Alterslash

the unofficial Slashdot digest
 

Contents

  1. Frontier Communications Shuts Down Systems After Cyberattack
  2. Cops Can Force Suspect To Unlock Phone With Thumbprint, US Court Rules
  3. Software Glitch Saw Aussie Casino Give Away Millions In Cash
  4. Meta Is Adding Real-Time AI Image Generation To WhatsApp
  5. Colorado Bill Aims To Protect Consumer Brain Data
  6. Feds Hit Coding Boot Camp With Big Fine For Allegedly Conning Students
  7. Crypto Trader Eisenberg Convicted of Fraud in $110 Million Mango Markets Scheme
  8. Boeing Aims To Bring Flying Cars To Asia By 2030
  9. Nigeria To Criminalise Fiber Cable Damage Costing Telecoms Billions
  10. Author Granted Copyright Over Book With AI-Generated Text - With a Twist
  11. Hackers Are Threatening To Publish a Huge Stolen Sanctions and Financial Crimes Watchlist
  12. Meta Releases Llama 3 AI Models, Claiming Top Performance
  13. Google is Combining Its Android and Hardware Teams
  14. Canadian Science Gets Biggest Boost To PhD and Postdoc Pay in 20 Years
  15. Odds of US TikTok Ban Increase After House Fast-Tracks Revised Bill, Picking Up Key Senate Support

Alterslash picks up to the best 5 comments from each of the day’s Slashdot stories, and presents them on a single page for easy reading.

Frontier Communications Shuts Down Systems After Cyberattack

Posted by BeauHD View on SlashDot Skip
U.S. telecom provider Frontier Communications shut down its systems after a cybercrime group breached some of its IT systems in a recent cyberattack. BleepingComputer reports:
Frontier is a leading U.S. communications provider that provides gigabit Internet speeds over a fiber-optic network to millions of consumers and businesses across 25 states. After discovering the incident, the company was forced to partially shut down some systems to prevent the threat actors from laterally moving through the network, which also led to some operational disruptions. Despite this, Frontier says the attackers could access some PII data, although it didn’t disclose if it belonged to customers, employees, or both.

“On April 14, 2024, Frontier Communications Parent, Inc. [..] detected that a third party had gained unauthorized access to portions of its information technology environment,” the company revealed in a filing with the U.S. Securities and Exchange Commission on Thursday. “Based on the Company’s investigation, it has determined that the third party was likely a cybercrime group, which gained access to, among other information, personally identifiable information.” Frontier now believes that it has contained the breach, has since restored its core IT systems affected during the incident, and is working on restoring normal business operations.

Cops Can Force Suspect To Unlock Phone With Thumbprint, US Court Rules

Posted by BeauHD View on SlashDot Skip
An anonymous reader quotes a report from Ars Technica:
The US Constitution’s Fifth Amendment protection against self-incrimination does not prohibit police officers from forcing a suspect to unlock a phone with a thumbprint scan, a federal appeals court ruled yesterday. The ruling does not apply to all cases in which biometrics are used to unlock an electronic device but is a significant decision in an unsettled area of the law. The US Court of Appeals for the 9th Circuit had to grapple with the question of “whether the compelled use of Payne’s thumb to unlock his phone was testimonial,” the ruling (PDF) in United States v. Jeremy Travis Payne said. “To date, neither the Supreme Court nor any of our sister circuits have addressed whether the compelled use of a biometric to unlock an electronic device is testimonial.”

A three-judge panel at the 9th Circuit ruled unanimously against Payne, affirming a US District Court’s denial of Payne’s motion to suppress evidence. Payne was a California parolee who was arrested by California Highway Patrol (CHP) after a 2021 traffic stop and charged with possession with intent to distribute fentanyl, fluorofentanyl, and cocaine. There was a dispute in District Court over whether a CHP officer “forcibly used Payne’s thumb to unlock the phone.” But for the purposes of Payne’s appeal, the government “accepted the defendant’s version of the facts, i.e., ‘that defendant’s thumbprint was compelled.’" Payne’s Fifth Amendment claim “rests entirely on whether the use of his thumb implicitly related certain facts to officers such that he can avail himself of the privilege against self-incrimination,” the ruling said. Judges rejected his claim, holding “that the compelled use of Payne’s thumb to unlock his phone (which he had already identified for the officers) required no cognitive exertion, placing it firmly in the same category as a blood draw or fingerprint taken at booking.” “When Officer Coddington used Payne’s thumb to unlock his phone — which he could have accomplished even if Payne had been unconscious — he did not intrude on the contents of Payne’s mind,” the court also said.

They can have my smartphone when

By davide marney • Score: 5, Funny Thread

They can have my smartphone when they pry it from my cold, dead fingers. Oh. Wait.

Who you are; Something you know

By Rinnon • Score: 5, Insightful Thread
I’ve long held that the use of biometrics to replace passwords is a mistake. The classic “username” and “password” combo provides two pieces of information in order to verify identify: who you are, and something you know. A thumbprint, or an iris scan, more accurately represents who you are than something you know; so using those to replace your username would make sense… but using them to replace your password seems like a bad idea.

Who on SLASHDOT is using biometric data for cons..

By Subgenius • Score: 4, Interesting Thread

consumer or IOT devices? Feel free to scan my thumb or face. NONE of my devices are biometric locked, despite tons of companies wanting to setup that for ‘ease of use.’ Sorry, I’ll keep my 18 to 24 digit passwords and not turn them over.

bIoMeTrIcS aRe TeH FuChAr!

By GameboyRMH • Score: 3 Thread

Biometrics: Credentials that can be stolen off your body, can’t be hashed, and can never be reset…and stealing them off your body can be legal too.

Software Glitch Saw Aussie Casino Give Away Millions In Cash

Posted by BeauHD View on SlashDot Skip
A software glitch in the “ticket in, cash out” (TICO) machines at Star Casino in Sydney, Australia, saw it inadvertently give away $2.05 million over several weeks. This glitch allowed gamblers to reuse a receipt for slot machine winnings, leading to unwarranted cash payouts which went undetected due to systematic failures in oversight and audit processes. The Register reports:
News of the giveaway emerged on Monday at an independent inquiry into the casino, which has had years of compliance troubles that led to a finding that its operators were unsuitable to hold a license. In testimony [PDF] given on Monday to the inquiry, casino manager Nicholas Weeks explained that it is possible to insert two receipts into TICO machines. That was a feature, not a bug, and allowed gamblers to redeem two receipts and be paid the aggregate amount. But a software glitch meant that the machines would return one of those tickets and allow it to be re-used — the barcode it bore was not recognized as having been paid.

“What occurred was small additional amounts of cash were being provided to customers in circumstances when they shouldn’t have received it because of that defect,” Weeks told the inquiry. Local media reported that news of the free cash got around and 43 people used the TICO machines to withdraw money to which they were not entitled — at least one of them a recovering gambling addict who fell off the wagon as the “free” money allowed them to fund their activities. Known abusers of the TICO machines have been charged, and one of those set to face the courts is accused of association with a criminal group. (The first inquiry into The Star, two years ago, found it may have been targeted by organized crime groups.)

Meta Is Adding Real-Time AI Image Generation To WhatsApp

Posted by BeauHD View on SlashDot Skip
WhatsApp users in the U.S. will soon see support for real-time AI image generation. The Verge reports:
As soon as you start typing a text-to-image prompt in a chat with Meta AI, you’ll see how the image changes as you add more detail about what you want to create. In the example shared by Meta, a user types in the prompt, “Imagine a soccer game on mars.” The generated image quickly changes from a typical soccer player to showing an entire soccer field on a Martian landscape. If you have access to the beta, you can try out the feature for yourself by opening a chat with Meta AI and then start a prompt with the word “Imagine.”

Additionally, Meta says its Meta Llama 3 model can now produce “sharper and higher quality” images and is better at showing text. You can also ask Meta AI to animate any images you provide, allowing you to turn them into a GIF to share with friends. Along with availability on WhatsApp, real-time image generation is also available to US users through Meta AI for the web.
Further reading: Meta Releases Llama 3 AI Models, Claiming Top Performance

Apologies to Ogden Nash

By jenningsthecat • Score: 3 Thread

The one-l lama, He’s a priest.
The two-l llama, He’s a beast.
And I will bet A silk pajama
We’ll all be screwed by Meta’s version 3 llama.

Colorado Bill Aims To Protect Consumer Brain Data

Posted by BeauHD View on SlashDot Skip
An anonymous reader quotes a report from the New York Times:
Consumers have grown accustomed to the prospect that their personal data, such as email addresses, social contacts, browsing history and genetic ancestry, are being collected and often resold by the apps and the digital services they use. With the advent of consumer neurotechnologies, the data being collected is becoming ever more intimate. One headband serves as a personal meditation coach by monitoring the user’s brain activity. Another purports to help treat anxiety and symptoms of depression. Another reads and interprets brain signals while the user scrolls through dating apps, presumably to provide better matches. ("‘Listen to your heart’ is not enough,” the manufacturer says on its website.) The companies behind such technologies have access to the records of the users’ brain activity — the electrical signals underlying our thoughts, feelings and intentions.

On Wednesday, Governor Jared Polis of Colorado signed a bill that, for the first time in the United States, tries to ensure that such data remains truly private. The new law, which passed by a 61-to-1 vote in the Colorado House and a 34-to-0 vote in the Senate, expands the definition of “sensitive data” in the state’s current personal privacy law to include biological and “neural data” generated by the brain, the spinal cord and the network of nerves that relays messages throughout the body. “Everything that we are is within our mind,” said Jared Genser, general counsel and co-founder of the Neurorights Foundation, a science group that advocated the bill’s passage. “What we think and feel, and the ability to decode that from the human brain, couldn’t be any more intrusive or personal to us.” “We are really excited to have an actual bill signed into law that will protect people’s biological and neurological data,” said Representative Cathy Kipp, Democrat of Colorado, who introduced the bill.

Its a start, but not enough.

By Bob_Who • Score: 4, Insightful Thread

This protection should extend to ALL biometric and health related data, including medications or anything else protected by doctor patient info.

There should be no way that this information should EVER be bought or sold without EXPRESS CONSENT ever.

The question is how long will it take before we elect leadership that is capable of doing the job of representing people, not payola.

Feds Hit Coding Boot Camp With Big Fine For Allegedly Conning Students

Posted by msmash View on SlashDot Skip
The US Consumer Financial Protection Bureau (CFPB) has slapped coding boot camp BloomTech — formerly known as Lambda School — with several punishments for alleged deceptive business practices. From a report:
The business, which claims on its site it will help students land their “dream job” in tech at companies like Amazon, Cisco, and Google, accepted the consent order without admitting or denying any wrongdoing. In an announcement yesterday, the CFPB said it had taken action against BloomTech and its CEO Austen Allred for allegedly not disclosing the true cost of its loans to students and allegedly claiming overoptimistic hiring rates for BloomTech graduates. BloomTech, formerly Lambda School, has operated since 2017 and offers six- to nine-month vocational programs in science and engineering, with a focus on computer technology.

“BloomTech and its CEO sought to drive students toward income share loans that were marketed as risk-free, but in fact carried significant finance charges and many of the same risks as other credit products,” said Rohit Chopra, director of the CFPB. With income share loans or income share agreements, BloomTech allowed students to pay tuition later but in exchange had to pay a percentage of their future income, CFPB claimed. The agency alleged that BloomTech explicitly told students that its income share loans (which cost an average of $4k “finance charge” to use) weren’t actually loans at all. The CFPB claimed in the settlement order a “significant majority” of students used these loans to finance their education, and alleged each student could end up paying up to $30k of their income to BloomTech to settle the loans.
From the CFPB’s press release:
BloomTech advertised on its website that 71 to 86 percent of students were placed in jobs within six months of graduation, when its non-public reporting to investors consistently showed placement rates closer to 50 percent. Allred tweeted that the school achieved a 100 percent job-placement rate in one of its cohorts, and later acknowledged in a private message that the sample size was just one student.

Re:how does an six- to nine-month school cost 30K?

By smooth wombat • Score: 4, Informative Thread

Read that part again. It’s not that the school costs that much, it’s that the finance charges on these “loans” could pile up over time. Just like any loan which isn’t paid off and interest continues to accrue.

Why do you think so many people owe more on their student/medical loan than the original value of the loan? They didn’t pay enough of it off fast enough so the interest kept adding to their total loan cost.

If you’re going to a real school

By rsilvergun • Score: 4, Interesting Thread
then often the loan terms are such that after X years of payments the loans are forgiven. This is how/why Biden’s forgiven around $142 billion in loans. The terms of the loans were met and the loan officers were (illegally) still collecting. No punishment or requirement to pay back the ill gotten gains of course, let’s not get too crazy…

But at these diploma mills the loans are super shady, so I doubt it applies unless the CFPB gets involved like they did here.

We did exactly that

By rsilvergun • Score: 5, Insightful Thread
under Obama during his second term (when he had a little more political capital and could risk the inevitable lobbying backlash from the diploma mill industry). It all got rolled back under Trump. That’s how/why the “University” of Phoenix closed for a while and then reopened.

I suspect in Biden’s second term he’ll do the same thing, but right now it would be too risky to spend that political capital, just like it was under Obama.

ITT Tech and Corinthian College!

By El Fantasmo • Score: 3 Thread

Did we learn nothing from ITT Tech and Corinthian College?

https://en.wikipedia.org/wiki/…

https://en.wikipedia.org/wiki/…

Talent is real

By MpVpRb • Score: 4, Insightful Thread

It takes a special kind of mind to be good at programming and not everyone can do it
Even with talent, it takes years and a LOT of work
A very short “boot camp” might be useful for someone who was curious and wanted to learn the basics for fun
Problem is, they are advertised as a way to get a high paying job
This is a scam

Crypto Trader Eisenberg Convicted of Fraud in $110 Million Mango Markets Scheme

Posted by msmash View on SlashDot Skip
A jury found Avraham “Avi” Eisenberg guilty on all three counts of fraud and manipulation in a $110 million crypto trade scheme using the Mango Markets platform. Axios:
The case was the first known test for a jury to decide whether existing U.S. laws governing fraud and market manipulation apply to the world of decentralized finance (DeFi). The 28-year-old Eisenberg will be held to account for his actions on Oct. 11, 2022, when a series of trades he made intentionally boosted the price of Mango Markets’ native token, MNGO, as well as the price of futures contracts.

He used the inflated futures holdings as collateral to borrow other cryptocurrencies on the platform, then quickly withdrew those assets and walked away from his collateral. Eisenberg never disputed the facts of the strategy but contended that what he did was legal and permitted by the DeFi protocol, a principle in the industry known as “code is law.” U.S. laws apply to DeFi: “Avraham Eisenberg ran a con,” prosecutors said Wednesday, during closing arguments, continuing its momentum from last week. The word “con” was used at least six more times in those remarks.

All of it

By RitchCraft • Score: 5, Insightful Thread

All Crypto is a “con”.

Eisenberg Uncertainty Principle

By organgtool • Score: 4, Funny Thread
You can know where your cryptocurrency is and how much you have, but you can’t know both at the same time.

Boeing Aims To Bring Flying Cars To Asia By 2030

Posted by msmash View on SlashDot Skip
U.S. aircraft manufacturer Boeing plans to enter the flying car business in Asia by 2030, looking to tap demand for the fast travel the vehicles could provide in the region’s traffic-choked cities. Nikkei:
Boeing Chief Technology Officer Todd Citron revealed the plans in an interview with Nikkei. The company is developing electric vertical take-off and landing (eVTOL) craft at subsidiary Wisk Aero. The aircraft will adopt autonomous technology, rare among eVTOL craft. The plan is to first obtain certification in the U.S. before expanding into Asia. Details of the Asia business will be finalized in the future, including whether Boeing will sell the aircraft to companies aiming to provide eVTOL transportation services or operate the services itself.

Boeing is currently considering which country in Asia to enter first, including Japan. In Japan, domestic startup SkyDrive and Germany’s Volocopter are scheduled to operate air taxi services at the 2025 Osaka World Expo. Boeing opened a research and development base in Nagoya on Thursday. It first established R&D operations in Japan in 2022 but had been renting space from other companies until now.

Re:Stop

By turp182 • Score: 5, Funny Thread

It’s a product ploy. They are bringing “flying cars” while current products are safest as “driving planes”…

I kid…

I see their plan

By systemd-anonymousd • Score: 5, Funny Thread

The only way Boeing could make flying cars is if they build conventional cars and fuck it up

Re:Stop

By Dutch Gun • Score: 5, Insightful Thread

I came for this comment. Was not disappointed.

Boeing needs to focus on it’s core business right now, instead of dreaming up flights of fancy. As a company, they appear to be falling into the shitter (likely a long process, and we’re finally seeing the end results). Do they need a more serious wake-up call than what they’ve had?

It will be interesting…

By kpainter • Score: 5, Insightful Thread
It will be interesting to see how they can take the 737 fuselage and transform it into a car. You know they aren’t going to do a completely new design in the interest of cost savings.

Re:Stop

By dgatwood • Score: 5, Funny Thread

They’re struggling to keep their planes in the air right now, much less cars.

Boeing: The sound your flying car makes when it unexpectedly lands on the roof of your neighbor’s house.

Nigeria To Criminalise Fiber Cable Damage Costing Telecoms Billions

Posted by msmash View on SlashDot Skip
Nigeria will criminalize the destruction of broadband fiber cables following repeated complaints by MTN Nigeria and other telecommunications companies that they are losing billions of naira, Bloomberg News reported, citing people familiar with the matter. From the report:
Nigeria’s works ministry, which supervises federal road constructors, is finalizing the regulation that will be signed as an executive order by President Bola Tinubu, said the people, asking not to be identified as they weren’t authorized to comment. While there are presently laws against vandalism, the authorities are aiming to regulate construction firms more closely. The order will enforce stiff penalties on offenders, said the people, declining to provide more details or say when it will be signed. “Telecom assets are critical backbone that supports the economy across sectors,” said Temitope Ajayi, a senior presidential aide, who noted that the Association of Telecommunications Companies has been demanding the classification for years. New rules will provide “further assurance that the Nigerian government will protect their investments against vandals and criminal elements.”

Say What?

By NoWayNoShapeNoForm • Score: 3 Thread
I guess Nigeria has run out of wealthy prince people to pay for that damage?

WTF - It wasn’t already illegal?

By nuckfuts • Score: 3 Thread
What a concept - let’s make willful destruction of someone else’s property illegal. Cuz evidently is wasn’t illegal before now?

“Costing telecoms billions”…

By Harvey Manfrenjenson • Score: 3 Thread

…except that if you read the very first sentence of TFA, it specifies that the damage is costing billions of naira. One naira=.00087 dollars. So a billion naira is somewhat less than a million dollars.

Author Granted Copyright Over Book With AI-Generated Text - With a Twist

Posted by msmash View on SlashDot Skip
The U.S. Copyright Office has granted a copyright registration to Elisa Shupe, a retired U.S. Army veteran, for her novel “AI Machinations: Tangled Webs and Typed Words,” which extensively used OpenAI’s ChatGPT in its creation. The registration is among the first for creative works incorporating AI-generated text, but with a significant caveat - Shupe is considered the author of the “selection, coordination, and arrangement” of the AI-generated content, not the text itself.

Shupe, who writes under the pen name Ellen Rae, initially filed for copyright in October 2022, seeking an Americans with Disabilities Act (ADA) exemption due to her cognitive impairments. The Copyright Office rejected her application but later granted the limited copyright after Shupe appealed. The decision, as Wired points out, highlights the agency’s struggle to define authorship in the age of AI and the nuances of copyright protection for AI-assisted works.

Cue all the people acting shocked about this…

By Rei • Score: 5, Informative Thread

… when the original ruling itself plainly said that though the generated content itself isn’t copyrightable, human creative action such as postprocessing or selection can render it copyrightable.

I still think the basic ruling was bad for a number of reasons, and it’ll increasingly come under stress in the coming years. But there is zero shock to this copyright here. The copyright office basically invited people to do this.

Re:Cue all the people acting shocked about this…

By Calydor • Score: 5, Informative Thread

Isn’t it roughly the same rules that phone books ran under? Couldn’t copyright the (public) content, but the layout etc. could be?

Re:Cue all the people acting shocked about this…

By Rei • Score: 5, Interesting Thread

As for why I think the ruling was bad: their argument was that because the person doesn’t control the exact details of the composition of the work, than the basic work (before postprocessing or selection) can’t be copyrighted. But that exact same thing applies to photography, outside of studio conditions. Ansel Adams wasn’t out there going, “Okay, put a 20 meter oak over there, a 50 meter spruce over there, shape that mountain ridge a bit steeper, put a cliff on that side, cover the whole thing with snow… now add a rainbow to the sky… okay, cue the geese!” He was searching the search space for something to match a general vision - or just taking advantage of happenstance findings. And sure, a photographer has many options at their hands in terms of their camera and its settings, but if you think that’s a lot, try messing around with AUTOMATIC1111 with all of its plugins some time.

The winner of Nature Photographer of the year in 2022 was Dmitry Kokh, with “House of Bears”. He was stranded on a remote Russian archipelago and discovered that polar bears had moved into an abandoned weather station, and took photos of them. He didn’t even plan to be there then. He certainly didn’t plan on having polar bears in an abandoned weather station, and he CERTAINLY wasn’t telling the bears where to stand and how to pose. Yet his work is a classic example of what the copyright office thinks should be a copyrightable work.

And the very notion that people don’t control the layout with AI art is itself flawed. It was an obsolete notion even when they made their ruling - we already had img2img, instructpix2pix and controlnet. The author CAN control the layout, down to whatever level of intricate detail they choose. Unlike, say, a nature photographer. And modern models give increasing levels of control even with the prompt itself - with SD3 (unlike SD1/2 or SC) - you can do things like “A red sphere on a blue cube to the left of a green cone” . We’re heading to - if not there already - where you could write a veritable short story’s worth of detail to describe a scene.

I find it just plain silly that Person A could grab their cell phone and spend 2 seconds snapping a photo of whatever happens to be out their window, and that’s copyrightable, but a person who spends hours searching through the latent space - let alone with ControlNet guidance (controlnet inputs can be veritable works of art in their own right) - isn’t given the same credit for the amount of creative effort put into the work.

I think, rather, it’s very simple: the human creative effort should be judged not on the output of the work (the work is just a transformation of the inputs), but the amount of creative effort they put into said inputs. Not just on the backend side - selection, postprocessing, etc - but on the frontend side as well. If a person just writes “a fluffy dog” and takes the first pic that comes up, obviously, that’s not sufficient creative endeavour. But if a person spends hours on the frontend in order to get the sort of image they want, why shouldn’t that frontend work count? Seems dumb to me.

Re:AI Incest

By Rei • Score: 4, Interesting Thread

Yes, “you’ve been told” that by people who have no clue what they’re talking about. Meanwhile, models just keep getting better and better. AI images have been out for years now. There’s tons on the net.

First off, old datasets don’t just disappear. So the *very worst case* is that you just keep developing your new models on pre-AI datasets.

Secondly, there is human selection on things that get posted. If humans don’t like the look of something, they don’t post it. In many regards, an AI image is replacing what would have been a much crapper alternative choice.

Third, dataset gatherers don’t just blindly use a dump of the internet. If there’s a place that tends to be a source of crappy images, they’ll just exclude or downrate it.

Fourth, images are scored with aesthetic gradients before they’re used. That is, humans train models to assess how much they like images, and then those models look at all the images in the dataset and rate them. Once again, crappy images are excluded / downrated.

Fifth, trainers do comparative training and look at image loss rates, and an automatically exclude problematic ones. For example, if you have a thousand images labeled “watermelon” but one is actually a zebra, the zebra will have an anomalous loss spike that warrants more attention (either from humans or in an automated manner). Loss rates can also be compared between data +sources+ - whole websites or even whole datasets - and whatever is working best gets used.

Sixth, trainers also do direct blind human comparisons for evaluation.

This notion that AIs are just going to get worse and worse because of training on AI images is just ignorant. And demonstrably false.

Sounds a bit like photographs…

By Firethorn • Score: 4, Interesting Thread

Hmm… Sounds a lot like how a photograph still gets copyright. The photographer, even if they take hundreds of photos, choses the camera, timing, lighting, lens, any after-effects, etc… This is judged enough to get copyright.

Now, the guy who had his camera grabbed by an ape, who then took a selfie with it, doesn’t get copyright, because it wasn’t intentional. Oddly enough if he’d handed the camera over, he probably would have. Note: Court case may have been appealed or whatever since.

If you’re using something like ChatGPT in an “active” fashion, in that you’re reviewing the output, adjusting your request, editing the text, and such to improve the presentation, well, same sort of thing, I think. It’s like taking a piece of stone or wood, and changing up what you carve out of it depending on how the stone works out.

And yes “selection, coordination, and arrangement” sounds a bit right to be enough for copyright. She might not be able to copyright a given sentence spat out by ChatGPT, but the entire work, yes.
It’s like how paint colors aren’t really copyrightable, but a painting is. The word “word” isn’t copyrightable, but technically I could claim copyright on this post.

Hackers Are Threatening To Publish a Huge Stolen Sanctions and Financial Crimes Watchlist

Posted by msmash View on SlashDot Skip
An anonymous reader shares a report:
A financially motivated criminal hacking group says it has stolen a confidential database containing millions of records that companies use for screening potential customers for links to sanctions and financial crime. The hackers, which call themselves GhostR, said they stole 5.3 million records from the World-Check screening database in March and are threatening to publish the data online.

World-Check is a screening database used for “know your customer” checks (or KYC), allowing companies to determine if prospective customers are high risk or potential criminals, such as people with links to money laundering or who are under government sanctions.The hackers told TechCrunch that they stole the data from a Singapore-based firm with access to the World-Check database, but did not name the firm. A portion of the stolen data, which the hackers shared with TechCrunch, includes individuals who were sanctioned as recently as this year.

Crminals

By RitchCraft • Score: 3 Thread

Criminals outing criminals. What is this world coming to!?

I hope they release it

By Baron_Yam • Score: 4 Thread

To hell with secret blacklists.

Access to some data should be rate-limited

By davidwr • Score: 4, Interesting Thread

Sensitive data should be hard to steal in bulk.*

Put the data warehouse behind a slow-speed link - one that’s just fast enough for normal, expected traffic. “Slow speed link” may vary by time-of-day or other circumstances.

The goal is that if there’s a big rush of traffic, requests will get queued or dropped and someone will notice and be able to hit the “emergency stop” button.

Sensitive data that will never be needed “in real time” should be stored in a system that can only be accessed by a few people (or robots serving the same purpose) who have the job of taking requests, copying the data to temporary storage, then moving the temporary storage to someplace where the person who needs it can get to it. Think of it as a cache with a 5-minute loading time.

If industry does this, some things will be less convenient and more expensive to run, but the risks of large-scale, hit-and-run data thefts will go way down. This won’t fix small-scale thefts or slowly-drain-the-data-warehouse attacks, but it will help.

* Sensitive data should be hard to steal, period, but that may be too much to ask.

Re:Crminals

By zeeky boogy doog • Score: 5, Informative Thread
Multiple years of the House GQP “investigating” and they have absolutely nothing. To the point that one of the Democrats on the panel, in the same hearing in which one of the “witnesses” adamantly claimed to have total proof of all the corruption, called their bluff and hilariously motioned to advance the impeachment to the full House… and every one of the liars running the circus went silent.

That’s right, a Democrat made the motion to impeach Biden on the full floor and the liars who claimed to be “investigating” folded like a cheap tent in a hurricane.

Because they know it’s all a lie. A sham, perpetrated for the sole reason of allowing other liars to claim Biden is “under investigation.”

The banks use KYC to bully people

By BeaverCleaver • Score: 3 Thread

I recently made a complaint to my country’s regulators about my bank. A few weeks, later, the bank started nagging me to “verify my identity” as part of their “KYC” procedure. The bank threatened to cut off access to my account if I didn’t comply. I had a quick look through the questionnaire on their website and decided the bank was asking for way too much information, most of it not relevant for a personal bank account. I eventually went into a branch (one of the few branches they haven’t closed down to save money) and showed them an ID.

Lessons learned:
1. These KYC programs is not just to target shady money launderers. Large corporations can and do use these tools to harass and intimidate innocent people.
2. If the bank wants you to log into their website (or use their app) to do anything above or beyond simply paying a bill, don’t do it. Go the branch in person, even if it’s a hassle.
3. Keep a few bucks in cash in case the bank maliciously cuts you off. They’ll call it an “error” and it will probably get fixed eventually.... but you’ll need to eat in the meantime.
4. Banks are not run by nice people. Banks don’t deliver profits to their shareholders by being nice to the their customers.

Meta Releases Llama 3 AI Models, Claiming Top Performance

Posted by msmash View on SlashDot Skip
Meta debuted a new version of its powerful Llama AI model, its latest effort to keep pace with similar technology from companies like OpenAI, X and Google. The company describes Llama 3 8B and Llama 3 70B, containing 8 billion and 70 billion parameters respectively, as a “major leap” in performance compared to their predecessors.

Meta claims that the Llama 3 models, trained on custom-built 24,000 GPU clusters, are among the best-performing generative AI models available for their respective parameter counts. The company supports this claim by citing the models’ scores on popular AI benchmarks such as MMLU, ARC, and DROP, which attempt to measure knowledge, skill acquisition, and reasoning abilities. Despite the ongoing debate about the usefulness and validity of these benchmarks, they remain one of the few standardized methods for evaluating AI models. Llama 3 8B outperforms other open-source models like Mistral’s Mistral 7B and Google’s Gemma 7B on at least nine benchmarks, showcasing its potential in various domains such as biology, physics, chemistry, mathematics, and commonsense reasoning.

TechCrunch adds:
Now, Mistral 7B and Gemma 7B aren’t exactly on the bleeding edge (Mistral 7B was released last September), and in a few of benchmarks Meta cites, Llama 3 8B scores only a few percentage points higher than either. But Meta also makes the claim that the larger-parameter-count Llama 3 model, Llama 3 70B, is competitive with flagship generative AI models including Gemini 1.5 Pro, the latest in Google’s Gemini series.

Llama?

By TWX • Score: 5, Funny Thread

Here’s a llama there’s a llama,
and another little llama,
Fuzzy llama, Funny llama,
llama, llama, Duck.

Don’t sit on this bench(mark.)

By fyngyrz • Score: 4, Insightful Thread

I’ll be impressed when one of these ML engines is sophisticated enough to be able to say “I don’t know” instead of just making up nonsense by stacking probabilistic sequences; also it needs to be able tell fake news from real news. Although there’s an entire swath of humans who can’t do that, so it’ll be a while I guess. That whole “reality has a liberal bias” truism ought to be a prime training area.

While I certainly understand that the Internet and its various social media cesspools are the most readily available training ground(s), it sure leans into the “artificial stupid” thing.

Re:Don’t sit on this bench(mark.)

By fyngyrz • Score: 4, Interesting Thread

LLMs cannot do it. Hallucination is baked-in.

LLMs alone definitely can’t do it. LLMs, however, seem (to me, speaking for myself as an ML developer) to be a very likely component in an actual AI. Which, to be clear, is why I use “ML” instead of “AI”, as we don’t have AI yet. It’s going to take other brainlike mechanisms to supervise the hugely flawed knowledge assembly that LLMs generate before we even have a chance to get there. Again, IMO.

I’d love for someone to prove me wrong. No sign of that, though. :)

Google is Combining Its Android and Hardware Teams

Posted by msmash View on SlashDot Skip
Google CEO Sundar Pichai announced substantial internal reorganizations on Thursday, including the creation of a new team called "Platforms and Devices" that will oversee all of Google’s Pixel products, all of Android, Chrome, ChromeOS, Photos, and more. From a report:
The team will be run by Rick Osterloh, who was previously the SVP of devices and services, overseeing all of Google’s hardware efforts. Hiroshi Lockheimer, the longtime head of Android, Chrome, and ChromeOS, will be taking on other projects inside of Google and Alphabet. This is a huge change for Google, and it likely won’t be the last one. There’s only one reason for all of it, Osterloh says: AI. “This is not a secret, right?” he says.

Consolidating teams “helps us to be able to do full-stack innovation when that’s necessary,” Osterloh says. He uses the example of the Pixel camera: “You had to have deep knowledge of the hardware systems, from the sensors to the ISPs, to all layers of the software stack. And, at the time, all the early HDR and ML models that were doing camera processing… and I think that hardware / software / AI integration really showed how AI could totally transform a user experience. That was important. And it’s even more true today.”

Wait, they fired the chrome guy?

By paul_engr • Score: 3 Thread
The guy in charge of chrome deserves to be removed for the atrocities they’ve imposed upon users, the forced download bubble in particular. I’m sure the hardware guy is no better, though.

Great!

By organgtool • Score: 3 Thread
I can only imagine how many more “Pixel-only” features Android is about to get. I really hate the current state of smartphone choices.

Canadian Science Gets Biggest Boost To PhD and Postdoc Pay in 20 Years

Posted by msmash View on SlashDot Skip
Researchers in Canada got most of what they were hoping for in the country’s 2024 federal budget, with a big boost in postgraduate pay and more funding for research and scientific infrastructure. From a report:
“We are investing over $5 billion in Canadian brainpower,” said finance minister Chrystia Freeland in her budget speech on 16 April. “More funding for research and scholarships will help Canada attract the next generation of game-changing thinkers.”

Postgraduate students and postdoctoral researchers have been advocating for higher pay for the past two years through a campaign called Support Our Science. They requested an increase in the value, and number, of federal government scholarships, and got more than they asked for. Stipends for master’s students will rise from Can$17,500 (US$12,700) to $27,000 per year, PhDs stipends that ranged from $20,000 to $35,000 will be set to a uniform annual $40,000 and most postdoctoral-fellowship salaries will increase from $45,000 to $70,000 per annum. The number of scholarships and fellowships provided will also rise over time, building to around 1,720 more per year after five years.

“We’re very thrilled with this significant new investment, the largest investment in graduate students and postdocs in over 21 years,” says Kaitlin Kharas, a PhD student at the University of Toronto, Canada, and executive director of Support Our Science. “It will directly support the next generation of researchers.” Although only a small proportion of students and postdoctoral fellows receive these federal scholarships, other funders tend to use them as a guide for their own stipends. Many postgraduates said that low pay was forcing them to consider leaving Canada to pursue their scientific career, says Kharas, so this funding should help to retain talent in the country.

Wow!

By methano • Score: 3, Interesting Thread
I think my total pay package for my first year in grad school (Phd, Cornell, Chemistry) was $3,200. This was made up of TA pay for the school year and a “NY Sea Grant” for the summer. I TA’d the next year then got an NIH predoc fellowship for the following years. This was actually a loan that you had to pay back if you didn’t go on to teach or work in a healthcare related industry. I worked in the pharma industry so it was forgiven.

Well…

By ceoyoyo • Score: 3 Thread

These are only for federal scholarships. Most students don’t get those. Also, for the postdocs it comes after a big cut ten years ago when they decided the fellowships were taxable. Retroactively in many cases.

Re:Wow!

By Targon • Score: 4, Insightful Thread
Here in the USA, the idea of the government actually doing anything for citizens is viewed by Republicans as welfare and something bad. Investing in citizens is against what they believe in, while giving money away to the wealthy and international corporations that ship jobs out of the USA to other countries is perfectly worthy of the government giving them tax breaks.

Good, but what about inflation?

By sinij • Score: 3 Thread
These massive deficits are driving inflation, Canada is well into “run out of other people’s money” phase.

Odds of US TikTok Ban Increase After House Fast-Tracks Revised Bill, Picking Up Key Senate Support

Posted by msmash View on SlashDot
U.S. lawmakers have moved closer to enacting a countrywide ban on TikTok. From a report:
Last month, the House of Representatives passed a bill by a wide margin that would ban distribution of TikTok in U.S. unless TikTok’s Chinese parent, ByteDance, sells its ownership in the app within 165 days of the law’s enactment. On Wednesday, House Speaker Mike Johnson issued a new proposal that would extend the sale requirement deadline to nine months, with a potential for a 90-day extension — addressing a key concern of Sen. Maria Cantwell (D-Wash.), chair of the Senate’s Commerce, Science and Transportation Committee, that the divestiture timeline was too short.

The revised TikTok ban proposal is tied to a broader bill providing emergency aid for Ukraine and Israel; the House is expected to vote on the measure Saturday, and if it passes would move to the Senate. President Biden has said he will sign the TikTok divest-or-ban legislation into law. On Wednesday evening, Cantwell said she supported the revised TikTok ban bill. “I’m very happy that Speaker Johnson and House leaders incorporated my recommendation to extend the ByteDance divestment period from six months to a year,” she said in a statement. “As I’ve said, extending the divestment period is necessary to ensure there is enough time for a new buyer to get a deal done. I support this updated legislation.”

It isn’t a ban, it’s a cash grab

By zephvark • Score: 4, Insightful Thread

The Feds are trying to confiscate a large part of TikTok’s business by a forced sale to American businessmen. I gather this is because TikTok appears to be successful, whereas ex-Twitter and Pravda Social are going down in flames.

It’s not a ban and was never intended to be a ban. It’s a direct threat based on, “nice company you have here. It would be a shame if something happened to it.”

Re:It isn’t a ban, it’s a cash grab

By ArchieBunker • Score: 4, Interesting Thread

It’s also a nice distraction from the border crisis,

I’ll make a wager with you.

Travel to Mexico. Mail your passport and identification back to the USA. Try crossing at any of the “open” areas and report on your difficulty.

Re:Stop bundling!

By jacks smirking reven • Score: 4, Informative Thread

Yet if you dig deeper, the reason that congress critter voted against the bill was because of a rider, not because of the main subject.

This is true but we also have to acknowledge that the only reason the rider tends to be there is pull someone elses vote to the bill in question.

Riders are a result of negotiations to get things passed. The prevalence of them is a response to gridlock.

If this was 20-30 years ago you are not complaining about “riders” but about “earmarks” (this “one bill per topic” argument isn’t new, i’ve heard it all my life) but yet when Republicans banned earmarks in 2011 it actually worsened the problem:

In December 2015, Citizens Against Government Waste (CAGW) claimed in their 2016 Congressional Pig Book,[25] that all the FY2016 earmarks were contained in the December 2016 omnibus 2000-page Consolidated Appropriations Act, 2016 which authorized $1.15 trillion in appropriations.[26] The CAGW argued that “Throwing all earmarks into one large bill makes it more difficult to identify and eliminate earmarks than if Congress adhered to regular order and considered the 12 appropriations bills individually.”

Horse trading is part of politics. If you outright ban it then effectively much like any other product the problem will be worked around either in the open or more likely just done in secret, a black market for legislations as it were.

If you really want to move closer to the goal you prescribe then you have to attack the root cause, not the symptom and the cause is gridlock. Nobody wants to pass 10 smaller bills because that’ll just never get anywhere so one giant bill it is. If you want people to vote 10 times instead of one we need people in Congress who actually believe in the process and legislation.

Right now when half the legislators have it as their goal to not legislate and specifically talk about gumming up the systems, well, you get gridlock, giant riders and massive omnibus style bills.

Re:It isn’t a ban, it’s a cash grab

By ranton • Score: 5, Insightful Thread

It’s really odd a ban like this didn’t happen a long time ago. I think there is valid criticism that the US shouldn’t allow private businesses to control media (including social media) to the extent they do without more regulation, but not allowing a foreign geopolitical adversary to do it should be a no-brainer. YouTube, Twitter, Instagram, WhatsApp, and Facebook are all banned in China. The fact TikTok has been allowed in the US for as long as it has is ridiculous.

Re:It isn’t a ban, it’s a cash grab

By smooth wombat • Score: 5, Insightful Thread
the border crisis,

You mean this border “crisis”?

crumbling infrastructure,

Republicans, almost to a one, voted against a wide-ranging infrastructure bill, then bragged about all the money their districts were getting for infrastructure.

and general loss of civil rights

Yes, Republicans have been working hard to take away people’s civil rights. From taking away one’s right to control their own body to bannning books so you can’t read them, to trying to prevent entire groups from voting, they are working as hard as they can to impose an iron grip on people’s lives and destroy our freedoms.