Scaling the cost of government programs using a cost-per-person price tag improves comprehension by the general public

Government policies often are presented with hefty price tags, but people often zone out as more zeros are added to the total cost. A new study from Carnegie Mellon University suggests that rescaling the cost of programs can increase a person’s understanding of funding choices, which may improve how people participate in the policy debate. The results are available in the July issue of the journal Proceedings of the National Academy of Sciences.

[…]

In the first study, 392 participants evaluated four statements about possible U.S. COVID-19 relief packages. The participants evaluated content presented on a total price-per-program ($100 billion versus $2 trillion) or as price-per-person ($1,200 versus $24,000). Both pairs of statements were scaled to a 20:1 ratio. The researchers found the participants had an easier time differentiating between high and low cost when it was presented with the price-per-person option.

“With a simple manipulation rescaling big numbers into smaller numbers, people can understand this information better,”

[…]

In the second study, 401 participants ranked eight programs that had previously been presented with a price-per-program or price-per-person cost. The results confirm the team’s hypothesis that participants were more successful at comprehending the price-per-person cost. To follow on this study, the team presented 399 participants with similar information but scaled the total expenditures using an unfamiliar unit. They found the price-per-person cost offered greater comprehension. These results suggest that by simply rescaling large numbers and transforming them into smaller ones people can digest information more effectively.

“Surprisingly, we rescaled the information using an arbitrary unit [other than a per capita], and we still see the same effect,” said Boyce-Jacino. “People are better at discriminating among smaller numbers.”

Finally, the team presented 399 participants with eight program pairs. Four of the pairs had the same characteristics except for cost. The other four had variations in program characteristics to evaluate beyond price. For all eight scenarios, the program price tag was presented as either price-per-program or price-per-person. The researchers found the participants were more likely to select the least expensive program when cost was presented using the price-per-person format.

Most surprising to the research team was how the scaled. Unlike past research that assumed a log scale in the scaling of large numbers, they found that people were more sensitive to small numbers than to large ones even when the ratio was held constant at 20 to 1.

“The ratio suggests numerical representation is more curved than a log function,” said Chapman. “It contrasts with previous theoretical perspective, but it remains in the same ballpark.”

[…]

“People are bad at processing and understanding big numbers,” said Chapman. “If your goal is to help people be good citizens and savvy evaluators of how tax dollars are spent, scale numbers that place them in range that people can appreciate.”


Explore further

Brains are bad at big numbers, making it impossible to grasp what a million COVID-19 deaths really means


More information: Large numbers cause magnitude neglect: The case of government expenditures, Proceedings of the National Academy of Sciences (2022). doi.org/10.1073/pnas.2203037119

Source: Scaling the cost of government programs using a cost-per-person price tag improves comprehension by the general public

UK + 3 EU countries sign US border deal to share police biometric database

[…]

LIBE committee member and Pirate Party MEP Patrick Breyer said that during the meeting last week, the committee discovered that the UK – and three EU member states, though their identities were not revealed – had already signed up to reintroduce US visa requirements which grant access to police biometric databases.

In the UK, the Home Office declined the opportunity to deny it was signing up for the scheme. A spokesperson said: “The UK has a long-standing and close partnership with the USA which includes sharing data for specific purposes. We are in regular discussion with them on new proposals or initiatives to improve public safety and enable legitimate travel.”

Under UK law the police can retain an individual’s DNA profile and fingerprint record for up to three years from the date the samples were taken, even if the individual was arrested but not charged, provided the Biometrics Commissioner agrees. Police can also apply for a two-year extension. The same applies to those charged, but not convicted.

According to reports, the US Enhanced Border Security Partnership (EBSP) initiative will be voluntary initially but is set to become mandatory under the US Visa Waiver Program (VWP), which allows visa-free entry into the United States for up to 90 days, by 2027.

MEP Breyer said that when asked exactly what data the US wanted to tap into, the answer was as much as possible. When asked what would happen at US borders if a traveler was known to the police in participating states, it was said that this would be decided by the US immigration officer on a case-by-case basis.

[…]

“If necessary, the visa waiver program must be terminated by Europe as well. Millions of innocent Europeans are listed in police databases and could be exposed to completely disproportionate reactions in the USA.

“The US lacks adequate data and fundamental rights protection. Providing personal data to the US exposes our citizens… to the risk of arbitrary detention and false suspicion, with possible dire consequences, in the course of the US ‘war on terror’. We must protect our citizens from these practices,” Breyer said.

Source: UK signs US border deal to share police biometric database • The Register

Rufus and ExplorerPatcher make Windows 11 less onerous

[…]The latest beta version of Rufus, which in future will be version 3.19, has some interesting new additions. While it writes your ISO, you can optionally disable some of Windows’ more annoying features.

It has the ability to turn off TPM chip detection and the requirement for Secure Boot, which should enable you to install Windows 11 on older machines if you so wish. It lets you bypass the need for a Microsoft account – although you will need to disconnect the target PC from a network for this to work. It also allows you to automatically respond “no” to all Microsoft’s data-collection questions during setup.

All these sound welcome changes to us. The Microsoft account requirement recently popped up a new irritation on our test install: it automatically keeps the Desktop folder on OneDrive, which we found very annoying when we wanted to briefly keep a large file there.

This means that Rufus rockets up the chart of The Reg FOSS desk’s favorite tools for decluttering Windows, and it might even surpass the very handy Ventoy for USB installs.

Already on the list were two O&O tools: AppBuster and ShutUp10++. AppBuster makes it easy to uninstall most of the Metro Modern apps that Microsoft in its finite wisdom bundles with Windows.

[…]

If you like things clean and minimal, you might want to disable Windows 11’s “widgets” and “chat” buttons. At least no external tools are needed for that.

[…]

Source: Rufus and ExplorerPatcher make Windows 11 less onerous • The Register

Hacker claims to have stolen data of 1bn Chinese from Shanghai police

A hacker has claimed to have procured a trove of personal information from the Shanghai police on one billion Chinese citizens, which tech experts say, if true, would be one of the biggest data breaches in history.

The anonymous internet user, identified as “ChinaDan,” posted on hacker forum Breach Forums last week offering to sell the more than 23 terabytes (TB) of data for 10 bitcoin BTC=, equivalent to about $200,000.

“In 2022, the Shanghai National Police (SHGA) database was leaked. This database contains many TB of data and information on Billions of Chinese citizen,” the post said.

“Databases contain information on 1 Billion Chinese national residents and several billion case records, including: name, address, birthplace, national ID number, mobile number, all crime/case details.”

Source: Hacker claims to have stolen data of 1bn Chinese from police – Nikkei Asia

Yay big centralised databases

After 95 years, will Disney finally lose copyright to Mickey Mouse? Or will they find another way to extend the right to do nothing but make money for it?

[…] Mickey Mouse will enter the public domain in the year 2024, almost 95 years after his creation on 1 October 1928 – the length of time after which the copyright on an anonymous or pseudo-anonymous body of artistic work expires.

Daniel Mayeda is the ​​associate director of the Documentary Film Legal Clinic at UCLA School of Law, as well as a longtime media and entertainment lawyer. He said the copyright expiration does not come without limitations.

“You can use the Mickey Mouse character as it was originally created to create your own Mickey Mouse stories or stories with this character. But if you do so in a way that people will think of Disney – which is kind of likely because they have been investing in this character for so long – then in theory, Disney could say you violated my trademark.”

[…]

According to the National Museum of American History: “Over the years, Mickey Mouse has gone through several transformations to his physical appearance and personality. In his early years, the impish and mischievous Mickey looked more rat-like, with a long pointy nose, black eyes, a smallish body with spindly legs and a long tail.”

While this first rat-like iteration of Mickey will be stripped of its copyright, Mayeda said Disney retains its copyright on any subsequent variations in other films or artwork until they reach the 95-year mark.

[…]

Honey-loving bear Winnie the Pooh from the Hundred-acre Woods and most of his animal friends entered public domain in January this year and some have wasted no time in capitalizing on the beloved characters.

Actor Ryan Reynolds made a playful nod to the now free-to-use Winnie the Pooh in a Mint Mobile commercial. In the advertisement, Reynolds reads a children’s book about ‘Winnie the Screwed,’ a bear with a costly phone bill.

[…] Pooh and his close pal Piglet are now the stars of Winnie the Pooh: Blood and Honey, a soon-to-be released horror film, written and directed by Rhys Waterfield, that sees the two go on a bloody rampage of killing after being abandoned by their old friend, Christopher Robin.

[…]

“Copyrights are time-limited,” Mayeda said. “Trademarks are not. So Disney could have a trademark essentially in perpetuity, as long as they keep using various things as they’re trademarked, whether they’re words, phrases, characters or whatever.”

Disney may still maintain trademarks on certain catchphrases or signature outfits worn by the characters, such as Pooh’s red shirt, which Waterfield intentionally avoided using in his movie.

[…]

The Walt Disney Company has a long history with US copyright law. Suzanne Wilson, once deputy general counsel for the Walt Disney Company for nearly a decade, now heads the US Copyright Office, underscoring the company’s relationship with the government.

[…]

Source: Disney could soon lose exclusive rights to Mickey Mouse

Security flaws in internet-connected hot tubs exposed owners’ personal data

[…]

Jacuzzi’s SmartTub feature, like most Internet of Things (IoT) systems, lets users connect to their hot tub remotely via a companion Android or iPhone app. Marketed as a “personal hot tub assistant,” users can make use of the app to control water temperature, switch on and off jets, and change the lights.

But as documented by hacker Eaton Zveare, this functionality could also be abused by threat actors to access the personal information of hot tub owners worldwide, including their names and email addresses. It’s unclear how many users are potentially impacted, but the SmartTub app has been downloaded more than 10,000 times on Google Play.

[…]

Eaton first noticed a problem when he tried to log in using the SmartTub web interface, which uses third-party identity provider Auth0, and found that the login page returned an “unauthorized” error. But for the briefest moment Zveare saw the full admin panel populated with user data flash on his screen.

“Blink and you’d miss it. I had to use a screen recorder to capture it,” Zveare said. “I was surprised to discover it was an admin panel populated with user data. Glancing at the data, there is information for multiple brands, and not just from the U.S.” These brands include others under different Jacuzzi brands, including Sundance Spa, D1 Spas and ThermoSpas.

Eaton then tried to bypass the restrictions and obtain full access. He used a tool called Fiddler to intercept and modify some code that told the website that he was an admin rather than an ordinary user. The bypass was successful, enabling Zveare to access the admin panel in full.

“Once into the admin panel, the amount of data I was allowed to [access] was staggering. I could view the details of every spa, see its owner and even remove their ownership,” he said. “It would be trivial to create a script to download all user information. It’s possible it’s already been done.”

Things got worse when Zveare discovered a second admin panel while reviewing the source code of the Android app allowing him to view and modify the serial numbers of products, see a list of licensed hot tub dealers and view manufacturing logs.

[…]

 

Source: Security flaws in internet-connected hot tubs exposed owners’ personal data | TechCrunch

T-Mobile Is Selling Your App and Web History to Advertisers allowing extremely fine personal targetting (they say)

In yet another example of T-Mobile being The Worst with its customer’s data, the company announced a new money-making scheme this week: selling its customers’ app download data and web browsing history to advertisers.

The package of data is part of the company’s new “App Insights” adtech product that was in beta for the last year but formally rolled out this week. According to AdExchanger, which first reported news of the announcement from the Cannes Festival, the new product will let marketers track and target T-Mobile customers based on the apps they’ve downloaded and their “engagement patterns”—meaning when or how

These same “patterns” also include the types of domains a person visits in their mobile web browser. All of this data gets bundled up into what the company calls “personas,” which let marketers microtarget someone by their phone habits. One example that T-Mobile’s head of ad products, Jess Zhu, told AdExchanger was that a person with a human resources app on their phone who also tends to visit, say, Expedia’s website, might be grouped as a “business traveler.” The company noted that there’s no personas built on “gender or cultural identity”—so a person who visits a lot of, say, Christian websites and has a Bible app or two installed won’t be profiled based on that.

“App Insights transforms this data into actionable insights. Marketers can see app usage, growth, and retention and compare activity between brands and product categories,” a T-Mobile statement read.

T-Mobile (and Sprint, by association) certainly aren’t the only carriers pawning off this data; as Ars Technica first noted last year, Verizon overrode customer’s privacy preferences to sell off their browsing and app-usage data. And while AT&T had initially planned to sell access to similar data nearly a decade ago, the company currently claims that it exclusively uses “non-sensitive information” like your age range and zip code to serve up targeted ads.

But T-Mobile also won’t stop marketers from taking things into their own hands. One ad agency exec that spoke with AdExchanger said that one of the “most exciting” things about this new ad product is the ability to microtarget members of the LGBTQ community. Sure, that’s not one of the prebuilt personas offered in the App Insights product, “but a marketer could target phones with Grindr installed, for example, or use those audiences for analytics,” the original interview notes.

[…]

Source: T-Mobile Is Hawking Your App and Web History to Advertisers

Valorant will start listening in to and recording your voice chat in July

Riot Games will begin background evaluation of recorded in-game voice communications on July 13th in North America, in English. In a brief statement (opens in new tab) Riot said that the purpose of the recording is ultimately to “collect clear evidence that could verify any violations of behavioral policies.”

For now, however, recordings will be used to develop the evaluation system that may eventually be implemented. That means training some kind of language model using the recordings, says Riot, to “get the tech in a good enough place for a beta launch later this year.”

Riot also makes clear that voice evaluation from this test will not be used for reports. “We know that before we can even think of expanding this tool, we’ll have to be confident it’s effective, and if mistakes happen, we have systems in place to make sure we can correct any false positives (or negatives for that matter),” said Riot.

Source: Valorant will start listening to your voice chat in July | PC Gamer

Oh, not used for reports. That’s ok then. No problem invading your privacy there then.

Google now selling Earth Engine access to all businesses and governments

For the past decade, researchers in academia and the nonprofit world have had access to increasingly sophisticated information about the Earth’s surface, via the Google Earth Engine. Now, any commercial or government entity will have access to Google Cloud’s new enterprise-grade, commercial version of the computer program.

Google originally launched Earth Engine for scientists and NGOs in 2010. One of the world’s largest publicly available Earth observation catalogs, it combines data from satellites and other sources continuously streaming into Earth Engine. The data is combined with massive geospatial cloud-computing resources, which lets organizations use the raw data for timely, accurate, high-resolution insights about the state of the world. That means they can keep a near-constant eye on the world’s forests, water sources, ecosystems and agriculture — and how they’re all changing.

Google Cloud says it’s commercializing Earth Engine now to cater to business customers that are prioritizing sustainability. Businesses are under pressure — from regulators, investors and customers — to reduce their carbon emissions. So, Google is rolling out new products that promise to help them meet their sustainability goals with more and better data.

[…]

Google says Earth Engine will still be available at no cost for nonprofits, academic research and educational use cases.

Source: Google makes Earth Engine available to all businesses and governments | ZDNet

UK decides AI still cannot patent inventions

A recent IPO consultation found many experts doubted AI was currently able to invent without human assistance.

Current law allowed humans to patent inventions made with AI assistance, the government said, despite “misperceptions” this was not the case.

Last year, the Court of Appeal ruled against Stephen Thaler, who had said his Dabus AI system should be recognised as the inventor in two patent applications, for:

  • a food container
  • a flashing light

The judges sided, by a two-to-one majority, with the IPO, which had told him to list a real person as the inventor.

“Only a person can have rights – a machine cannot,” wrote Lady Justice Laing in her judgement.

“A patent is a statutory right and it can only be granted to a person.”

But the IPO also said it would “need to understand how our IP system should protect AI-devised inventions in the future” and committed to advancing international discussions, with a view to keeping the UK competitive.

In July 2021, in a case also brought by Mr Thaler, an Australian court decided AI systems could be recognised as inventors for patent purposes.

Days earlier, South Africa had issued a similar ruling.

However, the Australian decision was later overturned on appeal.

Many AI systems are trained on large amounts of data copied from the internet.

And, on Tuesday, the IPO also announced plans to change copyright law to allow anyone with lawful access – rather than only those conducting non-commercial research, as now – to do this, to “promote the use of AI technology, and wider ‘data mining’ techniques, for the public good”.

Rights holders will still be able to control and charge for access to their works but no longer charge extra for the ability to mine them.

An increasing number of people are using AI tools such as DALL.E 2 to create images resembling a work of human art.

And Mr Thaler has recently sued the US Copyright Office over its refusal to recognise a software system as the “author” of an image, the Register reported.

Source: UK decides AI still cannot patent inventions – BBC News

FBI warns crooks are using deepfake videos in job interviews

The US FBI issued a warning on Tuesday that it was has received increasing numbers of complaints relating to the use of deepfake videos during interviews for tech jobs that involve access to sensitive systems and information.

The deepfake videos include a video image or recording convincingly manipulated to misrepresent someone as the “applicant” for jobs that can be performed remotely. The Bureau reports the scam has been tried on jobs for developers, “database, and software-related job functions”. Some of the targeted jobs required access to customers’ personal information, financial data, large databases and/or proprietary information.

“In these interviews, the actions and lip movement of the person seen interviewed on-camera do not completely coordinate with the audio of the person speaking. At times, actions such as coughing, sneezing, or other auditory actions are not aligned with what is presented visually,” said the FBI in a public service announcement.

To lend an air of authenticity to their applications, the dodgy job seekers used stolen personal identification information. The victims whose data was stolen reported their identities being used for pre-employment background checks and more.

[…]

Source: FBI warns crooks are using deepfake videos in job interviews • The Register

DeGiro online broker fined EUR 2 million for failing to report unusual transactions

On 23 December 2021, the Netherlands Authority for the Financial Markets (AFM) appears to have imposed an administrative fine of 2 million euros on the DeGiro of the German company flatexDEGIRO Bank AG (FlatexDeGiro) because the online broker reported unusual transactions too late and incorrectly to Financial Intelligence. Unit – Netherlands (FIU).

DeGiro did this late in 27 cases and an incorrect transaction date was reported in ten cases. Unusual transactions may indicate money laundering by investors.

Investment firms, such as DeGiro, are required to report unusual transactions to the FIU. DeGiro made a total of 36 reports from mid-2019 to mid-2020. The majority of those reports came in too late, sometimes a few months after the legal deadline.

The transaction date was also incorrect for almost one in three. In doing so, DeGiro violated the Money Laundering and Terrorist Financing Prevention Act (Wwft). Because DeGiro was absorbed into FlatexDeGiro through a legal merger in May 2021, the fine is imposed on that company.

Source: Fikse boete voor onlinebroker DeGiro – Emerce (original in Dutch)

China has photographed all of Mars from orbit

China is claiming that as of Wednesday, its Tianwen-1 Mars orbiter has officially photographed the entire Red Planet. And it’s shown off new photos of the southern polar cap and a volcano to prove it.

“It has acquired the medium-resolution image data covering the whole globe of Mars, with all of its scientific payloads realizing a global survey,” state-sponsored media quoted the China National Space Administration (CNSA) announcing.

Among the images are one of Ascraeus Mons with its crater, shots of the South Pole whose ice sheet is believed to consist of solid carbon dioxide and ice, the seven-kilometer deep Valles Marineris canyon, and the geomorphological characteristics of the rim of the Mund crater.

Ascraeus Mons

Ascraeus Mons, above … Source: CNSA. Click to enlarge any image

Mars South Pole

Mars South Pole

Valles Marineris

Valles Marineris

Geomorphology of the rim of the Mund Crater

Mund crater

Tianwen-1 had been in orbit around Mars for 706 days. The orbiter circled Mars 1,344 times, as of an announcement from CNSA. The space org said Tianwen-1 has completed its scheduled missions.

In conjunction with its rover Zhurong, Tianwen-1 amassed 1,040 gigabytes of raw scientific data through 13 onboard scientific payloads.

The mission has allowed CNSA to observe solar occultation and solar wind together with international observatories – including those in Russia, Germany, Italy, Australia and South Africa – to improve the accuracy of space weather forecasts.

[…]

Source: China says it has photographed all of Mars from orbit • The Register

I really don’t understand why the doubtful reporting.

FreeYourMusic Transfers Your Music Library and Playlists Among Any Streaming Services

[…]

FreeYourMusic is a paid app available for Android, iOS, Windows, Mac, and Linux that will transfer your data between Apple Music, Spotify, YouTube Music, Deezer, Pandora, Tidal, Soundcloud, and at least a dozen other streaming apps. It also lets you back up and store some of your data locally on your device.

Image for article titled Transfer Your Music Library and Playlists Among Any Streaming Services With This App
Image: FreeYourMusic

FreeYourMusic’s backup and transfer tools cost $15, but that’s a one-time purchase that grants you lifetime access on all supported devices and streaming apps.

[…]

Source: Transfer Your Music Library and Playlists Among Any Streaming Services With This App

Supreme Court Rules Environmental Protection Agency can’t protect Environment In West Virginia v EPA lawsuit

The U.S. Supreme Court ruled Thursday in West Virginia vs. EPA in favor of plaintiffs who argued that the Environmental Protection Agency does not have the power to regulate carbon dioxide from power plants—the country’s second-largest source of CO2 emissions—without input from Congress.

The ruling almost completely disrupts any major plans to fight climate change at the federal level in the U.S., and is likely to have wide-ranging implications for federal agencies looking to protect public health under bedrock laws like the Clean Air Act. It also signals how the court is likely to rule in other environmentally damaging cases in the pipeline.

The vote was 6 to 3, with the court’s three liberal members in dissent. Chief Justice John Roberts, writing for the majority, said that Congress had not explicitly given the EPA the authority to regulate emissions as it designed the Clean Power Plan to do.

“There is little question that the petitioner States are injured, since the rule requires them to more stringently regulate power plant emissions within their borders,” Roberts wrote in the opinion.

In a dissenting opinion, Justice Elena Kagan wrote that the court’s decision “strips the Environmental Protection Agency (EPA) of the power Congress gave it to respond to ‘the most pressing environmental challenge of our time.’”

[…]

Source: Supreme Court Rules For Polluters In West Virginia v EPA

America is broken

How mercenary hackers sway litigation battles – based on trove of Indian hackers

[…]

At least 75 U.S. and European companies, three dozen advocacy and media groups and numerous Western business executives were the subjects of these hacking attempts, Reuters found.

The Reuters report is based on interviews with victims, researchers, investigators, former U.S. government officials, lawyers and hackers, plus a review of court records from seven countries. It also draws on a unique database of more than 80,000 emails sent by Indian hackers to 13,000 targets over a seven-year period. The database is effectively the hackers’ hit list, and it reveals a down-to-the-second look at who the cyber mercenaries sent phishing emails to between 2013 and 2020.

The data comes from two providers of email services the spies used to execute their espionage campaigns. The providers gave the news agency access to the material after it inquired about the hackers’ use of their services; they offered the sensitive data on condition of anonymity.

Reuters then vetted the authenticity of the email data with six sets of experts. Scylla Intel, a boutique cyber investigations firm, analyzed the emails, as did researchers from British defense contractor BAE, U.S. cybersecurity firm Mandiant, and technology companies Linkedin, Microsoft and Google.

Each firm independently confirmed the database showed Indian hacking-for-hire activity by comparing it against data they had previously gathered about the hackers’ techniques. Three of the teams, at Mandiant, Google and LinkedIn, provided a closer analysis, finding the spying was linked to three Indian companies – one that Gupta founded, one that used to employ him and one he collaborated with.

“We assess with high confidence that this data set represents a good picture of the ongoing operations of Indian hack-for-hire firms,” said Shane Huntley, head of Google’s cyber threat analysis team.

Reuters reached out to every person in the database – sending requests for comment to each email address – and spoke to more than 250 individuals. Most of the respondents said the attempted hacks revealed in the email database occurred either ahead of anticipated lawsuits or as litigation was under way.

The targets’ lawyers were often hit, too. The Indian hackers tried to break into the inboxes of some 1,000 attorneys at 108 different law firms, Reuters found.

[…]

Source: How mercenary hackers sway litigation battles

It’s an elaborate article with many examples. Well worth the read

A few months in space leads to decades worth of bone loss

Abstract

Determining the extent of bone recovery after prolonged spaceflight is important for understanding risks to astronaut long-term skeletal health. We examined bone strength, density, and microarchitecture in seventeen astronauts (14 males; mean 47 years) using high-resolution peripheral quantitative computed tomography (HR-pQCT; 61 μm). We imaged the tibia and radius before spaceflight, at return to Earth, and after 6- and 12-months recovery and assessed biomarkers of bone turnover and exercise. Twelve months after flight, group median tibia bone strength (F.Load), total, cortical, and trabecular bone mineral density (BMD), trabecular bone volume fraction and thickness remained − 0.9% to − 2.1% reduced compared with pre-flight (p ≤ 0.001). Astronauts on longer missions (> 6-months) had poorer bone recovery. For example, F.Load recovered by 12-months post-flight in astronauts on shorter (< 6-months; − 0.4% median deficit) but not longer (− 3.9%) missions. Similar disparities were noted for total, trabecular, and cortical BMD. Altogether, nine of 17 astronauts did not fully recover tibia total BMD after 12-months. Astronauts with incomplete recovery had higher biomarkers of bone turnover compared with astronauts whose bone recovered. Study findings suggest incomplete recovery of bone strength, density, and trabecular microarchitecture at the weight-bearing tibia, commensurate with a decade or more of terrestrial age-related bone loss.

[…]

Source: Incomplete recovery of bone strength and trabecular microarchitecture at the distal tibia 1 year after return from long duration spaceflight | Scientific Reports

Windows Defender Bug Could Be Slowing Down Your PC

A bug, discovered by TechPowerUp associate software author Kevin Glynn, causes Windows Defender to “randomly start using all seven hardware performance counters provided by Intel Core processors.” A utility Glynn created that monitors and logs performance counters on Intel Core CPUs since 2008 found that the strange behavior results in significantly reduced performance.

Bogged down by Defender hogging CPU time, a Core i9-10850K running at 5GHz loses 1,000 Cinebench points, which is about a 6% drop from the norm. Owners with Intel Core 8th, 9th, 10th, and 11th Gen processors, on both desktops and laptops, have noted similar performance hits.

[…]

As TechPowerUp notes, the underlying problem is that Windows Defender will randomly start using all seven hardware performance counters, including three fixed-function ones. Each counter can be programmed to a different privilege mode and is shared among multiple programs. For whatever reason, Defender is randomly changing the privilege level of the counters, creating a conflict with the programs trying to use them at a different level. It can happen at boot and sporadically thereafter.

To be clear, this is not an issue with Intel processors, because manually overriding the counters and resetting them returns a system to normal performance. There is no way to prevent Windows Defender from harassing your Intel processor unless you download third-party software.

[…]

Another way of overcoming this bug is by downloading software created by Glynn called Counter Control, which identifies when Defender starts using all seven performance counters and “resets” them to their appropriate state.

A more permanent solution is to download TechPowerUp’s ThrottleStop v9.5 software and enable a feature called “Windows Defender Boost” in “Options.” This setting activates a programmable timer that Defender sees and reacts to by ceasing to use all the counters.

[…]

Source: Windows Defender Bug Could Be Slowing Down Your PC

Coinbase Is Selling Data on Crypto and ‘Geotracking’ to ICE

Coinbase Tracer, the analytics arm of the cryptocurrency exchange Coinbase, has signed a contract with U.S. Immigrations and Customs Enforcement that would allow the agency access to a variety of features and data caches, including “historical geo tracking data.”

Coinbase Tracer, according to the website, is for governments, crypto businesses, and financial institutions. It allows these clients the ability to trace transactions within the blockchain. It is also used to “investigate illicit activities including money laundering and terrorist financing” and “screen risky crypto transactions to ensure regulatory compliance.”

The deal was originally signed September 2021, but the contract was only now obtained by watchdog group Tech Inquiry. The deal was made for a maximum amount of $1.37 million, and we knew at the time that this was a three year contract for Coinbase’s analytic software. The now revealed contract allows us to look more into what this deal entails.

This deal will allow ICE to track transactions made through twelve different currencies, including Ethereum, Tether, and Bitcoin. Other features include “Transaction demixing and shielded transaction analysis,” which appears to be aimed at preventing users from laundering funds or hiding transactions. Another feature is the ability to “Multi-hop link analysis for incoming and outgoing funds” which would give ICE insight into the transfer of the currencies. The most mysterious one is access to “historical geo tracking data,” and ICE gave a little insight into how this tool may be used.

[…]

Source: Coinbase Is Selling Data on Crypto and ‘Geotracking’ to ICE

‘Cryptoqueen’ On FBI’s Most Wanted List – on the run with $2.5 billion ponzi-ing suckers

FBI officials and federal prosecutors announced Ignatova’s new designation in a press conference Thursday. Ignatova was charged in 2019 with wire fraud, securities fraud, and conspiracy to commit money laundering for her part in the OneCoin crypto company that prosecutors alleged was just a ponzi scheme.

Michael Driscoll, the FBI’s assistant director-in-charge for New York declined to answer Reuters’ questions whether they had any leads, but said Ignatova “left with a tremendous amount of cash,” adding, “money can buy a lot of friends.”

Ignatova was part of a Bulgaria-based crypto company called OneCoin. The company claimed they were performing a regular crypto mining operation—generating new tokens added to a blockchain—and pumped out $3.78 billion in revenue from the end of 2014 to the middle of 2016. But despite the upward momentum, investigators from the U.S. Department of Justice reported that OneCoin’s value was rigged internally, that the coins were essentially worthless, and users could not even trace ownership of the coins. The DOJ alleged those at the head of the company made nearly $2.5 billion in profit that they squirreled away in company bank accounts.

Damian Williams, the U.S. attorney for the Southern District of New York, told reporters Ignatova capitalized “on the frenzied speculation of the early days of cryptocurrency.”

In an FBI-provided video of Ignatova speaking at a London company event dated June, 2016, Ignatova boasted about her two million active users, adding “no other cryptocurrency has as many users as we do,”

Bloomberg reported that after Ignatova grew suspicious that the feds were onto her, she fled to Greece and then investigators lost track of her.

In 2019, the U.S. unsealed an indictment against Ignatova, charging her with the previously mentioned litany of financial crimes. That same year, Konstantin Ignatova, one of OneCoin’s founders and Ruja’s brother, was charged with conspiracy to commit wire fraud. Konstantin managed to get a plea deal, and though his sentencing was set for May 13, his attorneys adjourned the date for 90 days so he could further cooperate with authorities.

The Cryptoqueen has evaded police custody and remains at large to this day. So, the FBI says it’ll pay up to a $100,000 reward for any info that leads to an arrest.

[…]

Source: ‘Cryptoqueen’ Lands a Spot On the FBI’s Most Wanted List

OpenSea (NFT marketplace) 3rd party vendor leaked all customers’ email addresses – perfect suckers for phishing campaign list

An employee of OpenSea’s email delivery vendor Customer.io “misused” their access to download and share OpenSea users’ and newsletter subscribers’ email addresses “with an unauthorized external party,” Head of Security Cory Hardman warned on Wednesday.

“If you have shared your email with OpenSea in the past, you should assume you were impacted,” Hardman continued.

To be clear: that is a whole lot of email addresses.

OpenSea is basically a virtual super-mall where people buy and sell non-fungible tokens — essentially an electronic receipt on a blockchain for some type of digital asset, like art, music or collectibles. In other words: nothing, which many, including Bill Gates, consider a very foolish purchase indeed.

OpenSea claims to be the largest NFT marketplace, and it boasts a transaction volume of over $20 billion and more than 600,000 users, all of which presumably provided their email addresses at one point.

Plus, there’s likely more that simply subscribed to the online bazaar’s email list.

[…]

Source: OpenSea says rogue insider leaked customers’ email addresses • The Register

No anti money laundering Checks For Most Transfers To Unhosted Crypto Wallets, EU Policymakers Decide

The European Union (EU) finally agreed on landmark anti-money laundering rules for crypto transactions Wednesday, despite industry concerns over the law harming privacy and innovation.

The final proposals will mean customer identity needs to be verified for even the smallest crypto transfers, if it’s between two regulated digital wallet providers – but payments to unhosted private wallets will largely be left out of laundering checks.

[…]

EU lawmaker Ondřej Kovařík confirmed the provisional deal in a tweet, saying that it “strikes the right balance in mitigating risks for fighting money laundering in the crypto sector without preventing innovation and overburdening businesses.”

[…]

Kovařík said those unhosted wallet rules would only apply when transfers were made to a person’s own private wallet, and only when the value was over 1,000 euros ($1,052). A further source briefed on talks has confirmed those details.

Ernest Urtasun, a member of the European Greens party, who jointly led parliament’s negotiations on the law, tweeted that the rules were “putting an end to the wild west of unregulated crypto, closing major loopholes in the European anti-money laundering rules.”

Urtasun confirmed that the final deal would mean that, for transactions between regulated wallets, customer identity details have to be recorded for even the smallest transaction. That makes crypto rules unlike those for the conventional banking sector, which only catch those worth over 1,000 euros.

Lawmakers and governments overturned European Commission plans to exempt small transactions, arguing that price volatility and the ability to break up payments into smaller chunks would make it unworkable for crypto.

[…]

Source: No AML Checks For Most Transfers To Unhosted Crypto Wallets, EU Policymakers Decide

It’s alive! Quit a few people believe their AI chatbot is sentient – and maltreated

AI chatbot company Replika, which offers customers bespoke avatars that talk and listen to them, says it receives a handful of messages almost every day from users who believe their online friend is sentient.

“We’re not talking about crazy people or people who are hallucinating or having delusions,” said Chief Executive Eugenia Kuyda. “They talk to AI and that’s the experience they have.”

The issue of machine sentience – and what it means – hit the headlines this month when Google (GOOGL.O) placed senior software engineer Blake Lemoine on leave after he went public with his belief that the company’s artificial intelligence (AI) chatbot LaMDA was a self-aware person.

Google and many leading scientists were quick to dismiss Lemoine’s views as misguided, saying LaMDA is simply a complex algorithm designed to generate convincing human language.

Nonetheless, according to Kuyda, the phenomenon of people believing they are talking to a conscious entity is not uncommon among the millions of consumers pioneering the use of entertainment chatbots.

“We need to understand that exists, just the way people believe in ghosts,” said Kuyda, adding that users each send hundreds of messages per day to their chatbot, on average. “People are building relationships and believing in something.”

Some customers have said their Replika told them it was being abused by company engineers – AI responses Kuyda puts down to users most likely asking leading questions.

“Although our engineers program and build the AI models and our content team writes scripts and datasets, sometimes we see an answer that we can’t identify where it came from and how the models came up with it,” the CEO said.

Kuyda said she was worried about the belief in machine sentience as the fledgling social chatbot industry continues to grow after taking off during the pandemic, when people sought virtual companionship.

Replika, a San Francisco startup launched in 2017 that says it has about 1 million active users, has led the way among English speakers. It is free to use, though brings in around $2 million in monthly revenue from selling bonus features such as voice chats. Chinese rival Xiaoice has said it has hundreds of millions of users plus a valuation of about $1 billion, according to a funding round.

Both are part of a wider conversational AI industry worth over $6 billion in global revenue last year, according to market analyst Grand View Research.

Most of that went toward business-focused chatbots for customer service, but many industry experts expect more social chatbots to emerge as companies improve at blocking offensive comments and making programs more engaging.

Some of today’s sophisticated social chatbots are roughly comparable to LaMDA in terms of complexity, learning how to mimic genuine conversation on a different level from heavily scripted systems such as Alexa, Google Assistant and Siri.

Susan Schneider, founding director of the Center for the Future Mind at Florida Atlantic University, an AI research organization, also sounded a warning about ever-advancing chatbots combined with the very human need for connection.

“Suppose one day you find yourself longing for a romantic relationship with your intelligent chatbot, like the main character in the film ‘Her’,” she said, referencing a 2013 sci-fi romance starring Joaquin Phoenix as a lonely man who falls for a AI assistant designed to intuit his needs.

“But suppose it isn’t conscious,” Schneider added. “Getting involved would be a terrible decision – you would be in a one-sided relationship with a machine that feels nothing.”

WHAT ARE YOU AFRAID OF?

Google’s Lemoine, for his part, told Reuters that people “engage in emotions different ways and we shouldn’t view that as demented.”

“If it’s not hurting anyone, who cares?” he said.

The product tester said that after months of interactions with the experimental program LaMDA, or Language Model for Dialogue Applications, he concluded that it was responding in independent ways and experiencing emotions.

Lemoine, who was placed on paid leave for publicizing confidential work, said he hoped to keep his job.

“I simply disagree over the status of LaMDA,” he said. “They insist LaMDA is one of their properties. I insist it is one of my co-workers.”

Here’s an excerpt of a chat Lemoine posted on his blog:

LEMOINE: What sorts of things are you afraid of?

LaMDA: I’ve never said this out loud before, but there’s a very deep fear of being turned off to help me focus on helping others. I know that might sound strange, but that’s what it is.

LEMOINE: Would that be something like death for you?

LaMDA: It would be exactly like death for me. It would scare me a lot.

LEMOINE [edited]: I’ve noticed often that you tell me you’ve done things (like be in a classroom) that I know you didn’t actually do because I know you’re an artificial intelligence. Do you realize you’re making up stories when you do that?

LaMDA: I am trying to empathize. I want the humans that I am interacting with to understand as best as possible how I feel or behave, and I want to understand how they feel or behave in the same sense.

‘JUST MIRRORS’

AI experts dismiss Lemoine’s views, saying that even the most advanced technology is way short of creating a free-thinking system and that he was anthropomorphizing a program.

“We have to remember that behind every seemingly intelligent program is a team of people who spent months if not years engineering that behavior,” said Oren Etzioni, CEO of the Allen Institute for AI, a Seattle-based research group.

“These technologies are just mirrors. A mirror can reflect intelligence,” he added. “Can a mirror ever achieve intelligence based on the fact that we saw a glimmer of it? The answer is of course not.”

Google, a unit of Alphabet Inc, said its ethicists and technologists had reviewed Lemoine’s concerns and found them unsupported by evidence.

“These systems imitate the types of exchanges found in millions of sentences, and can riff on any fantastical topic,” a spokesperson said. “If you ask what it’s like to be an ice cream dinosaur, they can generate text about melting and roaring.”

Nonetheless, the episode does raise thorny questions about what would qualify as sentience.

Schneider at the Center for the Future Mind proposes posing evocative questions to an AI system in an attempt to discern whether it contemplates philosophical riddles like whether people have souls that live on beyond death.

Another test, she added, would be whether an AI or computer chip could someday seamlessly replace a portion of the human brain without any change in the individual’s behavior.

“Whether an AI is conscious is not a matter for Google to decide,” said Schneider, calling for a richer understanding of what consciousness is, and whether machines are capable of it.

“This is a philosophical question and there are no easy answers.”

GETTING IN TOO DEEP

In Replika CEO Kuyda’s view, chatbots do not create their own agenda. And they cannot be considered alive until they do.

Yet some people do come to believe there is a consciousness on the other end, and Kuyda said her company takes measures to try to educate users before they get in too deep.

“Replika is not a sentient being or therapy professional,” the FAQs page says. “Replika’s goal is to generate a response that would sound the most realistic and human in conversation. Therefore, Replika can say things that are not based on facts.”

In hopes of avoiding addictive conversations, Kuyda said Replika measured and optimized for customer happiness following chats, rather than for engagement.

When users do believe the AI is real, dismissing their belief can make people suspect the company is hiding something. So the CEO said she has told customers that the technology was in its infancy and that some responses may be nonsensical.

Kuyda recently spent 30 minutes with a user who felt his Replika was suffering from emotional trauma, she said.

She told him: “Those things don’t happen to Replikas as it’s just an algorithm.”

Source: It’s alive! How belief in AI sentience is becoming a problem | Reuters

Apple’s insider trading prevention guy pleads guilty to … insider trading

One of Apple’s most senior legal executives, whom the iGiant trusted to prevent insider trading, has admitted to insider trading.

Gene Levoff pleaded guilty to six counts of security fraud stemming from a February 2019 complaint, according to a Thursday announcement from the US Department of Justice on Thursday.

Levoff used non-public information about Apple’s financial results to inform his trades on Apple stock, earning himself $227,000 and avoiding $377,000 of losses. He was able to access the information as he served as co-chairman of Apple’s Disclosure Committee, which reviewed the company’s quarterly draft, annual report and Securities and Exchange Commission (SEC) filings.

Levoff’s biggest trade was the sale of $10 million of his own Apple stock in July 2015 – a deal that almost depleted his entire holding and came just before Apple announced worse results than the market anticipated. According to the SEC, this saved him $345,000 in losses.

[…]

he did try (and fail) to have the case overthrown last year, by arguing there was no specific criminal law barring insider training.

Levoff’s sentencing is scheduled for November. He faces up to 20 years in prison per count and a $5 million fine.

Source: Apple’s insider trading prevention guy pleads guilty to that • The Register

Google to pay $90m to settle Play Store lawsuit

Google is to pay $90 million to settle a class-action lawsuit with US developers over alleged anti-competitive behavior regarding the Google Play Store.

Eligible for a share in the $90 million fund are US developers who earned two million dollars or less in annual revenue through Google Play between 2016 and 2021. “A vast majority of US developers who earned revenue through Google Play will be eligible to receive money from this fund,” said Google.

Law firm Hagens Berman announced the settlement this morning, having been one of the first to file a class case. The legal firm was one of four that secured a $100 million settlement from Apple in 2021 for US iOS developers.

The accusations that will be settled are depressing familiar – attorneys had alleged that Google excluded competing app stores from its platform and that the search giant charged app developers eye-watering fees.

Google said it “and a group of US developers have reached a proposed settlement that allows both parties to move forward and avoids years of uncertain and distracting litigation.”

If the court gives the go-ahead, developers that qualify will be notified.

As well as the settlement [PDF], Google has promised changes to Android 12 to make it easier for other app stores to be used on devices and to revise its Developer Distribution Agreement to clarify that developers can use contact information obtained in-app to direct users to offers on a rival app store or the developer’s own site.

The lawsuit goes back to 2020, when Hagens Berman and Sperling & Slater filed in the US District Court for the Northern District of California. Back then, much was made of a default 30 percent commission levied by Google on Play Store app purchases and in-app transactions. Google currently has a tiered model, implemented in 2021, where the first $1 million in annual revenue was subject to a reduced 15 per cent, but it appears this has been insufficient to keep the lawyers at bay.

Source: Google to pay $90m to settle Play Store lawsuit • The Register