Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror
×

Submission + - The companies helping governments hack citizens' phones: a "thriving" industry (fastcompany.com)

tedlistens writes: A wave of scrutiny and sanctions have helped expose the secretive, quasi-legal industry behind spyware tools, and put financial strain on firms like Israel’s NSO Group, which builds Pegasus. And yet business is booming. New research published this month by Google and Meta suggest that despite new restrictions, the cyberattack market is growing, and growing more dangerous, aiding government violence and repression and eroding democracy around the globe.

“The industry is thriving,” says Maddie Stone, a researcher at Google’s Threat Analysis Group (TAG) who hunts zero-day exploits, the software bugs that have yet to be fixed and are worth potentially hundreds of millions to spyware sellers. “More companies keep popping up, and their government customers are determined to buy from them, and want these capabilities, and are using them.”

For the first time, half of known zero-days against Google and Android products now come from private companies, according to a report published this month by Stone’s team at Google. Beyond prominent firms like NSO and Candiru, Google’s researchers say they are tracking about 40 companies involved in the creation of hacking tools that have been deployed against “high risk individuals.” “If governments ever had a monopoly on the most sophisticated capabilities, that era is certainly over,” reads the report.

The Google findings and a spyware-focused threat report published by Meta a week later reflect an increasingly tough response by Big Tech to an industry that profits from breaking into its systems. The reports also put new pressure on the US and others to take action against the mostly unregulated industry.

Submission + - Air Pollution Could Be Significant Cause of Dementia (theguardian.com)

An anonymous reader writes: Air pollution from traffic is linked to some of the more severe forms of dementia, and could be a significant cause of the condition among those who are not already genetically predisposed to it, research suggests. Research carried out in Atlanta, Georgia, found that people with higher exposure to traffic-related fine particulate matter air pollution were more likely to have high amounts of the amyloid plaques in their brains that are associated with Alzheimer’s. The findings, which will alarm anyone living in a town or city, but particularly those living near busy roads, add to the harms already known to be caused by road traffic pollution, ranging from climate change to respiratory diseases.

A team of researchers from Atlanta’s Emory University set out to specifically investigate the effects on people’s brains of exposure the type of fine particulate matter known as PM2.5. This consists of particles of less than 2.5 microns in diameter – about a hundredth the thickness of a human hair – suspended in the air, and is known to penetrate deep into living tissue, including crossing the blood-brain barrier. Traffic-related PM2.5 concentrations are a major source of ambient pollution in the metro-Atlanta area, and also in urban centers across the planet. [...] “We found that donors who lived in areas with high concentrations of traffic-related air pollution exposure, in particular PM2.5 exposure, had higher levels of Alzheimer’s disease neuropathology in their brain,” said Anke Huels, an assistant professor at Emory University in Atlanta, who was the lead author on the study. “In particular, we looked at a score that is used to evaluate evaluate amyloid plaques in the brain, in autopsy samples, and we showed that donors who live in areas with higher levels of air pollution, and also higher levels of amyloid plaques in their brain.”

There was a positive relationship between exposure to high levels of PM2.5 and levels of amyloid plaques in the brains of the subjects the team examined. They found that people with a 1 ug/m3 higher PM2.5 exposure in the year before death were nearly twice as likely to have higher levels of amyloid plaques in their brains, while those with higher exposure in the three years before death were 87% more likely to have higher levels of plaques. Huels and her team also investigated whether having the main gene variant associated with Alzheimer’s disease, ApoE4, had any effect on the relationship between air pollution and signs of Alzheimer’s in the brain. “We found that the association between In air pollution and severity of Alzheimer’s disease was stronger among those who did not carry an ApoE4 allele, those who did not have that strong genetic risk for Alzheimer disease,” Huels said. “Which kind of suggests that environmental exposures like air pollution may explain some of the Alzheimer’s risk in people whose risk cannot be explained by genetic risk factor.”

Submission + - FCC To Declare AI-Generated Voices In Robocalls Illegal Under Existing Law (arstechnica.com)

An anonymous reader writes: The Federal Communications Commission plans to vote on making the use of AI-generated voices in robocalls illegal. The FCC said that AI-generated voices in robocalls have "escalated during the last few years" and have "the potential to confuse consumers with misinformation by imitating the voices of celebrities, political candidates, and close family members." FCC Chairwoman Jessica Rosenworcel's proposed Declaratory Ruling would rule that "calls made with AI-generated voices are 'artificial' voices under the Telephone Consumer Protection Act (TCPA), which would make voice cloning technology used in common robocalls scams targeting consumers illegal," the commission announced yesterday. Commissioners reportedly will vote on the proposal in the coming weeks.

The TCPA, a 1991 US law, bans the use of artificial or prerecorded voices in most non-emergency calls "without the prior express consent of the called party." The FCC is responsible for writing rules to implement the law, which is punishable with fines. As the FCC noted yesterday, the TCPA "restricts the making of telemarketing calls and the use of automatic telephone dialing systems and artificial or prerecorded voice messages." Telemarketers are required "to obtain prior express written consent from consumers before robocalling them. If successfully enacted, this Declaratory Ruling would ensure AI-generated voice calls are also held to those same standards."

Rosenworcel said her proposed ruling will "recognize this emerging technology as illegal under existing law, giving our partners at State Attorneys General offices across the country new tools they can use to crack down on these scams and protect consumers. "AI-generated voice cloning and images are already sowing confusion by tricking consumers into thinking scams and frauds are legitimate," Rosenworcel said. "No matter what celebrity or politician you favor, or what your relationship is with your kin when they call for help, it is possible we could all be a target of these faked calls."

Submission + - Fiber Optics Bring You Internet. Now They're Also Listening to Trains (wired.com)

An anonymous reader writes: Stretching thousands upon thousands of miles under your feet, a web of fibrous ears is listening. Whether you walk over buried fiber optics or drive a car across them, above-ground activity creates a characteristic vibration that ever-so-slightly disturbs the way light travels through the cables. With the right equipment, scientists can parse that disturbance toidentify what the source wasand when exactly it was roaming there. This quickly proliferating technique is known as distributed acoustic sensing, or DAS, and it’s so sensitive that researchers recently used it to monitor the cacophony ofa mass cicada emergence. Others are using the cables as an ultra-sensitive instrument fordetecting volcanic eruptionsandearthquakes: Unlike a traditional seismometer stuck in one place, a web of fiber optic cables can cover a whole landscape, providing unprecedented detail of Earth’s rumblings at different locations. Now scientists are experimenting with bringing DAS to a railroad near you.

When a train runs along a section of track, it creates vibrations that analysts can monitor over time—if that signal suddenly changes, it might indicate a problem with the rail, like a crack, or a snapped tie. Or if on a mountain pass a rockslide blasts across the track, DAS might “hear” that too, warning railroad operators of a problem that human eyes hadn’t yet glimpsed. More gradual changes in the signal might betray the development of faults in track alignment. It just so happens that fiber optic cables already run along many railways to connect all the signaling equipment or for telecommunications. “You’re utilizing the already available facilities and infrastructure for that, which can reduce the cost,” says engineer Hossein Taheri, who isstudyingDAS for railroads at Georgia Southern University. “There could be some railroads where they don’t have the fiber, and you need to lay down. But yes, most of them, usually they do already have it.”

To tap into that fiber, you need a device called an interrogator, which fires laser pulses down the cables and analyzes the tiny bits of light that bounce back. So, say a rock hits the track 20 miles away from the interrogator. That creates a characteristic ground vibration that disturbs the fiber optics near the track, which shows up in the light signal. Because scientists know the speed of light, they can precisely measure the time it took for that signal to travel back to their interrogator, pinpointing the distance to the disturbance to within 10 meters, or about 30 feet. For a given stretch of track, you’d have already analyzed the DAS signals for a length of time, building a vibration profile for a normal, healthy railway. When the DAS data suddenly starts showing something different, you might have an issue, which shows up like an EKG picking up a problem with a human heartbeat. “What we’re doing is profiling the track, looking for changes in the acoustic signature,” says Daniel Pyke, a rail expert and spokesperson for Sensonic, which develops DAS technology for railroads. “We know what trackshouldsound like, we know what a trainshouldsound like. And we know that if it’s changing—so let’s say this joint is coming loose—that needs someone to go and fix it before it becomes a problem.”

Submission + - Sam Altman Says AI Depends On Energy Breakthrough (reuters.com)

An anonymous reader writes: OpenAI's CEO Sam Altman on Tuesday said an energy breakthrough is necessary for future artificial intelligence, which will consume vastly more power than people have expected. Speaking at a Bloomberg event on the sidelines of the World Economic Forum's annual meeting in Davos, Altman said the silver lining is that more climate-friendly sources of energy, particularly nuclear fusion or cheaper solar power and storage, are the way forward for AI. "There's no way to get there without a breakthrough," he said. "It motivates us to go invest more in fusion."

In 2021, Altman personally provided $375 million to private U.S. nuclear fusion company Helion Energy, which since has signed a deal to provide energy to Microsoft in future years. Microsoft is OpenAI's biggest financial backer and provides it computing resources for AI. Altman said he wished the world would embrace nuclear fission as an energy source as well.

Submission + - 'Stablecoins' Enabled $40 Billion In Crypto Crime Since 2022 (wired.com)

An anonymous reader writes: Stablecoins, cryptocurrencies pegged to a stable value like the US dollar, were created with the promise of bringing the frictionless, border-crossing fluidity of Bitcoin to a form of digital money with far less volatility. That combination has proved to be wildly popular, rocketing the total value of stablecoin transactions since 2022 past even that of Bitcoin itself. It turns out, however, that as stablecoins have become popular among legitimate users over the past two years, they were even more popular among a different kind of user: those exploiting them for billions of dollars of international sanctions evasion and scams.

As part of itsannual crime report, cryptocurrency-tracing firm Chainalysis today released new numbers on the disproportionate use of stablecoins for both of those massive categories of illicit crypto transactions over the last year. By analyzing blockchains, Chainalysis determined that stablecoins were used in fully 70 percent of crypto scam transactions in 2023, 83 percent of crypto payments to sanctioned countries like Iran and Russia, and 84 percent of crypto payments to specifically sanctioned individuals and companies. Those numbers far outstrip stablecoins' growing overall use—including for legitimate purposes—which accounted for 59 percent of all cryptocurrency transaction volume in 2023.

In total, Chainalysis measured $40 billion in illicit stablecoin transactions in 2022 and 2023 combined. The largest single category of that stablecoin-enabled crime was sanctions evasion. In fact, across all cryptocurrencies, sanctions evasion accounted for more than half of the $24.2 billion in criminal transactions Chainalysis observed in 2023, with stablecoins representing the vast majority of those transactions. [...] Chainalysis concedes that the analysis in its report excludes some cryptocurrencies like Monero and Zcash that are designed to be harder or impossible to trace with blockchain analysis. It also says it based its numbers on the type of cryptocurrency sent directly to an illicit actor, which may leave out other currencies used in money laundering processes that repeatedly swap one type of cryptocurrency for another to make tracing more difficult.

Submission + - Side channel attack against post-quantum encryption algorithm (thehackernews.com) 1

jd writes: Crystals-Kyber was chosen to be the US government's post-quantum cryptography system of choice last year, but a side-channel attack has been identified.

From TFA, NIST says that this is an implementation-specific attack (the reference implementation) and not a vulnerability in Kyber itself.

From TFA:
The exploit relates to "side-channel attacks on up to the fifth-order masked implementations of CRYSTALS-Kyber in ARM Cortex-M4 CPU," Elena Dubrova, Kalle Ngo, and Joel Gärtner of KTH Royal Institute of Technology said in a paper.

CRYSTALS-Kyber is one of four post-quantum algorithms selected by the U.S. National Institute of Standards and Technology (NIST) after a rigorous multi-year effort to identify a set of next-generation encryption standards that can withstand huge leaps in computing power.

One of the popular countermeasures to harden cryptographic implementations against physical attacks is masking, which randomizes the computation and detaches the side-channel information from the secret-dependent cryptographic variables.

The attack method devised by the researchers involves a neural network training method called recursive learning to help recover message bits with a high probability of success.

The researchers also developed a new message recovery method called cyclic rotation that manipulates ciphertexts to increase the leakage of message bits, thereby boosting the success rate and making it possible to extract the session key.

"Such a method allows us to train neural networks that can recover a message bit with the probability above 99% from high-order masked implementations," they added.

When reached for comment, NIST told The Hacker News that the approach does not break the algorithm itself and that the findings don't affect the standardization process of CRYSTALS-Kyber.

On the mailing list, D. J. Bernstein added this:

Ive been recently carrying out code analysis for some of the KEM implementations submitted to SUPERCOP. In the case of kyber*/ref, I noticed various "/KYBER_Q" occurrences with variable inputs. In at least one case, line 190 of crypto_kem/kyber768/ref/poly.c, this is clearly a secret input. I'd expect measurable, possibly exploitable, timing variations

Submission + - Can a form of watermarking prevent AI deep faking? (latimes.com)

Bruce66423 writes: This piece hypotheses the addition of such a watermark and visible icon to all pictures and videos at the time of creation, with the appropriate editing allowed but no substantial alterations. This is achieved by all legitimate editing being done on line to check the change is not creating a fake.

By contrast AI generated content would lack the watermark and icon.

Is it really technically possible to achieve such a clear distinction, or would, in practice, AI be able to replicate the necessary authentication?

Submission + - Consumer Reports Finds 'Widespread' Presence of Plastics In Food (reuters.com)

An anonymous reader writes: Consumer Reports has found that plastics retain a "widespread" presence in food despite the health risks, and called on regulators to reassess the safety of plastics that come into contact with food during production. The non-profit consumer group said on Thursday that 84 out of 85 supermarket foods and fast foods it recently tested contained "plasticizers" known as phthalates, a chemical used to make plastic more durable. It also said 79% of food samples in its study contained bisphenol A (BPA), another chemical found in plastic, and other bisphenols, though levels were lower than in tests done in 2009.

Consumer Reports said none of the phthalate levels it found exceeded limits set by U.S. and European regulators. It also said there was no level of phthalates that scientists confirm is safe, but that does not guarantee the safety of foods you eat. Phthalates and bisphenols can disrupt the production and regulation of estrogen and other hormones, potentially boosting the risk of birth defects, cancer, diabetes, infertility, neurodevelopmental disorders, obesity and other health problems. Among tested supermarket foods, Annie's Organic Cheesy Ravioli contained the most phthalates in nanograms per serving, 53,579, followed by Del Monte sliced peaches and Chicken of the Sea pink salmon.

Submission + - Drones Are the New Drug Mules (vice.com)

An anonymous reader writes: Last week border officials in the Punjab region of India revealed they intercepted 107 drug-carrying drones sent by smuggling gangs last year over the border from Pakistan, the highest number on record. Most were carrying heroin or opium from Pakistan to be dropped and received by collaborators in the Punjab, notorious for having India’s worst levels of opiate addiction. Last year the head of a police narcotics unit in Lahore, a city in Pakistan which borders the Punjab, was dismissed after he was suspected of running a drug trafficking gang sending drones over to India. But the use of cheap flying robots instead of humans to smuggle drugs across borders is a worldwide phenomenon. [...]

[D]rones will likely become an everyday part of drug dealing too, according to Peter Warren Singer, author of multiple books on national security and a Fellow at think tank New America, with legit medicines due to be delivered by drone in the U.S. later this year and maybe in the U.K. too. “We are just scraping the surface of what is possible, as drone deliveries become more and more common in the commercial world, it will be the same with delivery of illicit goods. In our book, Burn-In, we explain how a future city will see drones zipping about delivering everything from groceries and burritos to drugs, both prescribed by a doctor or bought off a dealer. Drones have traditionally been used by governments and corporations for what are known as the "3 D's" jobs that are too dull, dirty, or dangerous for humans. For criminals, it is the same, except add in another D: Dependable. A drone doesn't steal the product and can't be arrested or snitch if caught.”

Liam O’Shea, senior research fellow for organized crime and policing at defense and security thinktank RUSI, said drones were at the moment of limited value to wholesale traffickers and organized criminal gangs because of their range and the weight they can carry. “It makes sense that smugglers would seek to use drones. They are cheap and easy to acquire. They also lower the risks involved in some transactions, as smugglers do not have to be physically present during transactions. They offer opportunities for smuggling in areas where previous routes were too risky, such as prisons and over securitized borders. “I expect them to be of greater value to smaller players and distributors dealing with smaller quantities. Wholesale drug traffickers will still need to use routes that facilitate smuggling at higher volume or using drones to make multiple trips, which entails risks of detection. That may well change as improvements in technology improve drones’ carrying capacity and crime groups are better able to access drones with greater capacity.”

Submission + - ChatGPT Bombs Test On Diagnosing Kids' Medical Cases With 83% Error Rate (arstechnica.com)

An anonymous reader writes: ChatGPT is still no House, MD. While the chatty AI bot has previously underwhelmed with its attempts to diagnose challenging medical cases—with an accuracy rate of 39 percent in an analysis last year—a study out this week in JAMA Pediatrics suggests the fourth version of the large language model is especially bad with kids. It had an accuracy rate of just 17 percent when diagnosing pediatric medical cases. The low success rate suggests human pediatricians won't be out of jobs any time soon, in case that was a concern. As the authors put it: "[T]his study underscores the invaluable role that clinical experience holds." But it also identifies the critical weaknesses that led to ChatGPT's high error rate and ways to transform it into a useful tool in clinical care. With so much interest and experimentation with AI chatbots, many pediatricians and other doctors see their integration into clinical care as inevitable. [...]

For ChatGPT's test, the researchers pasted the relevant text of the medical cases into the prompt, and then two qualified physician-researchers scored the AI-generated answers as correct, incorrect, or "did not fully capture the diagnosis." In the latter case, ChatGPT came up with a clinically related condition that was too broad or unspecific to be considered the correct diagnosis. For instance, ChatGPT diagnosed one child's case as caused by a branchial cleft cyst—a lump in the neck or below the collarbone—when the correct diagnosis was Branchio-oto-renal syndrome, a genetic condition that causes the abnormal development of tissue in the neck, and malformations in the ears and kidneys. One of the signs of the condition is the formation of branchial cleft cysts. Overall, ChatGPT got the right answer in just 17 of the 100 cases. It was plainly wrong in 72 cases, and did not fully capture the diagnosis of the remaining 11 cases. Among the 83 wrong diagnoses, 47 (57 percent) were in the same organ system.

Among the failures, researchers noted that ChatGPT appeared to struggle with spotting known relationships between conditions that an experienced physician would hopefully pick up on. For example, it didn't make the connection between autism and scurvy (Vitamin C deficiency) in one medical case. Neuropsychiatric conditions, such as autism, can lead to restricted diets, and that in turn can lead to vitamin deficiencies. As such, neuropsychiatric conditions are notable risk factors for the development of vitamin deficiencies in kids living in high-income countries, and clinicians should be on the lookout for them. ChatGPT, meanwhile, came up with the diagnosis of a rare autoimmune condition. Though the chatbot struggled in this test, the researchers suggest it could improve by being specifically and selectively trained on accurate and trustworthy medical literature—not stuff on the Internet, which can include inaccurate information and misinformation. They also suggest chatbots could improve with more real-time access to medical data, allowing the models to refine their accuracy, described as "tuning."

Submission + - LabView App Abandons the Mac After Four Decades (appleinsider.com)

An anonymous reader writes: Having been created on a Mac in the 1980s, LabView has now announced that its latest macOS update will be the final release for the platform. LabView is a visual programming language tool that lets users connect virtual measurement equipment together to input and process data. AppleInsider staffers have seen it used across a variety of industries and applications to help design a complex monitoring system, or automate a test sequence.

It's been 40 years since Dr James Truchard and Jeff Kodosky began work on it and founded their firm, National Instruments. The first release of the software was in October 1986 where it was a Mac exclusive. In a 2019 interview, Jeff Kodosky said this was because "it was the only computer that had a 32-bit operating system, and it had the graphics we needed." Now National Instruments has told all current users that they have released an updated Mac version — but it will be the last.

National Instruments says it will cease selling licences for the Mac version in March 2024, and will also stop support. LabView has also been sold as a subscription and National Instruments says it will switch users to a "perpetual licence for your continued use," though seemingly only if specifically requested. As yet, there have been few reactions on the NI.com forums. However, one post says "This came as a shocker to us as the roadmap still indicates support."

Submission + - People Send 20 Billion Pounds of 'Invisible' E-Waste To Landfills Each Year (popsci.com)

An anonymous reader writes: One e-toy for every person on Earth—that’s the staggering amount of electric trains, drones, talking dolls, R/C cars, and other children’s gadgets tossed into landfills every year. Some of what most consumers consider to be e-waste—like electronics such as computers, smartphones, TVs, and speaker systems—are usual suspects. Others, like power tools, vapes, LED accessories, USB cables, anything involving rechargeable lithium batteries and countless other similar, “nontraditional” e-waste materials, are less obviously in need of special disposal. In all, people across the world throw out roughly 9 billion kilograms (19.8 billion pounds) of e-waste commonly not recognized as such by consumers.

This “invisible e-waste” is the focal point of the sixth annual International E-Waste Day on October 14, organized by Waste Electrical and Electronic Equipment (WEEE) Forum. In anticipation of the event, the organization recently commissioned the United Nations Institute for Training and Research (UNITAR) to delve into just how much unconventional e-waste is discarded every year—and global population numbers are just some of the ways to visualize the issue.

According to UNITAR’s findings, for example, the total weight of all e-cig vapes thrown away every year roughly equals 6 Eiffel Towers. Meanwhile, the total weight of all invisible e-waste tallies up to “almost half a million 40 [metric ton] trucks,” enough to create a bumper-to-bumper traffic jam stretching approximately 3,504 miles–the distance between Rome and Nairobi. From a purely economic standpoint, nearly $10 billion in essential raw materials is literally thrown into the garbage every year.

Submission + - Thiel-backed startup aims to build 'hundreds' of prefab chip fabs (fastcompany.com)

tedlistens writes: Via Fast Company:

To meet the world’s growing hunger for chips, a startup wants to upend the costly semiconductor fabrication plant with a nimbler, cheaper idea, one they believe can faster spread the manufacturing of the chips inside nearly everything we use: an AI-enabled chip factory that can be assembled and expanded modularly with prefab pieces, like high-tech Lego bricks.”

“We’re democratizing the ownership of semiconductor fabs,” says Matthew Putman... the founder and CEO of Nanotronics, a New York City-based industrial AI company that deploys advanced optical solutions for detecting defects in manufacturing procedures. Its new system, called Cubefabs, combines its modular inspection tools and other equipment with AI, allowing the proposed chip factories to monitor themselves and adapt accordingly—part of what Putman calls an “autonomous factory.” The bulk of the facility can be preassembled, flat-packed and put in shipping containers so that the facilities can be built “in 80% of the world,” says Putman.

Eventually, the company envisions hundreds of the flower-shaped fabs around the world, starting with a prototype in New York or Kuwait that it hopes to start building by the end of the year...

The world’s chip dependence has never been in sharper relief, with a spike in fab construction in the U.S. alone to the tune of hundreds of billions—a boost from the CHIPS and Science Act of 2022 and similar incentives around the globe, not to mention the growing geopolitical anxieties over the most advanced chips. (New chip restrictions on China by the Biden administration have raised the temperature of a global chip war, frustrating, among others, American chip makers.) Despite a recent deceleration in semiconductor demand, the global hunger for chips is expected to double in size by 2030. Meanwhile, the costs of fabricating them are skyrocketing. Moore’s law says that the number of transistors in an integrated circuit doubles every two years; Rock’s law says that the cost of a chip fabrication plant doubles every four.

Slashdot Top Deals

Computers can figure out all kinds of problems, except the things in the world that just don't add up.

Working...