against ransomware attacks, but they must be kept unconnected from the main networks or they too can be encrypted by extortionists such as REvil.

An anonymous reader quotes a report from CNBC: Responding to a growing controversy over investing practices, the Federal Reserve announced Thursday a wide-ranging ban on officials owning individual stocks and bonds and limits on other activities as well. The ban includes top policymakers such as those who sit on the Federal Open Market Committee, along with senior staff. Future investments will have to be confined to diversified assets such as mutual funds.

Fed officials can no longer have holdings in shares of particular companies, nor can they invest in individual bonds, hold agency securities or derivative contracts. The new rules replace existing regulations that, while somewhat restrictive, still allowed officials such as regional presidents to buy and sell stocks. "These tough new rules raise the bar high in order to assure the public we serve that all of our senior officials maintain a single-minded focus on the public mission of the Federal Reserve," Fed Chairman Jerome Powell said in a statement.

Under the new rules, the officials will have to provide 45 days' notice in advance of buying or selling any securities that are still allowed. They also will be required to hold the securities for at least a year, and they cannot buy or sell funds during "heightened financial market stress," a news release announcing the moves said. "I'm hopeful that swift action will allow us to put this behind us and get us back focused on the job ahead," Atlanta Fed President Raphael Bostic told CNBC during a "Closing Bell" interview.

Sony has been granted a patent that would allow livestream spectators and participants to remove players from a game. "Besides removing unskilled players, the system would allow spectators to pay for the privilege of removing players," reports Kotaku. From the report: In the patent document, Sony outlined a system in which spectators to a livestream can vote to remove a player from an ongoing game. The player would have no veto power over this decision, and they may be reassigned to a different match. The system would display the skill level of the current players and their statistics for the game, such as time played, ratings, and achievements. All of this would take place through "the cloud gaming system," whatever that means.

To avoid audience abuse of this system, a 60% voting threshold needs to be met in order to bench a player from a game. Spectators with a higher skill level will also have their votes counted more heavily in the election. Despite Sony claiming that this system would be beneficial for removing disrespectful "griefers" from matches, the patent also includes the ability for spectators to pay a fixed price or bid for the ability to remove players from a game. The text also mentions a system in which spectators can warn active players to improve their gameplay. Damn.

An anonymous reader quotes a report from Motherboard: Japanese police on Monday arrested a 43-year-old man for using artificial intelligence to effectively unblur pixelated porn videos, in the first criminal case in the country involving the exploitative use of the powerful technology. Masayuki Nakamoto, who runs his own website in the southern prefecture of Hyogo, lifted images of porn stars from Japanese adult videos and doctored them with the same method used to create realistic face swaps in deepfake videos. But instead of changing faces, Nakamoto used machine learning software to reconstruct the blurred parts of the video based on a large set of uncensored nudes and sold the content online. Penises and vaginas are pixelated in Japanese porn because an obscenity law forbids the explicit depictions of genitalia.

Nakamoto reportedly made about $96,000 by selling over 10,000 manipulated videos, though he was arrested specifically for selling 10 fake photos at about $20 each. Nakamoto pleaded guilty to charges of copyright violation and displaying obscene images and said he did it for money, according to NHK. He was caught when police conducted a "cyber patrol," the Japanese broadcaster reported. "This is the first case in Japan where police have caught an AI user," Daisuke Sueyoshi, a lawyer who's tried cybercrime cases, told VICE World News. "At the moment, there's no law criminalizing the use of AI to make such images." For example, Nakamoto was not charged with any offenses for violating the privacy of the actors in the videos.

The central government of China in Beijing has announced a decision to allow foreign entities to invest in the ownership of VPN (virtual private network) services in the country. From a report: Under this new policy, foreign investors can only own up to 50% of China-based VPN companies. This allows China to retain state control over local and approved products while still offering a significant incentive for investment. Apart from VPNs, the policy update also includes changes in the investment caps on information services for app stores, internet connection services, and more. This comes as somewhat of a surprise for a country that has been fighting foreign VPNs for years now, hindering their presence in China and imposing fines and other penalties to users who ignored the banning orders.

District of Columbia Attorney General Karl Racine is adding Facebook CEO Mark Zuckerberg to a lawsuit over the Cambridge Analytica data-mining scandal. From a report: Racine announced the addition on Twitter this morning, saying his investigation had revealed that Zuckerberg was "personally involved in decisions related to Cambridge Analytica and Facebook's failure to protect user data." The 2018 lawsuit accuses Facebook (and now Zuckerberg) of misrepresenting its policies around third-party data access and compromising user privacy with lax protections. The attorney general's office alleges that Facebook violated the Consumer Protection Procedures Act and seeks civil damages for the offense. A judge allowed the case to proceed despite Facebook's efforts to halt it in 2019.

An anonymous reader quotes a report from Engadget: Under Acting Chairwoman Jessica Rosenworcel, the Federal Communications Commission is seeking to create new rules targeting spam text messages. Like another recent proposed rulemaking from the agency, the policy would push wireless carriers and telephone companies to block the spam before it ever gets to your phone.

"We've seen a rise in scammers trying to take advantage of our trust of text messages by sending bogus robotexts that try to trick consumers to share sensitive information or click on malicious links," Rosenworcel said. "It's time we take steps to confront this latest wave of fraud and identify how mobile carriers can block these automated messages before they have the opportunity to cause any harm."