The Register's Jessica Lyons reports: Chinese state-sponsored spies have been spotted inside a global engineering firm's network, having gained initial entry using an admin portal's default credentials on an IBM AIX server. In an exclusive interview with The Register, Binary Defense's Director of Security Research John Dwyer said the cyber snoops first compromised one of the victim's three unmanaged AIX servers in March, and remained inside the US-headquartered manufacturer's IT environment for four months while poking around for more boxes to commandeer. It's a tale that should be a warning to those with long- or almost-forgotten machines connected to their networks; those with shadow IT deployments; and those with unmanaged equipment. While the rest of your environment is protected by whatever threat detection you have in place, these legacy services are perfect starting points for miscreants.

This particular company, which Dwyer declined to name, makes components for public and private aerospace organizations and other critical sectors, including oil and gas. The intrusion has been attributed to an unnamed People's Republic of China team, whose motivation appears to be espionage and blueprint theft. It's worth noting the Feds have issued multiple security alerts this year about Beijing's spy crews including APT40 and Volt Typhoon, which has been accused of burrowing into American networks in preparation for destructive cyberattacks.

After discovering China's agents within its network in August, the manufacturer alerted local and federal law enforcement agencies and worked with government cybersecurity officials on attribution and mitigation, we're told. Binary Defense was also called in to investigate. Before being caught and subsequently booted off the network, the Chinese intruders uploaded a web shell and established persistent access, thus giving them full, remote access to the IT network -- putting the spies in a prime position for potential intellectual property theft and supply-chain manipulation. If a compromised component makes it out of the supply chain and into machinery in production, whoever is using that equipment or vehicle will end up feeling the brunt when that component fails, goes rogue, or goes awry.

"The scary side of it is: With our supply chain, we have an assumed risk chain, where whoever is consuming the final product -- whether it is the government, the US Department of the Defense, school systems â" assumes all of the risks of all the interconnected pieces of the supply chain," Dwyer told The Register. Plus, he added, adversarial nations are well aware of this, "and the attacks continually seem to be shifting left." That is to say, attempts to meddle with products are happening earlier and earlier in the supply-chain pipeline, thus affecting more and more victims and being more deep-rooted in systems. Breaking into a classified network to steal designs or cause trouble is not super easy. "But can I get into a piece of the supply chain at a manufacturing center that isn't beholden to the same standards and accomplish my goals and objectives?" Dwyer asked. The answer, of course, is yes. [...]

The House Energy and Commerce Committee has approved the AM for Every Vehicle Act, which mandates that automakers include AM radio in new vehicles without additional charges. The Verge reports: The bill passed the committee on a roll-call vote of 45-2 and now heads to the full House for final approval. The bill, titled the AM for Every Vehicle Act, would direct the National Highway Traffic Safety Administration (NHTSA) to issue a rule that "requires automakers to maintain AM broadcast radio in their vehicles without a separate or additional payment, fee, or surcharge." Supporters say they are pushing the bill out of a concern that the slow demise of AM radio could make it more difficult to broadcast emergency information during a natural disaster or other related events. Conservatives are also worried about losing a lucrative platform for right-wing news and media. [...]

Automakers generally see AM radio as an obsolete technology, arguing that there are other, better technologies, such as internet streaming, HD radio delivered on FM bands, or some apps that provide AM content that will make up for the absence of AM radio in vehicles. Critics say the bill could also add to the costs of producing EVs at a time when many manufacturers are struggling to rein in their costs. "With a new mandate, [EV companies] will have to go through a significant powertrain redesign, vehicle redesign," Albert Gore, executive director of the Zero Emission Transportation Association, said in an interview earlier this year, "because of the degree to which electric motor generates this [electromagnetic] interference."

An anonymous reader shares a report: Last week, the FBI took control of a botnet made up of hundreds of thousands of internet-connected devices, such as cameras, video recorders, storage devices, and routers, which was run by a Chinese government hacking group, FBI director Christopher Wray and U.S. government agencies revealed Wednesday. The hacking group, dubbed Flax Typhoon, was "targeting critical infrastructure across the U.S. and overseas, everyone from corporations and media organizations to universities and government agencies," Wray said at the Aspen Cyber Summit cybersecurity conference on Wednesday.

"But working in collaboration with our partners, we executed court-authorized operations to take control of the botnet's infrastructure," Wray said, explaining that once the authorities did that, the FBI also removed the malware from the compromised devices. "Now, when the bad guys realized what was happening, they tried to migrate their bots to new servers and even conducted a [Distributed Denial of Service] attack against us."

An anonymous reader quotes a report from Ars Technica, written by Scharon Harding: TCL has come under scrutiny this month after testing that claimed to examine three TCL TVs marketed as quantum dot TVs reportedly showed no trace of quantum dots. [...] Earlier this month, South Korean IT news publication ETNews published a report on testing that seemingly showed three TCL quantum dot TVs, marketed as QD TVs, as not having quantum dots present. Hansol Chemical, a Seoul-headquartered chemicals company, commissioned the testing. SGS, a Geneva-headquartered testing and certification company, and Intertek, a London-headquartered testing and certification company, performed the tests. The models examined were TCL's C755, said to be a quantum dot Mini LED TV, the C655, a purported quantum dot LED (QLED) TV, and the C655 Pro, another QLED. None of those models are sold in the US, but TCL sells various Mini LED and LED TVs in the US that claim to use quantum dots. According to a Google translation, ETNews reported: "According to industry sources on the 5th, the results of tests commissioned by Hansol Chemical to global testing and certification agencies SGS and Intertek showed that indium... and cadmium... were not detected in three TCL QD TV models. Indium and cadmium are essential materials that cannot be omitted in QD implementation." The testing was supposed to detect cadmium if present at a minimum concentration of 0.5 mg per 1 kg, while indium was tested at a minimum detection standard of 2 mg/kg or 5 mg/kg, depending on the testing lab. [...]

In response to the results from SGS and Intertek, a TCL representative told ETNews and The Korea Times that TCL is "manufacturing TV sets with QD films supplied by three companies" and that "the amount of quantum dots... in the film may vary depending on the supplier, but it is certain that cadmium is included." TCL also published testing results on May 10 commissioned by Guangdong Region Advanced Materials, one of TCL's quantum dot film suppliers. Interestingly, SGS, one of the companies that found that TCL's TVs lacked quantum dots, performed the tests. This time, SGS detected the presence of cadmium in the TV films at a concentration of 4 mg/kg (an image of the results can be seen via ETNews here). TCL also said that it "confirmed the fluorescent characteristics of QD," per Google's translation, and provided a spectrogram purportedly depicting the presence of quantum dots in its TVs' quantum dot films. [...]

TCL obviously has reason to try to push results that show the presence of cadmium. However, some analysts and publications have pointed out that Hansol could have reason to push results claiming the opposite. As mentioned above, Hansol is in the chemical manufacturing and distribution business. It notably does not sell to TCL but does have a customer in TCL rival Samsung. Taking a step back further, Hansol is headquartered in Seoul and is considered a chaebol. TV giants Samsung and LG are also chaebols, and the South Korean government has reported interest in Samsung and LG continuing to be the world's biggest TV companies—titles that are increasingly challenged by Chinese brands. It has previously been reported that the South Korean government urged Samsung and LG to meet with each other to help ensure their leadership. The talks resulted in a partnership between the two companies reportedly centered on counteracting high prices that Samsung was facing for TV components sold by Chinese companies. With this background in mind, Hansol could be viewed as a biased party when it sought testing for TCL quantum dot TVs. "I'm really puzzled by Hansol's results," said Eric Virey, principal displays analyst at Yole Intelligence. "I have a very hard time believing that TCL would go through the troubles of making ... 'fake' QD films without QDs: this would cost almost as much as making a real QD films but without the performance benefits."

Ars Technica concludes: "As previously stated, it's possible that TCL is indeed using quantum dots but is using them in a small amount alongside phosphor. If true, the performance may not be as high as it would be with other designs, but it would also mean that TCL's quantum dot TVs aren't bogus. As it stands, the situation could benefit from more, preferably third-party, testing..."

Bruce66423 writes: Allowing flexible working and working from home creates a more productive, loyal workforce, the business secretary has said. In an interview with the Times, Jonathan Reynolds said employers "need to judge people on outcomes and not a culture of presenteeism." Labour is poised to unveil its Employment Rights Bill, which includes measures such as a right to "disconnect" outside working hours, a ban on zero-hours contracts and allowing workers to compress their contracted hours into fewer working days.

Business groups have raised concerns about the plans, warning it could push up the cost of hiring staff and have the unintended consequence of ending overtime. However, Reynolds said Labour's plans to address workers' rights should not be alarming for business leaders. Since April, workers have had the right -- introduced under the previous government -- to ask for flexible working as soon as they start a job, but firms do not have to agree.

An anonymous reader quotes a report from the New York Times: Scientists who helped pioneer artificial intelligence are warning that countries must create a global system of oversight to check the potentially grave risks posed by the fast-developing technology. The release of ChatGPT and a string of similar services that can create text and images on command have shown how A.I. is advancing in powerful ways. The race to commercialize the technology has quickly brought it from the fringes of science to smartphones, cars and classrooms, and governments from Washington to Beijing have been forced to figure out how to regulate and harness it. In a statement on Monday, a group of influential A.I. scientists raised concerns that the technology they helped build could cause serious harm. They warned that A.I. technology could, within a matter of years, overtake the capabilities of its makers and that "loss of human control or malicious use of these A.I. systems could lead to catastrophic outcomes for all of humanity."

If A.I. systems anywhere in the world were to develop these abilities today, there is no plan for how to rein them in, said Gillian Hadfield, a legal scholar and professor of computer science and government at Johns Hopkins University. "If we had some sort of catastrophe six months from now, if we do detect there are models that are starting to autonomously self-improve, who are you going to call?" Dr. Hadfield said. On Sept. 5-8, Dr. Hadfield joined scientists from around the world in Venice to talk about such a plan. It was the third meeting of the International Dialogues on A.I. Safety, organized by the Safe AI Forum, a project of a nonprofit research group in the United States called Far.AI. Governments need to know what is going on at the research labs and companies working on A.I. systems in their countries, the group said in its statement. And they need a way to communicate about potential risks that does not require companies or researchers to share proprietary information with competitors. The group proposed that countries set up A.I. safety authorities to register the A.I. systems within their borders. Those authorities would then work together to agree on a set of red lines and warning signs, such as if an A.I. system could copy itself or intentionally deceive its creators. This would all be coordinated by an international body.

Among the signatories was Yoshua Bengio, whose work is so often cited that he is called one of the godfathers of the field. There was Andrew Yao, whose course at Tsinghua University in Beijing has minted the founders of many of China's top tech companies. Geoffrey Hinton, a pioneering scientist who spent a decade at Google, participated remotely. All three are winners of the Turing Award, the equivalent of the Nobel Prize for computing. The group also included scientists from several of China's leading A.I. research institutions, some of which are state-funded and advise the government. A few former government officials joined, including Fu Ying, who had been a Chinese foreign ministry official and diplomat, and Mary Robinson, the former president of Ireland. Earlier this year, the group met in Beijing, where they briefed senior Chinese government officials on their discussion.

Former MoviePass CEO Mitch Lowe pleaded guilty to securities fraud, admitting he misled investors about the viability of the company's $9.95-a-month movie subscription service, and faces up to five years in prison. His co-defendant, former Helios and Matheson CEO Ted Farnsworth, faces similar charges and is scheduled for trial in March 2025; Farnsworth has been in federal custody since August 2023 due to bond violations involving misuse of company funds. Variety reports: Farnsworth and Lowe were the architects of MoviePass' doomed all-you-can-watch offering, which resulted in hundreds of millions of dollars in investor losses in 2017 and 2018. Investigators found that Lowe tried to stem the losses by throttling the service, forcing high-volume users to reset their passwords and verify their tickets. The two men were charged in November 2022 on counts of wire fraud and securities fraud. According to Lowe's plea agreement, the government estimates the total losses from the scheme at $303 million -- though Lowe contends it is less than that. Lowe remains free on bond, and is due back in court in Miami on March 21 for a status conference. Lowe published a memoir in 2022 in which he reflected on the downfall of MoviePass, entitled "Watch and Learn: How I Turned Hollywood Upside Down with Netflix, Redbox, and Moviepass."

The U.S. government said Monday that it has issued fresh financial sanctions against five individuals and a corporate entity associated with spyware-making consortium Intellexa, months after the government sanctioned its founder. From a report: In its latest statement, the U.S. Treasury said it sanctioned the five people, including senior Intellexa executives and associates, who are alleged to be involved in the sale of Intellexa's phone spyware, dubbed Predator, to authoritarian governments. Predator can be used to hack into fully patched phones nearly invisibly, allowing the organization that deployed the spyware to obtain complete access to the target's device, including their private messages and real-time location. The Treasury said the spyware has been used to target U.S. government officials, journalists, and opposition politicians.

The sanctions include Felix Bitzios, who owns an Intellexa consortium company that the Treasury says was used to supply Predator spyware to an unnamed foreign government; Merom Harpaz and Panagiota Karaoli, who hold senior positions in Intellexa's corporate structure, according to the Treasury; and Andrea Nicola Constantino Hermes Gambazzi, who the Treasury says was involved in processing transactions for companies within Intellexa's consortium. The Treasury added that the Aliada Group, a company based in the British Virgin Islands and a member of the Intellexa group of companies, was also sanctioned for enabling tens of millions of dollars in transactions for the spyware-making consortium. A senior U.S. government official told reporters during a background call on Monday that the latest round of sanctions were part of the government's ongoing effort to target the commercial spyware industry. The U.S. official said the government was tracking money flows and movements to determine what entities might be trying to avoid or circumvent the sanctions.

AI pioneers have issued a stark warning about the technology's potential risks, calling for urgent global oversight. At a recent meeting in Venice, scientists from around the world discussed the need for a coordinated international response to AI safety concerns. The group proposed establishing national AI safety authorities to monitor and register AI systems, which would collaborate to define red flags such as self-replication or intentional deception capabilities. The report adds: Scientists from the United States, China, Britain, Singapore, Canada and elsewhere signed the statement. Among the signatories was Yoshua Bengio, whose work is so often cited that he is called one of the godfathers of the field. There was Andrew Yao, whose course at Tsinghua University in Beijing has minted the founders of many of China's top tech companies. Geoffrey Hinton, a pioneering scientist who spent a decade at Google, participated remotely. All three are winners of the Turing Award, the equivalent of the Nobel Prize for computing. The group also included scientists from several of China's leading A.I. research institutions, some of which are state-funded and advise the government. A few former government officials joined, including Fu Ying, who had been a Chinese foreign ministry official and diplomat, and Mary Robinson, the former president of Ireland. Earlier this year, the group met in Beijing, where they briefed senior Chinese government officials on their discussion.

NASA will coordinate with U.S. government stakeholders, partners, and international standards organizations to establish a Coordinated Lunar Time (LTC) following a policy directive from the White House in April. From a report: The agency's Space Communication and Navigation (SCaN) program is leading efforts on creating a coordinated time, which will enable a future lunar ecosystem that could be scalable to other locations in our solar system. The lunar time will be determined by a weighted average of atomic clocks at the Moon, similar to how scientists calculate Earth's globally recognized Coordinated Universal Time (UTC). Exactly where at the Moon is still to be determined, since current analysis indicates that atomic clocks placed at the Moon's surface will appear to 'tick' faster by microseconds per day. A microsecond is one millionth of a second. NASA and its partners are currently researching which mathematical models will be best for establishing a lunar time. To put these numbers into perspective, a hummingbird's wings flap about 50 times per second. Each flap is about .02 seconds, or 20,000 microseconds. So, while 56 microseconds may seem miniscule, when discussing distances in space, tiny bits of time add up.

On Tuesday Ivanti issued a "high severity vulnerability" announcement for version 4.6 of its Cloud Service Appliance (or CSA). "Successful exploitation could lead to unauthorized access to the device running the CSA." And Friday that announcement got an update: Ivanti "has confirmed exploitation of this vulnerability in the wild."

While Ivanti released a security update, they warned that "with the end-of-life status this is the last fix that Ivanti will backport for this version. Customers must upgrade to Ivanti CSA 5.0 for continued support."

This prompted a response from CISA (the Cybersecurity and Infrastructure Security Agency, part of the U.S. Department of Homeland Security). The noted that Ivanti is urging customers to upgrade to version 5.0, as "Ivanti no longer supports CSA 4.6 (end-of-life)." But in addition, CISA "ordered all federal civilian agencies to remove CSA 4.6. from service or upgrade to the 5.0. by October 4," reports the Record: Ivanti said users will know they are impacted by exploitation of the bug by looking to see if there are modified or newly added administrative users. They also urged customers to check security alerts if they have certain security tools involved.

The issue arose one day after another Ivanti bug caused alarm among defenders. The company pledged a security overhaul in April after a cascade of headline-grabbing nation-state attacks broke through the systems of government agencies in the U.S. and Europe using vulnerabilities in Ivanti products.

An EFF article calls out a "brazen attempt to privatize" a wireless frequency band (900 MHz) which America's FCC's left " as a commons for all... for use by amateur radio operators, unlicensed consumer devices, and industrial, scientific, and medical equipment." The spectrum has also become "a hotbed for new technologies and community-driven projects. Millions of consumer devices also rely on the range, including baby monitors, cordless phones, IoT devices, garage door openers." But NextNav would rather claim these frequencies, fence them off, and lease them out to mobile service providers. This is just another land-grab by a corporate rent-seeker dressed up as innovation. EFF and hundreds of others have called on the FCC to decisively reject this proposal and protect the open spectrum as a commons that serves all.

NextNav [which sells a geolocation service] wants the FCC to reconfigure the 902-928 MHz band to grant them exclusive rights to the majority of the spectrum... This proposal would not only give NextNav their own lane, but expanded operating region, increased broadcasting power, and more leeway for radio interference emanating from their portions of the band. All of this points to more power for NextNav at everyone else's expense.

This land-grab is purportedly to implement a Positioning, Navigation and Timing (PNT) network to serve as a US-specific backup of the Global Positioning System(GPS). This plan raises red flags off the bat. Dropping the "global" from GPS makes it far less useful for any alleged national security purposes, especially as it is likely susceptible to the same jamming and spoofing attacks as GPS. NextNav itself admits there is also little commercial demand for PNT. GPS works, is free, and is widely supported by manufacturers. If Nextnav has a grand plan to implement a new and improved standard, it was left out of their FCC proposal. What NextNav did include however is its intent to resell their exclusive bandwidth access to mobile 5G networks. This isn't about national security or innovation; it's about a rent-seeker monopolizing access to a public resource. If NextNav truly believes in their GPS backup vision, they should look to parts of the spectrum already allocated for 5G.

The open sections of the 900 MHz spectrum are vital for technologies that foster experimentation and grassroots innovation. Amateur radio operators, developers of new IoT devices, and small-scale operators rely on this band. One such project is Meshtastic, a decentralized communication tool that allows users to send messages across a network without a central server. This new approach to networking offers resilient communication that can endure emergencies where current networks fail. This is the type of innovation that actually addresses crises raised by Nextnav, and it's happening in the part of the spectrum allocated for unlicensed devices while empowering communities instead of a powerful intermediary. Yet, this proposal threatens to crush such grassroots projects, leaving them without a commons in which they can grow and improve.

This isn't just about a set of frequencies. We need an ecosystem which fosters grassroots collaboration, experimentation, and knowledge building. Not only do these commons empower communities, they avoid a technology monoculture unable to adapt to new threats and changing needs as technology progresses. Invention belongs to the public, not just to those with the deepest pockets. The FCC should ensure it remains that way.

NextNav's proposal is a direct threat to innovation, public safety, and community empowerment. While FCC comments on the proposal have closed, replies remain open to the public until September 20th. The FCC must reject this corporate land-grab and uphold the integrity of the 900 MHz band as a commons.

More details on that report about NASA from the Washington Post: NASA is 66 years old and feeling its age. Brilliant engineers are retiring. Others have fled to higher-paying jobs in the private space industry. The buildings are old, their maintenance deferred. The Apollo era, with its huge taxpayer investment, is a distant memory. The agency now pursues complex missions on inadequate budgets. This may be an unsustainable path for NASA, one that imperils long-term success. That is the conclusion of a sweeping report, titled "NASA at a Crossroads," written by a committee of aerospace experts and published Tuesday by the National Academies of Sciences, Engineering and Medicine. The report suggests that NASA prioritizes near-term missions and fails to think strategically. In other words, the space agency isn't sufficiently focused on the future.

NASA's intense focus on current missions is understandable, considering the unforgiving nature of space operations, but "one tends to neglect the probably less glamorous thing that will determine the success in the future," the report's lead author, Norman Augustine, a retired Lockheed Martin chief executive, said Tuesday. He said one solution for NASA's problems is more funding from Congress. But that may be hard to come by, in which case, he said, the agency needs to consider canceling or delaying costly missions to invest in more mundane but strategically important institutional needs, such as technology development and workforce training. Augustine said he is concerned that NASA could lose in-house expertise if it relies too heavily on the private industry for newly emerging technologies. "It will have trouble hiring innovative, creative engineers. Innovative, creative engineers don't want to have a job that consists of overseeing other people's work," he said...

The report is hardly a blistering screed. The tone is parental. It praises the agency — with a budget of about $25 billion — for its triumphs while urging more prudent decision-making and long-term strategizing.

NASA pursues spectacular missions. It has sent swarms of robotic probes across the solar system and even into interstellar space. Astronauts have continuously been in orbit for more than two decades. The most ambitious program, Artemis, aims to put astronauts back on the moon in a few short years. And long-term, NASA hopes to put astronauts on Mars. But a truism in the industry is that space is hard. The new report contends that NASA has a mismatch between its ambitions and its budget, and needs to pay attention to fundamentals such as fixing its aging infrastructure and retaining in-house talent. NASA's overall physical infrastructure is already well beyond its design life, and this fraction continues to grow," the report states.
NASA Administrator Bill Nelson said the report "aligns with our current efforts to ensure we have the infrastructure, workforce, and technology that NASA needs for the decades ahead," according to the article.

Nelson added that the agency "will continue to work diligently to address the committee's recommendations."

Samba is "a free software re-implementation of the SMB networking protocol," according to Wikipedia. And now the Samba project "has secured significant funding (€688,800.00) from the German Sovereign Tech Fund to advance the project," writes Jeremy Allison — Sam (who is Slashdot reader #8,157 — and also a long standing member of Samba's core team): The investment was successfully applied for by [information security service provider] SerNet. Over the next 18 months, Samba developers from SerNet will tackle 17 key development subprojects aimed at enhancing Samba's security, scalability, and functionality.

The Sovereign Tech Fund is a German federal government funding program that supports the development, improvement, and maintenance of open digital infrastructure. Their goal is to sustainably strengthen the open source ecosystem.

The project's focus is on areas like SMB3 Transparent Failover, SMB3 UNIX extensions, SMB-Direct, Performance and modern security protocols such as SMB over QUIC. These improvements are designed to ensure that Samba remains a robust and secure solution for organizations that rely on a sovereign IT infrastructure. Development work began as early as September the 1st and is expected to be completed by the end of February 2026 for all sub-projects.

All development will be done in the open following the existing Samba development process. First gitlab CI pipelines have already been running and gitlab MRs will appear soon!
Back in 2000, Jeremy Allison answered questions from Slashdot readers about Samba.

Allison is now a board member at both the GNOME Foundation and the Software Freedom Conservancy, a distinguished engineer at Rocky Linux creator CIQ, and a long-time free software advocate.

Ars Technica's Stephen Clark reports: A panel of independent experts reported this week that NASA lacks funding to maintain most of its decades-old facilities, could lose its engineering prowess to the commercial space industry, and has a shortsighted roadmap for technology development. "NASA's problem is it always seems to have $3 billion more program than it has of funds," said Norm Augustine, chair of the National Academies panel chartered to examine the critical facilities, workforce, and technology needed to achieve NASA's long-term strategic goals and objectives. Augustine said a similar statement could sum up two previous high-level reviews of NASA's space programs that he chaired in 1990 and 2009. But the report released Tuesday put NASA's predicament in stark terms.

"In NASA's case, the not-uncommon tendency in a constrained budget environment to prioritize initiating new missions as opposed to maintaining and upgrading existing support assets has produced an infrastructure that would not be viewed as acceptable under most industrial standards," the panel wrote in its report. "In fact, during its inspection tours, the committee saw some of the worst facilities many of its members have ever seen." All of NASA's centers have facilities the agency considers marginal, but Johnson Space Center in Houston has the facilities with the worst average score. Johnson oversees astronaut training and is home to NASA's Mission Control Center for the International Space Station and future Artemis lunar missions. The Jet Propulsion Laboratory in California, which develops and operates many of NASA's robotic interplanetary probes, and Stennis Space Center in Mississippi, used for rocket engine testing, are the only centers without a poor infrastructure score.

These ratings cover things like buildings and utilities, not the specific test rigs or instruments inside them. "You can have a world-class microscope and materials lab, but if the building goes down, that microscope is useless to you," [Erik Weiser, NASA's director of facilities and real estate] told the National Academies panel in a meeting last year. The panel recommended that Congress direct NASA to establish an annually replenished revolving working capital fund to pay for maintenance and infrastructure upgrades. Other government agencies use similar funds for infrastructure support. "This is something that will require federal legislation," said Jill Dahlburg, a member of the National Academies panel and former superintendent of the space science division at the Naval Research Laboratory.

Former FTX CEO Sam Bankman-Fried's legal team has filed an appeal challenging his conviction on seven felony counts and his 25-year prison sentence. They argue that he was not presumed innocent, that the jury received incomplete information about FTX user funds, and that the prosecution's narrative was biased. CoinTelegraph reports: In a Sept. 13 filing in the United States Court of Appeals for the Second Circuit, SBF's lawyers filed a 102-page brief claiming that the former FTX CEO was "never presumed innocent," subject to scrutiny that allegedly affected prosecutors, the presiding judge, and treatment by the media. Bankman-Fried's legal team announced in April -- a few weeks after a federal judge sentenced him to 25 years in prison -- that they intended to appeal. According to the appeal, SBF's lawyers alleged the jury was "only allowed to see half the picture" with FTX user funds, claiming prosecutors had "presented a false narrative" that the money was permanently lost and Bankman-Fried intentionally caused that loss. They also claimed that counsel for the FTX debtors worked with the US government in a way that was above and beyond "cooperation," providing information allegedly as an "arm of the prosecution."

"From day one, the prevailing narrative -- initially spun by the lawyers who took over FTX, quickly adopted by their contacts at the US Attorney's Office -- was that Bankman-Fried had stolen billions of dollars of customer funds, driven FTX to insolvency, and caused billions in losses," said the appeal. "Now, nearly two years later, a very different picture is emerging -- one confirming FTX was never insolvent, and in fact had assets worth billions to repay its customers. But the jury at Bankman-Fried's trial never got to see that picture." The legal team requested the appellate court grant SBF a new trial with a different judge. It's unclear whether the Second Circuit could rule to affirm Bankman-Fried's conviction in the US District Court for the Southern District of New York or reverse the decision and set the groundwork for a new trial.

The tax agency again delays a vital software upgrade, at the cost of billions. WSJ's Editorial Board: Taxpayers endure drudgery to file on time each year, but the tax collectors seem less concerned with deadlines. A new Internal Revenue Service database, more than a decade in the making, will be delayed another year. And its cost is billions of dollars and climbing. The IRS told the press this week that it won't replace its Individual Master File until the 2026 tax year, at the earliest. That falls short of Commissioner Danny Werfel's goal of launching a new system in time for 2025 taxes, and the delay could mean another year of grief for countless taxpayers. The file is the digital silo in which more than 154 million tax files are held, and keeping it up-to-date helps to enable speedy, accurate refunds.

The code that powers the database was written in the 1960s by IBM engineers at the same time their colleagues worked on the Apollo program. The system runs on a nearly extinct computer language known as Cobol, and though it retains its basic functionality, maintaining it requires bespoke service. By 2018 the IRS had only 17 remaining developers considered to be experts on the system. The agency has sought and failed to overhaul or replace the database since the 1980s. It spent $4 billion over 14 years to devise upgrades, but it canceled that effort in 2000 "without receiving expected benefits," according to the Government Accountability Office.

The costs continue to mount. IRS spending on operating and maintaining its IT systems has risen 35% in the past four years, to $2.7 billion last year from $2 billion in 2019. These costs will "likely continue to increase until a majority of legacy systems are decommissioned," according to a report last month by the agency's inspector general. Each year major upgrades are pushed back adds a larger sum to the final tab. The IRS usually pleads poverty as an excuse for failing to stay up-to-date. Yet Congress gave the agency billions of extra dollars through the Inflation Reduction Act to fund a speedy database overhaul. Since 2022 it has spent $1.3 billion beyond its ordinary budget to modernize its business systems. Taxpayers will have to wait at least another year to see if that investment has paid off.

A U.S. District Court judge on Thursday allowed New York-based startup Kalshi to legally offer betting on the outcome of the November Congressional elections (Warning: source paywalled; alternative source), despite opposition from the Commodity Futures Trading Commission (CFTC), which plans to appeal the decision due to concerns about potential market manipulation and public trust in the electoral process. Within minutes of the ruling, people began placing bets on Kalshi's website. It's currently the only legal opportunity for Americans to bet on U.S. elections under government regulation. Fortune reports: A startup company on Thursday began taking what amounts to bets on the outcome of the November Congressional elections after a judge refused to block them from doing so. The ruling by U.S. District Court Judge Jia Cobb in Washington permitted the only legally sanctioned bets on U.S. elections by an American jurisdiction. It enabled, at least temporarily, New York-based Kalshi to offer prediction contracts -- essentially yes-or-no bets -- on which party will win control of the Senate and the House in November. The company and its lawyer did not respond to requests for comment, but within 90 minutes of the judge's ruling, the bets were being advertised on the company's web site. Earlier in the day, the website had said they were "coming soon."

It was not clear how long such betting might last; the Commodity Futures Trading Commission, which last year prohibited the company from offering them, said it would appeal the ruling as quickly as possible. Contrasting his client with foreign companies who take bets from American customers on U.S. elections without U.S. government approval, Roth said Kalshi is trying to do things the right way, under government regulation. "It invested significantly in these markets," he said during Thursday's hearing. "They spent millions of dollars. It would be perverse if all that investment went up in smoke."

But Raagnee Beri, an attorney for the commission, said allowing such bets could invite malicious activities designed to influence the outcome of elections and undermine already fragile public confidence in the voting process. "These contracts would give market participants a $100 million incentive to influence the market on the election," she said. "There is a very severe public interest threat." She used the analogy of someone who has taken an investment position in corn commodities. "Somebody puts out misinformation about a drought, that a drought is coming," she said. "That could move the market on the price of corn. The same thing could happen here. The commission is not required to suffer the flood before building a dam."

In a statement today, the White House said it has received commitments from several AI companies to curb the creation and distribution of deepfake porn, also known as image-based sexual abuse material. Engadget reports: The participating businesses have laid out the steps they are taking to prevent their platforms from being used to generate non-consensual intimate images (NCII) of adults and child sexual abuse material (CSAM). Specifically, Adobe, Anthropic, Cohere, Common Crawl, Microsoft and OpenAI said they'll be: "responsibly sourcing their datasets and safeguarding them from image-based sexual abuse."

All of the aforementioned except Common Crawl also agreed they'd be: "incorporating feedback loops and iterative stress-testing strategies in their development processes, to guard against AI models outputting image-based sexual abuse" and "removing nude images from AI training datasets" when appropriate. [...] The notable absences from today's White House release are Apple, Amazon, Google and Meta.

A Google executive told colleagues the goal for the company's then-nascent online advertising business in 2009 was to "crush" rival advertising networks, according to evidence prosecutors presented at the tech titan's antitrust trial on Wednesday. From a report: The statements underscored the U.S. Department of Justice's claim that Google has sought to monopolize markets for publisher ad servers and advertiser ad networks, and tried to dominate the market for ad exchanges which sit in the middle. On the third day of the trial, prosecutors began to introduce evidence of how Google employees thought about the company's products at the time when the government alleges it set out to dominate the ad tech market.

"We'll be able to crush the other networks and that's our goal," David Rosenblatt, Google's former president of display advertising, said of the company's strategy in late 2008 or early 2009, according to notes shown in court. Google denies the allegations, saying it faces fierce competition from rival digital advertising companies. Rosenblatt came to Google in 2008 when it acquired his former ad tech company, DoubleClick, and left the following year. The notes of his talk showed him discussing the advantages of owning technology on both sides and the middle of the market. "We're both Goldman and NYSE," he said, he said, according to the notes, referring to one of the world's biggest stock exchanges at the time and one of its biggest market makers. "Google has created what's comparable to the NYSE or London Stock Exchange; in other words, we'll do to display what Google did to search," Rosenblatt said.