An anonymous reader quotes a report from the New York Times: New York State officials on Wednesday unveiled a bill to protect young people from potential mental health risks by prohibiting minors from accessing algorithm-based social media feeds unless they have permission from their parents. Gov. Kathy Hochul and Letitia James, the state attorney general, announced their support of new legislation to crack down on the often inscrutable algorithms, which they argue are used to keep young users on social media platforms for extended periods of time -- sometimes to their detriment. If the bill is passed and signed into law, anyone under 18 in New York would need parental consent to access those feeds on TikTok, Instagram, Facebook, YouTube, X and other social media platforms that use algorithms to display personalized content. While other states have sought far-reaching bans and measures on social media apps, New York is among a few seeking to target the algorithms more narrowly.

The legislation, for example, would target TikTok's central feature, its ubiquitous "For You" feed, which displays boundless reams of short-form videos based on user interests or past interactions. But it would not affect a minor's access to the chronological feeds that show posts published by the accounts that a user has decided to follow. The bill would also allow parents to limit the number of hours their children can spend on a platform and block their child's access to social media apps overnight, from midnight until 6 a.m., as well as pause notifications during that time.

The bill in New York, which could be considered as soon as January when the 2024 legislative session begins, is likely to confront resistance from tech industry groups. The bill's sponsors, State Senator Andrew Gounardes and Assemblywoman Nily Rozic, said they were readying for a fight. But Ms. Hochul's enthusiastic support of the bill -- she rarely joins lawmakers to introduce bills -- is a sign that it could succeed in the State Capitol, which Democrats control. A second bill unveiled on Wednesday is meant to protect children's privacy by prohibiting websites from "collecting, using, sharing, or selling personal data" from anyone under 18 for the purpose of advertising, unless they receive consent, according to a news release. Both bills would empower the state attorney general to go after platforms found in violation.

French technology company Shadow has confirmed a data breach involving customers' personal information. TechCrunch: The Paris-headquartered startup, which offers gaming through its cloud-based PC service, said in an email to customers this week that hackers had accessed their personal information after a successful social engineering attack targeted the company. "At the end of September, we were the victim of a social engineering attack targeting one of our employees," Shadow CEO Eric Sele said in the email, seen by TechCrunch. "This highly sophisticated attack began on the Discord platform with the downloading of malware under cover of a game on the Steam platform, proposed by an acquaintance of our employee, himself a victim of the same attack."

Shadow said that though its security team took unspecified "immediate action," the hackers were able to connect to the management interface of one of the company's software-as-a-service (SaaS) providers to obtain customers' private data. That data includes full names, email addresses, dates of birth, billing addresses and credit card expiry dates. Shadow says no passwords or sensitive banking data were compromised.

Tom Mitchelhill reports via CoinTelegraph: Crypto exchange FTX used hidden Python code to misrepresent the value of its insurance fund -- a pool of funds meant to prevent user losses during huge liquidation events -- according to testimony from FTX co-founder Gary Wang. In a damning testimony on Oct. 6, FTX's former chief technology officer, Gary Wang, said that FTX's so-called $100 million insurance fund in 2021 was fabricated and never contained any of the exchanges' FTX tokens (FTT) as claimed. Instead, the figure shown to the public was calculated by multiplying the daily trading volume of the FTX Token by a random number close to 7,500.

When the prosecution surfaced the above tweet -- among other public statements of its value -- and asked Wang whether this amount was accurate, he replied with a single word: "No." "For one, there is no FTT in the insurance fund. It's just the USD number. And, two, the number listed here does not match what was in the database." An exhibit in the Oct. 6 trial shows the alleged code used to generate the size of the so-called "Backstop Fund" or public insurance fund.

FTX's insurance fund was designed to protect user losses in case of huge, sudden market movements and its value was often touted on its website and social media. According to Wang's testimony, however, the amount contained within the fund was often insufficient to cover these losses. [...] In addition to revealing the allegedly fraudulent nature of FTX's insurance fund, Wang claimed that Bankman-Fried prompted him and Nishad Singh to implement an "allow_negative" balance feature in the code at FTX, which allowed Alameda Research to trade with near-unlimited liquidity on the crypto exchange.

Utah became the latest state Tuesday to file a lawsuit against TikTok, alleging the company is "baiting" children into addictive and unhealthy social media habits. From a report: TikTok lures children into hours of social media use, misrepresents the app's safety and deceptively portrays itself as independent of its Chinese parent company, ByteDance, Utah claims in the lawsuit. "We will not stand by while these companies fail to take adequate, meaningful action to protect our children. We will prevail in holding social media companies accountable by any means necessary," Republican Gov. Spencer Cox said at a news conference announcing the lawsuit, which was filed in state court in Salt Lake City. Arkansas and Indiana have filed similar lawsuits while the U.S. Supreme Court prepares to decide whether state attempts to regulate social media platforms such as Facebook, X and TikTok violate the Constitution.

Amanda Hoover reports via Wired: As few as 2 percent of New York City's previous 22,000 short-term rentals on Airbnb have been registered with the city since a new law banning most listings came into effect in early September. But many illegal short-term rental listings are now being advertised on social media and lesser known platforms, with some still seemingly being listed on Airbnb itself. The number of short-term listings on Airbnb has fallen by more than 80 percent, from 22,434 in August to just 3,227 by October 1, according to Inside Airbnb, a watchdog group that tracks the booking platform. But just 417 properties have been registered with the city, suggesting that very few of the city's short-term rentals have been able to get permission to continue operating.

The crackdown in New York has created a "black market" for short-term rentals in the city, claims Lisa Grossman, a spokesperson for Restore Homeowner Autonomy and Rights (RHOAR), a local group that opposed the law. Grossman says she's seen the short-term rental market pick up steam on places like Facebook since the ban. "People are going underground," she says. New York's crackdown on short-term rentals has dramatically reshaped the vacation rental market in the city. People are using sites like Craigslist, Facebook, Houfy, and others, where they can search for guests or places to book without the checks and balances of booking platforms like Airbnb. Hotel prices are expected to rise with more demand. After the rule change, Airbnb CEO Brian Chesky said the company would be shifting attention away from New York, which was once its biggest market.

"I was always hopeful that New York City would lead the way -- that we would find a solution in New York, and people would say, 'If they can make it in New York, they can make it anywhere,'" Chesky said during an event in September. "I think, unfortunately, New York is no longer leading the way -- it's probably a cautionary tale."

Adobe on Tuesday said it is rolling out new image-generation technology that can draw inspiration from an uploaded image and match its style, in its latest push to compete with startups challenging its core business. From a report: Image-generating technology from firms like Midjourney and Stable Diffusion have threatened Adobe's customer base of creative professionals who use its tools like Photoshop. The San Jose, California-based company has responded by aggressively developing its own version of the technology and injecting it into its software programs. Adobe, which has promised its customers that generated images will be safe from legal challenges, said those customers have used the tools to generate three billion images, a billion of them in the last month alone.

The new generation of tools announced on Tuesday will include a feature called "Generative Match". Like Adobe's earlier tool, it will allow users to generate an image from a few words of text. But it will also allow users to upload as few as 10 to 20 images to use as a basis for the generated images. Ely Greenfield, Adobe's chief technology officer for digital media, said the company aims to let big brands upload a handful of photos of a product or character and then use generative technology to automatically make hundreds or thousands of images for various needs like websites, social media campaigns and print advertisements.

An anonymous reader quotes a report from The Record: An audio clip posted to social media on Sunday, purporting to show Britain's opposition leader Keir Starmer verbally abusing his staff, has been debunked as being AI-generated by private-sector and British government analysis. The audio of Keir Starmer was posted on X (formerly Twitter) by a pseudonymous account on Sunday morning, the opening day of the Labour Party conference in Liverpool. The account asserted that the clip, which has now been viewed more than 1.4 million times, was genuine, and that its authenticity had been corroborated by a sound engineer.

Ben Colman, the co-founder and CEO of Reality Defender -- a deepfake detection business -- disputed this assessment when contacted by Recorded Future News: "We found the audio to be 75% likely manipulated based on a copy of a copy that's been going around (a transcoding). As we don't have the ground truth, we give a probability score (in this case 75%) and never a definitive score ('this is fake' or 'this is real'), leaning much more towards 'this is likely manipulated' than not," said Colman. "It is also our opinion that the creator of this file added background noise to attempt evasion of detection, but our system accounts for this as well," he said.

A network connectivity error caused Mastodon to severely undercount its users. According to founder and CEO Eugen Rochko, the decentralized social network actually has 407,814 more monthly active users than it had been reporting previously. "The adjustment also included a gain of 2.34 million registered users across an additional 727 servers that had not been counted due to the error," reports TechCrunch. From the report: The issue was impacting the metrics reported on Mastodon's statistics aggregator on its joinmastodon.org/servers page, which had been undercounting users between October 2 and October 8. This issue has now been resolved, Rochko said. That leaves Mastodon with a total of 1.8 million monthly active users at present, an increase of 5% month-over-month and 10,000 servers, up 12% -- a testament to Mastodon's current upward swing at a time when the nature of X continues to remain in flux.

Adi Robertson reports via The Verge: California Governor Gavin Newsom has signed AB 1394, a law that would punish web services for "knowingly facilitating, aiding, or abetting commercial sexual exploitation" of children. It's one of several online regulations that California has passed in recent years, some of which have been challenged as unconstitutional. Newsom's office indicated in a press release yesterday that he had signed AB 1394, which passed California's legislature in late September.

The law is set to take effect on January 1, 2025. It adds new rules and liabilities aimed at making social media services crack down on child sexual abuse material, adding punishments for sites that "knowingly" leave reported material online. More broadly, it defines "aiding or abetting" to include "deploy[ing] a system, design, feature, or affordance that is a substantial factor in causing minor users to be victims of commercial sexual exploitation." Services can limit their risks by conducting regular audits of their systems. As motivation, the bill text cites whistleblower complaints that Facebook responded inadequately to child abuse on the platform and a 2022 Forbes article alleging that TikTok Live had become a haven for adults to prey on teenage users.

"34% of Californians say they are considering moving out of the state due to housing costs," according to statistics from a new report from the Public Policy Institute of California.

It's a nonprofit think tank founded in 1994 "to inform and improve public policy in California through independent, objective, nonpartisan research." (Founded with a grant from Bill Hewlett of Hewlett-Packard, it also gets funding from the David and Lucile Packard Foundation). The report's startling conclusion? "After a century of explosive growth, California is likely to become a slow-growing state." After the year 2030 California's seniors (older than 65) are expected to outnumber its children. "In 2020, California had nearly four residents ages 18-64 for every adult 65 and older. This ratio is expected to drop to 2.8 by 2030 and 2.2 by 2060, if current trends continue."

Births are outpacing deaths by over 106,000 people a year. (Even during the pandemic California had a lower COVID mortality rate than most states.) And international immigration remained a net positive with a 90,000-person increase in 2022. Yet all of this was offset in 2022 by a net loss of 407,000 people migrating out of the state.

California already has a population of 39 million — but the full report cites July 2023 projections from the state's Department of Finance that now "suggest that the state population will plateau between 39 and 40 million residents in the long term."

The caption on one graph notes that California "is losing households at all income levels." [W]hile the majority of domestic outmigrants are lower- and middle-income, an increasing proportion of higher-income Californians are also exiting the state. The "new normal" of remote work in many white-collar professions has enabled some higher-income workers to move. Politics might also play a role, as conservatives are much more likely than liberals to say they have considered leaving the state.
One other factor: Declining birth and fertility rates are a nationwide, even a global, phenomenon as economic and social events have changed the status of women and their access to educational and job opportunities. Total fertility rates — the number of births the average woman will have in her lifetime — have fallen across the U.S. in recent decades. No state has a rate at or above 2.1, the level necessary to maintain a population's current size (not taking immigration and migration into account), but California's fertility rate has fallen faster than most. In 2008 its rate was above the national average (2.15); by 2020 it fell to the seventh-lowest (1.52).

The declining birth rate among young adults in their 20s is the biggest driver of the fertility rate decline. One major factor is that 20-somethings are now less likely to get married, which can affect decisions to have children... In the past, higher birth rates among immigrants also helped offset lower birth rates among US-born Californians, though more recently birth rates among immigrants have declined, reflecting patterns in sending countries.

Los Angeles Times technology columnist Brian Merchant has written a book about the 1811 Luddite rebellion against industrial technology, decrying "entrepreneurs and industrialists pushing for new, dubiously legal, highly automated and labor-saving modes of production."

In a new piece he applauds the spirit of the Luddites. "The kind of visionaries we need now are those who see precisely how certain technologies are causing harm and who resist them when necessary." The parallels to the modern day are everywhere. In the 1800s, entrepreneurs used technology to justify imposing a new mode of work: the factory system. In the 2000s, CEOs used technology to justify imposing a new mode of work: algorithmically organized gig labor, in which pay is lower and protections scarce. In the 1800s, hosiers and factory owners used automation less to overtly replace workers than to deskill them and drive down their wages. Digital media bosses, call center operators and studio executives are using AI in much the same way. Then, as now, the titans used technology both as a new mode of production and as an idea that allowed them to ignore long-standing laws and regulations. In the 1800s, this might have been a factory boss arguing that his mill exempted him from a statute governing apprentice labor. Today, it's a ride-hailing app that claims to be a software company so it doesn't have to play by the rules of a cab firm.

Then, as now, leaders dazzled by unregulated technologies ignored their potential downsides. Then, it might have been state-of-the-art water frames that could produce an incredible volume of yarn — but needed hundreds of vulnerable child laborers to operate. Today, it's a cellphone or a same-day delivery, made possible by thousands of human laborers toiling in often punishing conditions.

Then, as now, workers and critics sounded the alarm...

Resistance is gathering again, too. Amazon workers are joining union drives despite intense opposition. Actors and screenwriters are striking and artists and illustrators have called for a ban of generative AI in editorial outlets. Organizing, illegal in the Luddites' time, has historically proved the best bulwark against automation. But governments must also step up. They must offer robust protections and social services for those in precarious positions. They must enforce antitrust laws. Crucially, they must develop regulations to rein in the antidemocratic model of technological development wherein a handful of billionaires and venture capital firms determine the shape of the future — and who wins and loses in it.

The clothworkers of the 1800s had the right idea: They believed everyone should share in the bounty of the amazing technologies their work makes possible.

That's why I'm a Luddite — and why you should be one, too.
So whatever happened to the Luddites? The article reminds readers that the factory system "took root," and "brought prosperity for some, but it created an immiserated working class.

"The 200 years since have seen breathtaking technological innovation — but much less social innovation in how the benefits are shared."

Since 2004 October has been designated "Cybersecurity Awareness Month" in America, "a collaborative effort between government and industry to enhance cybersecurity awareness, encourage actions by the public to reduce online risk and generate discussion on cyber threats on a national and global scale."

That's according to America's Cybersecurity and Infrastructure Security Agency (or CISA), the operational lead for federal cybersecurity and national coordinator for critical infrastructure security and resilience (specifically designed for collaboration and partnership). It's why the NSA is publicizing the ten most common cybersecurity misconfigurations in large organizations.

But in addition, for consumers CISA is introducing a new program this year that "promotes behavioral change across the Nation, with a particular focus on how individuals, families and small to medium-sized businesses can Secure Our World by focusing on the four critical actions..." In a video the director of America's cyberdefense agency calls them steps "that everyone can take to stay safe online."

• Use Strong Passwords, "meaning long, random, and unique to each account. And use a password manager to generate and to save them."

• Turn on Multi-Factor Authentication on All Accounts That Offer It. "You need more than a password on your most important accounts, like email, social media, and financial accounts."

• Recognize and Report Phishing. "Be cautious of unsolicited emails, texts, or calls asking you for personal information, and don't click on links or open attachments from unknown sources.

• Update Your Software. "In fact, enable automatic updates on your software, so the latest security patches just keep your devices continuously up-to-date."

The video ends by noting CISA is asking tech companies and software developers to create products that are "secure by design."

"And let's secure our families by ensuring that our loved ones know what to look for and how to stay safe online."

Lawmakers in the United States last year passed bipartisan legislation intended to maintain US competitiveness with countries such as China by boosting funding for science and innovation. But concerns are mounting that the US Congress will fail to deliver on its promises. From a report: The money allotted to a handful of major US science agencies that had been targeted for a budget boost is likely to fall short of the legislation's goals by more than US$7 billion in 2024, according to a report. And overall funding for those agencies will continue to hover at a 25-year low.

"We're leaving scientific opportunities on the table," says Matt Hourihan, who led the analysis for the Federation of American Scientists, an advocacy group based in Washington DC. "If we drop this ball, others will be happy to pick it up." It was precisely this fear that drove members of Congress to come together to pass the CHIPS and Science Act of 2022. The legislation promised one of the largest increases in US science funding in a long time, totalling some $280 billion over five years. Much of the spending mandated by the bill was focused on semiconductor research and manufacturing -- areas in which other countries, particularly China, have dominated. Lawmakers also authorized investments in other science and innovation programmes, but these were not mandated, and need to be approved by Congress during an appropriations process each year.

That process has become increasingly contentious as political polarization in the United States has risen over the past few decades. Disputes about overall spending levels and funding for various social programmes have led to repeated delays in crafting the annual budget, at times forcing the government to shut down. This year is a prime example: Republicans, who control the US House of Representatives, blocked legislation that would have allowed the government to increase the federal debt limit and pay its bills, until they were able to secure an agreement with the Democrats in May to limit spending. And last month, a handful of extreme right-wing Republicans sought to close the government down as they pushed for further spending cuts.

An anonymous reader quotes a report from Reuters: MGM Resorts International said on Thursday a cyberattack last month that disrupted its operations would cause a $100 million hit to its third-quarter results, as it works to restore its systems. One of the world's largest gambling firms, MGM shut down its systems after detecting the attack to contain damage, it said. It expects to also incur less than $10 million as a related one-time cost in the quarter ended on Sept. 30. After the attack last month, customers posted social media images showing slot machines with error messages and queues at hotels in Las Vegas.

A hacking group named AlphV claimed it was involved in the breach. Sources earlier told Reuters AlphV worked with another outfit named Scattered Spider to break into MGM systems and steal data to hold for extortion. MGM has declined to comment on whether it was asked for or paid any ransom. The private data of customers who used MGM services before March 2019, including contact information, gender, date of birth and driver's license numbers, was breached, the company said. "We also believe a more limited number of Social Security numbers and passport numbers were obtained," it said. "We have no evidence that the criminal actors have used this data to commit identity theft or account fraud." [...]

The company expects the breach will have a negative impact of about $100 million to its adjusted property core profit for its Las Vegas Strip division, and expects total occupancy of 93% this October versus 94% in the same month a year ago. "Virtually all of the Company's guest-facing systems have been restored," it said, adding that it expects no impact on its full-year results from the breach. MGM said it is "well-positioned" to have a strong fourth quarter with record results in November, driven mainly by a Formula One racing event slated to take place in Las Vegas.

The global average temperature for September broke records by such an absurd margin that climate experts are struggling to describe the phenomenon. From a report: "This month was -- in my professional opinion as a climate scientist -- absolutely gobsmackingly bananas," Zeke Hausfather, a researcher with Berkeley Earth, said on the social media platforms Bluesky and X. The numbers are stark. September 2023 beat the previous record for the month, set in 2020, by 0.5C (0.9F), according to data sets maintained by the Japan Meteorological Agency and the EU's Copernicus Climate Change Service. The temperature anomaly for the month was roughly 1.7C above pre-industrial levels, which is above the symbolic 1.5C mark set as the stretch goal in the Paris Agreement.

"We've never really seen a jump anything quite of this magnitude," Hausfather said. "Half a degree C is analogous to slightly less than half of all the warming we've seen from pre-industrial [temperatures]." Carbon dioxide emissions from burning fossil fuels are the main driver of rising temperatures. The global average temperature this year has also seen a boost from El Nino, a natural climate shift in the Pacific. Other factors may also be pushing temperatures up incrementally, such as a decline in cooling aerosol pollution from ships. Hausfather said next September may be unlikely to have all the same compounding factors, and consequently may be not as extreme. But either way, he described September 2023 as a "sneak peek" of what the back-to-school month may feel like in a decade as climate change pushes temperatures higher.

samleecole writes: 4chan users are coordinating a posting campaign where they use Microsoft Bing's AI text-to-image generator to create racist images that they can then post across the internet. The news shows how users are able to manipulate free to access, easy to use AI tools to quickly flood the internet with racist garbage, even when those tools are allegedly strictly moderated. "We're making propaganda for fun. Join us, it's comfy," the 4chan thread instructs. "MAKE, EDIT, SHARE."

A visual guide hosted on Imgur that's linked in that post instructs users to use AI image generators, edit them to add captions that make them seem like political campaigns, and post them to social media sites, specifically Telegram, Twitter, and Instagram. 404 Media has also seen these images shared on a TikTok account that has since been removed. People being racist is not a technological problem. But we should pay attention to the fact that technology is "to borrow a programming concept" 10x'ing racist posters, allowing them to create more sophisticated content more quickly in a way we have not seen online before. Perhaps more importantly, they are doing so with tools that are allegedly "safe" and moderated so strictly, to a point where they will not generate completely harmless images of Julius Caesar. This means we are currently getting the worst of both worlds from Bing, an AI tool that will refuse to generate a nipple but is supercharging 4chan racists.

Russia's communications watchdog plans to block VPNs from March 1 next year, a Russian senator for the ruling United Russia party said on Tuesday. From a report: Demand for VPN services soared after Russia restricted access to some Western social media after President Vladimir Putin ordered troops into Ukraine in February 2022. Senator Artem Sheikin said an order from the Roskomnadzor watchdog would come into force on March 1 that would block VPNs. "From March 1, 2024, an order will come into force to block VPN services providing access to sites banned in Russia," Sheikin was quoted as saying by state news agency RIA.

A notorious group of hackers blamed for recent breaches on major casino companies is also suspected of being behind a recent cyberattack against Clorox that has led to a nationwide shortage of its cleaning products. Bloomberg News: Officials suspect that "Scattered Spider" is responsible for a breach that Clorox first disclosed in August, according to four people familiar with the situation, who asked not to be identified because the information isn't public. The same group, known for its so-called social engineering tactics, was tied to attacks on Caesars Entertainment and MGM Resorts International in recent weeks, Bloomberg News previously reported.

Scattered Spider hackers specialize in targeting call centers and IT help desks, impersonating employees to trick support staff into coughing up information to gain access to accounts. The fallout from their recent attacks has been profound. At MGM properties, guests couldn't charge purchases to their rooms, slot machines were shut down and reservation websites weren't working. The impact on Clorox was arguably much worse. The company didn't immediately respond to requests for comment. On Friday, Clorox indicated that it was still working to recover from the disruption. "We are ramping up production and working to restock trade inventories," the company said in a statement. "We are focusing on maximizing shipments and restocking trade inventories."

Meta is planning to lay off employees on Wednesday in the unit of its metaverse-oriented Reality Labs division focused on creating custom silicon, Reuters reported Tuesday, citing sources familiar with the matter. From the report: Employees were informed of the layoffs in a post on Meta's internal discussion forum Workplace on Tuesday. The post said they would be notified about their status with the company by early Wednesday morning, one of the sources said. Reuters was not able to determine the extent of the cuts to the silicon unit, called Facebook Agile Silicon Team, or FAST, which has roughly 600 employees, according to the other source. The FAST unit is tasked with developing custom chips to power the augmented and virtual reality hardware produced by Meta's Reality Labs division. Meta currently makes a line of mixed reality headsets called Quest and smart glasses designed with Ray-Ban eyeglass maker EssilorLuxottica that can stream video and speak with wearers through a new artificial intelligence virtual assistant.

An anonymous reader shares a report: Would people pay nearly $14 a month to use Instagram on their phones without ads? How about nearly $17 a month for Instagram plus Facebook -- but on desktop? That is what Meta wants to charge Europeans for monthly subscriptions if they don't agree to let the company use their digital activity to target ads, according to a proposal the social-media giant has made in recent weeks to regulators. The proposal is a gambit by Meta to navigate European Union rules that threaten to restrict its ability to show users personalized ads without first seeking user consent -- jeopardizing its main source of revenue.

Meta officials detailed the plan in meetings in September with its privacy regulators in Ireland and digital-competition regulators in Brussels. The plan has been shared with other EU privacy regulators for their input, too. Meta has told regulators it hopes to roll out the plan -- which it calls SNA, or subscription no ads -- in coming months for European users. It would give users the choice between continuing to access Instagram and Facebook free with personalized ads, or paying for versions of the services without any ads, people familiar with the proposal said.