ARM Give a man a fire and he's warm for a day, but set fire to him and he's warm for the rest of his life (Terry Pratchett, Jingo)

Google Calendar Gets a Redesign and Dark Mode

(Friday October 25, 2024 @11:21AM (msmash) from the for-what-it's-worth dept.)

Google is introducing a dark mode to the web version of Google Calendar and [1]rolling out a "refreshed user interface." From a report:

> The new UI will include buttons, dialog boxes, and sidebars that are "more modern and accessible" with improved typefaces. The update started rolling out this week and soon it will be available to everyone, whether they're using a personal Gmail login or any sort of paid Google Workspace account.

>

> [...] Google says the updated calendar UI will also feature "iconography that is legible and crisp, with a fresh feel," using its "custom-designed and highly-legible typefaces" that bring it line with Google's Material Design 3 standards. The updates, including dark mode, will also apply to "the entire calendar web experience," including the task list view.



[1] https://www.theverge.com/2024/10/24/24278419/google-calendar-web-dark-mode



Cable Companies Ask 5th Circuit To Block FTC's Click-to-Cancel Rule (arstechnica.com)

(Friday October 25, 2024 @03:00AM (msmash) from the pushback-begins dept.)

Cable companies, advertising firms, and newspapers are asking courts to [1]block a federal "click-to-cancel" rule that would force businesses to make it [2]easier for consumers to cancel services . From a report:

> Lawsuits were filed yesterday, about a week after the Federal Trade Commission approved a rule that "requires sellers to provide consumers with simple cancellation mechanisms to immediately halt all recurring charges."

>

> Cable lobby group NCTA-The Internet & Television Association and the Interactive Advertising Bureau trade group sued the FTC in the conservative US Court of Appeals for the 5th Circuit. The lawsuit claims the 5th Circuit is a proper venue because a third plaintiff, the Electronic Security Association, has its principal offices in Dallas. That group represents security companies such as ADT.



[1] https://arstechnica.com/tech-policy/2024/10/cable-companies-ask-5th-circuit-to-block-ftcs-click-to-cancel-rule/

[2] https://news.slashdot.org/story/24/10/16/1550257/ftc-takes-on-subscription-traps-with-click-to-cancel-rule



US Power Grid Added Battery Equivalent of 20 Nuclear Reactors In Past Four Years (theguardian.com)

(Friday October 25, 2024 @03:00AM (msmash) from the how-about-that dept.)

[1]whitroth writes:

> People here and elsewhere have been yelling for more nuclear power, and that renewables can't meet demand. Surprise -- the corporations are betting on them, and massive numbers of batteries can be produced a lot faster than nuclear plants can be built.

The Guardian adds:

> Faced with worsening climate-driven disasters and an electricity grid increasingly supplied by intermittent renewables, the US is rapidly installing huge batteries that are already starting to help prevent power blackouts. From barely anything just a few years ago, the US is now adding utility-scale batteries at a dizzying pace, having [2]installed more than 20 gigawatts of battery capacity to the electric grid , with 5GW of this occurring just in the first seven months of this year, according to the federal Energy Information Administration (EIA). This means that battery storage equivalent to the output of 20 nuclear reactors has been bolted on to America's electric grids in barely four years, with the EIA predicting this capacity could double again to 40GW by 2025 if further planned expansions occur.

>

> California and Texas, which both saw all-time highs in battery-discharged grid power this month, are leading the way in this growth, with hulking batteries helping manage the large amount of clean yet intermittent solar and wind energy these states have added in recent years.



[1] https://slashdot.org/~whitroth

[2] https://www.theguardian.com/environment/2024/oct/24/power-grid-battery-capacity-growth



Code.org Taps No-Code Tableau To Make the Case For K-12 Programming Courses

(Friday October 25, 2024 @03:00AM (msmash) from the i-see-what-you-did-there dept.)

[1]theodp writes:

> "Computer science education is a necessity for all students," argues [2]tech-backed nonprofit Code.org in its newly-published [3]2024 State of Computer Science Education (Understanding Our National Imperative) report. "Students of all identities and chosen career paths need quality computer science education to become informed citizens and confident creators of content and digital tools."

>

> In the 200-page report, Code.org pays special attention to participation in "foundational computer science courses" in high school. "Across the country, 60% of public high schools offer at least one foundational computer science course," laments Code.org (curiously [4]promoting a metric that ignores school size which nonetheless was [5]embraced by Education Week and others).

>

> "A course that teaches foundational computer science includes a minimum amount of time applying learned concepts through programming (at least 20 hours of programming/coding for grades 9-12 high schools)," Code.org explains in a separate 13-page [6]Defining Foundational Computer Science document. Interestingly, Code.org argues that Data and Informatics courses -- in which "students may use Oracle WebDB, SQL, PL/SQL, SPSS, and SAS" to learn "the K-12 CS Framework concepts about data and analytics" -- do not count, because "the course content focuses on querying using a scripting language rather than creating programs [the IEEE's [7]Top Programming Languages 2024 begs to differ]." Code.org similarly [8]dissed the use of the Wolfram Language for broad educational use back in 2016.

>

> With its insistence on the importance of kids taking Code.org-defined 'programming' courses in K-12 to promote computational thinking, it's probably no surprise to see that the data behind the 2024 State of Computer Science Education report was prepared using Python (the IEEE's top programming language) and presented to the public in a Jupyter notebook. Just kidding. Ironically, the [9]data behind the 2024 State of Computer Science Education analysis is prepared and presented by Code.org in a no-code [10]Tableau workbook.



[1] https://slashdot.org/~theodp

[2] https://advocacy.code.org/supporters/

[3] https://advocacy.code.org/stateofcs/

[4] https://www.prnewswire.com/news-releases/2024-state-of-computer-science-education-highlights-growing-investment-from-policymakers-continued-gaps-in-access-302282502.html

[5] https://www.edweek.org/teaching-learning/one-change-that-can-get-more-girls-students-of-color-taking-computer-science/2024/10

[6] https://docs.google.com/document/d/1i8CTNtn7hgzCtMw1x_zV14IDnS5LuA22JcVTwQyShoI/edit?usp=sharing

[7] https://spectrum.ieee.org/top-programming-languages-2024

[8] https://news.slashdot.org/story/16/09/17/224204/codeorg-disses-wolfram-language-touts-apples-swift-playgrounds

[9] https://advocacy.code.org/report-data/

[10] https://www.tableau.com/



Verisign and ICANN Renew Root Zone Maintainer Service Agreement (circleid.com)

(Friday October 25, 2024 @03:00AM (msmash) from the for-the-record dept.)

[1]penciling_in writes:

> Pat Kane, Senior VP at Verisign, reports that on October 20th, ICANN and Verisign renewed the agreement under which Verisign will continue to act as Root Zone Maintainer for the Domain Name System (DNS) [2]for another 8-year term . "The Root Zone sits atop the hierarchical architecture of the DNS and is essential to virtually all internet navigation, acting as the dynamic, cryptographically secure, global directory of all top-level domains that exist in the DNS. The Root Zone Maintainer is a unique role that ensures the cryptographic signing and publication of the Root Zone no less than once a day, without which, navigation on the internet would be impossible," the story adds.



[1] https://slashdot.org/~penciling_in

[2] https://circleid.com/posts/verisign-and-icann-renew-root-zone-maintainer-service-agreement



IPv6 May Already Be Irrelevant - But So is Moving Off IPv4, Argues APNIC's Chief Scientist (theregister.com)

(Thursday October 24, 2024 @11:30PM (msmash) from the how-about-that dept.)

The chief scientist of the Asia Pacific Network Information Center has a theory about [1]why the world hasn't moved to IPv6 . From a report:

> In a lengthy post to the center's blog, Geoff Huston recounts that the main reason for the development of IPv6 was a fear the world would run out of IP addresses, hampering the growth of the internet. But IPv6 represented evolution -- not revolution. "The bottom line was that IPv6 did not offer any new functionality that was not already present in IPv4. It did not introduce any significant changes to the operation of IP. It was just IP, with larger addresses," Huston wrote.

>

> IPv6's designers assumed that the protocol would take off because demand for IPv4 was soaring. But in the years after IPv6 debuted, Huston observes, "There was no need to give the transition much thought." Internetworking wonks assumed applications, hosts, and networks would become dual stack and support IPv6 alongside IPv4, before phasing out the latter. But then mobile internet usage exploded, and network operators had to scale to meet unprecedented demand created by devices like the iPhone. "We could either concentrate our resources on meeting the incessant demands of scaling, or we could work on IPv6 deployment," Huston wrote.



[1] https://www.theregister.com/2024/10/23/ipv6_relevance/



LinkedIn Fined More Than $300 Million in Ireland Over Personal Data Processing (msn.com)

(Thursday October 24, 2024 @05:40PM (msmash) from the growing-scrutiny dept.)

Ireland's data-protection watchdog fined LinkedIn 310 million euros ($334.3 million), saying the Microsoft-owned career platform's [1]personal-data processing breached strict European Union data-privacy and security legislation. From a report:

> The Irish Data Protection Commission in 2018 launched a probe into LinkedIn's processing of users' personal data for behavioral analysis and targeted advertising after its French equivalent flagged a complaint it received from a non-profit organization. Irish officials raised concerns on the lawfulness, fairness and transparency of the practice, saying Thursday that LinkedIn was in breach of the EU's General Data Protection Regulation.

>

> "The lawfulness of processing is a fundamental aspect of data protection law and the processing of personal data without an appropriate legal basis is a clear and serious violation of a data subjects' fundamental right to data protection," said Graham Doyle, deputy commissioner at the Irish Data Protection Commission. In their decision, Irish officials said LinkedIn wasn't sufficiently informing users when seeking their consent to process third-party data for behavioral analysis and targeted advertising and ordered the platform to bring its processing into compliance.



[1] https://www.msn.com/en-us/money/other/linkedin-fined-more-than-300-million-in-ireland-over-personal-data-processing/ar-AA1sQljM



Kroger and Walmart Deny 'Surge Pricing' After Adopting Digital Price Tags (nytimes.com)

(Thursday October 24, 2024 @05:40PM (msmash) from the tussle-continues dept.)

An anonymous reader shares a report:

> Members of Congress are raising the alarm about new technology at supermarkets: They say Kroger and other major grocery stores are implementing digital price tags that [1]could allow for dynamic pricing , meaning the sticker price on items like eggs and milk could change regularly. They also claim data from facial recognition technology at Kroger could be considered in pricing decisions.

>

> Kroger denied the claims, saying it has no plans to implement dynamic pricing or use facial recognition software. Walmart also said it had no plans for dynamic pricing, and that facial recognition was not being used to affect pricing, but the company did not specify whether the tool was being used for other purposes. Both Walmart, which has 4,606 U.S. stores, and Kroger, which has nearly 2,800 U.S. stores, also suggested that the effects of digital price tags are being exaggerated, and economic experts say that most grocery bills won't be higher as a result of the tags. Still, data privacy experts have concerns about new technology being implemented at grocery stores broadly.



[1] https://www.nytimes.com/2024/10/23/business/kroger-walmart-facial-recognition-prices.html



Note-Taking App Notion Readies Email Product (techcrunch.com)

(Thursday October 24, 2024 @05:40PM (msmash) from the now-this dept.)

Notion, the maker of a popular eponymous note-taking app, appears to be [1]getting ready to launch its own email product , called Notion Mail, TechCrunch reported Thursday, citing sources. From the report:

> Earlier this year, Notion acquired Skiff, a privacy-focused email service and app. At the time, Skiff said that it would provide a 12-month sunset window to users so that they have enough time to migrate to a different email service. For months, users on Reddit have shared hints of Notion working on its email product.

>

> Some folks found the development environment URL, others reportedly found the login page to the email product. At the time of writing, when TechCrunch entered mail.notion.so in a web browser, "Notion Mail" appeared briefly as the page title with a mail logo... But we were then redirected to Notion's main login page.



[1] https://techcrunch.com/2024/10/24/notions-email-product-is-nearing-launch/



Intel Weighed $20 Billion Nvidia Takeover in 2005 (nytimes.com)

(Thursday October 24, 2024 @05:40PM (msmash) from the life-changing-decisions dept.)

Intel considered acquiring graphics chip maker Nvidia for [1]up to $20 billion in 2005 , a move that could have reshaped the AI industry, according to The New York Times. Then-CEO Paul Otellini pitched the acquisition to Intel's board, recognizing the potential of graphics processors for data center computing. The board rejected the proposal, citing Intel's poor track record with acquisitions and the deal's unprecedented size, the report added. Today, Nvidia dominates the AI chip market with a $3 trillion valuation, while Intel struggles with declining revenue and [2]recent layoffs of 16,000 workers .



[1] https://www.nytimes.com/2024/10/24/technology/intel-ai-chips-mistakes.html

[2] https://slashdot.org/story/24/08/01/2126209/intel-to-cut-16000-jobs-to-save-costs



Journals With High Rates of Suspicious Papers Flagged By Science-Integrity Startup (nature.com)

(Thursday October 24, 2024 @05:40PM (BeauHD) from the fighting-fake-papers dept.)

[1]schwit1 shares a report from Nature:

> Which scientific publishers and journals are worst affected by fraudulent or dubious research papers -- and which have done least to clean up their portfolio? A technology start-up founded to help publishers spot potentially problematic papers says that it has some answers, and has shared its early findings with Nature. The science-integrity website [2]Argos , which was launched in September by Scitility, a technology firm headquartered in Sparks, Nevada, [3]gives papers a risk score on the basis of their authors' publication records , and on whether the paper heavily cites already-retracted research. A paper categorized as 'high risk' might have multiple authors whose other studies have been retracted for reasons related to misconduct, for example. Having a high score doesn't prove that a paper is low quality, but suggests that it is worth investigating.

>

> Argos is one of a growing number of research-integrity tools that look for red flags in papers. These include the [4]Papermill Alarm , made by Clear Skies, and Signals, by Research Signals, both London-based firms. Because creators of such software sell their manuscript-screening tools to publishers, they are generally reluctant to name affected journals. But Argos, which is offering free accounts to individuals and fuller access to science-integrity sleuths and journalists, is the first to show public insights. "We wanted to build a piece of technology that was able to see hidden patterns and bring transparency to the industry," says Scitility co-founder Erik de Boer, who is based in Roosendaal, the Netherlands. By early October, Argos had flagged more than 40,000 high-risk and 180,000 medium-risk papers. It has also indexed more than 50,000 retracted papers.



[1] https://slashdot.org/~schwit1

[2] https://www.scitility.com/argos

[3] https://www.nature.com/articles/d41586-024-03427-w?error=cookies_not_supported&code=e9e72bdd-0542-424a-a07a-d5cc40b2f3e0

[4] https://www.nature.com/articles/d41586-021-00733-5



Humanoid Robot Is the 'Fastest In the World' Thanks To Pair of Sneakers (livescience.com)

(Thursday October 24, 2024 @05:40PM (BeauHD) from the Usain-Bolt-of-robots dept.)

[1]AmiMoJo shares a report from Live Science:

> Scientists have demonstrated a new humanoid robot that [2]can run at a top speed of just over 8 miles per hour (mph) -- or 3.6 meters per second (m/s) to be exact. This makes it the speediest machine of its kind built so far, albeit these speeds were only achieved with the help of added footwear. STAR1 is a bipedal robot built by the Chinese company Robot Era that's 5 feet 7 inches (171 centimeters) tall and weighs 143 pounds (65 kilograms).

>

> Powered by high-torque motors and artificial intelligence (AI) algorithms, the footwear-donning STAR1 navigated different types of terrain, including grassland and gravel, while jogging on paved roads and earth, and sustained its top speed for 34 minutes. A top speed of 8 mph means it beat Unitree's H1 robot -- which set the previous speed record for a bipedal robot at 7.4 mph (3.3 m/s) in March 2024. Although STAR1 had the help of footwear, H1 was not technically jogging or running as its feet did not both leave the ground at once during transit.

You can watch STAR1 racing through the Gobi Desert [3]here .



[1] https://slashdot.org/~AmiMoJo

[2] https://www.livescience.com/technology/robotics/chinese-scientists-build-fastest-humanoid-robot-in-the-world-watch-it-run-across-the-gobi-desert

[3] https://www.youtube.com/watch?v=qw2y0kceAv0



Boeing-Made Satellite Explodes In Space (cbsnews.com)

(Thursday October 24, 2024 @05:40PM (BeauHD) from the can't-catch-a-break dept.)

"Boeing has had a series of issues over the past few years," writes Slashdot reader [1]quonset . "From [2]planes crashing , [3]lost service records , to a recent strike which [4]cost them $6 billion , now comes word a satellite they made [5]has exploded in space ." CBS News reports:

> The Intelsat 33e satellite, which was [6]launched in 2016 and provides communications across Europe, Asia and Africa, experienced "an anomaly" on Saturday, Intelsat said in a [7]news release . Attempts were made to work with Boeing and repair the satellite, but on Monday, the U.S. Space Force confirmed that the satellite had exploded. The satellite's breakup left some customers without power or communications services. Intelsat said it is working with third-party providers to limit service interruptions, and is in communication with customers.

>

> Since the breakup, the U.S. Space Force is now tracking "around 20 associated pieces" of the satellite in space. The agency said that there are "no immediate threats" and routine assessments to ensure safety are ongoing. Russia's space agency, [8]Roscosmos , said it had recorded "more than 80 fragments" of the destroyed satellite. Analysis of the pieces' trajectory determined that the destruction of the satellite was "instantaneous and high-energy," Roscosmos said.



[1] https://slashdot.org/~quonset

[2] https://news.slashdot.org/story/24/07/08/0421238/boeing-will-plead-guilty-to-fraud-related-to-fatal-737-max-crashes

[3] https://www.pbs.org/newshour/nation/boeing-admits-it-cant-find-work-records-for-panel-that-blew-out-on-alaska-airlines-flight

[4] https://apnews.com/article/boeing-earnings-strike-vote-new-ceo-af6c6dab8747d5b8189df97a55e6b8d9

[5] https://www.cbsnews.com/news/boeing-satellite-intelsat-33e-explodes-space-anamoly/

[6] https://www.intelsat.com/resources/blog/the-launch-of-intelsat-33e-let-the-campaign-begin/

[7] https://www.intelsat.com/newsroom/intelsat-reports-is-33e-satellite-loss/

[8] https://vk.com/wall-30315369_575391



Foreign Disinformation Is Hitting the US Election From All Directions (apnews.com)

(Thursday October 24, 2024 @11:21AM (BeauHD) from the two-weeks-left dept.)

An anonymous reader quotes a report from Wired:

> As November 5 draws closer, the Microsoft Threat Analysis Center (MTAC) [1]warned on Wednesday that malicious foreign influence operations launched by Russia, China, and Iran against the US presidential election are continuing to evolve and should not be ignored even though they have come to feel inevitable. In the group's fifth report, researchers [2]emphasize the range of ongoing activities (source may be paywalled; [3]alternative source ) as well as the inevitability that attackers will work to stoke doubts about the integrity of the election in its aftermath.

>

> In spite of escalating conflict in the Middle East, Microsoft says that Iran has been able to keep up its operations targeting the US election, particularly targeting the Trump campaign and attempting to foment anti-Israel sentiment. Russian actors, meanwhile, have been focused on targeting the Harris campaign with character attacks and AI-generated content, including deepfakes. And China has shifted its focus in recent weeks, researchers say, to target down-ballot Republican candidates as well as sitting members of Congress who promote policies adversarial to China or in conflict with its interests.

>

> Crucially, MTAC says it is all but certain that these actors will attempt to stoke division and mistrust in vote security on Election Day and in its immediate aftermath. "As MTAC observed during the 2020 presidential cycle, foreign adversaries will amplify claims of election rigging, voter fraud, or other election integrity issues to sow chaos among the US electorate and undermine international confidence in US political stability," the researchers wrote in their report. As the 2024 campaign season enters its final phase, the researchers say that they expect to see AI-generated media continuing to show up in new campaigns, particularly because content can spread so rapidly in the charged period immediately around Election Day. The report also notes that Microsoft has detected Iranian actors probing election-related websites and media outlets, "suggesting preparations for more direct influence operations as Election Day nears."

"History has shown that the ability of foreign actors to rapidly distribute deceptive content can significantly impact public perception and electoral outcomes," wrote MTAC general manager Clint Watts. "With a particular focus on the 48 hours before and after Election Day, voters, government institutions, candidates and parties must remain vigilant to deceptive and suspicious activity online."



[1] https://blogs.microsoft.com/on-the-issues/2024/10/23/as-the-u-s-election-nears-russia-iran-and-china-step-up-influence-efforts/

[2] https://www.wired.com/story/microsoft-russia-china-iran-election-disinformation/

[3] https://apnews.com/article/russia-china-iran-disinformation-election-ef9b5155349d496e00513e7b3bc3fc07



Norway To Increase Minimum Age Limit On Social Media To 15 To Protect Children (theguardian.com)

(Thursday October 24, 2024 @11:21AM (BeauHD) from the uphill-battle dept.)

Norway [1]plans to enforce a strict minimum social media age of 15 to protect children from harmful content and the influence of algorithms. The Guardian reports:

> The Scandinavian country already has a minimum age limit of 13 in place. Despite this, more than half of nine-year-olds, 58% of 10-year-olds and 72% of 11-year-olds are on social media, according to research by the Norwegian media authority. The government has pledged to introduce more safeguards to prevent children from getting around the age restrictions -- including amending the Personal Data Act so that social media users must be 15 years old to agree that the platform can handle their personal data, and developing an age verification barrier for social media.

>

> "It sends quite a strong signal," the prime minister told the newspaper VG on Wednesday. "Children must be protected from harmful content on social media. These are big tech giants pitted against small children's brains. We know that this is an uphill battle, because there are strong forces here, but it is also where politics is needed." While he said he understood that social media could offer lonely children a community, self-expression must not be in the power of algorithms. "On the contrary, it can cause you to become single-minded and pacified, because everything happens so fast on this screen," he added.

"It is also about giving parents the security to say no," said Kjersti Toppe, the minister for children and families. "We know that many people really want to say no, but don't feel they can."



[1] https://www.theguardian.com/world/2024/oct/23/norway-to-increase-minimum-age-limit-on-social-media-to-15-to-protect-children



Huawei Makes Divorce From Android Official With HarmonyOS NEXT Launch (theregister.com)

(Thursday October 24, 2024 @11:21AM (BeauHD) from the long-time-coming dept.)

The Register's Laura Dobberstein reports:

> Huawei formally launched its home-brewed operating system, HarmonyOS NEXT, on Wednesday, [1]marking its official separation from the Android ecosystem . Huawei [2]declared it released and "officially started public beta testing" of the OS for some of its smartphones and tablets that run its own Kirin and Kunpeng chips.

>

> Unlike previous iterations of HarmonyOS, HarmonyOS NEXT no longer supports Android apps. Huawei maintains top Chinese outfits aren't deterred by that. It cited Meituan, Douyin, Taobao, Xiaohongshu, Alipay, and JD.com as among those who have developed native apps for the OS. In case you're not familiar, they're China's top shopping, payment, and social media apps.

>

> Huawei also claimed that at the time of its announcement, over 15,000 HarmonyOS native applications and meta-services were also launched. That's a nice number, but well short of the millions of apps found on the Google Play Store and Apple's App Store. The Chinese tech player also revealed that the operating system has 110 million lines of code and claimed it improves the overall performance of mobile devices running it by 30 percent. It also purportedly increases battery life by 56 minutes and leaves an average of 1.5GB of memory for purposes other than running the OS.



[1] https://www.theregister.com/2024/10/23/huaweis_harmonyos_next_launch/

[2] https://www.huawei.com/cn/news/2024/10/harmonyos5



Russia Says 'Unprecedented' Cyberattack Hits Foreign Ministry Amid BICS Summit (reuters.com)

(Thursday October 24, 2024 @11:21AM (BeauHD) from the coincidence-I-think-not dept.)

The Russian Foreign Ministry says it had been [1]targeted by a large-scale distributed denial-of-service attack (DDoS). "A massive cyberattack from abroad began this morning on the infrastructure of the official website, the Russian Foreign Ministry's portal," said spokeswoman Maria Zakharova. She noted that the ministry regularly encounters similar attacks, but today's attack was "unprecedented in scale." Reuters notes that the attack coincided with the major [2]BRICS summit taking place in the country.

Developing...



[1] https://www.reuters.com/world/europe/russia-says-unprecedented-cyber-attack-hits-foreign-ministry-amid-brics-summit-2024-10-23/

[2] https://en.wikipedia.org/wiki/BRICS



White Hat Hackers Earn $500,000 On First Day of Pwn2Own Ireland 2024 (securityweek.com)

(Thursday October 24, 2024 @11:21AM (BeauHD) from the not-too-shabby dept.)

An anonymous reader quotes a report from SecurityWeek.com:

> White hat hackers taking part in the Pwn2Own Ireland 2024 contest organized by Trend Micro's Zero Day Initiative (ZDI) have [1]earned half a million dollars on the first day of the event , for exploits targeting NAS devices, cameras, printers and smart speakers. The highest single reward, $100,000, was earned by Sina Kheirkhah of Summoning Team, who chained a total of nine vulnerabilities for an attack that went from a QNAP QHora-322 router to a TrueNAS Mini X storage device. Another exploit chain involving the QNAP QHora-322 and TrueNAS Mini X products was demonstrated by Viettel Cyber Security, but this team earned only $50,000.

>

> A significant reward was also earned by Jack Dates of RET2 Systems, who received $60,000 for hacking a Sonos Era 300 smart speaker. QNAP TS-464 and Synology DiskStation DS1823XS+ NAS device exploits earned $40,000 each for two different teams. Participants also successfully demonstrated exploits against the Lorex 2K WiFi, Ubiquity AI Bullet, and Synology TC500 cameras, and HP Color LaserJet Pro MFP 3301fdw and Canon imageCLASS MF656Cdw printers. These attempts earned the hackers between $11,000 and $30,000. According to ZDI, a total of $516,250 was paid out on the first day of Pwn2Own Ireland for over 50 unique vulnerabilities.



[1] https://www.securityweek.com/white-hat-hackers-earn-500000-on-first-day-of-pwn2own-ireland-2024/



Linus Torvalds Comments On The Russian Linux Maintainers Being Delisted (phoronix.com)

(Thursday October 24, 2024 @11:21AM (BeauHD) from the compliance-requirements dept.)

Ancient Slashdot reader [1]szo shares a report from Phoronix:

> Quietly merged into this week's Linux 6.12-rc4 kernel was a patch that [2]removes a number of kernel maintainers from being noted in the official MAINTAINERS file that recognizes all of the driver and subsystem maintainers. [...] [Greg Kroah-Hartman who authored the patch] simply [3]commented in there: "Remove some entries due to various compliance requirements. They can come back in the future if sufficient documentation is provided." [...] The commonality of all these maintainers being dropped? They appear to all be Russian or associated with Russia. Most of them with .ru email addresses.

Linux creator Linus Torvalds has since [4]commented on the situation :

> Ok, lots of Russian trolls out and about. It's entirely clear why the change was done, it's not getting reverted, and using multiple random anonymous accounts to try to "grass root" it by Russian troll factories isn't going to change anything. And FYI for the actual innocent bystanders who aren't troll farm accounts - the "various compliance requirements" are not just a US thing.

>

> If you haven't heard of Russian sanctions yet, you should try to read the news some day. And by "news," I don't mean Russian state-sponsored spam. As to sending me a revert patch - please use whatever mush you call brains. I'm Finnish. Did you think I'd be *supporting* Russian aggression? Apparently it's not just lack of real news, it's lack of history knowledge too.



[1] https://slashdot.org/~szo

[2] https://www.phoronix.com/news/Russian-Linux-Maintainers-Drop

[3] https://lore.kernel.org/all/2024101835-tiptop-blip-09ed@gregkh/

[4] https://www.phoronix.com/news/Linus-Torvalds-Russian-Devs



Adobe Made Its Painting App Completely Free To Take On Procreate

(Thursday October 24, 2024 @11:21AM (BeauHD) from the no-more-paywall dept.)

Adobe's [1]Fresco painting app is [2]now free for everyone , in an attempt to lure illustrators to join its creative software suite. The Verge reports:

> Fresco is essentially Adobe's answer to apps like Procreate and Clip Studio Paint, which all provide a variety of tools for both digital art and simulating real-world materials like sketching pencils and watercolor paints. Adobe Fresco is designed for touch and stylus-supported devices, and is available on iPad, iPhone, and Windows PCs. The app already had a free-to-use tier, but premium features like access to the full Adobe Fonts library, a much wider brush selection, and the ability to import custom brushes previously required a $9.99 annual subscription. That's pretty affordable for an Adobe subscription, but still couldn't compete with Procreate's $12.99 one-time purchase model.

>

> Starting today, all of Fresco's premium features are no longer locked behind a paywall. The app first launched in 2019 and isn't particularly well-known compared to more established Adobe apps like Photoshop and Illustrator that feature more complex, professional design tools. Fresco still has some interesting features of its own, like reflective and rotation symmetry (which mirror artwork as you draw) and the ability to quickly animate drawings with motion presets like "bounce" and "breathe."



[1] https://www.adobe.com/products/fresco.html

[2] https://www.theverge.com/2024/10/23/24277533/adobe-fresco-painting-app-free-availablility-procreate



More

The future isn't what it used to be. (It never was.)