Security

NSA Helps Out Microsoft With Critical Exchange Server Vulnerability Disclosures (theregister.com) 23

April showers bring hours of patches as Microsoft delivers its Patch Tuesday fun-fest consisting of over a hundred CVEs, including four Exchange Server vulnerabilities reported to the company by the US National Security Agency (NSA). The Register reports: Forty-four different products and services are affected, mainly having to do with Azure, Exchange Server, Office, Visual Studio Code, and Windows. Among the vulnerabilities, four have been publicly disclosed and a fifth is being actively exploited. Nineteen of the CVEs have been designated critical. "This month's release includes a number of critical vulnerabilities that we recommend you prioritize, including updates to protect against new vulnerabilities in on-premise Exchange Servers," Microsoft said in its blog post. "These new vulnerabilities were reported by a security partner through standard coordinated vulnerability disclosure and found internally by Microsoft. We have not seen the vulnerabilities used in attacks against our customers.

Clicking through Microsoft's coy links to CVE-2021-28480 (9.8 severity), CVE-2021-28481 (9.8 severity), CVE-2021-28482 (8.8 severity), and CVE-2021-28483 (9.0 severity), you'll find the unspecified security partner is the NSA. Exchange Server 2013 CU23, Exchange Server 2016 CU19 and CU20, and Exchange Server 2019 CU8 and CU9 are affected by this set of problems. "NSA urges applying critical Microsoft patches released today, as exploitation of these #vulnerabilities could allow persistent access and control of enterprise networks," the signals intelligence agency said via Twitter.

Open Source

Inspur, China's Largest Cloud Hardware Vendor, Joins Open-Source Patent Consortium (zdnet.com) 7

An anonymous reader quotes a report from ZDNet: The Open Invention Network (OIN) defends the intellectual property (IP) rights of Linux and open-source software developers from patent trolls and the like. This is a global fight and now the OIN has a new, powerful allied member in China: Inspur. Inspur is a leading worldwide provider and China's leading data center infrastructure, cloud computing, and artificial intelligence (AI) server providers. While not a household name like Lenovo, Inspur ranks among the world's top-three server manufacturers.

Inspur is only the latest of many companies to join the OIN. Besides such primarily hardware-oriented companies as Inspur, Baidu, China's largest search engine company, and global banks such as Barclays and the TD Bank Group, have joined the OIN. In 2021, companies far removed from traditional Linux companies such as Canonical, Red Hat, and SUSE all recognize Linux and OSS's importance. Donny Zhang, VP of Inspur information, said, "Linux and open source are critical elements in technologies which we are developing and provisioning. By joining the Open Invention Network, we are demonstrating our continued commitment to innovation, and supporting it with patent non-aggression in core Linux and adjacent open-source software."
"Linux is rewriting what is possible in infrastructure computing," says OIN CEO Keith Bergelt. "OSS-based cloud computing and on-premise data centers are driving down the cost-per-compute while significantly increasing businesses' ability to provision AI and machine-learning (ML) capabilities. We appreciate Inspur's participation in joining OIN and demonstrating its commitment to innovation and patent non-aggression in open source."
Privacy

School Custodian Refuses To Download Phone App That Monitors Location, Says It Got Her Fired (www.cbc.ca) 231

Michelle Dionne, a former employee at a cleaning company in Darwell, Alberta, says she was fired for refusing to download an app that would check her location and ensure she was working her scheduled hours. CBC.ca reports: Dionne says she was thrilled to get the job last fall -- responsible for things like disinfecting door handles, light switches and bathrooms to prevent possible spread of the coronavirus. When her boss told her to download the app, Dionne says she was concerned about her privacy. The app would go on her personal phone and, she says, her boss didn't clearly explain how it worked or what would happen to any data it collected.[...] The app, called Blip, generates a geofence -- a virtual boundary, created by the employer using GPS -- that detects when an employee enters or leaves. The app registers a signal from the worker's cell phone, when their "locations" setting is turned on, so the boss can tell whether an employee is on site and how many hours that person works. It only registers an employee's location when they enter and exit the geofence and doesn't track their specific movements. It's not clear where that data is stored, or whether any other employee information might be included.

Go Public reached out to the maker of the app, U.K.-based BrightHR. Spokesperson Natalie Shallow said, although the app collects data, that data "belongs to the customer organization" -- meaning, the company using the app -- and therefore is subject to the company's own policies. The data's protection "complies with all applicable laws, including Alberta's Personal Information Protection Act," Shallow said. Dionne worried about where the information might end up. She knew apps like Instagram, Facebook and others had been breached. She says no one told her how securely the information would be protected.

Dionne's former boss admits she didn't know where the data generated by Blip would be stored when she introduced the app to her workforce last fall. "I never asked that question and it never came up in my mind to ask," said Hanan Yehia, founder and owner of H.Y. Cleaning Services, which operates cleaning services for eight locations in northern Alberta. She says after Dionne raised concerns, she went back to BrightHR for more information and was told employees' movements within the geofence are not specifically monitored. Yehia says she shared that information with Dionne. The app was a solution to a problem, says Yehia -- she was looking for a way to simplify payroll by easily tracking hours and making sure employees who claimed they were working were actually on the job. "We had some issues in some locations where they would say they were on site, that they were working, but they weren't," she said, clarifying that attendance was not an issue with Dionne. She also says Dionne's refusal to download the app wasn't the sole reason she was fired.

Facebook

There's Another Facebook Phone Number Database Online (vice.com) 7

An online tool lets customers pay to unmask the phone numbers of Facebook users that liked a specific Page, and the underlying dataset appears to be separate from the 500 million account database that made headlines last week, signifying another data breach or large scale scraping of Facebook users' data, Motherboard reports. From the report: Motherboard verified the tool, which comes in the form of a bot on the social network and messaging platform Telegram, outputs accurate phone numbers of Facebook users that aren't included in the dataset of 500 million users. The data also appears to be different to another Telegram bot outputting Facebook phone numbers that Motherboard first reported on in January. "Hello, can you tell me how you got my number?" one person included in the dataset asked Motherboard when reached for comment. "Omg, this is insane," they added. Another person returned Motherboard's call and, after confirming their name, said "If you have my number then yes it seems the data is accurate."

A description for the bot reads "The bot give [sic] out the phone numbers of users who have liked the Facebook page." To use the bot, customers need to first identify the unique identification code of the Facebook Page they want to get phone numbers from, be that a band, restaurant, or any other sort of Page. This is possible with at least one free to use website. From there, customers enter that code into the bot, which provides a cost of the data in U.S. dollars and the option to proceed with the purchase, according to Motherboard's tests. A Page with tens of thousands of likes from Facebook users can cost a few hundred dollars, the bot shows. The data for Motherboard's own Page would return 134,803 results and cost $539, for example.

Privacy

Billions of Smartphone Owners Will Soon Be Authorizing Payments Using Facial Recognition (zdnet.com) 104

An anonymous reader quotes a report from ZDNet: The next few years will see billions of users regularly using facial recognition technology to secure payments made through their smartphone, tablets or smartwatches, according to new analysis carried out by Juniper Research. Smartphone owners are already used to staring at their screens to safely unlock their devices without having to dial in a secret code; now, facial recognition will increasingly be deployed to verify the identity of a user making a payment with their handset, whether that's via an app or directly in-store, in wallet mode.

In addition to facial features, Juniper Research's analysts predict that a host of biometrics will be used to authenticate mobile payments, including fingerprint, iris and voice recognition. Biometric capabilities will reach 95% of smartphones globally by 2025, according to the researchers; by that time, users' biological characteristics will be authenticating over $3 trillion-worth of payment transactions -- up from $404 billion in 2020. [...] "All you need for software-based facial recognition is a front-facing camera on the device and accompanying software," Nick Maynard, lead analyst at Juniper Research, tells ZDNet. "In a hardware-based system, there will be additional hardware layers that add additional security levels. It's increasingly important to differentiate because hardware-based systems are the more secure of the two." Maynard's research shows that between now and 2025, the number of handsets using hardware-based systems will grow by a dramatic 376% to reach 17% of smartphones. Juniper expects the number of smartphone owners using [software-based facial recognition systems] to secure payments to grow by 120% to 2025, to reach 1.4 billion devices -- that is, roughly 27% of smartphones globally.
"Hardware-based systems obviously have additional costs per device," adds Maynard, "but the reason it is growing well is really that Apple has been driving it forward. They've made the technology a part of their high-end devices, and shown that hardware-based facial recognition technology can be done and can be very secure."

"Software-based facial recognition is strong because it's very easy to deploy," Maynard continues, "but we are expecting a shift towards hardware-based systems as software becomes invalidated by fraudster approaches. Fraudster methods are always evolving, and the hardware needs to evolve with it."
The Courts

Charter Must Pay $19 Million For Tricking Customers Into Switching ISPs (arstechnica.com) 34

A judge has ordered Charter Communications to pay $19.2 million to Windstream for lying to customers in order to trick them into switching from Windstream to Charter's Spectrum Internet service. Charter also faces a $5,279 penalty for shutting off service to hundreds of Windstream's resale customers. Ars Technica reports: When Windstream filed for bankruptcy in early 2019, Charter began a "literally false and intentionally misleading advertising campaign intended to create the impression, using mailings designed to seem as if they were coming from the Debtors [Windstream], that the Debtors were going out of business," said an order issued Thursday by Judge Robert Drain of US Bankruptcy Court for the Southern District of New York. Charter's goal with the mailings "was to induce the Debtors' customers to terminate their contracts and switch to Charter by sending them literally false and intentionally misleading information about the Debtors' bankruptcy cases and financial wherewithal," the ruling said. Charter premised its ad campaign "on false assertions regarding the Debtors' bankruptcy cases," the ruling said.

"We are gratified that Judge Drain's ruling means Charter will have to pay a significant price for its egregious false advertising," Windstream General Counsel Kristi Moody said, according to a FierceTelecom article. "Charter knew full well what it was doing when it embarked on a dishonest scare-tactic campaign to lure away our customers. At Windstream, we will always aggressively defend ourselves and our customers against predatory schemes and meritless allegations."

Bitcoin

Kraken CEO Warns a Crackdown On Cryptocurrencies May Be Coming (cnbc.com) 77

Jess Powell, CEO of Kraken, the world's fourth-largest digital currency exchange, warns that governments around the world may start to clamp down on the use of bitcoin and cryptocurrencies. CNBC reports: "I think there could be some crackdown," Jesse Powell, CEO of Kraken, told CNBC in an interview. Cryptocurrencies have surged in value lately, with bitcoin hitting a record high price of more than $61,000 last month. The world's most valuable digital coin was last trading at around $60,105. [...] Kraken's chief thinks regulatory uncertainty around crypto isn't going away anytime soon. A recent anti-money laundering rule proposed by the U.S. government would require people who hold their crypto in a private digital wallet to undergo identity checks if they make transactions of $3,000 or more.

"Something like that could really hurt crypto and kind of kill the original use case, which was to just make financial services accessible to everyone," Powell said. Cryptocurrencies like bitcoin have often been associated with illicit activities due to the fact that people transacting with it are pseudonymous -- you can see where funds are being sent but not who sent or received them. "I hope that the U.S. and international regulators don't take too much of a narrow view on this," Powell said. "Some other countries, China especially, are taking crypto very seriously and taking a very long-term view."

Kraken's CEO said he feels the U.S. is more "shortsighted" than other nations and "susceptible" to the pressures of incumbent legacy businesses -- in other words, the banks -- that "stand to lose from crypto becoming a big deal." "I also think it might be too late," Powell added. "Maybe the genie's out of the bottle and just trying to ban it at this point would make it more attractive. It would certainly send a message that the government sees this as a superior alternative to their own currency."

Google

Google Accused of Secret Program Giving Them an Unfair Advantage in Ad-Buying (nypost.com) 26

Google "has utilized a secret program to track bids on its ad-buying platform," writes the New York Post, "and has been accused of using the information to gain an unfair market advantage that raked in hundreds of millions of dollars annually, according to a report." The initiative — dubbed "Project Bernanke" in an apparent reference to former Federal Reserve chairman Ben Bernanke — was detailed in court filings in an ongoing Texas-led antitrust suit, which were initially uploaded to an online docket with incomplete redactions, The Wall Street Journal reported Saturday... Lawyers for the Lone Star State argue, however, that the program was tantamount to insider trading, particularly when combined with Google's complicated, multi-layered role in the online advertising marketplace.

The company operates simultaneously as the operator of a major ad exchange, a representative of both buyers and sellers on the exchange — and a buyer in its own right, according to the suit. By using Project Bernanke's inside information on what other ad buyers were willing to pay for space, Google could tailor its operations to beat out rivals and bid the bare minimum to secure ad inventory, the state reportedly alleges...

Separately, the filings reveal more details about Jedi Blue — an alleged hush-hush deal in which Google allegedly guaranteed that Facebook would win a fixed percentage of advertising deals in which the social media giant bid... Google also admitted that the deal required Facebook to spend $500 million or more in Google's Ad Manager or AdMob bids in the pact's fourth year, and that Facebook agreed to make efforts to win 10 percent of the auctions in which it competed, the WSJ said.

The arrangement appeared "to allow Facebook to bid and win more often in auctions," lawyers for Texas alleged in their filings.

Crime

US Prosecutor Urges Crack Down on 'the Scourge of Online Scams' (wired.com) 36

Last month America's Federal Bureau of Investigation released its annual report on internet crime, which a former federal prosecutor bemoans as "another record year." The bureau received 791,790 complaints of "internet-enabled crime" in 2020 (a 69 percent increase over the prior year), representing over $4.1 billion in reported losses (a 20 percent increase). These complaints included a wide array of crimes, such as phishing, spoofing, extortion, data breaches, and identity theft. Collectively, they represent further evidence of the Justice Department's long-running failure to effectively pursue internet fraud.

Since the start of the pandemic, the scope and frequency of this criminal activity has become noticeably worse. Online fraudsters have stolen government relief checks, sold fake test kits and vaccines, and exploited the altruistic impulses of the American public through fake charities. But the broader failure has wreaked incalculable harm on the American public for years, including those in our most vulnerable and less tech-savvy populations, like senior citizens. The FBI's most recent report makes it clear that the government needs to dramatically step up and rethink its approach to combating internet-based fraud — including how it tracks this problem, as well as how it can punish and deter these crimes more effectively going forward...

One major reason that internet fraud remains such a persistent and vexing problem is that the Justice Department has never made it a real priority — in part because these kinds of cases are not particularly attractive to prosecutors. Victim losses on an individual basis tend to be relatively small and widely dispersed. A substantial amount of this crime also originates abroad, and it can be hard and bureaucratically cumbersome to obtain evidence from foreign governments — particularly from countries where these scams comprise a large, de facto industry that employs many people. It is also far more challenging to find and secure cooperating insider witnesses when the perpetrators are beyond our borders. And even under the best of circumstances, the large body of documentary evidence that fraud cases involve can be exceedingly difficult to gather and review. If you manage to overcome all of those obstacles, you may still end up having to deal with years of extradition-related litigation before anyone ever sees the inside of a courtroom. Making matters worse, much of the press does not treat these cases as particularly newsworthy — itself a symptom of how routine internet fraud has become — and prosecutors like being in the press...

[T]ime is not on our side. This is a problem that will continue to metastasize — including in new and unpredictable ways — unless and until the federal government dramatically steps up its enforcement efforts.

The Military

Iran Nuclear Facility Suffers Blackout, Cyberattack Suspected (apnews.com) 117

While difficult negotiations continue over a deal to curtail Iran's nuclear ambitions, this morning Iran suddenly experienced a blackout at its underground Natanz atomic facility, the Associated Press reports: While there was no immediate claim of responsibility, suspicion fell immediately on Israel, where its media nearly uniformly reported a devastating cyberattack orchestrated by the country caused the blackout. Israeli Prime Minister Benjamin Netanyahu later Sunday night toasted his security chiefs, with the head of the Mossad, Yossi Cohen, at his side on the eve of his country's Independence Day... Netanyahu, who also met Sunday with U.S. Defense Secretary Lloyd Austin, has vowed to do everything in his power to stop the nuclear deal...

Natanz has been targeted by sabotage in the past. The Stuxnet computer virus, discovered in 2010 and widely believed to be a joint U.S.-Israeli creation, once disrupted and destroyed Iranian centrifuges at Natanz amid an earlier period of Western fears about Tehran's program. Natanz suffered a mysterious explosion at its advanced centrifuge assembly plant in July that authorities later described as sabotage. Iran now is rebuilding that facility deep inside a nearby mountain. Iran also blamed Israel for the November killing of a scientist who began the country's military nuclear program decades earlier.

Multiple Israeli media outlets reported Sunday that an Israeli cyberattack caused the blackout in Natanz. Public broadcaster Kan said the Mossad was behind the attack. Channel 12 TV cited "experts" as estimating the attack shut down entire sections of the facility. While the reports offered no sourcing for their information, Israeli media maintains a close relationship with the country's military and intelligence agencies...

On Tuesday, an Iranian cargo ship said to serve as a floating base for Iran's paramilitary Revolutionary Guard forces off the coast of Yemen was struck by an explosion, likely from a limpet mine. Iran has blamed Israel for the blast. That attack escalated a long-running shadow war in Mideast waterways targeting shipping in the region.

Businesses

How Union Organizers Will Continue Their Fight With Amazon (deccanherald.com) 185

"The lopsided vote against a union at Amazon's warehouse in Bessemer, Alabama, was a major disappointment to organized labor..." writes the New York Times. "Yet the defeat doesn't mark the end of the campaign against Amazon so much as a shift in strategy."

The article notes unions and other labor groups enjoyed more success when opposing Amazon's plans for a New York headquarters by joining with local politicians and nonprofit organizations: In interviews, labor leaders said they would step up their informal efforts to highlight and resist the company's business and labor practices rather than seek elections at individual job sites, as in Bessemer. The approach includes everything from walkouts and protests to public relations campaigns that draw attention to Amazon's leverage over its customers and competitors...

The strategy reflects a paradox of the labor movement: While the Gallup Poll has found that roughly two-thirds of Americans approve of unions — up from half in 2009, a low point — it has rarely been more difficult to unionize a large company. One reason is that labor law gives employers sizable advantages. The law typically forces workers to win elections at individual work sites of a company like Amazon, which would mean hundreds of separate campaigns. It allows employers to campaign aggressively against unions and does little to punish employers that threaten or retaliate against workers who try to organize. Lawyers representing management say that union membership has declined — from about one-third of private-sector workers in the 1950s to just over 6 percent today — because employers have gotten better at addressing workers' needs... But labor leaders say wealthy, powerful companies have grown much bolder in pressing the advantages that labor law affords them....

[E]ven as elections have often proven futile, labor has enjoyed some success over the years with an alternative model — what Dr. Ruth Milkman, a sociologist of labor at the Graduate Center of the City University of New York, called the "air war plus ground war." The idea is to combine workplace actions like walkouts (the ground war) with pressure on company executives through public relations campaigns that highlight labor conditions and enlist the support of public figures (the air war). The Service Employees International Union used the strategy to organize janitors beginning in the 1980s, and to win gains for fast-food workers in the past few years, including wage increases across the industry. "There are almost never any elections," Dr. Milkman said. "It's all about putting pressure on decision makers at the top...."

Many labor officials urged Congress to increase its scrutiny of Amazon's labor practices, including its use of mandatory meetings, texts and signs to discourage workers in Alabama from unionizing...But after Bessemer, many labor leaders think Congress should go further, letting workers unionize companywide or industrywide, not just by work site as is typical... Mary Kay Henry, president of the Service Employees International Union, agreed that the key to taking on a company as powerful as Amazon was to make it easier for workers to unionize across a company or industry. "It's not going to happen one warehouse at a time," she said.

But Ms. Henry said workers and politicians could pressure Amazon to come to the bargaining table long before the law formally requires it.

The Media

How an Online 'Lego' Gamer Infiltrated the White House Press Corps (politico.com) 34

Four times in recent weeks, the White House press secretary was relayed questions from someone that Mediate describes as "a gag persona for a former Secretary of State made of Legos."

The reporters believed they were helping a real reporter who was prohibited by Covid protocols from attending. Politico reports: That colleague, who goes by the name Kacey Montagu, doesn't exist — at least not as an actual reporter. Since late last year, Montagu has taken on the identity of a White House correspondent extraordinaire with a fictional outlet to boot: White House News, shortened in emails to WHN... In communications with confidants, Montagu has posed as a member of White House Correspondents Association, claiming to be a reporter for The Daily Mail, the British tabloid known for its gossipy coverage of celebrities and political figures. Montagu also communicates regularly with top White House reporters and has had several exchanges with White House officials.

But Montagu never joined WHCA and The Daily Mail. There is no Kacey Montagu, except as a digital impersonation of a White House correspondent...

Montagu's activity is a remarkable illustration of how the online landscape, along with the age of pandemic-related virtual work, has opened up avenues for the mischievous-minded to infiltrate the top echelons of power. What's perhaps more remarkable is that he or she did it all without raising a solitary eyebrow... until Thursday.

Montagu had started a Twitter account showing the schedules of White House officials, which ultimately attracted a following by actual White House correspondents and even some minor government staffers, according to the article.

Acquaintances...believe Montagu's White House moonlighting began as something to boast about in the online global gaming platform called ROBLOX, where users jokingly call themselves "Legos." Within that platform is a role-playing group called nUSA, where people from across the world engage in a mock U.S. government exercise...

Another longtime member of the community in touch with Montagu said they suspected that they created the account "just for the memes" and never assumed things would progress this far.

Government

Would You Tell an Angel Investor How to Start a New Country? (1729.com) 59

Angel investor Balaji S. Srinivasan (also the former CTO of Coinbase) is now focused on 1729.com, which wants to give you money to do his bidding — or something like that. He's calling it "the first newsletter that pays you.

"It has a regular feed of paid tasks and tutorials with $1000+ in crypto prizes per day, and doubles as a vehicle for distributing a new book I've been writing called The Network State."

His latest post? "How to Start a New Country" (which envisions starting with a "cloud first" digital community): We recruit online for a group of people interested in founding a new virtual social network, a new city, and eventually a new country. We build the embryonic state as an open source project, we organize our internal economy around remote work, we cultivate in-person levels of civility, we simulate architecture in VR, and we create art and literature that reflects our values.

Over time we eventually crowdfund territory in the real world, but not necessarily contiguous territory. Because an under-appreciated fact is that the internet allows us to network enclaves. Put another way, a cloud community need not acquire all its territory in one place at one time. It can connect a thousand apartments, a hundred houses, and a dozen cul-de-sacs in different cities into a new kind of fractal polity with its capital in the cloud. Over time, community members migrate between these enclaves and crowdfund territory nearby, with every individual dwelling and group house presenting an independent opportunity for expansion...

[Cloud countries] are set up to be a scaled live action role-playing game (LARP), a feat of imagination practiced by large numbers of people at the same time. And the experience of cryptocurrencies over the last decade shows us just how powerful such a shared LARP can be...

The cloud country concept "just" requires stacking together many existing technologies, rather than inventing new ones like Mars-capable rockets or permanent-habitation seasteads. Yet at the same time it avoids the obvious pathways of election, revolution, and war — all of which are ugly and none of which provide much venue for individual initiative...

Could a sufficiently robust cloud country with, say, 1-10M committed digital citizens, provable cryptocurrency reserves, and physical holdings all over the earth similarly achieve societal recognition from the United Nations?

For the "do his bidding" part, the post promises that up to ten $100 prizes will be awarded to people who share constructive reviews on their sites/social media pages (including proposals for extensions).

Previously the site had offered $100 for the ten best hirelings "running a newsletter for technological progressives at your own domain, as a way to begin incentivizing the decentralization of media." (It cited a tweet that argues succinctly that "The NYT is telling anti-longevity stories for us. We must take control of our own story.") In general the site describes itself as "a newsletter for technological progressives. That means people who are into cryptocurrencies, startup cities, mathematics, transhumanism, space travel, reversing aging, and initially-crazy-seeming-but-technologically-feasible ideas." So the newsletter-creating task had envisioned them all "constantly pushing for technology in general and reversing aging in particular, writing like their lives depended on it. In other words, blog or die!"

Other rewards went to the first 10 people to complete three Elixir problems, the 100 people who posted the best inspiring proof-of-exercising photos, and 40 people who helped identify people and places "where the ascending world is surpassing the declining world."

For one of his latest "tasks," Srinivasan wants you to read a long essay on quantum computing (and answer questions), with an optional series of "review emails". $10 in bitcoin will be awarded only to the first and last 50 readers/question-answerers, while another $100 in bitcoin will be awarded to the first and last 5 review-email readers who "persist for a month."
China

Major Advertiser Works With China to Try Bypassing Apple's Privacy Rules (wsj.com) 86

Procter & Gamble "helped develop a technique being tested in China to gather iPhone data for targeted ads, a step intended to give companies a way around Apple Inc.'s new privacy tools," reports the Wall Street Journal. (Citing "people familiar with the matter.") The move is part of a broader effort by the consumer-goods giant to prepare for an era in which new rules and consumer preferences limit the amount of data available to marketers. P&G — among the world's largest advertisers, with brands such as Gillette razors and Charmin toilet paper — is the biggest Western company involved in the effort, the people said.

The company has joined forces with dozens of Chinese trade groups and tech firms working with the state-backed China Advertising Association to develop the new technique, which would use technology called device fingerprinting, the people said. Dubbed CAID, the advertising method is being tested through apps and gathers iPhone user data. Through the use of an algorithm, it can track users for purposes of targeting ads in a way that Apple is seeking to prevent.

Apple's response? "We believe strongly that users should be asked for their permission before being tracked. Apps that are found to disregard the user's choice will be rejected."
Crime

US Arrests Suspect Who Wanted To Blow Up AWS Data Center (therecord.media) 151

An anonymous reader quotes a report from The Record: The FBI has arrested on Thursday a Texas man who planned to blow up one of the Amazon Web Services (AWS) data centers in an attempt to "kill of about 70% of the internet." Seth Aaron Pendley, 28, of Wichita Falls, Texas, was arraigned in front of a Texas judge today and formally indicted with a malicious attempt to destroy a building with an explosive.

The US Department of Justice said Pendley was arrested on Thursday after he tried to acquire C-4 plastic explosives from an undercover FBI employee in Fort Worth, Texas. The FBI said they learned of Pendley's plans after the suspect confided in January 2021 via Signal, an encrypted communications app, to a third-party source about plans to blow up one of Amazon's Virginia-based data centers. The source alerted the FBI and introduced the suspect to the undercover agent on March 31.
"The suspect allegedly told an FBI agent that he wanted to attack Amazon's data center because the company was providing web servers to the FBI, CIA, and other federal agencies and that he hoped to bring down 'the oligarchy' currently in power in the United States," the report says.

Pendley could face up to 20 years in federal prison if he's found guilty and convicted.
Crime

300 Nvidia GPUs Seized After High Speed Boat Chase (extremetech.com) 24

ExtremeTech's Joel Hruska tells the story of a recent high-speed boat chase involving up to 300 Nvidia CMP 30HX GPUs. From the report: Our movie-like story kicked off with Chinese authorities detaining a fishing boat anchored near Hong Kong International Airport. Men on the fishing boat were swapping cargo over to a speedboat. When authorities approached, the smugglers hopped into the speedboat and fled. While the customs officials were unable to apprehend the smugglers in the subsequent high-speed chase, the hapless fishing boat owner was unable to get away. Confiscated goods, according to THG, included sea cucumbers, shark fins, and other various tech products and gadgets. The graphics cards were considered a surprise.

There's a certain dark hilarity in imagining drug dealers across the world offering their clientele multiple ounces of weed or an RTX 3060, but in this case, the haul consisted of low-end 30HX CMP cards. Nvidia offers a range of CMP cards, with performance ranging from 26MH/s to 86MH/s. The 30HX and 40HX are believed to be based on Turing silicon -- the GTX 1660 Super and RTX 2070, respectively. The 50X and 90HX are harder to pin down. The 50HX is a touch faster than the known mining performance of the RTX 2080 Ti, while the 90HX is about 10 percent slower than the known mining performance of an RTX 3080. If the 50HX is based on the RTX 2080 Ti, it's fielding a smaller amount of VRAM; the RTX 2080 Ti offered 11GB, while the 50HX has just 10GB.

Crime

SEC Accuses Actor of $690 Million Fraud Based on Fake Netflix Deal (bloomberg.com) 32

Zachary Horwitz never made it big on the Sunset Strip -- there was the uncredited part in Brad Pitt's "Fury" and a host of roles in low-budget thrillers and horror flicks. But federal charges suggest he had acting talent, duping several financial firms out of hundreds of millions of dollars and enabling him to live the Hollywood dream after all. From a report: That meant chartered flights and a $6 million mansion -- replete with wine cellar and home gym. Horwitz even included a bottle of Johnnie Walker Blue Label, which retails for more than $200, as a gift to investors along with his company's "annual report."

The claims are outlined in legal documents that U.S. prosecutors and the Securities and Exchange Commission released this week alleging Horwitz, 34, was running a massive Ponzi scheme. His scam: a made-up story that he had exclusive deals to sell films to Netflix and HBO. Dating back to 2014, the SEC said he raised a shocking $690 million in fraudulent funds. On Tuesday, Horwitz was arrested. Horwitz, who went by the screen name "Zach Avery," used fabricated contracts and fake emails to swindle at least five firms, according to the government. Investors were issued promissory notes through his firm 1inMM Capital to acquire the rights to movies that would be sold to Netflix and HBO for distribution in Latin America, Australia, New Zealand and other locations.

Facebook

FTC Urges Courts Not To Dismiss Facebook Antitrust Case (arstechnica.com) 9

The Federal Trade Commission has urged a federal judge in DC to reject Facebook's request to dismiss the FTC's high-stakes antitrust lawsuit. In a 56-page legal brief, the FTC reiterated its arguments that Facebook's profits have come from years of anticompetitive conduct. From a report: "Facebook is one of the largest and most profitable companies in the history of the world," the FTC wrote. "Facebook reaps massive profits from its [social networking] monopoly, not by offering a superior or more innovative product because it has, for nearly a decade, taken anticompetitive actions to neutralize, hinder, or deter would-be competitors." The FTC's case against Facebook focuses on two blockbuster acquisitions that Facebook made early in the last decade. In 2012, Facebook paid $1 billion for the fast-growing startup Instagram. While Instagram the company was still tiny -- it had only about a dozen employees at the time of the acquisition -- it had millions of users and was growing rapidly. Mark Zuckerberg realized it could grow into a serious rival for Facebook, and the FTC alleges Zuckerberg bought the company to prevent that from happening.
Privacy

Hackers Scraped Data from 500 Million LinkedIn Users -- and Have Posted it For Sale Online (businessinsider.com) 33

Data from 500 million LinkedIn users has been scraped and is for sale online, according to a report from Cyber News. A LinkedIn spokesperson confirmed to Insider that there is a dataset of public information that was scraped from the platform. From a report: "While we're still investigating this issue, the posted dataset appears to include publicly viewable information that was scraped from LinkedIn combined with data aggregated from other websites or companies," a LinkedIn spokesperson told Insider in a statement. "Scraping our members' data from LinkedIn violates our terms of service and we are constantly working to protect our members and their data." LinkedIn has 740 million users, according to its website, so the reported data scraping of 500 million users means about two-thirds of the platform's user base could be affected. The data includes account IDs, full names, email addresses, phone numbers, workplace information, genders, and links to other social media accounts.
Piracy

UK Broadcaster Wins Injunction To Stop Reddit Moderator Sharing Pirated TV Shows (torrentfreak.com) 45

Sky TV, one of the largest broadcasters in the UK, has won a court injunction to prevent links to its TV shows from being illegally shared online. The interim order targets a man who moderated several TV-focused communities on Reddit while raising funds through Patreon and PayPal. TorrentFreak reports: According to an action filed by Sky in a Scottish court, Cherzo1 was the moderator of three sub-Reddits -- r/UKTVLAND, r/notapanelshow, and r/UKPanelShowsOnly -- which together had more than 51,000 subscribers. Cherzo also had a YouTube channel with more than 95,000 subscribers. According to Sky, all of these platforms were used to infringe the company's copyrights. In evidence to support its action, Sky states that Cherzo1 was motivated by money, receiving payments from fans and followers via Patreon and directly into his PayPal account. [...]

In order to curtail Cherzo1's activities, Sky asked the court to hand down an "interdict ad interim," a term used in Scotland to describe an interim injunction. The broadcaster asked the court to order Cherzo1 to stop uploading copies of broadcasts, stop posting hyperlinks to shows on Reddit and anywhere else on the Internet, and forbid him from assisting any third party to do the same. A court will grant an interim interdict if it believes there is a prima facie case against the defendant. [...] Anyone found breaching such an order could be subjected to a fine or even imprisonment.

Slashdot Top Deals