Security

Election Was Most Secure In American History, US Officials Say (bloomberg.com) 423

"The Nov. 3rd election was the most secure in American history," state and federal election officials said in a statement Thursday. "There is no evidence that any voting system deleted or lost votes, changed votes, or was in any way compromised." Bloomberg reports: The statement acknowledged the "many unfounded claims and opportunities for misinformation about the process of our elections" and urged Americans to turn to election administrators and officials for accurate information. The statement was signed by officials from the Elections Infrastructure Government Coordinating Council, which shares information among state, local and federal officials, and the Election Infrastructure Sector Coordinating Council, which includes election infrastructure owners and operators.

Among the 10 signatories were Benjamin Hovland, who chairs the U.S. Election Assistance Commission, and Bob Kolasky, the assistant director of the Cybersecurity and Infrastructure Security Agency, part of the Department of Homeland Security. Key officials at the cybersecurity agency, including its head, Christopher Krebs, are stepping down or expecting to get fired as Trump refuses to concede. Krebs, who has enjoyed bipartisan support for his role in helping run secure U.S. elections in 2018 and 2020, has told associates he expects to be dismissed, according to three people familiar with internal discussions. His departure would follow the resignation of Bryan Ware, assistant director for cybersecurity at CISA, who resigned on Thursday morning after about two years at the agency. In addition, Valerie Boyd, the assistant secretary for international affairs at the Department of Homeland Security, which oversees CISA, has also left, according to two other people. Krebs and Ware are both Trump appointees.

Privacy

Your Computer Isn't Yours (sneak.berlin) 345

Security researcher Jeffrey Paul, writes in a blog post: On modern versions of macOS, you simply can't power on your computer, launch a text editor or eBook reader, and write or read, without a log of your activity being transmitted and stored. It turns out that in the current version of the macOS, the OS sends to Apple a hash (unique identifier) of each and every program you run, when you run it. Lots of people didn't realize this, because it's silent and invisible and it fails instantly and gracefully when you're offline, but today the server got really slow and it didn't hit the fail-fast code path, and everyone's apps failed to open if they were connected to the internet. Because it does this using the internet, the server sees your IP, of course, and knows what time the request came in. An IP address allows for coarse, city-level and ISP-level geolocation, and allows for a table that has the following headings: Date, Time, Computer, ISP, City, State, Application Hash; Apple (or anyone else) can, of course, calculate these hashes for common programs: everything in the App Store, the Creative Cloud, Tor Browser, cracking or reverse engineering tools, whatever.

This means that Apple knows when you're at home. When you're at work. What apps you open there, and how often. They know when you open Premiere over at a friend's house on their Wi-Fi, and they know when you open Tor Browser in a hotel on a trip to another city. "Who cares?" I hear you asking. Well, it's not just Apple. This information doesn't stay with them: These OCSP requests are transmitted unencrypted. Everyone who can see the network can see these, including your ISP and anyone who has tapped their cables. These requests go to a third-party CDN run by another company, Akamai. Since October of 2012, Apple is a partner in the US military intelligence community's PRISM spying program, which grants the US federal police and military unfettered access to this data without a warrant, any time they ask for it. In the first half of 2019 they did this over 18,000 times, and another 17,500+ times in the second half of 2019.

This data amounts to a tremendous trove of data about your life and habits, and allows someone possessing all of it to identify your movement and activity patterns. For some people, this can even pose a physical danger to them. Now, it's been possible up until today to block this sort of stuff on your Mac using a program called Little Snitch (really, the only thing keeping me using macOS at this point). In the default configuration, it blanket allows all of this computer-to-Apple communication, but you can disable those default rules and go on to approve or deny each of these connections, and your computer will continue to work fine without snitching on you to Apple. The version of macOS that was released today, 11.0, also known as Big Sur, has new APIs that prevent Little Snitch from working the same way. The new APIs don't permit Little Snitch to inspect or block any OS level processes. Additionally, the new rules in macOS 11 even hobble VPNs so that Apple apps will simply bypass them.

Privacy

Six Reasons Why Google Maps Is the Creepiest App On Your Phone (vice.com) 121

VICE has highlighted six reasons why Google Maps is the creepiest app on your phone. An anonymous reader shares an excerpt from the report: 1. Google Maps Wants Your Search History: Google's "Web & App Activity" settings describe how the company collects data, such as user location, to create a faster and "more personalized" experience. In plain English, this means that every single place you've looked up in the app -- whether it's a strip club, a kebab shop or your moped-riding drug dealer's location -- is saved and integrated into Google's search engine algorithm for a period of 18 months. Google knows you probably find this creepy. That's why the company uses so-called "dark patterns" -- user interfaces crafted to coax us into choosing options we might not otherwise, for example by highlighting an option with certain fonts or brighter colors.

2. Google Maps Limits Its Features If You Don't Share Your Search History: If you open your Google Maps app, you'll see a circle in the top right corner that signifies you're logged in with your Google account. That's not necessary, and you can simply log out. Of course, the log out button is slightly hidden, but can be found like this: click on the circle > Settings > scroll down > Log out of Google Maps. Unfortunately, Google Maps won't let you save frequently visited places if you're not logged into your Google account. If you choose not to log in, when you click on the search bar you get a "Tired of typing?" button, suggesting you sign in, and coaxing you towards more data collection.

3. Google Maps Can Snitch On You: Another problematic feature is the "Google Maps Timeline," which "shows an estimate of places you may have been and routes you may have taken based on your Location History." With this feature, you can look at your personal travel routes on Google Maps, including the means of transport you probably used, such as a car or a bike. The obvious downside is that your every move is known to Google, and to anyone with access to your account. And that's not just hackers -- Google may also share data with government agencies such as the police. [...] If your "Location History" is on, your phone "saves where you go with your devices, even when you aren't using a specific Google service," as is explained in more detail on this page. This feature is useful if you lose your phone, but also turns it into a bonafide tracking device.

4. Google Maps Wants to Know Your Habits: Google Maps often asks users to share a quick public rating. "How was Berlin Burger? Help others know what to expect," suggests the app after you've picked up your dinner. This feels like a casual, lighthearted question and relies on the positive feeling we get when we help others. But all this info is collected in your Google profile, making it easier for someone to figure out if you're visiting a place briefly and occasionally (like on holiday) or if you live nearby.

5. Google Maps Doesn't Like It When You're Offline: Remember GPS navigation? It might have been clunky and slow, but it's a good reminder that you don't need to be connected to the internet to be directed. In fact, other apps offer offline navigation. On Google, you can download maps, but offline navigation is only available for cars. It seems fairly unlikely the tech giant can't figure out how to direct pedestrians and cyclists without internet.

6. Google Makes It Seem Like This Is All for Your Own Good: "Providing useful, meaningful experiences is at the core of what Google does," the company says on its website, adding that knowing your location is important for this reason. They say they use this data for all kinds of useful things, like "security" and "language settings" -- and, of course, selling ads. Google also sells advertisers the possibility to evaluate how well their campaigns reached their target (that's you!) and how often people visited their physical shops "in an anonymized and aggregated manner". But only if you opt in (or you forget to opt out).

United States

Commerce Department Announces Stay of TikTok Shutdown Order (wsj.com) 21

The Commerce Department said Thursday that it won't enforce its order that would have effectively forced the Chinese-owned TikTok video-sharing app to shut down, citing a federal court ruling in Philadelphia. From a report: The department's action delays implementation of a regulation, set to take effect Thursday, that would have barred U.S. companies such as Apple from offering TikTok as a mobile app, and companies including Amazon.com and Alphabet from offering web-hosting service for TikTok -- moves that would effectively make it inoperable. In making its decision, the Commerce Department cited a preliminary injunction against the shutdown last month by U.S. District Judge Wendy Beetlestone in Philadelphia in a suit brought by three TikTok stars: comedian Douglas Marland, fashion guru Cosette Rinab and musician Alex Chambers. The Commerce Department statement said that the shutdown order won't go into effect "pending further legal developments." In the Philadelphia case, Judge Beetlestone said the government action "presents a threat to the 'robust exchange of informational materials'" and therefore likely exceeds the government's authority under the International Emergency Economic Powers Act, the law the Trump administration has relied on to take action against TikTok. Two other court cases are pending. TikTok has filed its own request for an injunction for the shutdown in a case before U.S. District Judge Carl Nichols in Washington.
Government

Swiss Report Reveals New Details On CIA Spying Operation (washingtonpost.com) 36

An anonymous reader quotes a report from The Washington Post: The CIA and German intelligence jeopardized Switzerland's historic reputation for neutrality by using a Swiss company as a platform for a global espionage operation for decades, according to a report released Tuesday by members of the Swiss parliament. Investigators concluded that Swiss authorities were aware of, and at times complicit in, an elaborate espionage operation in which the CIA covertly owned and controlled a Swiss company, Crypto AG, that secretly sold rigged encryption systems to foreign governments.

The report marks the culmination of a Swiss investigation launched after the history of the Crypto operation was revealed earlier this year by The Washington Post in collaboration with ZDF, German public television, and Swiss broadcaster SRF. The Crypto operation exploited "Switzerland's image abroad as a neutral state," according to the report, which also said that Swiss authorities had effectively allowed the CIA and its German counterpart, the BND, to carry out "intelligence operations to the detriment of other states by hiding behind a Swiss company." The probe marks the first public accounting by a foreign government of an espionage operation so successful and extensive that a classified CIA history referred to it as "the intelligence coup of the century." The CIA did not respond to a request for comment, and the BND previously declined to comment.

Privacy

Face For Sale: Leaks and Lawsuits Blight Russia Facial Recognition (trust.org) 13

The rise of cloud computing and AI have popularised face recognition technology globally, but at what cost? From a report: When Anna Kuznetsova saw an ad offering access to Moscow's face recognition cameras, all she had to do was pay 16,000 roubles ($200) and send a photo of the person she wanted spying on. The 20-year-old -- who was acting as a volunteer for a digital rights group investigating leaks in Moscow's pervasive surveillance system -- sent over a picture of herself and waited. Two days later and her phone buzzed. The seller had forwarded the paralegal a detailed list of all the addresses in the Russian capital where she had been spotted by cameras over the previous month, her lawyers said. "It was really incredible," said Sarkis Darbinyan, a lawyer for Roskomsvoboda, the group behind the investigation. "We got a report of all her movements in Moscow." The incident is now under police investigation. Far from an aberration, the incident is at the centre of one of several lawsuits brought in recent months by rights activists against the Russian authorities over their use of face recognition. The rise of cloud computing and AI technologies have popularised the technology globally, with supporters saying it promises greater security and efficiency. But the backlash is growing, too, as critics say benefits come at the cost of lost privacy and increased surveillance.
Crime

Microsoft Engineer Gets Nine Years For Stealing $10 Million From Microsoft (arstechnica.com) 41

A former Microsoft software engineer from Ukraine has been sentenced to nine years in prison for stealing more than $10 million in store credit from Microsoft's online store. Ars Technica reports: From 2016 to 2018, Volodymyr Kvashuk worked for Microsoft as a tester, placing mock online orders to make sure everything was working smoothly. The software automatically prevented shipment of physical products to testers like Kvashuk. But in a crucial oversight, it didn't block the purchase of virtual gift cards. So the 26-year-old Kvashuk discovered that he could use his test account to buy real store credit and then use the credit to buy real products.

At first, Kvashuk bought an Office subscription and a couple of graphics cards. But when no one objected to those small purchases, he grew much bolder. In late 2017 and early 2018, he stole millions of dollars worth of Microsoft store credit and resold it online for bitcoin, which he then cashed out using Coinbase. US prosecutors say he netted at least $2.8 million, which he used to buy a $160,000 Tesla and a $1.6 million waterfront home (his proceeds were less than the value of the stolen credit because he had to sell at a steep discount).

Kvashuk made little effort to cover his tracks for his earliest purchases. But as his thefts got bigger, he took more precautions. He used test accounts that had been created by colleagues for later thefts. This was easy to do because the testers kept track of test account credentials in a shared online document. He used throwaway email addresses and began using a virtual private networking service. Before cashing out the bitcoins, he sent them to a mixing service in an attempt to hide their origins. Kvashuk reported the bitcoin windfall to the IRS but claimed the bitcoins had been a gift from his father.

Privacy

Tim Berners Lee's Startup Inrupt Releases Privacy Platform for Enterprises (techcrunch.com) 20

Inrupt, the startup from World Wide Web founder Tim Berners-Lee, announced an enterprise version of the Solid privacy platform today, which allows large organizations and governments to build applications that put users in control of their data . From a report: Berners-Lee has always believed that the web should be free and open, but large organizations have grown up over the last 20 years that make their money using our data. He wanted to put people back in charge of their data, and the Solid open source project, developed at MIT, was the first step in that process. Three years ago he launched Inrupt, a startup built on top of the open source project, and hired John Bruce to run the company. The two shared the same vision of shifting data ownership without changing the way websites get developed. With Solid, developers use the same standards and methods of building sites, and these applications will work in any browser. What Solid aims to do is alter the balance of data power and redirect it to the user. "Fast forward to today, and we're releasing the first significant technology as the fruits of our labor, which is an enterprise version of Solid to be deployed at scale by large organizations," Bruce explained.

The core idea behind this approach is that users control their data in online storage entities called Personal Online Data Stores or Pods for short. The enterprise version consists of Solid Server to manage the Pods, and developers can build applications using an SDK to take advantage of the Pods and access the data they need to do a particular job like pay taxes or interact with a healthcare provider. Bruce points out that the enterprise version is fully compatible with the open source Solid project specifications. The company has been working with some major organizations prior to today's release including the BBC and National Health Service in the UK and the Government of Flanders in Belgium as they have been working to bring this to market.

Electronic Frontier Foundation

HP Replaces 'Free Ink for Life' Plan With '99 Cents a Month Or Your Printer Stops Working' (eff.org) 193

In a new essay at EFF.org, Cory Doctorow re-visits HP's anti-consumer "security updates" that disabled third-party ink cartridges (while missing real vulnerabilities that could actually bypass network firewalls).

Doctorow writes that it was just the beginning: HP's latest gambit challenges the basis of private property itself: a bold scheme! With the HP Instant Ink program, printer owners no longer own their ink cartridges or the ink in them. Instead, HP's customers have to pay a recurring monthly fee based on the number of pages they anticipate printing from month to month; HP mails subscribers cartridges with enough ink to cover their anticipated needs. If you exceed your estimated page-count, HP bills you for every page (if you choose not to pay, your printer refuses to print, even if there's ink in the cartridges). If you don't print all your pages, you can "roll over" a few of those pages to the next month, but you can't bank a year's worth of pages to, say, print out your novel or tax paperwork. Once you hit your maximum number of "banked" pages, HP annihilates any other pages you've paid for (but continues to bill you every month).

Now, you may be thinking, "All right, but at least HP's customers know what they're getting into when they take out one of these subscriptions," but you've underestimated HP's ingenuity. HP takes the position that its offers can be retracted at any time. For example, HP's "Free Ink for Life" subscription plan offered printer owners 15 pages per month as a means of tempting users to try out its ink subscription plan and of picking up some extra revenue in those months when these customers exceeded their 15-page limit. But Free Ink for Life customers got a nasty shock at the end of last month: HP had unilaterally canceled their "free ink for life" plan and replaced it with "a $0.99/month for all eternity or your printer stops working" plan...

For would-be robber-barons, "smart" gadgets are a moral hazard, an irresistible temptation to use those smarts to reconfigure the very nature of private property, such that only companies can truly own things, and the rest of us are mere licensors, whose use of the devices we purchase is bound by the ever-shifting terms and conditions set in distant boardrooms. From Apple to John Deere to GM to Tesla to Medtronic, the legal fiction that you don't own anything is used to force you to arrange your affairs to benefit corporate shareholders at your own expense. And when it comes to "razors and blades" business-model, embedded systems offer techno-dystopian possibilities that no shaving company ever dreamed of: the ability to use law and technology to prevent competitors from offering their own consumables. From coffee pods to juice packets, from kitty litter to light-bulbs, the printer-ink cartridge business-model has inspired many imitators.

HP has come a long way since the 1930s, reinventing itself several times, pioneering personal computers and servers. But the company's latest reinvention as a wallet-siphoning ink grifter is a sad turn indeed, and the only thing worse than HP's decline is the many imitators it has inspired.

China

Antitrust Investigations and Policy Towards China: How Biden's Victory Impacts Tech (adweek.com) 61

Adweek has published an article titled "What to Expect: How a Biden Administration Would Tackle Tech Policy." Some of the highlights: Industry observers have told us they don't expect a change-of-guard to upend the Google lawsuit brought by the Justice Department in concert with 11 state attorneys general over the company's search advertising hegemony. Indeed, we could see a spate of antitrust activity brought to bear on Big Tech during a Biden presidency... "Regardless of who wins the presidential election, antitrust enforcement against Big Tech will continue," said Sally Hubbard, director of enforcement strategy at liberal think tank the Open Markets Institute....

"Biden will take a...tough position on infrastructure companies like Huawei," said Alec Stapp, director of technology policy at the liberal Progressive Policy Institute, but is "less likely to come down hard on consumer apps like TikTok." He expects Biden to talk tough on China, "but with fewer unilateral tariffs and more cooperation from international allies."

United States

President Biden Will Rejoin the World Health Organization on His First Day (futurism.com) 281

"Another of Biden's promises will have particular significance during the ongoing coronavirus pandemic," reports Futurism: Back in July, he promised to reverse the incumbent Donald Trump's controversial April decision to leave the World Health Organization — the United Nations' agency that oversees and coordinates global public health efforts. "Americans are safer when America is engaged in strengthening global health," Biden said at the time.

"On my first day as President, I will rejoin the WHO and restore our leadership on the world stage."

The move wouldn't just be a rebuke to his predecessor. Experts called Trump's move a "dangerous gamble" and "unequivocally dangerous," and entrepreneur and philanthropist Bill Gates slammed the move as being "as dangerous as it sounds." Leaving the WHO seemed particularly reckless in the United States, where the pandemic had already spiraled out of control, surpassing the toll even in China, where it originated. COVID deaths in the US have now surged past 235,000, and daily infections are now hitting daily record highs — harbingers of what could be a brutal period of weeks or months during the waning days of the Trump administration.

United States

What Biden's Victory Means For Net Neutrality - and for Ajit Pai (msn.com) 173

"A victory by Joe Biden in the Nov. 3 election could usher in an abrupt change in the nation's telecommunications policy, restoring so-called net neutrality regulation," Bloomberg recently reported: Biden hasn't talked much about the FCC during the campaign, but his party's platform is specific. It calls for restoring net neutrality rules put in place under then-President Barack Obama when Biden served as vice president and taking a harder line on telecommunications mergers... If Biden wins, the FCC, which currently is at full five-member strength, could begin the new presidential term with a 2-to-1 Democratic majority, allowing it to move quickly. A Republican commissioner is leaving at the end of the current Congress and chairmen traditionally depart as a new administration arrives.

Ajit Pai hasn't indicated what he'll do. He can stay on as a commissioner but a new president could strip him of the chairmanship and its power to control what policies advance to a vote... If Pai stays after a Biden win, "he's denuded of power to do much of anything except to block things," said Andrew Jay Schwartzman, a Washington telecommunications lawyer.

Bloomberg also speculates that in addition, America's FCC "may move to bar broadband providers from exempting their own entertainment or media offerings from data caps." While there had been interest in such a move four years ago, Ajit Pai "squelched an agency move toward doing so soon after taking office in 2016."
NASA

Former Astronaut Wins US Senate Seat Once Held By Republican John McCain (yahoo.com) 82

"Mark Kelly will soon be the fourth NASA astronaut to serve in the U.S. Congress," writes People magazine.

DevNull127 shares their report: In a tweet posted Wednesday, he said he was "deeply honored" to have been elected and to serve in the seat once held by the late Sen. John McCain. A retired U.S. Navy captain and astronaut, Kelly has flown in four space missions, including the final mission of Space Shuttle Endeavour in 2011. He is married to former Arizona Congresswoman Gabby Giffords, [who] was shot and nearly killed in 2011.

His identical twin Scott Kelly is also a retired astronaut. The two participated in NASA's landmark "twins study," in which Scott spent a year aboard the space station while scientists collected Mark's physiological data back home for comparison...

When he is sworn in, Kelly will be the only active member of Congress to have flown in space. He is preceded by three former NASA astronauts: former Sens. John Glenn and Jack Schmitt and Rep. Jack Swigert. Two other former members of Congress — Sen. Jake Garn and Rep. Bill Nelson — have flown in space as payload specialists. Apollo 13 astronaut John "Jack" Swigert was elected to the House of Representatives in 1982, but died of cancer before he could take office.

Saturday Kelly tweeted, "Congratulations to Joe Biden and Kamala Harris. We've got some challenges ahead of us, and I'm looking forward to working together to tackle them."

And the same day his brother Scott Kelly tweeted a memory about the moment he left the International Space Station after 500 days, "looked out the window of our space capsule at the truss, and was struck with awe at how we came together & accomplished this great feat.

"And that if we can do this, we can do anything if we commit ourselves and work together."
United States

Uber and Lyft Will Push For More Laws Classifying Drivers as Independent Contractors (msn.com) 73

"Uber helped wage a $200 million war in California to keep drivers as contractors," notes the Washington Post — successfully funding a ballot proposition that overrides a high-stakes 2019 law which insisted drivers be considered employees.

"But now that the ballot measure has passed, the company says its work isn't done..."

The ride-hailing giant's CEO said Thursday that Uber is looking to expand the model to other states, joining an executive from rival Lyft who said something similar earlier this week... "Going forward, you'll see us more loudly advocating for...laws like Prop 22," Uber CEO Dara Khosrowshahi said, adding later: "We were the first to come forward with this [independent contractor]-plus model, the idea that drivers deserve flexibility plus benefits. We want to have a dialogue with governments [in] other states..."

Uber and Lyft's stocks have rallied this week, logging percentage gains in the double digits as investors reacted to the news that they would not have to make drivers employees.

The proposition promises independent contractors 120% of the minimum wage plus contributions to healthcare equivalent to what other employers currently provide (or half that amount for employees averaging less than 25 hours a week but more than 15). But the Post points out that "Unlike full employment, however, benefits are calculated based on a driver's active time, negating the potential hours per week they spend waiting for a fare while logged onto the apps..."

Uber's chief financial officer told the Post that the new benefits "will result in probably a 5% increase to cover the incremental [costs]," including benefits, adding "We do believe that it'll be manageable."

The Post adds that labor advocates "fiercely opposed Proposition 22, saying it was a transparent attempt to snatch newly enshrined employment rights from workers."
Electronic Frontier Foundation

EFF Argues RIAA is 'Abusing DMCA' to Take Down YouTube-DL (eff.org) 49

While the RIAA has objected to a tool for downloading online videos, EFF senior activist Elliot Harmon responds with this question. "Who died and put them in charge of YouTube?"

He asks the question in a new video "explainer" on the controversy, and argues in a new piece at EFF.org that the youtube-dl tool "doesn't infringe on any RIAA copyrights." RIAA's argument relies on a different section of the DMCA, Section 1201. DMCA 1201 says that it's illegal to bypass a digital lock in order to access or modify a copyrighted work. Copyright holders have argued that it's a violation of DMCA 1201 to bypass DRM even if you're doing it for completely lawful purposes; for example, if you're downloading a video on YouTube for the purpose of using it in a way that's protected by fair use. (And thanks to the way that copyright law has been globalized via trade agreements, similar laws exist in many other jurisdictions too.) RIAA argues that since youtube-dl could be used to download music owned by RIAA-member labels, no one should be able to use the tool, even for completely lawful purposes.

This is an egregious abuse of the notice-and-takedown system, which is intended to resolve disputes over allegedly infringing material online. Again, youtube-dl doesn't use RIAA-member labels' music in any way. The makers of youtube-dl simply shared information with the public about how to perform a certain task — one with many completely lawful applications.

Harmon wants to hear from people using youtube-dl for lawful purposes. And he also links to an earlier EFF piece arguing that DMCA 1201 "is incredibly broad, apparently allowing rightsholders to legally harass any 'trafficker' in code that lets users re-take control of their devices from DRM locks..."

And EFF's concern over DMCA 1201 has been ongoing: DMCA 1201 has been loaded with terrible implications for innovation and free expression since the day it was passed. For many years, EFF documented these issues in our "Unintended Consequences" series; we continue to organize and lobby for temporary exemptions to its provisions for the purposes of cellphone unlocking, restoring vintage videogames and similar fair uses, as well as file and defend lawsuits in the United States to try and mitigate its damage. We look forward to the day when it is no longer part of U.S. law.

But due to the WIPO Copyright Treaty, the DMCA's anti-circumvention provisions infest much of the world's jurisdictions too, including the European Union via the Information Society Directive 2001/29/EC.

Earth

A Biden Victory Positions America For a 180-Degree Turn On Climate Change (seattletimes.com) 251

"Joe Biden, the projected winner of the U.S. presidency, will move to restore dozens of environmental safeguards President Donald Trump abolished," reports the Washington Post, "and launch the boldest climate change plan of any president in history."

destinyland shares their report: While some of Biden's most sweeping programs will encounter stiff resistance from Senate Republicans and conservative attorneys general, the United States is poised to make a 180-degree turn on climate change and conservation policy. Biden's team already has plans on how it will restrict oil and gas drilling on public lands and waters; ratchet up federal mileage standards for cars and SUVs; block pipelines that transport fossil fuels across the country; provide federal incentives to develop renewable power; and mobilize other nations to make deeper cuts in their own carbon emissions... Biden has vowed to eliminate carbon emissions from the electric sector by 2035 and spend $2 trillion on investments ranging from weatherizing homes to developing a nationwide network of charging stations for electric vehicles.

That massive investment plan stands a chance only if his party wins two Senate runoff races in Georgia in January; otherwise, he would have to rely on a combination of executive actions and more-modest congressional deals to advance his agenda.

Still, a number of factors make it easier to enact more-ambitious climate policies than even four years ago. Roughly 10% of the globe has warmed by 2 degrees Celsius (3.6 degrees Fahrenheit), a temperature rise the world has pledged to avoid. The price of solar and wind power has dropped, the coal industry has shrunk, and Americans increasingly connect the disasters they're experiencing in real time — including more-intense wildfires, hurricanes and droughts — with global warming. Biden has made the argument that curbing carbon will produce high-paying jobs while protecting the planet...

Some of the new administration's rules could be challenged in federal court, which have a number of Trump appointees on the bench. But even some conservative activists said that Biden could enact enduring policies, whether by partnering with Congress or through regulation... The new administration may be able to broker compromises with key industries that have experienced regulatory whiplash in the past decade, including the auto industry and power sector, while offering tax breaks for renewable energy that remain popular with both parties. And Biden can rebuild diplomatic alliances that will spur foreign countries to pursue more-ambitious carbon reductions...

Biden's advisers have said that they plan to elevate climate change as a priority in departments that have not always treated it as one, including the Transportation, State and Treasury departments. It will influence key appointments, affecting everything from overseas banking and military bases to domestic roads and farms.... Biden's pledge to achieve a carbon-free U.S. power sector within 15 years would mean the closing or revamping of nearly every coal- and gas-fired power plant around the country, and the construction of an unprecedented number of new wind turbines and solar farms. On top of that, engineers still need to devise a better way of storing energy when the sun is not shining or the wind is not blowing.

"If I were advising Biden on energy, my first three priorities would be storage, storage and storage," said Sen. Angus King, I-Maine, who worked in the alternative energy businesses before running for office.

Transportation

Boeing's 737 Max: Carrying Passengers Again In December? (sfgate.com) 85

"Boeing's much-maligned 737 Max jet could be cleared to fly again in just a few weeks," reports SFGate, adding that one U.S. airline plans to carry passengers "as early as December." Although the Federal Aviation Administration has not disclosed a public timeline for the Max's return to service, approval to lift the grounding could come as early as mid-November, according to Reuters. Boeing executives said they expect to gain FAA recertification before the end of the year. The company will also need to get approval from the European Union Aviation Safety Agency and Transport Canada, which are conducting their own respective reviews...

American Airlines said it plans to operate one daily Boeing 737 Max roundtrip from Dec. 29 through Jan. 4 between its Miami hub and New York's LaGuardia Airport. If it takes off, American will be the first US carrier to bring back the Max...

Other U.S. airlines operating the Max are taking a wait-and-see approach before assigning the fleet type to flights.

Transportation

Electric Bike Motors Will Be Shut Down When Entering Residential Areas of Amsterdam (theguardian.com) 106

In an effort to cut road deaths, the Dutch government will be using a new digital system to automatically reduce electric bicycles' power in residential or built-up areas of Amsterdam. The Guardian reports: The digital technology, which has been successfully trialled on a 4km stretch of bike lanes at Schiphol airport, was funded by the Dutch ministry of infrastructure and water management. The not-for-profit Townmaking Institute behind the concept is working with e-bike manufacturers and government authorities with the expectation that the speed-cutting technology and new regulations could be rolled out by 2022.

Sixty-five people died last year while riding e-bikes, which have an integrated electric motor to propel the wheels, up from 57 in 2018. The vast majority were men over the age of 65. The standard e-bike reaches speeds of 12mph (20km/h), but faster models, such as speed pedelecs, can reach 28mph. Discussions over the use of the technology are most advanced with the municipality of Amsterdam, but the provinces of Gelderland and North Holland are also said to have shown an interest.

The technology trialled at Schiphol offers policymakers a range of options. "Say the weather is really bad, there is a headwind of 40km and cyclists are at a standstill, then cutting off the power would be counterintuitive," said [Indranil Bhattacharya, a technology strategist at the Townmaking Institute]. "We built it so you can detect the direction the bike is going, and a policymaker can say: 'We change the regulation. We won't cut your power off because the weather is bad.' The intelligent infrastructure would then tell the bicycle not to cut off the power.â The infrastructure could also inform an e-bike of upcoming obstacles or junctions, by alerting cyclists with a gentle vibration of the handlebars.

Cellphones

T-Mobile Will Stop Saying Its 5G Network Is Better Than It Actually Is (gizmodo.com) 36

Earlier this week, the FCC fined T-Mobile $200 million for its abuse of Sprint's Lifeline program for low-income consumers -- the largest fine to be paid in commission history. Now, the Better Business Bureau's National Advertising (NAD) is telling T-Mobile to tone down its misleading 5G claims about having the "best 5G network." Gizmodo reports: The NAD's investigation of T-Mobile's 5G claims, reported by Android Police, concluded yesterday. While the BBB division found that some of the carrier's post-Sprint merger claims had merit, like T-Mobile's assertion that it will build the nation's largest 5G network due to the merger, it asked the carrier to change the language of some of its other misleading claims. Specifically, the NAD took issue with T-Mobile telling consumers they will get the best 5G network. NAD said that consumers could "reasonably interpret" these claims to mean T-Mobile currently provides the best 5G network and that T-Mobile customers will "imminently" have 5G coverage when that's not currently the case.

"NAD determined that the challenged advertisements did not reasonably convey a present-tense message that the aspirational future benefits from T-Mobile are presently available to consumers," the group said. "NAD recommended that the challenged advertising be modified to avoid conveying such messages."

Privacy

Apple Says New 'Nutrition Labels' For App Privacy Will Be Required Starting December 8 (9to5mac.com) 11

Apple has announced today that developers will be required to provide new privacy details to users in the App Store starting December 8. From a report: These privacy "nutrition labels" were first introduced at WWDC over the summer, with Apple saying the goal is to better inform consumers of the privacy practices of individual applications. In a post on the Apple Developer webpage today, Apple confirmed that the new privacy details will be required for new apps and app updates to the App Store starting on December 8.

Slashdot Top Deals