×
Privacy

CBP Tells Airports Its New Facial Recognition Target is 75% of Passengers Leaving the US (404media.co) 40

Slash_Account_Dot writes: Customs and Border Protection (CBP) has told airports it plans to increase its targets for scanning passengers with facial recognition as they leave the U.S., according to an internal airport email obtained by 404 Media. The new goal will be to scan 75 percent of all passengers, the email adds. The news signals CBP's increasing focus on biometric, and in particular facial recognition, systems at airports. Although it is unclear if related to the shift in goals, one traveler was also recently told by airline industry staff "CBP said everyone has to do it" when they asked to opt-out of facial recognition while boarding for an international flight last month.
Government

Pentagon Has the Worst IT Helpdesk in the US Govt (theregister.com) 54

When it comes to US government employee satisfaction with IT services, one agency finds itself continually at the bottom of the heap: The rather crucial Department of Defense. From a report: Results from the General Services Administration's (GSA) Mission-Support Customer Satisfaction Survey published on Wednesday found the DoD was trailing the other 23 US federal government agencies included in the research. Of the seven technology user areas surveyed, the DoD came dead last in user satisfaction for IT support, equipment, function, and communication/collaboration.

The DoD didn't fare much better in the three areas it wasn't scraping the bottom, either. For strategic IT partnerships and development, modernizations and enhancement the Defense Department ranked twentieth (out of 24), and for operations and maintenance satisfaction it beat the US Department of Agriculture - barely - on the seven-point scale used by the GSA. Despite its abysmal ranking among its fellow federal agencies, the DoD's users were still generally okay with their IT service, with 65 percent of respondents saying they were at least somewhat satisfied with IT support, and 64.5 percent expressing some degree of satisfaction with their IT equipment. Only development, modernization and enhancement failed to net 50 percent satisfaction among DoD respondents.

United States

Wanted: Skilled Workers To Combat the Rise in Cyber Crime (ft.com) 82

As a growing number of hackers target companies, organisations and industries with debilitating attacks, more skilled cyber security workers are urgently needed to combat the threat.ÂFrom a report: ISC2, the world's largest association of cyber professionals, estimates that the cyber security workforce in 2022 stood at about 4.7mn people globally. But a further 3.4mn roles remain unfilled. "The gap is massive," says Clar Rosso, ISC2's chief executive. "This shortfall is felt more acutely in countries such as India where digitisation is rapid. But even in the US, only 69 per cent of cyber roles are filled, according to Cyberseek, a website that provides data about the cyber security job market."

Beyond a talent shortfall, existing workers are underskilled. A UK government report this year found that 50 per cent of UK businesses -- some 739,000 in total -- have a basic cyber skills gap, meaning that those in charge of cyber security lack the confidence to carry out the technical measures that protect against the most common digital attacks. Previously, it was thought that a company's IT team could take care of all cyber security concerns. But "over time, it became clear that this needed specialised attention," Rosso says, adding that, after some high-profile ransomware attacks over the past couple of years, "business executives are now paying attention."

Crime

Ignored by Police, Two Women Took Down Their Cyber-Harasser Themselves (msn.com) 104

Here's how the Washington Post tells the story of 34-year-old marketer (and former model) Madison Conradis, who discovered nude behind-the-scenes photos from 10 years earlier had leaked after a series of photographer web sites were breached: Now the photos along with her name and contact information were on 4chan, a lawless website that allows users to post anonymously about topics as varied as music and white supremacy... Facebook users registered under fake names such as "Joe Bummer" sent her direct messages demanding that she send new, explicit photos, or else they would further spread the already leaked photos. Some pictures landed in her father's Instagram messages, while marketing clients told her about the nude images that came their way. Madison was at a friend's party when she got a panicked call from the manager of a hotel restaurant where she had worked: The photos had made their way to his inbox. After two years, hoping a new Florida law against cyberharassment would finally end the torture, Madison walked into her local Melbourne police station and shared everything. But she was told that what she was experiencing was not criminal.

What Madison still did not know was that other women were in the clutches of the same man on the internet — and all faced similar reactions from their local authorities. Without help from the police, they would have to pursue justice on their own.

Some cybersleuthing revealed the four women all had one follower in common on Facebook: Christopher Buonocore. (They were his ex-girlfriend, his ex-fiance, his relative, and a childhood friend.) Eventually Madison's sister Christine — who had recently passed the bar exam — "prepared a 59-page document mapping the entire case with evidence and relevant statutes in each of the victims' jurisdictions. She sent the document to all the women involved, and each showed up at her respective law enforcement offices, dropped the packet in front of investigators and demanded a criminal investigation." The sheriff in Florida's Manatee County, Christine's locality, passed the case up to federal investigators. And in July 2019, the FBI took over on behalf of all six women on the basis of the evidence of interstate cyberstalking that Christine had compiled...

The U.S. attorney for the Middle District of Florida took action at the end of December 2020, but without a federal law criminalizing the nonconsensual distribution of intimate images, she charged Buonocore with six counts of cyberstalking instead, which can apply to some cases involving interstate communication done with the intent to kill, injure, intimidate, harass or surveil someone. He pleaded guilty to all counts the following January...

U.S. District Judge Thomas Barber sentenced Buonocore to 15 years in federal prison — almost four years more than the prosecutor had requested.

United States

America's IRS Can't Find Millions of Sensitive Tax Records: Watchdog (thehill.com) 69

An anonymous reader shares The Hill's report from earlier this month. Apparently America's tax-collecting Internal Revenue Service "cannot locate thousands of microfilm cartridges containing millions of sensitive individual and business tax account records, according to a watchdog report." The Treasury Inspector General for Tax Administration said in a report released August 8 that the IRS cannot account for microfilm cartridges — which contain backups of tax records as required under federal law — from fiscal 2010 that were originally stored at a processing center in Fresno, California... The watchdog also found seven empty boxes, which could hold up to 168 cartridges total, at the Ogden Tax Processing Center in Utah. Ogden personnel did not know where the missing cartridges were.

More than 4,000 cartridges containing business tax account information from fiscal 2018 and 4,500 cartridges containing individual tax account information from fiscal 2019 also could not be accounted for at the Kansas City facility, according to the report.

"The personal taxpayer and tax information included on these backup cartridges is key information that can be used to commit tax refund fraud identity theft," the report noted.

Crime

'Starfield' Fan Banned From Subreddit For Narcing On Leaker To Cops (kotaku.com) 127

Kotaku reports that last week 29-year old Darin Harris "allegedly stole dozens of copies of the game from a warehouse and started selling them online," prompting lots of pre-release leaks for the game.

"One Reddit user immediately reported the leaks to Bethesda and Memphis police," adds Kotaku. "And he's now been banned from the r/GamingLeaksAndRumours subreddit after posting about it." I know this because the commenter in question, Jasper Adkins, emailed Kotaku to inform us it had happened. "It seems to me that the subreddit is running on 'bread and circuses' mode mixed with bystander syndrome," he wrote in his initial email. "They're perfectly willing to ignore a crime that hurts a developer they claim to support, in exchange for a few minutes of shaky gameplay filmed from a phone...."

Despite the criminal charges against him, Harris has become something of a folk hero within the community of fans hungry for Starfield leaks. As the Commercial Appeal reported, memes hail him as "Lord Tyrone" (his middle name) and one player even vowed to name their Starfield ship "Memphian" in his honor...

[Adkins] was banned from r/GamingLeaksAndRumours on August 24 shortly after posting about how he tried to help get Harris arrested. "An officer at the station told me so himself when I called him about it," he wrote in the middle of a long comment thread. Adkins soon received a notification that he had violated the subreddit's rules. He protested, but the r/GamingLeaksAndRumours admins weren't having it. "Just not interested in having someone here who takes action against the community like that," they wrote back.

I reached out to one of the subreddit's admins to confirm what had happened and the thinking behind the ban. "If he just did it I wouldn't think badly of him but to come on the sub and brag about calling the cops on the dude just rubbed me the wrong way," one of them told Kotaku in a DM. "Might unban him at some point but for now he's behind the bars of the internet."

Sci-Fi

Pentagon's New UFO Website Lets You Explore Declassified Sightings Info (cnet.com) 54

The U.S. Department of Defense has launched a website collecting publicly available, declassified information on unidentified anomalous phenomena (UAPs). "For now, the general public will be able to read through the posted information," reports CNET. "Soon, US government employees, contractors, and service members with knowledge of US programs can report their own sightings, and later, others will be able to submit reports." From the report: "This website will provide information, including photos and videos, on resolved UAP cases as they are declassified and approved for public release," the department said in a release posted on Thursday. "The website's other content includes reporting trends and a frequently asked questions section as well as links to official reports, transcripts, press releases, and other resources that the public may find useful, such as applicable statutes and aircraft, balloon and satellite tracking sites."

For now, one of the most interesting parts of the site is its trends section. Apparently, most reported UAPs are round, either white, silver or translucent, spotted at around 10,000 to 30,000 feet, 1-4 meters in size, and do not emit thermal exhaust. Hotspots for sightings include both the US East and West coasts. There's also a small section of videos with names such as "DVIDS Video - Unresolved Case: Navy 2021 Flyby," and "UAP Video: Middle East Object." Readers are able to leave comments on the videos. Of the "Middle East Object" video, one person writes,"Noticed I never saw it cast a shadow. But other objects have shadows."

Crime

NYPD To Deploy Drones To Monitor Backyard Parties This Holiday Weekend (techspot.com) 120

"The NYC police department intends to use drones to monitor Labor Day backyard parties, raising privacy concerns," writes Slashdot reader jjslash. "Drone usage by U.S. police departments is increasing, with some operating them beyond visual line of sight. TechSpot reports: "If a caller states there's a large crowd, a large party in a backyard, we're going to be utilizing our assets to go up and go check on the party," said assistant NYPD Commissioner Kaz Daughtry at a recent press conference. Naturally, the admission attracted the attention of privacy and civil liberties advocates who questioned if the department's plans violate existing laws governing surveillance in the area.

In its unmanned aircraft systems (UAS): Impact and use policy from 2021, the NYC police department said drones would not be used in areas where there is a reasonable expectation of privacy without a search warrant, except in exigent circumstances (PDF). Are backyard parties really all that pressing?
"Deploying drones in this way is a sci-fi inspired scenario," said Daniel Schwarz, a technology and privacy strategist with the New York Civil Liberties Union. Schwarz added that it is at variance with the Public Oversight of Surveillance Technology (POST) Act, which "requires the reporting and evaluation of surveillance technologies used by the NYPD."
Patents

Microsoft Patents Sensor-Filled, AI-Assisted Backpack 14

Microsoft has patented an AI-powered backpack design featuring a plethora of sensors that may include cameras, microphones, GPS, and a compass. Tom's Hardware reports: Additionally, Microsoft thinks it may be useful to add in LEDs and speakers, as well as a haptic actuator, into the straps. Some real-time processing is deemed necessary to the smart wearable. Thus, various recognition modules are proposed to provide image, text, speech, facial, and cognitive recognition. As well as real-time monitors feeding data to the built-in processing power for AI smarts, the system housed in the backpack also will boast a recording device (using on-board storage), wireless connectivity, battery power / charging and more.

With all the above sensing and processing on your person, in the backpack, it is envisioned that wearers will benefit from AI enhanced object identification and analysis, nearby device interaction, and be able to gain contextual insights. A flow chart shows how the backpack and its data feed might work alongside personal computers and cloud servers. Other illustrations show the wandering backpack wearer navigating a ski resort, and checking out supermarket prices, as well as considering booking concert tickets. Sometimes the user may interact with the backpack's on-board AI via speech, e.g. "Hey Backpack, add this poster to my calendar." Alternatively some AI actions or contextual tasks may be instigated by interacting with sensors on the straps.
You can view the patent application here.
Businesses

Robinhood Bought Back Sam Bankman-Fried's Stake From US Government For $606 Million (cointelegraph.com) 17

Robinhood announced it has purchased more than 55 million shares of the firm previously held by former FTX CEO Sam Bankman-Fried, which were seized in January by the U.S. Department of Justice as part of the criminal case against FTX and its executives. CoinTelegraph reports: The purchase had been expected. Robinhood's board of directors announced the approval of the deal in the company's Q4 2022 report, and an Aug. 30 SEC filing said the U.S. District Court for the Southern District of New York had approved the purchase "free and clear of any claims, interests, liens and encumbrances." Robinhood made the repurchase agreement with the U.S. Marshals Service. "We are happy to have completed the purchase of these shares and look forward to executing on our growth plans on behalf of our customers and shareholders," said Robinhood chief financial officer Jason Warnick.
Privacy

Hacker Gains Admin Control of Sourcegraph and Gives Free Access To the Masses (arstechnica.com) 6

An anonymous reader quotes a report from Ars Technica: An unknown hacker gained administrative control of Sourcegraph, an AI-driven service used by developers at Uber, Reddit, Dropbox, and other companies, and used it to provide free access to resources that normally would have required payment. In the process, the hacker(s) may have accessed personal information belonging to Sourcegraph users, Diego Comas, Sourcegraph's head of security, said in a post on Wednesday. For paid users, the information exposed included license keys and the names and email addresses of license key holders. For non-paying users, it was limited to email addresses associated with their accounts. Private code, emails, passwords, usernames, or other personal information were inaccessible.

The hacker gained administrative access by obtaining an authentication key a Sourcegraph developer accidentally included in a code published to a public Sourcegraph instance hosted on Sourcegraph.com. After creating a normal user Sourcegraph account, the hacker used the token to elevate the account privileges to those of an administrator. The access token appeared in a pull request posted on July 14, the user account was created on August 28, and the elevation to admin occurred on August 30. "The malicious user, or someone connected to them, created a proxy app allowing users to directly call Sourcegraph's APIs and leverage the underlying LLM [large language model]," Comas wrote. "Users were instructed to create free Sourcegraph.com accounts, generate access tokens, and then request the malicious user to greatly increase their rate limit. On August 30 (2023-08-30 13:25:54 UTC), the Sourcegraph security team identified the malicious site-admin user, revoked their access, and kicked off an internal investigation for both mitigation and next steps."

The resource free-for-all generated a spike in calls to Sourcegraph programming interfaces, which are normally rate-limited for free accounts. "The promise of free access to Sourcegraph API prompted many to create accounts and start using the proxy app," Comas wrote. "The app and instructions on how to use it quickly made its way across the web, generating close to 2 million views. As more users discovered the proxy app, they created free Sourcegraph.com accounts, adding their access tokens, and accessing Sourcegraph APIs illegitimately." [...] While most data was available for all paid and community users, the number of license keys exposed was limited to 20.

Social Networks

Judge Blocks Arkansas Law Requiring Parental OK For Minors To Create Social Media Accounts (apnews.com) 64

An anonymous reader quotes a report from the Associated Press: A federal judge on Thursday temporarily blocked Arkansas from enforcing a new law that would have required parental consent for minors to create new social media accounts, preventing the state from becoming the first to impose such a restriction. U.S. District Judge Timothy L. Brooks granted a preliminary injunction that NetChoice -- a tech industry trade group whose members include TikTok, Facebook parent Meta, and X, formerly known as Twitter -- had requested against the law. The measure, which Republican Gov. Sarah Huckabee Sanders signed into law in April, was set to take effect Friday.

In a 50-page ruling, Brooks said NetChoice was likely to succeed in its challenge to the Arkansas law's constitutionality and questioned the effectiveness of the restrictions. "Age-gating social media platforms for adults and minors does not appear to be an effective approach when, in reality, it is the content on particular platforms that is driving the state's true concerns," wrote Brooks, who was appointed to the bench by former President Barack Obama. NetChoice argued the requirement violated the constitutional rights of users and arbitrarily singled out types of speech that would be restricted.

Arkansas' restrictions would have only applied to social media platforms that generate more than $100 million in annual revenue. It also wouldn't have applied to certain platforms, including LinkedIn, Google and YouTube. Brooks' ruling said the the exemptions nullified the state's intent for imposing the restrictions, and said the law also didn't adequately define which platforms they would apply to. As an example, he cited confusion over whether the social media platform Snapchat would be subject to the age-verification requirement. Social media companies that knowingly violate the age verification requirement would have faced a $2,500 fine for each violation under the now-blocked law. The law also prohibited social media companies and third-party vendors from retaining users' identifying information after they've been granted access to the social media site.
In a statement on X, Sanders wrote: "Big Tech companies put our kids' lives at risk. They push an addictive product that is shown to increase depression, loneliness, and anxiety and puts our kids in human traffickers' crosshairs. Today's court decision delaying this needed protection is disappointing but I'm confident the Attorney General will vigorously defend the law and protect our children."
Government

IBM Returns To the Facial Recognition Market 17

During the Black Lives Matter protests in 2020, IBM announced that it would no longer offer "general purpose" facial recognition technology due to concerns about racial profiling, mass surveillance, and other human rights violations. Now, according to The Verge and Liberty Investigates, "IBM signed a $69.8 million contract with the British government to develop a national biometrics platform that will offer a facial recognition function to immigration and law enforcement officials." From the report: A contract notice for the Home Office Biometrics Matcher Platform outlines how the project initially involves developing a fingerprint matching capability, while later stages introduce facial recognition for immigration purposes -- described as "an enabler for strategic facial matching for law enforcement." The final stage of the project is described as delivery of a "facial matching for law enforcement use-case." The platform will allow photos of individuals to be matched against images stored on a database -- what is sometimes known as a "one-to-many" matching system. In September 2020, IBM described such "one-to-many" matching systems as "the type of facial recognition technology most likely to be used for mass surveillance, racial profiling, or other violations of human rights."

IBM spokesman Imtiaz Mufti denied that its work on the contract was in conflict with its 2020 commitments. "IBM no longer offers general-purpose facial recognition and, consistent with our 2020 commitment, does not support the use of facial recognition for mass surveillance, racial profiling, or other human rights violations," he said. "The Home Office Biometrics Matcher Platform and associated Services contract is not used in mass surveillance. It supports police and immigration services in identifying suspects against a database of fingerprint and photo data. It is not capable of video ingest, which would typically be needed to support face-in-a-crowd biometric usage."

Human rights campaigners, however, said IBM's work on the project is incompatible with its 2020 commitments. Kojo Kyerewaa of Black Lives Matter UK said: "IBM has shown itself willing to step over the body and memory of George Floyd to chase a Home Office contract. This won't be forgotten." Matt Mahmoudi, PhD, tech researcher at Amnesty International, said: "The research across the globe is clear; there is no application of one-to-many facial recognition that is compatible with human rights law, and companies -- including IBM -- must therefore cease its sale, and honor their earlier statements to sunset these tools, even and especially in the context of law and immigration enforcement where the rights implications are compounding."
Medicine

US Officials Look To Move Marijuana To Lower-Risk Drug Category 220

The U.S. Department of Health and Human Services (HHS) has recommended easing restrictions on marijuana, a department spokesperson said on Wednesday, following a review request from the Biden Administration last year. Reuters reports: The scheduling recommendation for marijuana was provided to the Drug Enforcement Agency (DEA) on Tuesday as part of President Biden's directive to HHS, the spokesperson said. "As part of this process, HHS conducted a scientific and medical evaluation for consideration by DEA. DEA has the final authority to schedule or reschedule a drug under the Controlled Substances Act. DEA will now initiate its review," a DEA spokesperson said.

Marijuana is currently classified as a schedule I drug under the Controlled Substances Act, meaning it has a high potential for abuse and no accepted medical use, along with drugs like heroin and LSD. HHS is recommending reclassifying marijuana to say it has a moderate to low potential for dependence and a lower abuse potential, which would put it in a class with ketamine and testosterone.
"If marijuana classification were to ease at the federal level, that could allow major stock exchanges to list businesses that are in the cannabis trade, and potentially allow foreign companies to begin selling their products in the United States," notes Reuters.

While marijuana remains illegal on the federal level, nearly 40 U.S. states have legalized it in some form. According to a survey last year from the Pew Research Center, "an overwhelming share of U.S. adults (88%) say either that marijuana should be legal for medical and recreational use by adults (59%) or that it should be legal for medical use only (30%)."
The Courts

Texas Law Requiring Age Verification On Porn Sites Ruled Unconstitutional (arstechnica.com) 106

An anonymous reader quotes a report from Ars Technica: The day before a Texas antiporn law that requires age verification to access adult websites was set to take effect, the state's attorney general, Angela Colmenero, has been at least temporarily blocked from enforcing the law. US District Judge David Alan Ezra granted a preliminary injunction temporarily blocking enforcement after the Free Speech Coalition (FSC) joined adult performers and sites like Pornhub in a lawsuit opposing the law. Today, they convinced Ezra that Texas' law violates the First Amendment and would have "a chilling effect on legally-protected speech," FSC said in a press release.

"This is a huge and important victory against the rising tide of censorship online," Alison Boden, FSC's executive director, said. "From the beginning, we have argued that the Texas law, and those like it, are both dangerous and unconstitutional. We're pleased that the court agreed with our view that [the law's] true purpose is not to protect young people, but to prevent Texans from enjoying First Amendment protected expression. The state's defense of the law was not based in science or technology, but ideology and politics." Now, Texas will have to wait until this lawsuit is litigated to enforce the law. [...] According to FSC, in addition to free speech concerns, the law needed to be blocked because it would have exposed consumers to "significant privacy risks" by forcing adult-website visitors to show digital IDs.
A spokesperson for Pornhub's parent company Aylo told Ars: "We are pleased with the court's decision today, which reaffirms our position that the age verification law implemented in Texas is unconstitutional. We have publicly supported mandatory age verification of viewers of adult content for years, but any method of age verification must preserve user privacy and safety."

"The only solution that makes the Internet safer, preserves user privacy, and stands to prevent children from accessing age-inappropriate content is performing age verification at the device level," Aylo's spokesperson said. "We are pleased that the court recognizes the severity of compelled speech and its presence in this law that Texas has implemented. We are proud to fight for our industry and the performers that use it to legally earn a living, and we are glad to see the court recognize that this law is unconstitutional and would have required adult entertainers to falsely imply that their content poses health risks."

A similar age verification initiative in Australia was halted yesterday, citing concerns around privacy and security of the technology.
United Kingdom

UK Government Seeks Expanded Use of AI-based Facial Recognition By Police (ft.com) 15

UK's Home Office is looking to increase its use of controversial facial recognition technologies to track and find criminals within policing and other security agencies. From a report: In a document released on Wednesday, the government outlined its ambitions to potentially deploy new biometric systems nationally over the next 12 to 18 months. The move comes after privacy campaigners and independent academics criticised the technology for being inaccurate and biased, particularly against darker-skinned people.

MPs have previously called for a moratorium on its use on the general population until clear laws are established by parliament. The government is calling for submissions from companies for technologies that "can resolve identity using facial features and landmarks," including for live facial recognition which involves screening the general public for specific individuals on police watch lists.

In particular, the Home Office is highlighting its interest in novel artificial intelligence technologies that could process facial data efficiently to identify individuals, and software that could be integrated with existing technologies deployed by the department and with CCTV cameras. Facial recognition software has been used by South Wales Police and London's Metropolitan Police over the past five years across multiple trials in public spaces including shopping centres, during events such as the Notting Hill Carnival and, more recently, during the coronation.

Google

Google Removes 'Pirate' URLs From Users' Privately Saved Links 58

To date, Google has processed more than seven billion copyright takedown requests for its search engine. The majority of the reported links are purged from Google's search index, as required by the DMCA. Recently, however, Google appears to gone a step further, using search takedowns to "moderate" users' privately saved links collections. TorrentFreak: A few hours ago, Eddie Roosenmaallen shared an email from Google, notifying him that a link had been removed from his Google Saved collection because it violates Google's policy. The reason cited for the removal is the "downstream impact," as the URL in question is "blocked by Google Search."

"The following saved item in one of your collections was determined to violate Google's policy. As a result, the item will be moderated..," Google writes, pointing out a defunct KickassTorrents domain as the problem. Initially, it was suggested that this removal impacted Google's synched Chrome bookmarks but further research reveals that's not the case. Instead, the removals apply to Google's saved feature. This Google service allows users to save and organize links, similar to what Pinterest does. These link collections can be private or shared with third parties.
AI

US Copyright Office Wants To Hear What People Think About AI and Copyright 57

The US Copyright Office is opening a public comment period around AI and copyright issues beginning August 30th as the agency figures out how to approach the subject. From a report: As announced [PDF] in the Federal Register, the agency wants to answer three main questions: how AI models should use copyrighted data in training; whether AI-generated material can be copyrighted even without a human involved; and how copyright liability would work with AI. It also wants comments around AI possibly violating publicity rights but noted these are not technically copyright issues. The Copyright Office said if AI does mimic voices, likenesses, or art styles, it may impact state-mandated rules around publicity and unfair competition laws. Written comments are due on October 18th, and replies must be submitted to the Copyright Office by November 15th.

The copyright status of AI training data and the output of generative AI tools has become a hot topic for politicians, artists, authors, and even civil rights groups, making it a potential testing ground for coming AI regulation. The Copyright Office says that "over the past several years, the Office has begun to receive applications to register works containing AI-generated material." It may use the comments to inform how it decides to grant copyright in the future. The Copyright Office was involved in a lawsuit last year after it refused to grant Stephen Thaler rights to an image created by an AI platform. Earlier this month, a Washington, DC, court sided with the US Copyright Office in the case, stating copyright has never been handed to any work without a human involved.
Google

Google Removes Fake Signal and Telegram Apps Hosted on Play (arstechnica.com) 12

Researchers say they have found fake apps in Google Play that masqueraded as legitimate ones for the Signal and Telegram messaging platforms. The malicious apps could pull messages or other sensitive information from legitimate accounts when users took certain actions. ArsTechnica: An app with the name Signal Plus Messenger was available on Play for nine months and had been downloaded from Play roughly 100 times before Google took it down last April after being tipped off by security firm ESET. It was also available in the Samsung app store and on signalplus[.]org, a dedicated website mimicking the official Signal.org. An app calling itself FlyGram, meanwhile, was created by the same threat actor and was available through the same three channels. Google removed it from Play in 2021. Both apps remain available in the Samsung store.

Both apps were built on open source code available from Signal and Telegram. Interwoven into that code was an espionage tool tracked as BadBazaar. The Trojan has been linked to a China-aligned hacking group tracked as GREF. BadBazaar has been used previously to target Uyghurs and other Turkic ethnic minorities. The FlyGram malware was also shared in a Uyghur Telegram group, further aligning it to previous targeting by the BadBazaar malware family. Signal Plus could monitor sent and received messages and contacts if people connected their infected device to their legitimate Signal number, as is normal when someone first installs Signal on their device. Doing so caused the malicious app to send a host of private information to the attacker, including the device IMEI number, phone number, MAC address, operator details, location data, Wi-Fi information, emails for Google accounts, contact list, and a PIN used to transfer texts in the event one was set up by the user.

Your Rights Online

Scientologists Ask Federal Government To Restrict Right To Repair (404media.co) 135

The organization that represents the literary works of Scientology founder L. Ron Hubbard has filed a petition with the Federal Government, asking it to make it illegal to circumvent software locks for the repair of a highly specific set of electronic devices, according to a letter reviewed by 404 Media. From the report: The letter doesn't refer to any single device, but experts say the petition covers Scientology's "E-Meter," a "religious artifact" and electronic that is core to Scientology. Author Services Inc., a group "representing the literary, theatrical, and musical works of L. Ron Hubbard," told the U.S. Copyright Office that it opposes the renewal of an exemption to Section 1201 of the Digital Millennium Copyright Act that makes it legal for consumers to hack their personal electronics for the purposes of repair.

This exemption to copyright law is needed because many electronics manufacturers put arbitrary software locks, Digital Rights Management systems, or other technological prevention measures that stop consumers from diagnosing or repairing devices unless they are authorized to do so. Special exemptions to copyright law make it legal for farmers to hack past John Deere's DRM to fix their tractors, consumers to use software tools to help them repair certain parts of game consoles, or use third-party software to circumvent repair locks on printers, air conditioners, laptops, etc.

Slashdot Top Deals