Alterslash picks up to the best 5 comments from each of the day’s Slashdot stories, and presents
them on a single page for easy reading.
Satellites May Have Been Underestimating the Planet's Warming For Decades
An anonymous reader quotes a report from LiveScience:
The global warming that has already taken place may be even worse than we thought. That's the takeaway from a new study that finds satellite measurements have likely been underestimating the warming of the lower levels of the atmosphere over the last 40 years. Basic physics equations govern the relationship between temperature and moisture in the air, but many measurements of temperature and moisture used in climate models diverge from this relationship, the new study finds. That means either satellite measurements of the troposphere have underestimated its temperature or overestimated its moisture, study leader Ben Santer, a climate scientist at Lawrence Livermore National Laboratory (LLNL) in California, said in a statement.
"It is currently difficult to determine which interpretation is more credible," Santer said. "But our analysis reveals that several observational datasets -- particularly those with the smallest values of ocean surface warming and tropospheric warming -- appear to be at odds with other, independently measured complementary variables." Complementary variables are those with a physical relationship to each other. In other words, the measurements that show the least warming might also be the least reliable. The findings have been
published in the Journal of Climate.
Twitter Could Be Working On Facebook-Style Reactions
Twitter
could be adding some new emojis to augment its formerly star-shaped, currently heart-shaped Like button,
according to app researcher Jane Manchun Wong. The Verge reports:
The assets Wong found -- which have been reliable predictions of future features in the past -- show "cheer," "hmm," "sad," and "haha" emoji reactions, though some currently only have a placeholder emoji. Facebook has had a similar set of reactions since 2016. But Wong's leak shows that Twitter could be taking a slightly different path when it comes to which moods it wants users to express: while it has laughing and sad expressions in common with Facebook, Twitter may also include a makes-you-think and cheer option. Twitter doesn't seem to have the "angry" expression that Facebook does, but that may be because anger on Twitter is already handled by the reply and quote tweet functions.
WhatsApp Says It Won't Limit Functionality If You Refuse Its Privacy Policy -- For Now
Since it was first announced in January, WhatsApp's
new privacy policy has received a lot of criticism not only for sharing a significant amount of user data with Facebook but because the app threatened to cut functionality over time if users didn't accept it. Now, according to The Next Web, the Facebook-owned app says it
won't restrict any functionality, even if you don't accept the policy for now. From the report:
[WhatsApp said in statement:] "Given recent discussions with various authorities and privacy experts, we want to make clear that we currently have no plans to limit the functionality of how WhatsApp works for those who have not yet accepted the update. Instead, we will continue to remind users from time to time about the update as well as when people choose to use relevant optional features, like communicating with a business that is receiving support from Facebook."
In the future, this could change, but WhatsApp is trying to keep its user base, and governments around the world happy. After the policy was first introduced in January, a ton of users started shifting to other platforms such as Telegram and Signal. Last week, India asked WhatsApp to retract its privacy policy. It sent a notice to WhatsApp saying that the new policy is in violation of the country's laws.
Apps Reportedly Limited To Maximum of 5GB RAM In iPadOS, Even With 16GB M1 iPad Pro
Despite Apple offering the M1 iPad Pro in configurations with 8GB and 16GB of RAM, developers are now indicating that
apps are limited to just 5GB of RAM usage, regardless of the configuration the app is running on. MacRumors reports:
The M1 iPad Pro comes in two memory configurations; the 128GB, 256GB, and 512GB models feature 8GB of RAM, while the 1TB and 2TB variants offer 16GB of memory, the highest ever in an iPad. Even with the unprecedented amount of RAM on the iPad, developers are reportedly severely limited in the amount they can actually use. Posted by the developer behind the graphic and design app Artstudio Pro on the Procreate Forum, apps can only use 5GB of RAM on the new M1 iPad Pros. According to the developer, attempting to use anymore will cause the app to crash: "There is a big problem with M1 iPad Pro. After making stress test and other tests on new M1 iPad Pro with 16GB or RAM, it turned out that app can use ONLY 5GB or RAM! If we allocate more, app crashes. It is only 0.5GB more that in old iPads with 6GB of RAM! I suppose it isn't better on iPad with 8GB." Following the release of its M1-optimized app, Procreate also noted on Twitter that with either 8GB or 16GB of available RAM, the app is limited by the amount of RAM it can use.
US Soldiers Expose Nuclear Weapons Secrets Via Flashcard Apps
An anonymous reader quotes a report from Bellingcat:
For US soldiers tasked with the custody of nuclear weapons in Europe, the stakes are high. Security protocols are lengthy, detailed and need to be known by heart. To simplify this process, some service members have been using publicly visible flashcard learning apps -- inadvertently revealing a multitude of sensitive security protocols about US nuclear weapons and the bases at which they are stored. While the presence of US nuclear weapons in Europe has long been detailed by various leaked documents, photos and statements by retired officials, their specific locations are officially still a secret with governments neither confirming nor denying their presence. As many campaigners and parliamentarians in some European nations see it, this ambiguity has often hampered open and democratic debate about the rights and wrongs of hosting nuclear weapons.
However, the flashcards studied by soldiers tasked with guarding these devices reveal not just the bases, but even identify the exact shelters with "hot" vaults that likely contain nuclear weapons. They also detail intricate security details and protocols such as the positions of cameras, the frequency of patrols around the vaults, secret duress words that signal when a guard is being threatened and the unique identifiers that a restricted area badge needs to have. Like their analogue namesakes, flashcard learning apps are popular digital learning tools that show questions on one side and answers on the other. By simply searching online for terms publicly known to be associated with nuclear weapons, Bellingcat was able to discover cards used by military personnel serving at all six European military bases reported to store nuclear devices. Experts approached by Bellingcat said that these findings represented serious breaches of security protocols and raised renewed questions about US nuclear weapons deployment in Europe. The report notes that some of the flashcards "had been publicly visible online as far back as 2013," while others "detailed processes that were being learned by users until at least April 2021."
Crucially, all flashcards mentioned in the article "have been taken down from the learning platforms on which they appeared after Bellingcat reached out to NATO and the US Military for comment prior to publication," the report states.
Should Microsoft Have Kept Mum On Gates, Nixed Employee Board Representation?
theodp writes:
Video of Microsoft's Annual Shareholder Meeting in Dec. 2019, at which the company's Board of Directors dismissed the idea that employee Board representation was necessary to combat issues -- including sexual harassment -- takes on new significance in light of the company's response to a recent WSJ report that Bill Gates left the Microsoft Board in March 2020 amid a probe launched in late 2019 into a prior relationship with a staffer that was deemed inappropriate. "Microsoft received a concern in the latter half of 2019 that Bill Gates sought to initiate an intimate relationship with a company employee in the year 2000," a Microsoft spokesman said in response to the WSJ story. "A committee of the Board reviewed the concern, aided by an outside law firm to conduct a thorough investigation."
At the 2019 Annual Meeting, Microsoft Board Chair John Thompson kicked things off by thanking shareholders for their trust before introducing the nominees for the board of directors who were in attendance, starting with "Bill Gates, our cofounder." Attention then turned to "a shareholder proposal requesting a report on Employee Representation on the Board of Directors," which shareholder advocate Mari Schwartzer argued was called for in light of "alleged gender discrimination and sexual harassment within our company." Unswayed by that argument, Microsoft Corporate Secretary Dev Stahlkopf responded that the Board had decided to nix the proposal as unnecessary, explaining that "the Board is already deeply engaged on providing oversight of workplace culture," which she noted included "receiving direct feedback from employees through anonymous polls."
Schwartzer made the same proposal -- which again fell on deaf Board ears -- the next year at Microsoft's Dec. 2020 Annual Meeting. Gates was no longer on the Board at that time -- he resigned in Mar. 2020 just three months after his re-election for what Microsoft billed to the SEC as a chance to devote himself more fully to philanthropy, repeating the same reasons Gates provided in a self-published LinkedIn post (no connection was made between his departure and the Board's investigation, and a recent statement from a Gates spokesperson insisted, "Bill's decision to transition off the board was in no way related to this matter"). However, the Microsoft Board of Directors made sure shareholders were aware of Bill's continuing influence at Microsoft in a letter included in Microsoft's 2020 SEC proxy filing. The Board wrote, "This year, Co-Founder and Technology Advisor Bill Gates stepped down from the Company's Board of Directors to dedicate more time to his philanthropic priorities. He continues to serve as Technology Advisor to CEO Satya Nadella and other leaders in the Company. The Board has benefited from Bill's leadership and vision in innumerable ways over the years, and we are grateful for his contributions and insights."
In an interview on CNBC last Friday, Microsoft CEO Satya Nadella was pressed to address the issue of Bill Gates' acknowledged 2000 affair with a Microsoft employee. "The power dynamic in the workplace is not something that can be abused in any form," Nadella replied, "and the most important thing is for us to make sure that everybody is comfortable in being able to raise any issues they see, and for us to be able to fully investigate it." So, with all of the revelations and bad press, will Microsoft's Board reject the idea of Employee Board Representation for a third year straight while keeping mum on Gates later this year at the 2021 Annual Shareholders Meeting?
UK Police Stumble Upon Bitcoin Mine While Looking For Cannabis Farm
phalse phace shares a report from the BBC:
A suspected Bitcoin "mining" operation illegally stealing electricity has been found by police who were searching for a cannabis farm. Officers had been tipped off about the site on the Great Bridge Industrial Estate, Sandwell, and raided it on May 18, West Midlands Police said. Instead of cannabis plants they found a bank of about 100 computer units. The force said the cryptocurrency "mine" had effectively stolen thousands of pounds of electricity. Inquiries with network operator Western Power Distribution found an illegal connection to the electricity supply.
Detectives said they were tipped off about lots of people visiting the unit throughout the day and a police drone picked up a lot of heat coming from the building. Sgt Jennifer Griffin said, given the signs, they had expected to find a cannabis farm. "It had all the hallmarks of a cannabis cultivation set-up and I believe it is only the second such crypto mine we have encountered in the West Midlands," she said. The computer equipment has been seized but no arrests have been made, the force said.
AI Could Soon Write Code Based On Ordinary Language
An anonymous reader quotes a report from Wired:
On Tuesday, Microsoft and OpenAI shared plans to bring GPT-3, one of the world's most advanced models for generating text, to programming based on natural language descriptions. This is the first commercial application of GPT-3 undertaken since Microsoft invested $1 billion in OpenAI last year and gained exclusive licensing rights to GPT-3. "If you can describe what you want to do in natural language, GPT-3 will generate a list of the most relevant formulas for you to choose from," said Microsoft CEO Satya Nadella in a keynote address at the company's Build developer conference. "The code writes itself."
Microsoft VP Charles Lamanna told WIRED the sophistication offered by GPT-3 can help people tackle complex challenges and empower people with little coding experience. GPT-3 will translate natural language into PowerFx, a fairly simple programming language similar to Excel commands that Microsoft introduced in March. Microsoft's new feature is based on a neural network architecture known as Transformer, used by big tech companies including Baidu, Google, Microsoft, Nvidia, and Salesforce to create large language models using text training data scraped from the web. These language models continually grow larger. The largest version of Google's BERT, a language model released in 2018, had 340 million parameters, a building block of neural networks. GPT-3, which was released one year ago, has 175 billion parameters. Such efforts have a long way to go, however. In one recent test, the best model succeeded only 14 percent of the time on introductory programming challenges compiled by a group of AI researchers. Still, researchers who conducted that study conclude that tests prove that "machine learning models are beginning to learn how to code."
Biden Administration Continues To Defend Social Media Registration Requirement in Court
In a terse court filing on Friday, the Biden administration indicated that it would continue to defend a controversial Trump administration rule that
requires millions of visa applicants each year to register their social media handles with the U.S. government. From a report:
The registration requirement, which stems from the Muslim ban, is the subject of an ongoing First Amendment challenge filed by the Knight Institute, the Brennan Center, and the law firm Simpson Thacher on behalf of two documentary film organizations, Doc Society and the International Documentary Association.
Big Video Game Leaks Like 'Far Cry 6' Are Nearly Impossible To Stop
Big games beget big leaks, especially this time of year when the gaming industry's porous promotional machinery is revving up for the E3 trade show. From a report:
It happened again Thursday when eight minutes of Ubisoft's upcoming "Far Cry 6" leaked online, a day before it was supposed to appear. It was deleted in minutes, but thousands still saw it. Big video game leaks are nearly impossible to stop. Companies have tried many things to tighten the pipes, including blacklisting press outlets and suing leakers. But the more prominent the upcoming game, the more people involved, and the higher the public curiosity, the more likely the leak.
"There's just too many opportunities for a mid level employee to have their laptop open on a plane in games," former Ubisoft creative director Alex Hutchinson told Axios, citing the notorious way the name of a previously-secretive mega-game leaked in 2013. (Sometimes those open laptops are on a subway.) The "Far Cry 6" incident appears to involve confusion over a coverage embargo date. The footage was posted to YouTube by Polish YouTuber Patryk "Rojson" Rojewski, who told Axios that he had been provided the clips by Ubisoft under an agreement that said they could run on May 27. Rojewski said he had not been told that Ubisoft changed the date. "I approach my work professionally," he said. Several minutes of video of another upcoming Ubisoft game, "The Division: Heartland," leaked two weeks ago.
Twitch Warns Streamers Another Wave of Copyright Strikes is Coming
Twitch has received a "batch" of new
takedown notices from music publishers over copyrighted songs in recorded streams (known as VODs), the company said in an email to streamers today. From a report:
The notice may be worrying for some streamers who were affected by the waves of takedowns that hit last year, because if a user gets three copyright strikes on their channel, they will be permanently banned from the platform, according to Twitch's policies. With this advance warning, it seems Twitch is trying to get ahead of a sudden flurry of takedowns and give streamers some time to remove potentially offending VODs.
"We recently received a batch of DMCA takedown notifications with about 1,000 individual claims from music publishers," Twitch said in an email Friday, which was sent to a Verge staffer. "All of the claims are for VODs, and the vast majority target streamers listening to background music while playing video games or IRL streaming." [...] In Friday's email, Twitch noted that the only way to avoid DMCA (or Digital Millennium Copyright Act) strikes is to not stream copyrighted material in the first place, and said that if a streamer does have unauthorized content in their VODs or clips, "we strongly recommend that you permanently delete anything that contains that material."
Facebook, WhatsApp, Google and Other Internet Giants Comply With India's IT Rules
Google, Facebook, Telegram, LinkedIn and Tiger Global-backed Indian startups ShareChat and Koo have
either fully or partially complied with the South Asian nation's new IT rules,
TechCrunch reported Friday, citing two people familiar with the matter and a government note. From a report:
India's new IT rules, unveiled in February this year, require firms to appoint and share contact details of representatives tasked with compliance, nodal point of reference and grievance redressals to address on-ground concerns. The aforementioned firms have complied with this requirement, the government note and a person familiar with the matter said. The firms were required to comply with the new IT rules by this week. Twitter has yet to comply with the rules. "Twitter sent a communication late last night, sharing details of a lawyer working in a law firm in India as their Nodal Contact Person and Grievance Officer," a note prepared by New Delhi said, adding that the rules require the aforementioned officials to be direct employees.
Astronaut Chris Hadfield Calls Alien UFO Hype 'Foolishness'
The Canadian astronaut, who commanded the International Space Station and recorded the famous microgravity rendition of David Bowie's Space Oddity, on Sunday spit
some fire at true believers who see a link between UFOs or UAPs (for "unidentified aerial phenomena" in the newish military parlance) and some sort of alien intelligence. From a report:
"Obviously, I've seen countless things in the sky that I don't understand," Chris Hadfield, a former pilot for the Royal Canadian Air Force, said during a CBC Radio call-in show.
"But to see something in the sky that you don't understand and then to immediately conclude that it's intelligent life from another solar system is the height of foolishness and lack of logic." [...] Hadfield added that he does think it's likely there's life somewhere else in the universe. "But definitively up to this point, we have found no evidence of life anywhere except Earth," he said, "and we're looking."
Harvey Schlossberg, Cop With a PhD in Defusing a Crisis, Dies at 85
Harvey Schlossberg, a former New York City traffic cop with a doctorate in psychology who choreographed what became a model law enforcement strategy for safely ending standoffs with hostage takers,
died on May 21 in Brooklyn. He was 85. From a report:
His death, at a hospital, was caused by cardiopulmonary arrest, said his wife, Dr. Antoinette Collarini Schlossberg. The need for a standard protocol for hostage situations became more pressing in 1971 after the botched rescue of guards during the Attica prison riots in upstate New York. The next year, captives were taken in a Brooklyn bank robbery (the inspiration behind the 1975 Al Pacino film "Dog Day Afternoon") and Israeli athletes were seized and massacred by Palestinian terrorists at the Munich Olympics. In a pioneering training film he made for the New York Police Department in 1973, Harvey Schlossberg said that in a hostage situation, police officers "all believed, 'If you gave me the right gun with the right bullet, I can put everybody out.'"
"But I don't think it works that easy," he said. "That's a Hollywood thing." Instead, he counseled patience and "crisis intervention therapy." Delaying tactics, he said, allowed more time for the criminals to make mistakes and, just as crucially, to develop a rapport with their victims, leaving the hostage-takers less likely to harm them. "Harvey faced an uphill battle getting cops to 'negotiate with killers,' because for 130 years the N.Y.P.D.'s official M.O. in barricade situations had been to issue ultimatums, throw in smoke and tear gas, and, if necessary storm the building," Chuck Wexler, executive director of the Police Executive Research Forum, a law enforcement think tank, said in an email. "Many lives were lost. Harvey changed that."
Days Before a Report, Chinese Hackers Removed Malware From Infected Networks
An anonymous reader shares a report:
Last month, security firm FireEye detected a Chinese hacking campaign that exploited a zero-day vulnerability in Pulse Secure VPN appliances to breach defense contractors and government organizations in the US and across Europe. The hacking campaign allowed the threat actors -- two groups which FireEye tracks as UNC2630 and UNC2717 -- to install web shells on Pulse Secure devices, which the attackers used to pivot to internal networks from where they stole internal network credentials, email communications, and sensitive documents.
But in a follow-up report published today, FireEye said it found something strange -- namely that at least one of the groups involved in the attacks began removing its malware from infected networks three days before its researchers exposed the attacks. "Between April 17th and 20th, 2021, Mandiant incident responders observed UNC2630 access dozens of compromised devices and remove webshells like ATRIUM and SLIGHTPULSE," researchers said on Thursday. The threat actor's actions are highly suspicious and raise questions if they knew of FireEye's probing.
Google Nears Settlement of Ad-Tech Antitrust Case in France
Alphabet's Google is
nearing a settlement of an antitrust case in France alleging the company has abused its power in online advertising, and is likely to pay a fine and make operational changes,
WSJ reported Friday, citing people familiar with the matter said. From the report:
The French case is one of the most advanced in the world looking at Google's dominance as a provider of tools for buying and selling ads across the web. As part of the case, France's Competition Authority alleged that the company's advertising server -- historically known as DoubleClick for Publishers (DFP) and used by most large online publishers to sell ad space -- gave Google's online ad auction house, AdX, an advantage against other auction operators, the people said.
The authority also alleged other forms of self-preferencing between Google's advertising technology tools, they added. To settle the French charges, Google has offered to improve the interoperability of AdX with advertising servers run by other companies, as well as to remove some other obstacles faced by competitors, some of the people said. The settlement still must be approved by the authority's board, which could reject the deal, the people said. If approved, the settlement could be announced in coming weeks, they said.
Logitech CEO Says Chip Shortage Could Last for Up To a Year
The global shortage of semiconductor chips could
last three to six months, Logitech Chief Executive Bracken Darrell told Swiss newspaper Finanz und Wirtschaft, with some industries facing shortages of up to a year. From a report:
"Like others we have felt the shortages, but we have been able to cushion them well," Darrell said in an article published on Friday. "It takes time to ramp up production but in the meantime, prices have also adjusted."
Google's Chrome Browser is About To Get a Lot Faster
Google has shipped a new JavaScript compiler for its V8 JavaScript engine in Chrome called Sparkplug that
promises a much faster web experience -- and it does it by 'cheating', according to the engineers on the project. From a report:
Sparkplug is part of Chrome 91, which Google released on Tuesday with security updates but also some key changes under the hood that improve its powerful JavaScript engine, V8. Microsoft relies on V8 these days too after ditching its Chakra JavaScript engine from legacy Edge and moving to Chromium for the new Edge browser and switching to V8. Google says Chrome 91 has 23% faster performance thanks to Sparkplug's integration into V8's JavaScript pipeline.
Microsoft Says SolarWinds Hackers Have Struck Again at the US and Other Countries
The hackers behind one of the worst data breaches ever to hit the US government have launched
a new global cyberattack on more than 150 government agencies, think tanks and other organizations, according to Microsoft.
ytene shares a report:
The group, which Microsoft calls "Nobelium," targeted 3,000 email accounts at various organizations this week -- most of which were in the United States, the company said in a blog post Thursday. It believes the hackers are part of the same Russian group behind last year's devastating attack on SolarWinds -- a software vendor -- that targeted at least nine US federal agencies and 100 companies.
Cybersecurity has been a major focus for the US government following the revelations that hackers had put malicious code into a tool published by SolarWinds. A ransomware attack that shut down one of America's most important pieces of energy infrastructure -- the Colonial Pipeline -- earlier this month has only heightened the sense of alarm. That attack was carried out by a criminal group originating in Russia, according to the FBI. Microsoft said that at least a quarter of the targets of this week's attacks were involved in international development, humanitarian, and human rights work, across at least 24 countries. It said Nobelium launched the attack by gaining access to a Constant Contact email marketing account used by the US Agency for International Development.
The FBI Will Feed Hacked Passwords Directly Into Have I Been Pwned
Australian security researcher Troy Hunt announced today that he granted the US Federal Bureau of Investigation
a direct line to upload new content into Have I Been Pwned, a website that indexes data from security breaches. From a report:
The HIBP creator said that when the FBI discovers password collections during their investigations, they will upload the data into a section of the site called Pwned Passwords. The FBI will provide passwords as SHA-1 and NTLM hashes and not in plain text. No user personal details will be provided, but only the password hashes. The passwords will be added to Pwned Passwords, a collection of more than 613 million leaked passwords. While the main HIBP website allows users to search if their emails, names, or usernames have been leaked online in past security breaches, Pwned Passwords is a smaller and more specialized component of the HIBP site that tells users if a password string has ever been leaked online, without attaching the password to any user details.
Charter Charges More Money For Slower Internet On Streets With No Competition
An anonymous reader quotes a report from Ars Technica:
[According to an article yesterday by Stop the Gap] Charter charges $20 more per month for slower speeds on the street where it faces no serious competition. When customers in two areas purchase the same speeds, the customer on the street without competition could have to pay $40 more per month and would have their promotional rates expire after only one year instead of two. [...] "Charter's offers are address-sensitive," Stop the Cap founder Phillip Dampier wrote. "The cable company knows its competition and almost exactly where those competitors offer service. That is why the company asks for your service address before it quotes you pricing."
Dampier found that Charter offers 200Mbps service for $50 a month "[i]n neighborhoods where Spectrum enjoys a broadband monopoly." Charter charges $70 for 400Mbps service in those same competition-free neighborhoods. But "[j]ust one street away, where Greenlight offers customers the option of gigabit speed over a fiber-to-the-home network, Spectrum's promotional prices are quite different," Dampier wrote. On the competitive street, Charter charges only $30 a month for the same 400Mbps service that costs $70 nearby. As previously noted, customers on the noncompetitive street have to pay $50 for 200Mbps. "Spectrum does not even bother offering new customers its entry-level 200Mbps plan in areas where it has significant fiber competition," Dampier noted, referring to the promotional offers that pop up when you type in an address. "For $20 less per month, you get double that speed." For gigabit-download service, Charter charges $90 a month on the competitive street versus $110 on the noncompetitive street. These are the base prices without fees and taxes.
Charter also offers to lock in the monthly rate for two years in the competitive area, compared to just one year in the noncompetitive area. And that's not all. Charter "charges a hefty $199.99 compulsory installation fee for gigabit service in noncompetitive neighborhoods. Where fiber competition exists, sometimes just a street away, that installation fee plummets to just $49.99," Dampier wrote. He added: "Note similar pricing variability exists in Spectrum service areas around the country, with the most aggressively priced offers reserved for addresses also served by a fiber-to-the-home provider or multiple competitors (e.g., cable company, phone company, Google Fiber or other [competitor]). Current customers typically have to cancel existing service and sign up as a new customer to get these prices." In a statement to Ars, Charter said that "Spectrum Internet retail prices, speeds, and features are consistent in each market -- regardless of the competitive environment." But, as Ars notes, "retail prices" are the standard rates customers pay after promotional rates expire. Stop the Cap showed that Charter's promotional rates vary between competitive and noncompetitive areas.
Chinese Hackers Posing As the UN Human Rights Council Are Attacking Uyghurs
Chinese-speaking hackers are
masquerading as the United Nations in ongoing cyber-attacks against Uyghurs, according to the cybersecurity firms Check Point and Kaspersky. MIT Technology Review reports:
Researchers identified an attack in which hackers posing as the UN Human Rights Council send a document detailing human rights violations to Uyghur individuals. It is in fact a malicious Microsoft Word file that, once downloaded, fetches malware: the likely goal, say the two companies, is to trick high-profile Uyghurs inside China and Pakistan into opening a back door to their computers. "We believe that these cyber-attacks are motivated by espionage, with the endgame of the operation being the installation of a back door into the computers of high-profile targets in the Uyghur community," said Lotem Finkelstein, head of threat intelligence at Check Point, in a statement. "The attacks are designed to fingerprint infected devices, including all of [their] running programs. From what we can tell, these attacks are ongoing, and new infrastructure is being created for what look like future attacks."
In addition to pretending to be from the United Nations, the hackers also built a fake and malicious website for a human rights organization called the "Turkic Culture and Heritage Foundation," according to the report. The group's fake website offers grants -- but in fact, anybody who attempts to apply for a grant is prompted to download a false "security scanner" that is in fact a back door into the target's computer, the researchers explained. "The attackers behind these cyber-attacks send malicious documents under the guise of the United Nations and fake human rights foundations to their targets, tricking them into installing a backdoor to the Microsoft Windows software running on their computers," the researchers wrote. This allows the attackers to collect basic information they seek from the victim's computer, as well as running more malware on the machine with the potential to do more damage. The researchers say they haven't yet seen all the capabilities of this malware. The researchers weren't able to determine an exact known hacking group, but the code in these attacks "was found to be identical to code found on multiple Chinese-language hacking forums and may have been copied directly from there," the report notes.
New Dark Matter Map Reveals Cosmic Mystery
New submitter
rundgong shares a report from the BBC:
An international team of researchers has created the largest and most detailed map of the distribution of so-called dark matter in the Universe. The results are a surprise because they show that it is slightly smoother and more spread out than the current best theories predict. The observation appears to stray from Einstein's theory of general relativity -- posing a conundrum for researchers. The results have been published by the Dark Energy Survey Collaboration.
Using the Victor M Blanco telescope in Chile, the team behind the new work analyzed 100 million galaxies. The map shows how dark matter sprawls across the Universe. The black areas are vast areas of nothingness, called voids, where the laws of physics might be different. The bright areas are where dark matter is concentrated. They are called "halos" because right in the centre is where our reality exists. In their midst are galaxies like our own Milky Way, shining brightly like tiny gems on a vast cosmic web.
According to Dr Jeffrey, who is also part of a department at University College London, the map, clearly shows that galaxies are part of a larger invisible structure. "No one in the history of humanity has been able to look out into space and see where dark matter is to such an extent. Astronomers have been able to build pictures of small patches, but we have unveiled vast new swathes which show much more of its structure. For the first time we can see the Universe in a different way."
Re:Scientists found indicators
Scientists found indicators that not only the first floor is burning but even the second floor seems to be.
Meanwhile people in the hallway are telling people with 2nd degree burns in the rooms itâ(TM)s fine - because the bricks of the building have been molten lava at some point in history and science is obviously still out on how bad the fire is.
They're also yelling about how maybe the first floor isn't actually on fire because if the scientists weren't sure about the second floor then well, they might be wrong about the first floor and anyway my face isn't turning black and crispy why do you ask?