Alterslash

the unofficial Slashdot digest
 

Contents

  1. China Reveals Most Detailed Geological Map of the Moon Ever Created
  2. Europe Plans To Build 100-Qubit Quantum Computer By 2026
  3. Ring Customers Get $5.6 Million In Refunds In Privacy Settlement
  4. Xbox Console Sales Are Tanking As Microsoft Brings Games To PS5
  5. Court Upholds New York Law That Says ISPs Must Offer $15 Broadband
  6. Fake Job Interviews Target Developers With New Python Backdoor
  7. IRS Free Tax Filing Pilot Saved Consumers $5.6 Million In Prep Fees
  8. 45 Drives Adds Linux-Powered Mini PCs, Workstations To Growing Compute Lineup
  9. Thoma Bravo To Take UK Cybersecurity Company Darktrace Private In $5 Billion Deal
  10. Judge Dismisses Superconductivity Physicist’s Lawsuit Against University
  11. British Intelligence Moves To Protect Research Universities From Espionage
  12. Noise From Traffic Stunts Growth of Baby Birds, Study Finds
  13. Millions of IPs Remain Infected By USB Worm Years After Its Creators Left It For Dead
  14. Captchas Are Getting Harder
  15. GNOME Foundation To Focus On Fundraising After Years Running A Deficit

Alterslash picks up to the best 5 comments from each of the day’s Slashdot stories, and presents them on a single page for easy reading.

China Reveals Most Detailed Geological Map of the Moon Ever Created

Posted by BeauHD View on SlashDot Skip
Longtime Slashdot reader AmiMoJo shares a report from Nature:
The Chinese Academy of Sciences (CAS) has released the highest-resolution geological maps of the Moon yet. The Geologic Atlas of the Lunar Globe, which took more than 100 researchers over a decade to compile, reveals a total of 12,341 craters, 81 basins and 17 rock types, along with other basic geological information about the lunar surface. The maps were made at the unprecedented scale of 1:2,500,000. The CAS also released a book called Map Quadrangles of the Geologic Atlas of the Moon, comprising 30 sector diagrams which together form a visualization of the whole Moon. […] China will use the maps to support its lunar ambitions and Liu says that the maps will be beneficial to other countries as they undertake their own Moon missions. Three spacecraft have launched aiming for the Moon so far this year, and in May, China intends to send a craft to collect rocks from the Moon’s far side.

Europe Plans To Build 100-Qubit Quantum Computer By 2026

Posted by BeauHD View on SlashDot Skip
An anonymous reader quotes a report published last week by Physics World:
Researchers at the Dutch quantum institute QuTech in Delft have announced plans to build Europe’s first 100-quantum bit (qubit) quantum computer. When complete in 2026, the device will be made publicly available, providing scientists with a tool for quantum calculations and simulations. The project is funded by the Dutch umbrella organization Quantum Delta NL via the European OpenSuperQPlus initiative, which has 28 partners from 10 countries. Part of the 10-year, 1 billion-euro European Quantum Flagship program, OpenSuperQPlus aims to build a 100-qubit superconducting quantum processor as a stepping stone to an eventual 1000-qubit European quantum computer.

Quantum Delta NL says the 100-qubit quantum computer will be made publicly available via a cloud platform as an extension of the existing platform Quantum Inspire that first came online in 2020. It currently includes a two-qubit processor of spin qubits in silicon, as well as a five-qubit processor based on superconducting qubits. Quantum Inspire is currently focused on training and education but the upgrade to 100 qubits is expected to allow research into quantum computing. Lead researcher from QuTech Leonardo DiCarlo believes the R&D cycle has “come full circle,” where academic research first enabled spin-off companies to grow and now their products are being used to accelerate academic research.

Quantum fusion?

By bradley13 • Score: 3 Thread
At this point, quantum computing will become useful right around the time that we have commercially viable fusion reactors. Just around the corner, only a few years away…forever…

Ring Customers Get $5.6 Million In Refunds In Privacy Settlement

Posted by BeauHD View on SlashDot Skip
The FTC is issuing more than $5.6 million in refunds to Ring customers as part of a privacy settlement. The Associated Press reports:
In a 2023 complaint, the FTC accused the doorbell camera and home security provider of allowing its employees and contractors to access customers’ private videos. Ring allegedly used such footage to train algorithms without consent, among other purposes. Ring was also charged with failing to implement key security protections, which enabled hackers to take control of customers’ accounts, cameras and videos. This led to “egregious violations of users’ privacy,” the FTC noted.

The resulting settlement required Ring to delete content that was found to be unlawfully obtained, establish stronger security protections and pay a hefty fine. The FTC says that it’s now using much of that money to refund eligible Ring customers. According to a Tuesday notice, the FTC is sending 117,044 PayPal payments to impacted consumers who had certain types of Ring devices — including indoor cameras — during the timeframes that the regulators allege unauthorized access took place. Eligible customers will need to redeem these payments within 30 days, according to the FTC — which added that consumers can contact this case’s refund administrator, Rust Consulting, or visit the FTC’s FAQ page on refunds for more information about the process.

Wait…

By jddj • Score: 3 Thread

What about the people the cameras recorded? Innocent folks who just walked up to the door? Trick or treating minors you recorded without permission? The pizza guy and the mailman?

Aren’t THEY the ones whose privacy was actually invaded? When do they get paid?

Xbox Console Sales Are Tanking As Microsoft Brings Games To PS5

Posted by BeauHD View on SlashDot Skip
In its third-quarter earnings call on Thursday, Microsoft reported a 30% drop in Xbox console sales, after reporting a 30% drop last April. “It blamed the nosedive on a ‘lower volume of consoles sold’ during the start of 2024,” reports Kotaku. From the report:
In February, Grand Theft Auto VI parent company Take-Two claimed in a presentation to investors that there were roughly 77 million “gen 9” consoles in people’s homes. It didn’t take fans long to do the math and speculate that Microsoft had only sold around 25 million Xbox Series X/S consoles to-date. That puts it ahead of the GameCube but behind the Nintendo 64, at least for now. Given the results this quarter as well, it doesn’t seem like Game Pass and Starfield have moved the needle much. Maybe that will change once Call of Duty, which Microsoft acquired last fall along with the rest of Activision Blizzard, finally makes its way to Game Pass. Diablo IV only just arrived on the Netflix-like subscription platform this month. But given the fact that the fate of Xbox Series X/S appears to be locked in at this point, it’s easy to see why Microsoft is looking at other places it can put its games.

Sea of Thieves, the last of four games in this initial volley to come to PS5, dominated the PlayStation Store’s top sellers list last week on pre-orders alone. CEO Satya Nadella specifically called this out during a call with investors, noting that Microsoft had more games in the top 25 best sellers on PS5 than any other publisher. “We are committed to meeting players where they are by bringing great games to more people on more devices,” he said. If players there continue to flock to the live-service pirate sim, it’s not hard to imagine Microsoft bringing another batch of its first-party exclusives to the rival platform. Whether that means more recent blockbusters like Starfield or the upcoming Indiana Jones game will someday make the journey remains to be seen.

The fallout from Halo Infinite continues

By stevenm86 • Score: 3 Thread
Microsoft had an epiphany. They realized they needed to crap out a new Halo game, without it necessarily needing to be *good* - the name/lore of the franchise alone would carry it forward. Turns out that isn’t necessarily the case (surprise!). And although they may have taken some steps to fix the mess, the fixes came years too late and the damage had been done. This is partly the result of corporate types trying to run a game studio, which comes with its own baggage, not the least of which is insisting that a cutting-edge engine be written and maintained by contractors who are employed 18 months at a time.

Re:The fallout from Halo Infinite continues

By Can’tNot • Score: 4, Insightful Thread
I don’t think this is new. I’m speaking only for myself here, but I went through all of the games that I was interested in getting for the Xbox 360 / PS 3 generation and found that very few of those were Xbox exclusives. I think it’s mostly just about the fact that the Japanese developers have rejected Microsoft, and outside of a few blockbuster titles they’re the primary console developers. The better western devs tend to be more on PC.

Just to emphasize: I’m not talking about the big titles, I’m talking about the smaller ones. The Katamaris and the Zack and Wikis and the Endless Oceans, etc. The little charming games which you need to fill out your catalogue.

Obviously, this is skewed by my own preferences. I don’t care about FIFA or Call of Duty or Halo. But Microsoft’s catalogue really does seem to be lacking in every generation.

Re:Is Cloud Streaming killing console sales?

By TwistedGreen • Score: 5, Interesting Thread

40-100ms would be nice. I have gigabit fiber direct to my house and it’s not even playable then. Anything requiring fast action is out. Think 200+ ms. I’ve tried Geforce Now, Stadia, and Luna, and they’re all just as bad even with a “Premium” subscription. I can’t see how the product is even viable. It’s definitely telling that Google realized this and got out early.

I think what they might do, though, is design games around this latency, hiding its poor performance like how they hide the poor accuracy of controller thumbsticks. It’s possible there’s a killer app lurking somewhere in there, maybe in the MMO space, marketed to kids who can’t afford a console.

Court Upholds New York Law That Says ISPs Must Offer $15 Broadband

Posted by BeauHD View on SlashDot Skip
The U.S. Court of Appeals for the 2nd Circuit overturned a prior district court decision, lifting the injunction that blocked New York’s law mandating that ISPs offer $15 broadband plans to low-income families. Ars Technica reports:
The ruling (PDF) is a loss for six trade groups that represent ISPs, although it isn’t clear right now whether the law will be enforced. For consumers who qualify for means-tested government benefits, the state law requires ISPs to offer “broadband at no more than $15 per month for service of 25Mbps, or $20 per month for high-speed service of 200Mbps,” the ruling noted. The law allows for price increases every few years and makes exemptions available to ISPs with fewer than 20,000 customers.

“First, the ABA is not field-preempted by the Communications Act of 1934 (as amended by the Telecommunications Act of 1996), because the Act does not establish a framework of rate regulation that is sufficiently comprehensive to imply that Congress intended to exclude the states from entering the field,” a panel of appeals court judges stated in a 2-1 opinion. Trade groups claimed the state law is preempted by former Federal Communications Commission Chairman Ajit Pai’s repeal of net neutrality rules. Pai’s repeal placed ISPs under the more forgiving Title I regulatory framework instead of the common-carrier framework in Title II of the Communications Act.

2nd Circuit judges did not find this argument convincing: “Second, the ABA is not conflict-preempted by the Federal Communications Commission’s 2018 order classifying broadband as an information service. That order stripped the agency of its authority to regulate the rates charged for broadband Internet, and a federal agency cannot exclude states from regulating in an area where the agency itself lacks regulatory authority. Accordingly, we REVERSE the judgment of the district court and VACATE the permanent injunction.”

are they allowed to cap it?

By Joe_Dragon • Score: 3 Thread

ok you can have your $15 Broadband but that only covers 1GB down and after it’s $30-$40 for the next 1TB

Fake Job Interviews Target Developers With New Python Backdoor

Posted by BeauHD View on SlashDot Skip
An anonymous reader quotes a report from BleepingComputer:
A new campaign tracked as “Dev Popper” is targeting software developers with fake job interviews in an attempt to trick them into installing a Python remote access trojan (RAT). The developers are asked to perform tasks supposedly related to the interview, like downloading and running code from GitHub, in an effort to make the entire process appear legitimate. However, the threat actor’s goal is make their targets download malicious software that gathers system information and enables remote access to the host. According to Securonix analysts, the campaign is likely orchestrated by North Korean threat actors based on the observed tactics. The connections are not strong enough for attribution, though. […]

Although the perpetrators of the Dev Popper attack aren’t known, the tactic of using job lures as bait to infect people with malware is still prevalent, so people should remain vigilant of the risks. The researchers note that the method “exploits the developer’s professional engagement and trust in the job application process, where refusal to perform the interviewer’s actions could compromise the job opportunity,” which makes it very effective.

LOL!

By ls671 • Score: 4, Funny Thread

I wouldn’t even install Teams for a “job interview” :)

part of this sound likes do free work for us that

By Joe_Dragon • Score: 3 Thread

part of this sound likes do free work for us that some places do try.
so they want to download and fix there code in the hope of maybe getting an job?

Kind of interesting

By alvinrod • Score: 5, Funny Thread
The concept is kind of interesting. Imagine a security firm that interviews candidates this way. Anyone they can compromise automatically fails the interview. For senior level positions they actually kidnap the candidate’s family to see if they can extort them that way. Everyone at the water cooler refers to the NSA and CIA as a bunch of pussies.

Spawn on a separate host or VM?

By ctilsie242 • Score: 3 Thread

I remember job interviews like this from a few years back. What I did was spawn an AWS LightSail instance with a static IP and go from there. When the interview is finished, I’d just nuke the VM and call it done.

Maybe it is part of being a good developer to run stuff that is potentially compromising, on a sandbon/VM, on a separate network.

IRS Free Tax Filing Pilot Saved Consumers $5.6 Million In Prep Fees

Posted by BeauHD View on SlashDot Skip
The free tax filing pilot from the IRS that rolled out in 12 states last month saved filers an estimated $5.6 million in tax preparation fees for federal returns, said IRS Commissioner Danny Werfel. CNBC reports:
This season, more than 140,000 taxpayers successfully filed returns using IRS Direct File, a free tax filing pilot from the IRS, according to the U.S. Department of the Treasury and the IRS. Direct File surveyed more than 15,000 users, around 90% of whom rated their experience as “excellent,” the agencies reported.

“We have not made a decision about the future of Direct File,” Werfel said, noting the agency still needs to analyze data and get feedback from a “wide variety of stakeholders.” The IRS plans to release a more detailed report about the Direct File pilot “in the coming days,” he added. If Direct File were expanded for the next season, the program could add additional states and tax situations, according to a senior IRS official. The agency expects to decide the future of Direct File later this spring, Werfel said.

More impressive

By i.r.id10t • Score: 4, Interesting Thread

is the new quick turn around Form 4 NFA tax processing. What has traditionally taken months of waiting is now happening in days, I’ve seen several completed within 24 hours of submission…

And cost tax preparers…

By JDShewey • Score: 3, Insightful Thread
And cost H&R Block, Turbo Tax and the like 5.6 million… Oh noes! But in all seriousness, the fact that the IRS already knows what they think I owe them, but then makes me fill out a 2+ page form to tell *them* what I owe them and can imprison me if I make a mistake is bonkers. We should not have to have an entire industry to help me do that. Just tell me what I owe, and let me write a check. If I think it’s wrong, let me make an appeal. But we should not be propping up a multi-million dollar industry that is unnecessary with our convoluted tax system.

Paying taxes shouldn’t cost most people money

By 93 Escort Wagon • Score: 3 Thread

The base issue here is that our tax system is needlessly complicated - thanks, Congress! But if the government is going to insist on a stupidly complicated system, most taxpayers shouldn’t have to pay even more money just to hand the government what the government says they owe.

Whether it hurts the employees of H&R Block is irrelevant.

Re: And cost tax preparers…

By orlanz • Score: 4, Interesting Thread

Disclaimer: Former IT and Financials auditor.

The IRS does not know what you owe the Federal government. You tell your employer how much to give the FG. And they use a simple look up table to pre-pay the govt. Usually people elect to give more than they should. Pretty much everyone below 50k in earnings gives a lot over what they owe.

For the vast majority of Americans, tax files are a correction of showing the US govt that they paid too much and should get some back. For people with W2s or SSI, 401ks, and Savings accounts, it’s actually not complicated. There should have been a simple website at the IRS for this in the 1990s. But we are a County mostly ruled by corporations and mitigated only by competing interests.

As for the complexity of the tax code,
much of it is for the betterment of the country. We want to encourage personal investment, families, and keeping healthy. The Federal govt even gives you a Credit for all the taxes you paid to your County & City! For small timers, even more! Even if you do stocks, 1yr plus holdings don’t add any complexity. Tax payers just need to make sure they pre-pay 15% of any profit within the quarter.

The actual complex part is all the corporate additions. These make it hard for small businesses and self-employed. It’s far more complex for large businesses and the wealthy (+500k/yr) but those guys have the resources to make it vastly easy.

Believe it or not, the IRS and normal Tax guys don’t want to deal with the general tax payer. The little fraud there doesn’t add up to much. It’s almost negative for the people as when you consider many below the poverty level overpay by almost 30% of their income and don’t get refunds! Even people making less than 50k overpay $5k every year! That’s a lot of the government funding needs being placed on the ones with the least means to pay.

HRB and TaxCut are additional barriers for these people to file these simple taxes. I wish basic tax filing was taught in 9th grade as part of some standard home economics class or gym or Social Studies or English. It would immensely help our country.

State taxes are a whole other matter… states are messed up!

45 Drives Adds Linux-Powered Mini PCs, Workstations To Growing Compute Lineup

Posted by BeauHD View on SlashDot Skip
Tobias Mann reports via The Register:
Canadian systems builder 45 Drives is perhaps best known for the dense multi-drive storage systems employed by the likes of Backblaze and others, but over the last year the biz has expanded its line-up to virtualization kit, and now low-power clients and workstations aimed at enterprises and home enthusiasts alike. 45 Drives’ Home Client marks a departure from the relatively large rack-mount chassis it normally builds. Founder Doug Milburn told The Register the mini PC is something of a passion project that was born out of a desire to build a better home theater PC.

Housed within a custom passively cooled chassis built in-house by 45 Drive’s parent company Protocase, is a quad-core, non-hyperthreaded Intel Alder Lake-generation N97 processor capable of boosting to 3.6GHz, your choice of either 8GB or 16GB of memory, and 250GB of flash storage. The decision to go with a 12-gen N-series was motivated in part by 45 Drives’ internal workloads, Milburn explains, adding that to run PowerPoint or Salesforce just doesn’t require that much horsepower. However, 45 Drives doesn’t just see this as a low-power PC. Despite its name, the box will be sold under both its enterprise and home brands. In home lab environments, these small form factor x86 and Arm PCs have become incredibly popular for everything from lightweight virtualization and container hosts to firewalls and routers. […]

In terms of software, 45 Drives says it will offer a number of operating system images for customers to choose from at the time of purchase, and Linux will be a first-class citizen on these devices. It’s safe to say that Milburn isn’t a big fan of Microsoft these days. “We run many hundreds of Microsoft workstations here, but we’re kind of moving away from it,” he said. “With Microsoft, it’s a control thing; it’s forced updates; it’s a way of life with them.” Milburn also isn’t a fan of Microsoft’s registration requirements and online telemetry. “We want control over what all our computers do. We want no traffic on our network that’s out of here,” he said. As a result, Milburn says 45 Drives is increasingly relying on Linux, and that not only applies to its internal machines but its products as well. Having said that, we’re told that 45 Drives recognizes that Linux may not be appropriate for everyone and will offer Windows licenses at an additional cost. And, these both being x86 machines, there’s nothing stopping you from loading your preferred distro or operating system on them after they’ve shipped.
These workstations aren’t exactly cheap. They start at $1,099 without the dedicated GPU. “The HL15 will set you back $799-$910 for the bare chassis if you opted for the PSU or not,” adds The Register. “Meanwhile, a pre-configured system would run you $1,999 before factoring in drives.”

The passive mini-PCs look cool…

By ctilsie242 • Score: 3 Thread

The passive mini PCs that look like they are machines from a chunk of aluminum look good, just because it is a good way to dissipate heat without needing a fan, but still look good. They are not cheap, but you get what you pay for, and 45 Drives has a reputation for enterprise tier quality. It would be nice if they offered a five year extended warranty on the workstations, if they don’t have it already.

One thing I wish they could carry would be a USB drive enclosure with 2, 4, 8, and more drives. These enclosures could just be “dumb” JBOD, mapping SATA and NVMe drives, or they could have their own RAID built in, so the enclosure can appear to the system as one large drive. This would be nice for laptops and mini PCs where people need drive space, but don’t really need a NAS.

Thoma Bravo To Take UK Cybersecurity Company Darktrace Private In $5 Billion Deal

Posted by BeauHD View on SlashDot Skip
An anonymous reader quotes a report from TechCrunch:
Darktrace is set to go private in a deal that values the U.K.-based cybersecurity giant at around $5 billion. A newly formed entity called Luke Bidco Ltd., formed by private equity giant Thoma Bravo, has tabled an all-cash bid of $7.75 per share, which represents a 44% premium on its average price for the three-month period ending April 25. However, this premium drops to just 20% when juxtaposed against Darktrace’s closing price Thursday, as the company’s shares had risen 20% to 5.18 pounds in the past month.

Founded out of Cambridge, U.K., in 2013, Darktrace is best known for AI-enabled threat detection smarts, using machine learning to identify abnormal network activity and attempts at ransomware attacks, insider attacks, data breaches and more. The company claims big-name customers including Allianz, Airbus and the city of Las Vegas. After raising some $230 million in VC funding and hitting a private valuation of $1.65 billion, Darktrace went public on the London Stock Exchange in April 2021, with an opening-day valuation of $2.4 billion. Its shares hit an all-time high later that year of 9.45 pounds and plummeted to an all-time low of 2.29 pounds last February. But they had been steadily rising since the turn of the year and hadn’t fallen below 4 pounds since the beginning of March.

The full valuation based on Thoma Bravo’s offer amounts to $5.3 billion on what is known as a full-diluted basis, which takes into account all convertible securities and is designed to give a more comprehensive view of a company’s valuation. However, the enterprise value in this instance is approximately $4.9 billion, which includes additional considerations such as debt and cash positions. […] The deal is of course still subject to shareholder approval, but the companies said that they expect to complete the transaction by the end of 2024.
“The proposed offer represents an attractive premium and an opportunity for shareholders to receive the certainty of a cash consideration at a fair value for their shares,” Darktrace chair Gordon Hurst said. “The proposed acquisition will provide Darktrace access to a strong financial partner in Thoma Bravo, with deep software sector expertise, who can enhance the company’s position as a best-in-class cyber AI business headquartered in the U.K.”

I wish they would get rid of Ping

By silvergig • Score: 3 Thread
The bought Ping a couple years back and I wish they would just dump that company into the fire. Ping is a massively shitty product and we’re forced to use it in some places where I work. Dev work for it is unfun and it vastly inferior to other identity players.

Judge Dismisses Superconductivity Physicist’s Lawsuit Against University

Posted by msmash View on SlashDot Skip
A judge has dismissed a lawsuit brought by superconductivity physicist Ranga Dias against his employer, the University of Rochester in New York. From a report:
In February, a university investigation found that he had committed scientific misconduct by, among other things, fabricating data to claim the discovery of superconductors — materials with zero electrical resistance — at room temperature. Dias filed the lawsuit against the university for allegedly violating his academic freedom and conducting a biased investigation into his work.

On 19 April, Monroe County Supreme Court justice Joseph Waldorf denied Dias’s petitions and dismissed the lawsuit as premature. The matter “is not ripe for judicial review,” Waldorf wrote, because, although Rochester commissioned an independent review that found Dias had committed misconduct, it has not yet finished taking administrative action. The university provost has recommended that Dias be fired, but a final decision is still forthcoming. A spokesperson for the university said Rochester was “pleased” with the justice’s ruling, and reiterated that its investigation was “carried out in a fair manner” and reached a conclusion that it thinks is correct.

Nature’s news team reported on Rochester’s investigation previously: three scientists external to the university conducted a 10-month probe into 16 allegations against Dias and determined that the physicist had committed plagiarism, and data fabrication and falsification related to four scientific papers, including two published in Nature. Normally, the details of the investigation would probably have remained confidential. But in response to Dias’s lawsuit, the university submitted the entire report as a court exhibit, making it public.

In other words

By quonset • Score: 5, Informative Thread

Dias filed the lawsuit against the university for allegedly violating his academic freedom and conducting a biased investigation into his work.

The university did its due diligence and contacted people not associated with the project to perform an unbiased, factual examination of his claims and found them to be bullshit.

It seems the moment anyone’s bullshit is shot down due to facts holding sway the only thing they can claim is their “freedom” is being violated. Why does this sound so familiar?

Hans Krisitan Graebener = StoneToss

What’s the thought process here?

By Baron_Yam • Score: 3 Thread

“I got caught, they have evidence… I’m just going to call them all liars!”

That works in politics (sadly), not science.

Re:What’s the thought process here?

By NoWayNoShapeNoForm • Score: 4, Funny Thread

That works in politics (sadly), not science.

He was hoping it would work in courts too.

It did not work because he did not have an AI-assisted lawyer pleading his case.

Re:In other words

By taustin • Score: 5, Informative Thread

I mean, dude, isn’t having independent third parties review the results the entire point of scientific research?

Isn’t the the most fundamental tool of the scientific method?

Re:In other words

By quonset • Score: 4, Interesting Thread

Of course it is. But the whiner is complaining that because it was done, the university was harshing on his academic freedom. That’s the point. He was literally, in the truest senses of the word, arguing that their facts were impinging on his lying.

British Intelligence Moves To Protect Research Universities From Espionage

Posted by msmash View on SlashDot Skip
The head of Britain’s domestic intelligence agency warned the country’s leading research universities on Thursday that foreign states are targeting their institutions and imperilling national security. The Record:
“We know that our universities are being actively targeted by hostile actors and need to guard against the threat posed to frontier research in the most sensitive sectors,” said the deputy prime minister Oliver Dowden, who also attended the briefing. The threat requires “further measures,” said the deputy PM, who announced that the government was launching a consultation with the sector so it could “do more to support our universities and put the right security in place to protect their cutting-edge research.”

The briefing was delivered by Ken McCallum, the director general of MI5, alongside Dowden and the National Cyber Security Centre’s interim chief executive, Felicity Oswald. It was made to the vice-chancellors of the Russell Group, a collective of the country’s 24 leading universities. Among the range of measures being considered is having MI5, the domestic security agency, carry out security vetting on key researchers involved in a “small proportion of academic work, with a particular focus on research with potential dual uses in civilian and military life.”

That’s the point of universities?

By Oidhche • Score: 5, Insightful Thread
They exist to share and spread knowledge. They’re set up specifically to foster collaboration. You want to do some research that needs to remain secret? Set up special research institutions with heightened security. Don’t get universities involved.

Noise From Traffic Stunts Growth of Baby Birds, Study Finds

Posted by msmash View on SlashDot Skip
Noise pollution from traffic stunts growth in baby birds, even while inside the egg, research has found. From a report:
Unhatched birds and hatchlings that are exposed to noise from city traffic experience long-term negative effects on their health, growth and reproduction, the study found. “Sound has a much stronger and more direct impact on bird development than we knew before,” said Dr Mylene Mariette, a bird communication expert at Deakin University in Australia and a co-author of the study, published in the journal Science. “It would be wise to work more to reduce noise pollution.”

A growing body of research has suggested that noise pollution causes stress to birds and makes communication harder for them. But whether birds are already distressed at a young age because they are affected by noise, or by how noise disrupts their environment and parental care, was still unclear. Mariette’s team routinely exposed zebra finch eggs for five days to either silence, soothing playbacks of zebra finch songs, or recordings of city traffic noises such as revving motors and cars driving past. They did the same with newborn chicks for about four hours a night for up to 13 nights, without exposing the birds’ parents to the sounds.

In Other News

By The Cat • Score: 3, Insightful Thread

Noise from that GOD DAMN LEAFBLOWER turns otherwise happy people into alcoholics.

Millions of IPs Remain Infected By USB Worm Years After Its Creators Left It For Dead

Posted by msmash View on SlashDot Skip
A now-abandoned USB worm that backdoors connected devices has continued to self-replicate for years since its creators lost control of it and remains active on thousands, possibly millions, of machines, researchers said Thursday. ArsTechnica:
The worm — which first came to light in a 2023 post published by security firm Sophos — became active in 2019 when a variant of malware known as PlugX added functionality that allowed it to infect USB drives automatically. In turn, those drives would infect any new machine they connected to, a capability that allowed the malware to spread without requiring any end-user interaction. Researchers who have tracked PlugX since at least 2008 have said that the malware has origins in China and has been used by various groups tied to the country’s Ministry of State Security.

For reasons that aren’t clear, the worm creator abandoned the one and only IP address that was designated as its command-and-control channel. With no one controlling the infected machines anymore, the PlugX worm was effectively dead, or at least one might have presumed so. The worm, it turns out, has continued to live on in an undetermined number of machines that possibly reaches into the millions, researchers from security firm Sekoia reported. The researchers purchased the IP address and connected their own server infrastructure to “sinkhole” traffic connecting to it, meaning intercepting the traffic to prevent it from being used maliciously. Since then, their server continues to receive PlugX traffic from 90,000 to 100,000 unique IP addresses every day.

Windows Autoplay - the gift that keeps on giving

By Indy1 • Score: 4, Insightful Thread

Goddamn Autoplay/autorun.inf, a script kiddies wet dream for spreading crapware.

The day M$ enabled flash drives to run a program as soon as a flash drive is plugged in, with zero user intervention was just BEGGING to be abused. And it has for decades now.

Idiots. I’ve been disabling it from day one on my builds and its saved me (and my clients) a LOT of headaches.

Re:Since researchers got the IP for it

By Firethorn • Score: 4, Insightful Thread

Oops, you probably meant having the researchers create a program that every time the worm calls in it sends back instructions to delete itself.

The answer to that is probably “liability”: There are legal questions to be asked if they actually write anything to alter the computers that connect to that IP address in the worm’s way, even if it would be purely beneficial. It could be considered illegal hacking, for example.
The next question is: They’d be doing this for free, but if they managed to screw up the delete program and it damages computers at all - they may be sued or even arrested.

So while setting up the server prevents anybody else from screwing with the worm in its original form and provides them their research data, actually clearing the infections is a case of “high risk for no gain”.

Any?

By markdavis • Score: 3 Thread

>“In turn, those drives would infect any new machine they connected to”

Really? I doubt it would on Linux machines. I think what was meant was “any new MS-Windows machine”, perhaps.

https://www.securityweek.com/s…

“The worm adds to the connected flash drive a Windows shortcut file with the drive’s name, and three files for DLL sideloading, namely a legitimate executable, a malicious library, and a binary blob within the drive’s RECYCLER.BIN hidden folder. It also moves the drive’s contents to a new directory. "

Yep.

Captchas Are Getting Harder

Posted by msmash View on SlashDot Skip
Captchas that aim to distinguish humans from nefarious bots are demanding more brain power. WSJ:
The companies and cybersecurity experts who design Captchas have been doing all they can to stay one step ahead of the bad actors figuring out how to crack them. A cottage industry of third-party Captcha-solving firms — essentially, humans hired to solve the puzzles all day — has emerged. More alarmingly, so has technology that can automatically solve the more rudimentary tests, such as identifying photos of motorcycles and reading distorted text. “Software has gotten really good at labeling photos,” said Kevin Gosschalk, the founder and CEO of Arkose Labs, which designs what it calls “fraud and abuse prevention solutions,” including Captchas. “So now enters a new era of Captcha — logic based.”

That shift explains why Captchas have started to both annoy and perplex. Users no longer have to simply identify things. They need to identify things and do something with that information — move a puzzle piece, rotate an object, find the specter of a number hidden in a roomscape. Compounding this bewilderment is the addition to the mix of generative AI images, which creates new objects difficult for robots to identify but baffles humans who just want to log in. “Things are going to get even stranger, to be honest, because now you have to do something that’s nonsensical,” Gosschalk said. “Otherwise, large multimodal models will be able to understand.”

Re:Missed opportunity for a headline

By Registered Coward v2 • Score: 5, Funny Thread

“AI makes it harder to prove you are not a robot.”

or a dog..

This will not end well

By Roger W Moore • Score: 5, Interesting Thread
The logical conclusion of this arms race is that eventually they are going to make things so hard that no human will be able to get in without an AI algorithm at which point the only people accessing the site will be the scammers.

Captcha is the early exit for me.

By Petersko • Score: 5, Insightful Thread

Unless there is an unbelievably specific reason to do otherwise, when I see a captcha, that’s it. I’m out. I have walked away from giving companies my business over this.

This wasn’t true until it got to the point where “pick all squares with a motorcycle” got to “try to guess if we think the motorcycle rider’s helmet is part of the motorcycle”.

Fuck them. May the creators of CAPTCHA/ReCAPTCHA/whatever rot.

Re:TFS missed one

By timeOday • Score: 5, Insightful Thread
Sure, until a captcha is suddenly implemented to guard the entrance to your banking website. (My credit union did).

Ebay has really clamped down, too. My ebay account was once tied to me by nothing more than a throwaway email. But now it’s tied to your phone, your bank, and your social security number (because they report your sales to the IRS).

It’s all pretty irksome, until my credit card number gets stolen yet again and wastes more of my time than typing in a 2FA ever could.

Sometimes you wonder if everything is just going to grind to a halt having been sucked dry by all the scamming leeches.

Logic problems

By davidwr • Score: 5, Funny Thread

What is your credit card number minus the current year?
What is the square of your credit card PIN?
What is 10 times the security code on the back of your credit card?
Type your name adding 1 letter to each letter, so A becomes B and so on, with Z becoming A.
Type your zip code backwards.

GNOME Foundation To Focus On Fundraising After Years Running A Deficit

Posted by msmash View on SlashDot
The GNOME Foundation, a non-profit organization supporting the GNOME desktop environment, has been operating at a deficit for several years, depleting its financial reserves. Robert McQueen, the foundation’s president, has announced plans to increase fundraising efforts in a new blog post.

McQueen adds:
As you may be aware, the GNOME Foundation has operated at a deficit (nonprofit speak for a loss — ie spending more than we’ve been raising each year) for over three years, essentially running the Foundation on reserves from some substantial donations received 4-5 years ago. The Foundation has a reserves policy which specifies a minimum amount of money we have to keep in our accounts. This is so that if there is a significant interruption to our usual income, we can preserve our core operations while we work on new funding sources. We’ve now “hit the buffers” of this reserves policy, meaning the Board can’t approve any more deficit budgets — to keep spending at the same level we must increase our income.

Here’s my proposal

By RUs1729 • Score: 3 Thread
Kill off Gnome 3 and I’ll contribute.

Operating at a deficit for several years

By Pf0tzenpfritz • Score: 3 Thread

operating at a deficit for several years

I wonder how that could have happened. I also wonder if their fundraising capabilities are as great as their design skills and their self reflection.

Many Alternatives

By Oddroot • Score: 3 Thread

I’m forced to use GNOME under Wayland on our online workstations at work, but at home and in my work VMs I always use something much more lightweight, like Mate or even just a standalone window manager. Something like OpenBox, i3, even MWM or TWM can be made to look and work nicely, without carrying around all of the heft and uselessness of a full DE.

Realistically most of the time I just need a terminal program, a browser and some basic graphical tools, which can be covered by GIMP, Inkscape and Blender well enough most of the time.

All that said a lot of my professional time is spent in Windows because so much professional software is only available for it. I understand the market reasons why, but man, I pine for a real, commercial market for Unix desktops again.

I like GNOME

By hirschma • Score: 5, Insightful Thread

Maybe it’s like saying that vanilla is your favorite ice-cream flavor, but I really like GNOME. It works the way that I do, and I find it intuitive and elegant.

Yes, I’ve tried most other WMs/DEs, but always come home to GNOME. Sorry, just had to dissent from the GNOME hate.