Cells’ electric fields keep nanoparticles at bay, scientists confirm

The humble membranes that enclose our cells have a surprising superpower: They can push away nano-sized molecules that happen to approach them. A team including scientists at the National Institute of Standards and Technology (NIST) has figured out why, by using artificial membranes that mimic the behavior of natural ones. Their discovery could make a difference in how we design the many drug treatments that target our cells.

The team’s findings, which appear in the Journal of the American Chemical Society, confirm that the powerful electrical fields that cell membranes generate are largely responsible for repelling nanoscale particles from the surface of the cell.

This repulsion notably affects neutral, uncharged nanoparticles, in part because the smaller, charged the attracts crowd the membrane and push away the larger particles. Since many drug treatments are built around proteins and other nanoscale particles that target the membrane, the repulsion could play a role in the treatments’ effectiveness.

The findings provide the first direct evidence that the electric fields are responsible for the repulsion.

[…]

Membranes form boundaries in nearly all kinds of cells. Not only does a cell have an that contains and protects the interior, but often there are other membranes inside, forming parts of organelles such as mitochondria and the Golgi apparatus. Understanding membranes is important to medical science, not least because proteins lodged in the are frequent drug targets. Some membrane proteins are like gates that regulate what gets into and out of the cell.

The region near these membranes can be a busy place. Thousands of types of different molecules crowd each other and the cell membrane—and as anyone who has tried to push through a crowd knows, it can be tough going. Smaller molecules such as salts move with relative ease because they can fit into tighter spots, but larger molecules, such as proteins, are limited in their movements.

[…]

“How does crowding affect the cell and its behavior?” he said. “How, for example, do molecules in this soup get sorted inside the cell, making some of them available for biological functions, but not others? The effect of the membrane could make a difference.”

[…]

scientists have paid scant attention to this effect at the nanoscale because it takes extremely powerful fields to move nanoparticles. But powerful fields are just what an electrically charged membrane generates.

“The electric field right near a membrane in a salty solution like our bodies produce can be astoundingly strong,” Hoogerheide said. “Its strength falls off rapidly with distance, creating large field gradients that we figured might repel nearby particles. So we used to look into it.”

Neutrons can distinguish between different isotopes of hydrogen, and the team designed experiments that explored a membrane’s effect on nearby molecules of PEG, a polymer that forms chargeless nano-sized particles. Hydrogen is a major constituent of PEG, and by immersing the membrane and PEG into a solution of heavy water—which is made with deuterium in place of ordinary water’s —the team could measure how closely the PEG particles approached the membrane. They used a technique known as neutron reflectometry at the NCNR as well as instruments at Oak Ridge National Laboratory.

Together with , the experiments revealed the first-ever evidence that the membranes’ powerful field gradients were the culprit behind the repulsion: The PEG molecules were more strongly repelled from charged surfaces than from neutral surfaces.

[…]

More information: Marcel Aguilella-Arzo et al, Charged Biological Membranes Repel Large Neutral Molecules by Surface Dielectrophoresis and Counterion Pressure, Journal of the American Chemical Society (2024). DOI: 10.1021/jacs.3c12348. pubs.acs.org/doi/full/10.1021/jacs.3c12348

Source: Cells’ electric fields keep nanoparticles at bay, scientists confirm

EU Commission readies establishment of AI Office on 21 feb

The AI Office will play a pivotal role in the enforcement architecture of the AI Act, the EU’s landmark law to regulate Artificial Intelligence, set to be formally adopted in the coming weeks based on a political agreement nailed down in December.

The idea of an AI Office to centralise the enforcement of the AI rulebook came from the European Parliament. Still, during the negotiations, it was downsized from being a little short of an agency to being integrated into the Commission, albeit with a separate budget line.

However, the question of how much autonomy the Office will be guaranteed remains sensitive inside the Commission, especially since it is unclear whether it will become an entity with its own political objectives or an extension of the unit responsible for the AI Act.

Euractiv understands that the obtained draft decision was amended following an internal consultation to include wording specifying that the Office should not interfere with the competencies of Commission departments.

According to the document, the decision should enter into force as a matter of urgency on 21 February, before the formal adoption of the EU’s AI law. Euractiv understands the decision is due to be adopted on Wednesday (24 January).

Policing powerful AI

The AI Office will have primarily a supporting role for what concerns the enforcement of the rules on AI systems, as the bulk of the competencies will be on national authorities. However, the Office has been assigned to policing General-Purpose AI (GPAI) models and systems, the most potent types of AI so far.

Recent advances in computing power, data harvesting, and algorithm techniques have led to the development of powerful GPAI models like OpenAI’s GPT-4, which powers the GPAI system ChatGPT, the world’s most famous chatbot.

The agreement on the AI Act includes a tiered approach to GPAI models to distinguish those that might entail a systemic risk for society from the rest. The AI Office is to develop the methodologies and benchmarks for evaluating the capabilities of GPAI models.

The Office should be able to set itself apart in monitoring the application of the rules on GPAI models and systems, notably when developed by the same provider, and the emergence of unforeseen risks from these models based on alerts from a scientific panel of independent experts.

The new EU entity is also set to have significant leeway to investigate possible infringements of rules related to GPAI by collecting complaints and alerts, issuing document requests, conducting evaluations and requesting mitigation or other enforcement measures.

The Office will also coordinate the enforcement of the AI Act on AI systems already covered under other EU legislation, like social media’s recommender systems under the Digital Services Act and search engines’ ranking algorithms under the Digital Markets Act.

Support & coordination

The AI Office is to have a supporting role in the preparation of secondary legislation implementing the AI Act, the uniform application of the regulation, the issuance of guidance and supporting tools like standardised protocols, the preparation of standardisation requests, the establishment of regulatory sandboxes, the developments of codes of practice and conduct at the EU level.

The entity will also provide the secretariat for the AI Board and administrative support for the stakeholder-run advisory forum and expert-made scientific panel. The draft decision explicitly references the requirement to consult regularly with scientific and civil society stakeholders.

In particular, the AI Office must “establish a forum for cooperation with the open-source community with a view to identifying and developing best practices for the safe development and use of open-source AI models and systems.”

In addition, the new entity is tasked with promoting innovation ecosystems and working with public and private actors and the start-up community. As revealed by Euractiv, the AI Office will be responsible for monitoring the progress of GenAI4EU, an initiative to promote the uptake of generative AI in strategic sectors.

The Office is also mandated to cooperate with the relevant EU bodies, like the European Data Protection Supervisor. Collaboration is also required with other Commission departments, notably the European Centre for Algorithmic Transparency, to test GPAI models and systems and facilitate the adoption of AI tools in relevant EU policies.

At the international level, the Office will promote the EU approach to AI, contribute to AI governance initiatives, and support the implementation of international agreements.

Financing

The financing aspect of the AI Office has been a sore point since the beginning. The lack of flexibility in the EU budget allocations and lack of appetite from member states to put more resources on the table means new tasks always face strict budgetary constraints.

The Commission’s digital policy department, DG CNECT, will assign human resources. The hiring of temporary staff and operational expenditure will be financed with the redeployment of the budget from the Digital Europe Programme.

Source: EU Commission readies establishment of AI Office – Euractiv

Ubisoft Says It Out Loud: We Want People To Get Used To Not Owning What They’ve Bought

if buying isnt owning then piracy isnt stealing

[…] the public too often doesn’t understand how it happens that products stop working the way they did after updates are performed remotely, or why movies purchased through an online store suddenly disappear with no refund, or why other media types purchased online likewise go poof. There is a severe misalignment, in other words, between what consumers think their money is being spent on and what is actually being purchased.

[…]

I suppose it’s at least a bit refreshing to see Ubisoft come out here and just say the quiet part out loud.

With the pre-release of Prince of Persia: The Lost Crown started, Ubisoft has chosen this week to rebrand its Ubisoft+ subscription services, and introduce a PC version of the “Classics” tier at a lower price. And a big part of this, says the publisher’s director of subscriptions, Philippe Tremblay, is getting players “comfortable” with not owning their games.

He claims the company’s subscription service had its biggest ever month October 2023, and that the service has had “millions” of subscribers, and “over half a billion hours” played. Of course, a lot of this could be a result of Ubisoft’s various moments of refusing to release games to Steam, forcing PC players to use its services, and likely opting for a month’s subscription rather than the full price of the game they were looking to buy. But still, clearly people are opting to use it.

On the one hand, there are realms where it makes sense for a subscription based gaming service where you pay a monthly fee for access and essentially never buy a game. Xbox’s Game Pass, for instance, makes all the sense in the world for some people. If you’re a more casual gamer who doesn’t want to own a library of games, but rather merely wants to be able to play a broad swath of titles at a moment’s notice, a service like that is perfect.

But Game Pass is $10 a month and includes titles from all kinds of publishers. Ubisoft’s service is nearly double that rate and only includes Ubisoft titles. That’s a much tougher sell.

[…]

Given that most people, while being a part of the problem (hello), also think of this as a problem, it’s so weird to see it phrased as if some faulty thinking in the company’s audience.

One of the things we saw is that gamers are used to, a little bit like DVD, having and owning their games. That’s the consumer shift that needs to happen. They got comfortable not owning their CD collection or DVD collection. That’s a transformation that’s been a bit slower to happen [in games]. As gamers grow comfortable in that aspect… you don’t lose your progress. If you resume your game at another time, your progress file is still there. That’s not been deleted. You don’t lose what you’ve built in the game or your engagement with the game. So it’s about feeling comfortable with not owning your game.

That last sentence’s thoughts are so misaligned as to be nearly in the realm of nonsense. If it’s my game, then I do own it. The point Ubisoft is trying to make is that the public should get over ownership entirely and accept that it’s not my game at all. It’s my subscription service.

And while I appreciate Ubisoft saying the quiet part out loud for once, I don’t believe for a moment that this will go over well with the general gaming public.

Source: Ubisoft Says It Out Loud: We Want People To Get Used To Not Owning What They’ve Bought | Techdirt

Hint: it hasn’t!

Supreme Court declines appeals from Apple and Epic Games in App Store case

The US Supreme Court has declined to hear the appeals filed by both Apple and Epic Games following a judge’s ruling that Apple must allow developers to offer alternative methods to pay for apps and services other than through the App Store. It did not provide an explanation as to why it refused to review either appeal, but it means the permanent injunction giving developers a way to avoid the 30 percent cut Apple takes will remain in place.

Apple made the appeal to the high court back in September of last year, requesting it review the circuit court’s decision it deemed “unconstitutional.” The case brought forward by Epic Games is the first to challenge the business model of the App store, which helps Apple rake in billions. In May 2023, Apple said that developers generated about $1 trillion in total billings through the App Store in 2022. Gaming apps sold on the App Store generate an estimated $100 billion in revenue each year.

While the Ninth Circuit ruled in favor of Epic’s appeal that Apple has indeed broken California’s Unfair Competition law, it rejected Epic’s claim that the App store is a monopoly. In addition to declining to hear Apple’s appeal, SCOTUS also will not review Epic’s appeal that the district court had made “legal errors.”

Epic claimed that Apple violates federal antitrust laws through its business model, however, this is not an issue the high court will consider.

[…]

Source: Supreme Court declines appeals from Apple and Epic Games in App Store case

EU says music streaming platforms must pay artists more

The European Parliament is calling for new regulations to ensure streaming services pay artists fairly. The proposal also calls for more transparency around how algorithms generate suggestions for which artists to stream and what tracks get the most promotion.

The proposed changes will be designed to ensure smaller artists are compensated fairly. Currently, royalty rates are set in a way that makes artists accept lower pay for the distribution of their content in exchange for visibility on streaming platforms like Spotify and Apple Music. The members of the European Parliament (MEPs) are primarily concerned with introducing new legal frameworks to help support artists.

MEPs believe that the current way royalties are distributed is unfair. Current algorithms favor major labels and artists when providing suggestions, making it more difficult for less popular and diverse genres to get exposure. “Cultural diversity and ensuring that authors are credited and fairly paid has always been our priority; this is why we ask for rules that ensure algorithms and recommendation tools used by music streaming services are transparent as well as in their use of AI tools, placing European authors at the centre,” rapporteur Ibán García del Blanco of Spain said.

As part of this call for change, the MEPs want there to be more regulation regarding the use of artificial intelligence. The actual implementation of a legal framework by EU regulators might take some time to come to fruition. Similarly, UK regulators also raised the issue of pay fairness on streaming apps and even started investigating the effects of algorithms on listening habits. It’s no secret that streaming platforms account for more than half of the music industry’s revenue. Streaming represents about 67 percent of the music industry’s revenue on a global scale.

Source: EU says music streaming platforms must pay artists more

OpenAI must defend ChatGPT fabrications after failing to defeat libel suit

OpenAI may finally have to answer for ChatGPT’s “hallucinations” in court after a Georgia judge recently ruled against the tech company’s motion to dismiss a radio host’s defamation suit.

OpenAI had argued that ChatGPT’s output cannot be considered libel, partly because the chatbot output cannot be considered a “publication,” which is a key element of a defamation claim. In its motion to dismiss, OpenAI also argued that Georgia radio host Mark Walters could not prove that the company acted with actual malice or that anyone believed the allegedly libelous statements were true or that he was harmed by the alleged publication.

It’s too early to say whether Judge Tracie Cason found OpenAI’s arguments persuasive. In her order denying OpenAI’s motion to dismiss, which MediaPost shared here, Cason did not specify how she arrived at her decision, saying only that she had “carefully” considered arguments and applicable laws.

There may be some clues as to how Cason reached her decision in a court filing from John Monroe, attorney for Walters, when opposing the motion to dismiss last year.

Monroe had argued that OpenAI improperly moved to dismiss the lawsuit by arguing facts that have yet to be proven in court. If OpenAI intended the court to rule on those arguments, Monroe suggested that a motion for summary judgment would have been the proper step at this stage in the proceedings, not a motion to dismiss.

Had OpenAI gone that route, though, Walters would have had an opportunity to present additional evidence. To survive a motion to dismiss, all Walters had to do was show that his complaint was reasonably supported by facts, Monroe argued.

Failing to convince the court that Walters had no case, OpenAI’s legal theories regarding its liability for ChatGPT’s “hallucinations” will now likely face their first test in court.

“We are pleased the court denied the motion to dismiss so that the parties will have an opportunity to explore, and obtain a decision on, the merits of the case,” Monroe told Ars.

What’s the libel case against OpenAI?

Walters sued OpenAI after a journalist, Fred Riehl, warned him that in response to a query, ChatGPT had fabricated an entire lawsuit. Generating an entire complaint with an erroneous case number, ChatGPT falsely claimed that Walters had been accused of defrauding and embezzling funds from the Second Amendment Foundation.

Walters is the host of Armed America Radio and has a reputation as the “Loudest Voice in America Fighting For Gun Rights.” He claimed that OpenAI “recklessly” disregarded whether ChatGPT’s outputs were false, alleging that OpenAI knew that “ChatGPT’s hallucinations were pervasive and severe” and did not work to prevent allegedly libelous outputs. As Walters saw it, the false statements were serious enough to be potentially career-damaging, “tending to injure Walter’s reputation and exposing him to public hatred, contempt, or ridicule.”

[…]

OpenAI introduced “a large amount of material” in its motion to dismiss that fell outside the scope of the complaint, Monroe argued. That included pointing to a disclaimer in ChatGPT’s terms of use that warns users that ChatGPT’s responses may not be accurate and should be verified before publishing. According to OpenAI, this disclaimer makes Riehl the “owner” of any libelous ChatGPT responses to his queries.

“A disclaimer does not make an otherwise libelous statement non-libelous,” Monroe argued. And even if the disclaimer made Riehl liable for publishing the ChatGPT output—an argument that may give some ChatGPT users pause before querying—”that responsibility does not have the effect of negating the responsibility of the original publisher of the material,” Monroe argued.

[…]

With the lawsuit moving forward, curious chatbot users everywhere may finally get the answer to a question that has been unclear since ChatGPT quickly became the fastest-growing consumer application of all time after its launch in November 2022: Will ChatGPT’s hallucinations be allowed to ruin lives?

In the meantime, the FTC is seemingly still investigating potential harms caused by ChatGPT’s “false, misleading, or disparaging” generations.

[…]

Source: OpenAI must defend ChatGPT fabrications after failing to defeat libel suit | Ars Technica

Samsung and Google launch ‘Circle to Search’ Too

Samsung announced many interesting products and features at its latest Galaxy Unpacked event (including the Galaxy S24 series) but one of the more impressive developments isn’t actually unique to the Galaxy brand itself. The feature, Circle to Search, was developed in partnership with Google, which means it’ll live on Google phones, too.

What is Circle to Search?

In a nutshell, Circle to Search is a new way to search for anything without switching apps. To activate the feature, long press on the home button or navigation bar (if you have gesture navigation enabled). Then, when you see something on your screen that you want to look up, draw a circle around it with your finger, and your phone will return search results. For example, you could use Circle to Search to find an article of clothing you might have seen in a YouTube video, or get more info about a dish in a recipe you’re browsing online.

You don’t have to just circle the item you’re looking to search, either: You can also highlight it, scribble over it, or tap on it. As part of Google’s AI upgrades to search, you can search with text and pictures you’ve circled at the same time using multi-search. Google says that the Circle to Search gesture works on images, text, and videos. Basically, you’re able to find anything and everything using this feature.

These results appear inside the app you’re currently using, so you don’t need to interrupt what you’re doing to search. When you’re done, you can simply swipe the results away to get back to your previous task.

When does Circle to Search launch?

Circle to Search is set to launch globally on Jan. 31 for select premium Android smartphones like the Pixel 8 and Pixel 8 Pro and the newly announced Galaxy S24 series. The feature will be coming to more Android devices at a later date.

Source: How to Use Google’s ‘Circle to Search’ Tool | Lifehacker

Have I Been Pwned adds 71 million emails from Naz.API stolen account list

Have I Been Pwned has added almost 71 million email addresses associated with stolen accounts in the Naz.API dataset to its data breach notification service.

The Naz.API dataset is a massive collection of 1 billion credentials compiled using credential stuffing lists and data stolen by information-stealing malware.

Credential stuffing lists are collections of login name and password pairs stolen from previous data breaches that are used to breach accounts on other sites.

[…]

This dataset has been floating around the data breach community for quite a while but rose to notoriety after it was used to fuel an open-source intelligence (OSINT) platform called illicit.services.

This service allows visitors to search a database of stolen information, including names, phone numbers, email addresses, and other personal data.

The service shut down in July 2023 out of concerns it was being used for Doxxing and SIM-swapping attacks. However, the operator enabled the service again in September.

Illicit.services use data from various sources, but one of its largest sources of data came from the Naz.API dataset, which was shared privately among a small number of people.

Each line in the Naz.API data consists of a login URL, its login name, and an associated password stolen from a person’s device

[…]

“Here’s the back story: this week I was contacted by a well-known tech company that had received a bug bounty submission based on a credential stuffing list posted to a popular hacking forum,” explained a blog post by Hunt.

“Whilst this post dates back almost 4 months, it hadn’t come across my radar until now and inevitably, also hadn’t been sent to the aforementioned tech company.”

“They took it seriously enough to take appropriate action against their (very sizeable) user base which gave me enough cause to investigate it further than your average cred stuffing list.”

Threat actors sharing the Naz.API dataset on hacking forums
Threat actors sharing the Naz.API dataset on hacking forums
Source: BleepingComputer

According to Hunt, the Naz.API dataset consists of 319 files totaling 104GB and containing 70,840,771 unique email addresses.

However, while there are close to 71 million unique emails, for each email address, there are likely many other records for the different sites’ credentials were stolen from.

Hunt says the Naz.API data is likely old, as it contained one of his and other HIBP subscribers’ passwords that were used in the past. Hunt says his password was used in 2011, meaning that some of the data is over 13 years old.

To check if your credentials are in the Naz.API dataset, you can perform a search at Have I Been Pwned. If your email is found to be associated with Naz.API, the site will warn you, indicating that your computer was infected with information-stealing malware at one point.

[…]

Source: Have I Been Pwned adds 71 million emails from Naz.API stolen account list

Amazon wants you to pay to give them your data with Its Next-Gen “Remarkable Alexa” – which is remarkable in how poorly it works

amazon alexa echo device covered in green goo

Amazon is revamping its Alexa voice assistant as it prepares to launch a new paid subscription plan this year, according to internal documents and people familiar with the matter. But the change is causing internal conflict and may lead to further delay.

Tentatively named “Alexa Plus,” the paid version of Alexa is intended to offer more conversational and personalized artificial-intelligence technology, one of the documents obtained by Business Insider says. The people said the team was working toward a June 30 launch deadline and had been testing the underlying voice technology, dubbed “Remarkable Alexa,” with 15,000 external customers.

But the quality of the new Alexa’s answers is still falling short of expectations, often sharing inaccurate information, external tests have found. Amazon is now going through a major overhaul of Alexa’s technology stack to address this issue, though the team is experiencing some discord.

[…]

The people familiar with the matter said the limited preview with 15,000 external customers discovered that, while Remarkable Alexa was generally good at being conversational and informative, it was still deflecting answers, often giving unnecessarily long or inaccurate responses. It also needed to improve its ability to answer ambiguous customer requests that require the engagement of multiple services, such as turning on the light and music at the same time.

The new Alexa still didn’t meet the quality standards expected for Alexa Plus, these people added

[…]

Source: Amazon Is Struggling With Its Next-Gen “Remarkable Alexa’

Hospitals owned by private equity are harming patients, reports find

Private equity firms are increasingly buying hospitals across the US, and when they do, patients suffer, according to two separate reports. Specifically, the equity firms cut corners, slash services, lay off staff, lower quality of care, take on substantial debt, and reduce charity care, leading to lower ratings and more medical errors, the reports collectively find.

Last week, the financial watchdog organization Private Equity Stakeholder Project (PESP) released a report delving into the state of two of the nation’s largest hospital systems, Lifepoint and ScionHealth—both owned by private equity firm Apollo Global Management. Through those two systems, Apollo runs 220 hospitals in 36 states, employing around 75,000 people.

The report found that some of Apollo’s hospitals were among the worst in their respective states, based on a ranking by The Lown Institute Hospital Index. The index ranks hospitals and health systems based on health equity, value, and outcomes, PESP notes. The hospitals also have dismal readmission rates and government rankings. The Center for Medicare and Medicaid Services (CMS) ranks hospitals on a one- to five-star system, with the national average of 3.2 stars overall and about 30 percent of hospitals at two stars or below. Apollo’s overall average is 2.8 stars, with nearly 40 percent of hospitals at two stars or below.

Patterns

The other report, a study published in JAMA late last month, found that the rate of serious medical errors and health complications increases among patients in the first few years after private equity firms take over. The study examined Medicare claims from 51 private equity-run hospitals and 259 matched control hospitals.

Specifically, the study, led by researchers at Harvard University, found that patients admitted to private equity-owned hospitals had a 25 percent increase in developing hospital-acquired conditions compared with patients in the control hospitals. In private equity hospitals, patients experienced a 27 percent increase in falls, a 38 percent increase in central-line bloodstream infections (despite placing 16 percent fewer central lines than control hospitals), and surgical site infections doubled.

“These findings heighten concerns about the implications of private equity on health care delivery,” the authors concluded.

It also squares with PESP’s investigation, which collected various data and media reports that could help explain how those medical errors could happen. The report found a pattern of cost-cutting and staff layoffs after private equity acquisition. In 2020, for instance, Lifepoint cut its annual salary and benefit costs by $166 million over the previous year and cut its supply costs by $54 million. Staff that remained at Apollo’s hospitals were, in some cases, underpaid, and some hospitals cut services, including obstetric, pediatric, and psychiatric care.

Another pattern was that Apollo’s hospitals were highly indebted. According to Moody’s Investor Services, Apollo’s ScionHealth has 5.8 times more debt than income to pay that debt off. Lifepoint’s debt was 7.9 times its income. Private equity firms often take on excessive debt for leveraged buyouts, but this can lead cash to be diverted to interest payments instead of operational needs, PESP reported.

Apollo also made money off the hospitals in sale-leaseback transactions, in which it sold the land under the hospitals and then leased it back. In these cases, hospitals are left paying rent on land they used to own.

[…]

Source: Hospitals owned by private equity are harming patients, reports find | Ars Technica

Thieves steal 35.5M customers’ data from Vans, Dickies, Timberlands parent comp’s sales systems

a vans sneaker and timberland boot with an axe through them

VF Corporation, parent company of clothes and footwear brands including Vans and North Face, says 35.5 million customers were impacted in some way when criminals broke into their systems in December.

The announcement was made in a Thursday 8-K/A filing with the Securities and Exchange Commission (SEC), and we’re only left to speculate about what kind of information the attackers may have scrambled away with.

The parent company of fashion labels, which also include Supreme, Timberland, and Dickies did, however, confirm the type of data that couldn’t have been accessed.

VF Corp said that customers’ social security numbers (SSNs), bank account information, and payment card information remain uncompromised as these are not stored in its IT systems.

There’s also no evidence to suggest that consumer passwords were accessed, it confirmed, although it did caveat this with “the investigation remains ongoing”.

If you want to really look between the lines of the document’s wording, you’ll see that VF Corp explicitly said SSNs, financial information, and passwords – all excluded from potential compromise – were all explicitly defined as being consumer-related specifically.

The same goes for the number of individuals affected – 35.5 million “individual consumers” had their personal information stolen.

[…]

When the attack was first disclosed, the clothes seller said its ability to fulfill orders was affected, but online and retail stores were still up and running as normal.

This week’s filing said the company’s ability to replenish retail stores’ inventory was affected and combined with the fulfillment issues. This led to customer order cancellations and reduced demand across some of its brands’ e-commerce sites.

“Since the filing of the original report, while VF is still experiencing minor residual impacts from the cyber incident, VF has resumed retail store inventory replenishment and product order fulfillment, and is caught up on fulfilling orders that were delayed as a result of the cyber incident,” the filing reads.

“Since the filing of the original report, VF has substantially restored the IT systems and data that were impacted by the cyber incident, but continues to work through minor operational impacts.”

The attack on VF Corp is suspected to have involved ransomware. The filings mention parts of its IT systems being encrypted, and the AlphV/BlackCat gang claimed the attack days after its disclosure, but the company has not confirmed this to be the case.

[…]

Source: Thieves steal 35.5M customers’ data from Vans sneakers maker • The Register

The real question here is why on earth these guys were holding so many customers information? And in a centralised system?

HP CEO: You’re ‘bad investment’ if you don’t buy HP supplies

hp printers printing money over your dead body

HP CEO Enrique Lores admitted this week that the company’s long-term objective is “to make printing a subscription” when he was questioned about the company’s approach to third-party replacement ink suppliers.

The PC and print biz is currently facing a class-action lawsuit (from 2.42 in the video below) regarding allegations that the company deliberately prevented its hardware from accepting non-HP branded replacement cartridges via a firmware update.

When asked about the case in a CNBC interview, Lores said: “I think for us it is important for us to protect our IP. There is a lot of IP that we’ve built in the inks of the printers, in the printers themselves. And what we are doing is when we identify cartridges that are violating our IP, we stop the printers from work[ing].”

Later in the interview, he added: “Every time a customer buys a printer, it’s an investment for us. We are investing in that customer, and if that customer doesn’t print enough or doesn’t use our supplies, it’s a bad investment.”

[…]

HP has long banged the drum [PDF] about the potential for malware to be introduced via print cartridges, and in 2022, its bug bounty program confirmed that third-party cartridges with reprogrammable chips could deliver malware into printers.

Kind old HP is, therefore, only concerned about the welfare of customers.

Sadly, Lores’s protestations were somewhat undermined by the admission that the company’s business model depends – at least in part – on customers selecting HP supplies for their devices.

“Our objective is to make printing as easy as possible, and our long-term objective is to make printing a subscription.”

This echoes comments by former CFO Marie Myers, who said in December:

“We absolutely see when you move a customer from that pure transactional model … whether it’s Instant Ink, plus adding on that paper, we sort of see a 20 percent uplift on the value of that customer because you’re locking that person, committing to a longer-term relationship.”

Source: HP CEO: You’re ‘bad investment’ if you don’t buy HP supplies • The Register

Suno AI – make amazing songs with your own prompts

Suno AI is created by a team of musicians and artificial intelligence experts based in Cambridge, MA.

This machine makes the music and lyrics in the style you want and then sings it for you.

You get some free credits to play with but if you want longer songs then you need to go pro.

They keep copyright of everything generated when you use it for free, but under pro subscriptions you can sell the music it makes, under their terms.

It’s awesome!

Source: Suno AI

I can have app store? Apple: yes but NO! Give €1,000,000 + lock in to Apple ecosystem. This is how to “comply” with EU anti competition law

a rotting apple core with a closed padlock running through it

Apple is keeping a firm grip on people with alternative marketplaces, fleecing them for money but also for other control. Here are some of the terms Apple requires you to conform to in order to start up your own app store (which they call alternative marketplace):

If you’re interested in becoming a marketplace developer in the EU, the Account Holder of your Apple Developer Program membership will first need to agree to the Alternative Terms Addendum for Apps in the EU. Once they’ve agreed, they can submit a request for the entitlement.

To qualify for the entitlement, you must:

  • Be enrolled in the Apple Developer Program as an organization incorporated, domiciled, and or registered in the EU (or have a subsidiary legal entity incorporated, domiciled, and or registered in the EU that’s listed in App Store Connect). The location associated with your legal entity is listed in your Apple Developer account.
  • Agree to build an app whose primary purpose is discovery and distribution of apps, including apps from other developers.
  • Agree to provide and publish terms, including those pertaining to content and business model, for apps you will distribute, and accept apps that meet those terms.
  • […]

But what rankles most is the amount of money Apple not only fleeces from marketplaces for every installation – especially considering that Apple is not doing anything for the download – but that the barrier to entry is set at ONE MILLION DOLLARS!

Understanding payments, fees, and taxes

Stand-by letter of credit

In order to establish adequate financial means to guarantee support for developers and customers, marketplace developers must provide Apple a stand-by letter of credit from an A-rated (or equivalent by S&P, Fitch, or Moody’s) financial Institution of €1,000,000 prior to receiving the entitlement. It will need to be auto-renewed on a yearly basis.

Core Technology Fee

The DMA requires Apple to support distribution and payment processing alternatives that are facilitated outside the App Store. To reflect the value Apple provides marketplace developers with ongoing investments in developer tools, technologies, and program services, Apple has introduced a Core Technology Fee.

  • Marketplace developers will need to pay €0.50 for each first annual install of their marketplace app. First annual installs included in your Apple Developer Program membership can’t be used for marketplace apps.
Source: Getting started as an alternative app marketplace in the European Union

Of course, Apple is the one deciding if you are allowed to create an app store. What is the likelihood of that happening? Should you be one of the happy few (uhm, wait – didn’t the EU have this ruling as part of the Digital Markets Act (DMA), an anti competitive set of laws, aimed at allowing EVERYONE access?), then you still have to build an Apple App – ie you have to pay Apple to have your app in the app store and they will review your app in their app store. In the words of Apple:

An alternative app marketplace is an iOS app from which someone can install other third-party apps. To create a marketplace, fill out a webform that outlines the qualifications. If approved, Apple enables a code-signing entitlement on your account to distribute your marketplace app on the web. Apple also provides you with a framework that facilitates the secure installation of apps that your marketplace hosts.

To set up a marketplace, upload a public key, or marketplace key, to App Store Connect that regularly verifies the agreement, or relationship, you make with other developers that distribute their app on your marketplace.

The architecture of an app marketplace includes an iOS app, a webpage, from which people download your app, and a webserver that stores app data it regularly receives from App Store Connect.

Source: Creating an alternative app marketplace

So the value Apple describes above is basically that they force you to set up your App store from inside their App store. Apple then tells you how to run it and wants to know exactly what is going on inside it, so they can grab their €0.50 per year per app downloaded from it.

So really, the way in which Apple is conforming to the EU DMA is by offering a massive finger to the EU and it’s developers.

Running your AI Locally on your own PC / Installing your own LLM

Having your AI going on your own laptop or PC is perfectly viable. For textual conversations you don’t always need a Large Language Model (LLM) when Small Language Models can perform at the same or in some cases even better levels (eg MS Phi-2 small language model – outperforms many LLMs but fits on your laptop) than the OpenAI online supercomputer trained models. This has many reasons, such as overfitting, old data, etc. You may want to run your own model if you are not online all the time, if you have privacy concerns, eg if you don’t want your inputs to be used to further train the model, or if you don’t want to be dependent on a third party (what if OpenAI suddenly requires hefty payment for use?)

On performance: most of the data processing happens fastest on Nvidia GPUs, but the processing can be offloaded to your CPUs. In this case you may find some marked slowdowns.

Text to Image

Stable diffusion offers very very good text to image generation at a high level. You can find their models on their page https://stability.ai/stable-image. Other models such as OpenAI’s Dall-E or Midjourney can’t be run locally. Despite what OpenAI says, they are not open source.

For all the different user interfaces, expect downloads of ~1.5GB – 2GB and unpacked sizes of ~5GB – 12GB (or more!)

Note that you do need an Nvidia GPU – Running a 2070ti images generate in ~5 / 6 seconds. On a laptop they take ~ 10 minutes!

Easy Diffusion – like Stability Matrix, this is a one click installer for Windows, Linux or MacOS that will download a specific WebUI. It updates every time you start it.

an image of a tesla driving down a road. the data coming out of the roof is visualised using yellow lines generated by Easy Diffusion

ComfyUI is another easy to run frontend – you download and extract the zip file (~30k files, takes a while!) and run. You then need to download a model (there is a README in the directory that will point you to one) and copy it into ComfyUI\models\checkpoints (~ 5GB). It does, however, offer quite a lot of complexity. It is a flow based model, so it takes a little getting used to as the rest use sliders or checks to configure your model. Some people find this is the fastest system, however others point out that this is most likely due to the default config of other stable diffusion models or outdated python / pythorch and other dependencies, which apparently ComfyUI does a good job of keeping updated. I found there was not much difference, but I was not bulk generating images where this becomes an issue.

an image of a tesla driving down a road. the data coming out of the roof is visualised using yellow lines generated by ComfyUI

Fooocus is very ease of use – it’s simplicity is it’s strength. Unzip and run the run.bat file. There are loads of LoRa (see Conclusion, below) model previews to get a certain style out of it.

an image of a tesla driving down a road. the data coming out of the roof is visualised using yellow lines generated by Fooocus

Automatic A1111 gives more control over the prompts and is somewhere between Fooocus and ComfyUI. It requires you to install Python 3.10.6 and git yourself. I have included it because it’s very popular, but to be honest – with the above options, why bother?

LoRas

Another platform you need to know about is CivitAI – especially their LoRa (Low-Rank Adaptation) models. These allow Stable Diffusion to specialise in different concepts (eg artistic styles, body poses, objects – basically the “Style” part of Fooocus) – for a good explanation, see Stable Diffusion: What Are LoRA Models and How to Use Them?

Overgrowth style LoRa
horny style LoRa
copper wire style LoRa
fantasy style LoRa

General purpose downloader

Pinokio is a system that dowloads and installs community created scripts that run apps, databases, AI’s, etc. User scripts for AI include magic animators, face swappers, music captioning, subtitling, voice cloning etc

Pinokio user scripts

Another way to get started on a specific webUI for text to image is using Stability Matrix: a program that installs different webUIs (Automatic 1111, Comfy UI, SD.Next (Vladmandic), VoltaML, InvokeAI, Fooocus, and Fooocus MRE) for you. It will download the model, training data and weights and start up the process for you to connect to using a browser. This will handle installing the python and Git dependencies as well.

stability matrix UI installer

I however found that it wasn’t quite as straightforward as it looked, with some of the models requiring you to configure and run the model within Stability Matrix and some requiring you to work in the model externally to Stability Matrix.

Language Models (LLMs) / Talking to your AI

Just chatting

LM Studio allows you to install and run models such as LLaMa, Phi-2, etc from Hugging face

lm studio downloading phi-2

Using the phi-2 model, text generation is suprisingly smooth and fast

phi-2 model running in LM studio

Chatting and modifying the model

Then there is also Ollama which allows you to Run Llama 3, Phi 3, Mistral, Gemma, and other models. The big difference here is you can customize and create your own. You can either create and import a GGUF file (GGUF is a binary format that is designed for fast loading and saving of models, and for ease of reading. Models are traditionally developed using PyTorch or another framework, and then converted to GGUF for use in GGML.) or you can use Retrieval Augmented Generation (RAG) support. This feature seamlessly integrates document interactions into your chat experience. You can load documents directly into the chat or add files to your document library, effortlessly accessing them using the # command before a query. Just running Ollama allows you to access it in the command line, but there is a beautiful Open WebUI which is being updated like crazy and gives you loads of options.

gif image of diferent llms running in a web ui

Conclusion

No article on this kind of AI is complete without mention of Hugging Face The platform where the machine learning community collaborates on models, datasets, and applications. You can find all kinds of models and data there to refine your AI once you get into it a bit.

AI systems are certainly not limited to text to image or conversational – text to audio, text to video, image to video, text to 3D, voice to audio, video to video and much more are all possible locally.

Running your own AI / ML system on your own PC is viable (but you need an Nvidia card for text-to-image!). It allows you much more privacy as the data is not fed back to an external provider for more training or otherwise. It’s faster and often quality just as good as the online services. You don’t run out of credits.

Refining the training of these models and adding to their datasets is beyond the scope of this article, but is a next step for you 🙂

Water molecule discovery on ion layer contradicts textbook models

Textbook models will need to be re-drawn after a team of researchers found that water molecules at the surface of salt water are organised differently than previously thought.

Many important reactions related to climate and environmental processes take place where water molecules interface with air. For example, the evaporation of ocean water plays an important role in atmospheric chemistry and climate science. Understanding these reactions is crucial to efforts to mitigate the human effect on our planet.

The distribution of ions at the interface of air and water can affect atmospheric processes. However, a precise understanding of the microscopic reactions at these important interfaces has so far been intensely debated.

In a paper published today in the journal Nature Chemistry, researchers from the University of Cambridge and the Max Planck Institute for Polymer Research in Germany show that ions and water molecules at the surface of most salt-water solutions, known as electrolyte solutions, are organised in a completely different way than traditionally understood. This could lead to better atmospheric chemistry models and other applications.

[…]

The combined results showed that both positively charged ions, called cations, and negatively charged ions, called anions, are depleted from the water/air interface. The cations and anions of simple electrolytes orient water molecules in both up- and down-orientation. This is a reversal of textbook models, which teach that ions form an electrical double layer and orient water molecules in only one direction.

Co-first author Dr Yair Litman, from the Yusuf Hamied Department of Chemistry, said: “Our work demonstrates that the surface of simple electrolyte solutions has a different ion distribution than previously thought and that the ion-enriched subsurface determines how the interface is organised: at the very top there are a few layers of pure water, then an ion-rich layer, then finally the bulk salt solution.”

Co-first author Dr Kuo-Yang Chiang of the Max Planck Institute said: “This paper shows that combining high-level HD-VSFG with simulations is an invaluable tool that will contribute to the molecular-level understanding of liquid interfaces.”

Professor Mischa Bonn, who heads the Molecular Spectroscopy department of the Max Planck Institute, added: “These types of interfaces occur everywhere on the planet, so studying them not only helps our fundamental understanding but can also lead to better devices and technologies. We are applying these same methods to study solid/liquid interfaces, which could have potential applications in batteries and energy storage.”

Source: Water molecule discovery contradicts textbook models | ScienceDaily

BMW goes for unsafe design, removes ability to change radio channel

BMW 2024 control layout - with no radio buttons

BMW has been a sensible and happy holdout against the touchscreen only interior car design insanity started by Tesla. Study after study has shown that touchscreens are not only impractical and annoying, but more importantly unsafe as well

Sources:
Study: Hardware buttons in cars are safer than touchscreens
Touchscreen development at risk of compromising safety, says VNC Automotive
Are Car Touch Screens Putting Our Life at Risk?
Buttons beat touchscreens in cars, and now there’s data to prove it
The Glorious Return of a Humble Car Feature

So why is it that BMW has decided – now that even Volkswagen is bringing back physical control buttons in new cars – to get rid of them. The picture above shows the control layout for the 2024 models. The picture below for the 2022 models.

BMW control layout 2022 with radio buttons

As you can see, the most commonly used buttons in the car – the radio memories and volume – have gone entirely. To change the radio station, the driver now has to go through a convoluted process which involves looking in the cockpit quite a bit. To make things worse, they have gotten rid of the control dial too, which at least made the process slightly easier. The worst about it though – the passenger can’t change the radio station either.

Not only is this incredibly inconvenient, but it’s also dangerously unsafe. BMWs are drivers cars – they tend to not only be driven on empty highways, but on small and winding roads. When you want to change the radio station, it’s often because it’s annoying you. Looking around (and mainly down, away from the road) in bewilderment when you are trying to change channel, especially whilst annoyed, is a recipe for disaster.

So whilst it’s very annoying for BMW to have also removed the climate control buttons (especially if you drive a cabriolet!), the radio buttons are a real safety issue.

Please, BMW, see some sense and put them back.

Wind turbines are friendlier to birds than oil-and-gas drilling

[…] few have looked at the effects on wildlife at the population level. Enter Erik Katovich, an economist at the University of Geneva. Dr Katovich made use of the Christmas Bird Count, a citizen-science project run by the National Audubon Society, an American non-profit outfit. Volunteers count birds they spot over Christmas, and the society compiles the numbers. Its records stretch back over a century.

Dr Katovich assumed, reasonably, that if wind turbines harmed bird populations, then the numbers seen in the Christmas Bird Count would drop in places where new turbines had been built. He combined bird population and species maps with the locations and construction dates of all wind turbines in the United States, with the exceptions of Alaska and Hawaii, between 2000 and 2020. He found that building turbines had no discernible effect on bird populations. That reassuring finding held even when he looked specifically at large birds like hawks, vultures and eagles that many people believe are particularly vulnerable to being struck.

But Dr Katovich did not confine his analysis to wind power alone. He also examined oil-and-gas extraction.

[…]

Comparing bird populations to the locations of new gas wells revealed an average 15% drop in bird numbers when new wells were drilled, probably due to a combination of noise, air pollution and the disturbance of rivers and ponds that many birds rely upon. When drilling happens in places designated by the National Audubon Society as “important bird areas”, bird numbers instead dropped by 25%. Such places are typically migration hubs, feeding grounds or breeding locations.

Wind power, in other words, not only produces far less planet-heating carbon dioxide and methane than do fossil fuels. It appears to be significantly less damaging to wildlife, too. Yet that is not the impression you would get from reading the news. Dr Katovich found 173 stories in major American news outlets reporting the supposed negative effects that wind turbines have on birds in 2020, compared with only 46 stories discussing the effects of oil-and-gas wells. Wind turbines might look dramatic. But their effect on birds is not.

Source: Wind turbines are friendlier to birds than oil-and-gas drilling

Study of wide binary stars reveals new evidence for modified gravity at low acceleration

A new study published in The Astrophysical Journal reveals new evidence for standard gravity breaking down in an idiosyncratic manner at low acceleration. This new study reinforces the evidence for modified gravity that was previously reported in 2023 from an analysis of the orbital motions of gravitationally bound, widely separated (or long-period) binary stars, known as wide binaries.

The new study was carried out by Kyu-Hyun Chae, a professor of physics and astronomy at Sejong University in Seoul, South Korea, with wide binaries observed by European Space Agency’s Gaia space telescope.

Gravitational anomalies reported in 2023 by Chae’s study of wide binaries have the unique feature that orbital motions in binaries experience larger accelerations than Newtonian predictions when the mutual gravitational acceleration is weaker than about 1 nanometer per second squared and the acceleration boost factor becomes about 1.4 at accelerations lower than about 0.1 nanometer per second squared.

This elevated acceleration in wide binaries cannot be explained by invoking the undetected dark matter because the required dark matter density is out of the question based on galactic dynamics and cosmological observations.

Remarkably, the elevated acceleration agrees well with what MOND (modified Newtonian dynamics)-type modified gravity theories such as AQUAL predict under the external field effect of the Milky Way. The MOND paradigm was suggested by physicist Mordehai Milgrom and the AQUAL theory was formulated by him and the late physicist Jacob Bekenstein 40 years ago.

Because gravitationally-bound astrophysical systems such as galaxies and galaxy clusters and the universe itself are governed by gravity, the breakdown of standard gravity at low acceleration has profound implications for astrophysics and cosmology.

[…]

Chae conservatively selected up to 2,463 pure binaries, which are less than 10% of the sample used in the earlier study. Since the expected fraction of pure binaries among apparently binary systems is at least 50%, this much lower fraction means that the selection was sufficiently strict.

Chae applied two algorithms to test gravity from the sample of pure binaries. In one algorithm that was originally developed from the earlier work for general or “impure” samples, he used a Monte Carlo method to calculate (the of) the observed kinematic acceleration, defined by relative velocity squared over the in the real three-dimensional space, as a function of the Newtonian gravitational acceleration between the two stars and then compared it with the corresponding Newtonian prediction of the kinematic acceleration.

In the other algorithm that is simpler and suitable for pure binaries, Chae compared the observed distribution of the sky-projected relative velocities between the two stars with respect to the sky-projected separations with the Newton-predicted distribution through a Monte Carlo method.

Both algorithms produce consistent results that agree well with the gravitational anomaly reported earlier.

[…]

However, the observed acceleration or relative velocity starts to deviate from the Newtonian prediction at a separation of about 2,000 au (astronomical units) and acceleration of about 1 nanometer per second squared. Then, there is a nearly constant boost of about 40 to 50% in acceleration or 20% boost in relative velocity at separation greater than about 5,000 au or acceleration lower than about 0.1 nanometer per second squared, up to the probed limit of about 20,000 au or 0.01 nanometer per second squared.

Chae’s new results agree well with an independent result by Xavier Hernandez’s group that is coincidentally in the production stage at present. This is significant because Hernandez’s group selected their sample completely independent of Chae’s selection and they used an independent algorithm (different from Chae’s two algorithms) based on the full distribution of relative velocities for their pure wide binary pairs.

[…]

Chae also points out that this new sample is explicitly free from any concerns of data quality cuts that have been raised in the literature so far. Chae further clarifies the recent contradicting claim by Indranil Banik and co-authors, saying, “Their methodology and results have a lot of problems. Their conclusion is invalid for two main reasons among others.”

“In their sample selection they knowingly excluded Newtonian-regime binaries that are crucial in accurately calibrating the occurrence rate of systems containing hidden additional component(s). Then, they employed a specific statistical algorithm of modeling velocities to infer gravity, the occurrence rate, and other parameters simultaneously, but ignored velocity errors though vital for their .”

Chae concludes, “At least three independent quantitative analyses by two independent groups reveal essentially the same gravitational anomaly. The gravitational anomaly is real, and a new scientific paradigm shift is on its way.”

The observed gravitational anomaly is remarkably well consistent with the MOND-type (Milgromian) gravity phenomenology. However, underlying theoretical possibilities encompassing the MOND-type gravity phenomenology are open at present, and this may be welcome news to theoretical physicists and mathematicians.

[…]

More information: Kyu-Hyun Chae, Robust Evidence for the Breakdown of Standard Gravity at Low Acceleration from Statistically Pure Binaries Free of Hidden Companions, The Astrophysical Journal (2024). DOI: 10.3847/1538-4357/ad0ed5

Journal information: Astrophysical Journal

Source: Study of wide binary stars reveals new evidence for modified gravity at low acceleration

Dutch phones can be easily tracked online: ‘Extreme security risk’

a map of the netherlands with cellphone towers

BNR received more than 80 gigabytes of location data from data traders: the coordinates of millions of telephones, often registered dozens of times a day.

The gigantic mountain of data also includes movements of people with functions in which safety plays an important role. A senior army officer could be followed as he drove from his home in the Randstad to various military locations in the country. A destination he often visited was the Frederikazerne, headquarters of the Military Intelligence and Security Service (MIVD). The soldier confirmed the authenticity of the data to BNR by telephone.

[…]

The data also reveals the home address of someone who often visits the Penitentiary in Vught, where terrorists and serious criminals are imprisoned. A spokesperson for the Judicial Institutions Agency (DJI) confirmed that the person, who according to the Land Registry lives at this address, had actually brought a mobile phone onto the premises with permission and stated that the matter was being investigated.

These are just examples, the list of potential targets is long: up to 1,200 phones in the dataset visited the office in Zoetermeer where the National Police, National Public Prosecutor’s Office and Europol are located. Up to 70 telephones are registered in the King’s residential palace, Huis ten Bosch. At the Volkel Air Base, a storage point for nuclear weapons, up to 370 telephones were counted. The National Police’s management says it is aware of the problem and is ‘looking internally to see what measures are appropriate to combat this’.

‘National security implications’

BNR had two experts inspect the dataset. “This is an extreme security risk, with possible implications for national security,” says Ralph Moonen, technical director of Secura. “It’s really shocking that this can happen like this,” says Sjoerd van der Meulen, cybersecurity specialist at DataExpert.

The technology used to track mobile phones is designed for use by advertisers, but is suitable for other purposes, says Paul Pols, former technical advisor to the Assessment Committee for the Use of Powers, which supervises the intelligence services. According to Pols, it is known that the MIVD and AIVD also purchase access to this type of data on the data market under the heading ‘open sources’. “What is striking about this case is that you can easily access large amounts of data from Dutch citizens,” said the cybersecurity expert.

For sale via an online marketplace in Berlin

That access was achieved through an online marketplace based in Berlin. On this platform, Datarade.ai, hundreds of companies offer personal data for sale. In addition to location data, medical information and credit scores are also available.

Following a tip from a data subject, BNR responded to an advertisement offering location data of Dutch users. A sales employee of the platform then contacted two medium-sized providers: Datastream Group from Florida in the US and Factori.ai from Singapore – both companies have fewer than 50 employees, according to their LinkedIn pages.

Datastream and Factori offer similar services: a subscription to the location data of mobile phones in the Netherlands is available for prices starting from $2,000 per month. Those who pay more can receive fresh data every 24 hours via the cloud, possibly even from all over the world.

[…]

Upon request, BNR was therefore sent a full month of historical data from Dutch telephones. This data was anonymized – it did not contain telephone numbers. Individual phones can be recognized by unique number combinations, a ‘mobile advertising ID’ used by Apple and Google to show individual users relevant advertisements within the limits of European privacy legislation.

Possibly four million Dutch victims of tracking

The precise origin of the data traded online is unclear. According to the providers, these come from apps that have received permission from users to use location data. This includes fitness or navigation apps that sell data. This is how the data ultimately ends up at Factori and Datastream. By combining data from multiple sources, gigantic files are created.

[…]

it is not difficult to recognize the owners of individual phones in the data. By linking sleeping places to data from public registers, such as the Land Registry, and workplaces to LinkedIn profiles, BNR was able to identify, in addition to the army officer, a project manager from Alphen aan den Rijn and an amateur football referee. The discovery that he had been digitally stalked for at least a month led to shocked reactions. ‘Bizarre’, and: ‘I immediately turned off ‘sharing location data’ on my phone’.

Trade is prohibited, but the government does not act

Datarade, the Berlin data marketplace, informed BNR in an email that traders on their platform are ‘fully liable’ for the data they offer. Illegal practices can be reported using an online form. The spokesperson for the German company leaves open the question of whether measures are being taken against the sale of location data.

[…]

Source (Google Translate): Dutch phones can be secretly tracked online: ‘Extreme security risk’ | BNR News Radio

Source (Dutch original): Nederlandse telefoons online stiekem te volgen: ‘Extreem veiligheidsrisico’

Swarovski’s smart binoculars identify the birds, butterflies, mammals, you’re looking at and mark something to share with whoever you give the binocs to next

Swarovski has turned up at CES 2024 in Las Vegas with its first ever pair of smart binoculars that will identify the bird you’re looking at. All you have to do is point the gear at a bird and make sure the view is in focus, and then press down an action button. Within a few seconds, the system will overlay a bird’s name over your view, using data pulled from the Merlin Bird ID database. That has over 9,000 species tagged, and will even let you know the degree of certainty it has if the bird in question is in an unexpected location. And if this was the only feature these binoculars had, it’d be enough to justify the purchase, but that’s only the beginning of what these things can do.

Between the eyepieces, there’s a function wheel similar to one you would find on a camera that lets you cycle between various features. That includes a Wildlife ID version which hooks into its built-in Mammal, Dragonfly and Butterfly ID databases. Plus, there’s a camera which lets you send pictures and video to a paired smartphone, which would similarly be plenty to justify the expense. But the system is also designed to be expandable, with the focus wheel including space for any future custom databases you might need. For instance, one idea could be to build a database for stars, or airplane types for aviation fans to spot the make and model of what’s flying overhead.

Then there’s the discovery sharing feature, which enables you to share something you’ve found with whoever you’re outdoors with. All you need to do is tag whatever you’ve found, and then hand the AX Visio over to them, where a series of flashing arrows will guide them to where you were looking. Even in the busy halls of CES, one of the company’s representatives was able to pinpoint a far-off fire exit sign before handing me the binoculars and asking me to find it. All you need to do is follow the arrows straight to what you’re meant to be looking at with a system that’s as elegant as it is useful. There’s even a built-in compass that’ll let you identify which direction you’re gazing toward to help you navigate.

You might notice from the pictures that there are three lenses, with the central one holding the 13-megapixel sensor shooting HD-quality (1,920 x 1,080) pictures and video. There’s 8GB storage, which should hold up to an hour of video or 1,700 photos before needing to be cleared off. Beyond the smarts, the binoculars magnify up to 10x with 88 percent light transmission, thanks to the company’s high-end lenses. Swarovski says its glassware offers almost flat, distortion-free images with plenty of contrast and color fidelity.

Now, here’s the thing, my father-in-law is a serious ornithologist who is respected, at least among his peer group. His ability to spot the genus and species of a bird in flight is extraordinary and I’m often left bewildered at the depth of his knowledge. I don’t think I’d have the ability, patience or time to even get within a hundred miles of his capability. But, with a device like this, it might mean that I can at least vaguely keep up with him when we’re out on the trails.

The AX Visio is, however, not messing around with price, and Swarovski is charging €4,600 (around $5,000) for you to get this into your hands. While bird fans often have to be patient, this should start arriving at people’s homes at some point in February.

Source: Swarovski’s smart binoculars identify the birds you’re looking at

Ancient cities discovered in the Amazon are the largest yet found

Aerial surveys have revealed the largest pre-colonial cities in the Amazon yet discovered, linked by an extensive network of roads.

“The settlements are much bigger than others in the Amazon,” says Stéphen Rostain at the French National Center for Scientific Research in Paris. “They are comparable with Maya sites.”

What’s more, at between 3000 and 1500 years old, these cities are also older than other pre-Columbian ones discovered in the Amazon. Why the people who built them disappeared isn’t clear.

It is often assumed that the Amazon rainforest was largely untouched by humans before the Italian explorer Christopher Columbus reached the Americas in the 15th century. In fact, the first Europeans reported seeing many farms and towns in the region.

These reports, long dismissed, have in recent decades been backed up by discoveries of ancient earthworks and extensive dark soils created by farmers. One estimate puts the pre-Columbian population of the Amazon as high as 8 million.

[…]

In 2015, Rostain’s team did an aerial survey with lidar, a laser scanning technique that can create a detailed 3D map of the surface beneath most vegetation, revealing features not normally visible to us. The findings, which have only now been published, show that the settlements were far more extensive than anyone realised.

The survey revealed more than 6000 raised earthen platforms within an area of 300 square kilometres. These are where wooden buildings once stood – excavations have revealed post holes and fireplaces on these structures.

[…]

The survey also revealed a network of straight roads created by digging out soil and piling it on the sides. The longest extends for at least 25 kilometres, but might continue beyond the area that was surveyed.

[…]

“This is the largest complex with large settlements so far found in Amazonia,” says Charles Clement at the National Institute of Amazonian Research in Manaus, Brazil.

What’s more, it was found in a region of the Amazon that other researchers had concluded was sparsely inhabitated during pre-Columbian times, says Clement.

 

Journal reference:

Science DOI: 10.1126/science.adi6317

Source: Ancient cities discovered in the Amazon are the largest yet found | New Scientist

eBay Sent Critics a Bloody Pig Mask and more. Now It’s Paying a $3 Million Fine

eBay agreed to pay out a $3 million fine—the maximum criminal penalty—over a twisted scandal that saw top executives and other employees stalking a couple in Massachusetts who published a newsletter that criticized the company. The harassment campaign included online threats, sending employees to surveil the couple’s home, and mailing them disturbing objects—including live spiders and cockroaches, a bloody pig mask, and a book on recovering from the death of a spouse.

The Justice Department charged eBay with obstruction of justice, witness tampering, stalking through interstate travel, and stalking through online communication. eBay’s former security director James Baugh and former director of global resiliency David Harville are both serving jail time for their roles in the scheme.

[…]

The criminal activity seems to have started at the top of the company. In 2019, Ina Steiner published an article on the couple’s newsletter EcommerceBytes discussing a lawsuit eBay brought against Amazon. Half an hour later, eBay’s then-CEO Devin Wenig sent another executive a message saying: “If you are ever going to take her down…now is the time,” according to court documents. The message was forwarded to Baugh, who responded that Steiner was a “biased troll who needs to get BURNED DOWN.”

Wenig, who resigned later that year, denied any knowledge of the criminal activity and wasn’t charged with a crime. The Steiners are currently suing Wenig for his role in the campaign to “intimidate, threaten to kill, torture, terrorize, stalk and silence them.”

[…]

A total of seven eBay employees and contractors have been convicted for their involvement in stalking and harassing the Steiners, according to the Department of Justice. In addition to Baugh and Harville, the list includes Stephanie Popp and Philip Cooke, who were both sentenced to jail time in 2022. Stephanie Stockwell and Veronica Zea were each sentenced to one year of home confinement that same year. Brian Gilbert pleaded guilty and is currently awaiting sentencing.

Source: eBay Sent Critics a Bloody Pig Mask. Now It’s Paying a $3 Million Fine

Drivers would prefer to buy a low-tech car than one that shares their data

According to a survey of 2,000 Americans conducted by Kaspersky in November and published this week, 72 percent of drivers are uncomfortable with automakers sharing their data with advertisers, insurance companies, subscription services, and other third-party outfits. Specifically, 37.3 percent of those polled are “very uncomfortable” with this data sharing, and 34.5 percent are “somewhat uncomfortable.”

However, only 28 percent of the total respondents say they have any idea what kind of data their car is collecting. Spoiler alert: It’s potentially all the data. An earlier Mozilla Foundation investigation, which assessed the privacy policies and practices of 25 automakers, gave every single one a failing grade.

In Moz’s September Privacy Not Included report, the org warned that car manufacturers aren’t only potentially collecting and selling things like location history, driving habits and in-car browser histories. Some connected cars may also track drivers’ sexual activity, immigration status, race, facial expressions, weight, health, and even genetic information, if that information becomes available.

Back to the Kaspersky survey: 87 percent said automakers should be required to delete their data upon request. Depending on where you live, and thus the privacy law you’re under, the manufacturers may be obligated to do so.

Oddly, while motorists are worried about their cars sharing their data with third parties, they don’t seem that concerned about their vehicles snooping on them in the first place.

Less than half (41.8 percent) of respondents said they are worried about their vehicle’s sensors, infotainment system, cameras, microphones, and other connected apps and services might be collecting their personal data. And 80 percent of respondents pair their phone with their car anyway, allowing data and details of activities to be exchanged between apps and the vehicle and potentially its manufacturer.

This echoes another survey published this week that found many drivers are willing to trade their personal data and privacy for driver personalization — things like seat, mirror, and entertainment preferences (43 percent) — and better insurance rates (67 percent).

The study also surveyed 2,000 American drivers to come up with these numbers and found that while most drivers (68 percent) don’t mind automakers collecting their personal data, only five percent believe this surveillance should be unrestricted, and 63 percent said it should be on an opt-in basis.

Perhaps it’s time for vehicle makers to take note

Source: Surveyed drivers prefer low-tech cars over data-sharing ones • The Register

Also, we want buttons back too please.

Apple knew AirDrop users could be identified and tracked as early as 2019. Still not fixed.

a shadowy spy looking at people using airdrop on a subway stationSecurity researchers warned Apple as early as 2019 about vulnerabilities in its AirDrop wireless sharing function that Chinese authorities claim they recently used to track down users of the feature, the researchers told CNN, in a case that experts say has sweeping implications for global privacy.

The Chinese government’s actions targeting a tool that Apple customers around the world use to share photos and documents — and Apple’s apparent inaction to address the flaws — revive longstanding concerns by US lawmakers and privacy advocates about Apple’s relationship with China and about authoritarian regimes’ ability to twist US tech products to their own ends.

[…]

A Chinese tech firm, Beijing-based Wangshendongjian Technology, was able to compromise AirDrop to identify users on the Beijing subway accused of sharing “inappropriate information,” judicial authorities in Beijing said this week.

[..]

A group of Germany-based researchers at the Technical University of Darmstadt, who first discovered the flaws in 2019, told CNN Thursday they had confirmation Apple received their original report at the time but that the company appears not to have acted on the findings. The same group published a proposed fix for the issue in 2021, but Apple appears not to have implemented it, the researchers said.

[…]

Chinese authorities claim they exploited the vulnerabilities by collecting some of the basic identifying information that must be transferred between two Apple devices when they use AirDrop — data including device names, email addresses and phone numbers.

Ordinarily, this information is scrambled for privacy reasons. But, according to a separate 2021 analysis of the Darmstadt research by the UK-based cybersecurity firm Sophos, Apple appeared not to have taken the extra precaution of adding bogus data to the mix to further randomize the results — a process known as “salting.”

[…]

One reason Chinese officials may have wanted their exploit known, said Ismail, is that it could scare dissidents away from using AirDrop.

And now that the Beijing authorities have announced it exploited the vulnerability, Apple may face retaliation from Chinese authorities if the tech firm tries to fix the issue, multiple experts said.

China is the largest foreign market for Apple’s products, with sales there representing about a fifth of the company’s total revenue in 2022

[…]

Source: Apple knew AirDrop users could be identified and tracked as early as 2019, researchers say | CNN Business