Heaven forbid a political candidate's Facebook account gets hacked. They might spread disinformation ... like they're already allowed to do in Facebook ads ... From a report: Today Facebook made a slew of announcements designed to stop 2020 election interference. "The bottom line here is that elections have changed significantly since 2016" and so has Facebook in response, CEO Mark Zuckerberg said on a call with reporters. "We've gone from being on our back foot to proactively going after some of the biggest threats out there." One new feature is called Facebook Protect. By hijacking accounts of political candidates or their campaign staff, bad actors can steal sensitive information, expose secrets, and spread disinformation. So to safeguard these vulnerable users, Facebook is launching a new program with extra security they can opt into. Facebook Protect entails requiring two-factor authentication, and having Facebook monitor for hacking attempts like suspicious logins. Facebook can then inform the rest of an organization and investigate if it sees one member under attack.

U.S. presidential candidate Andrew Yang "is full of it," argues Slate's senior business and economics correspondent, challenging Yang's contention (in a debate Tuesday) that American jobs were being lost to automation: Following the debate, a "fact check" by the AP claimed that Yang was right and Warren wrong. "Economists mostly blame [manufacturing] job losses on automation and robots, not trade deals," it stated. But this was incorrect. No such consensus exists, and if anything, the evidence heavily suggests that trade has been the bigger culprit in recent decades. All of which points to a broader issue: Yang's schtick about techno doom may be well-intentioned, but it is largely premised on BS, and is adding to the widespread confusion about the impact of automation on the economy.

Yang is not pulling his ideas out of thin air. Economists have been debating whether automation or trade is more responsible for the long-term decline of U.S. factory work for a while, and it's possible to find experts on both sides of the issue. After remaining steady for years, the total number of U.S. manufacturing jobs suddenly plummeted in the early 2000s -- from more than 17 million in 2000 to under 14 million in 2007... [But] America hasn't just lost manufacturing workers; as Susan Houseman of the Upjohn Institute for Employment Research notes, the number of factories also declined by around 22 percent between 2000 and 2014, which isn't what you'd expect if assembly workers were just being replaced by machines. In a 2017 paper, meanwhile, economists Daron Acemoglu of MIT and Pascual Restrepo of Boston University concluded that the growth of industrial robots in the U.S. since 1990 could only explain between between 360,000 and 670,000 job losses. By comparison, the proof placing blame on trade and China is much stronger. Justin Pierce of the Federal Reserve Board and Peter Schott of Yale have found evidence that the U.S.'s decision to grant the People's Republic permanent normal trade relations in 2000 led to declines in American jobs...

New technology will change the economy and the way people work. It already is. But those shifts will be more complex than Yang admits and probably won't look like the wave of mass unemployment that he and his like-minded supporters tend to envision... It's not just unrealistic. It's lazy. When you buy the sci-fi notion that technology is simply a disembodied force making humanity obsolete and that there's little that can be done about it, you stop thinking about ideas that will actually prevent workers from being screwed over by the forces of globalization or new tech. By prophesying imaginary problems, you ignore the real ones.

For the "Privacy Project" newsletter of the New York Times, opinion writer Charlie Warzel interviewed U.S. presidential candidate Andrew Yang. Their far-ranging conversation covered everything from whether Facebook should be able to run political ads to his proposed Department of the Attention Economy: Andrew Yang: I was talking to a researcher recently and she described a concept called data dignity, which I thought really says it all. Right now we're being systematically deprived of our dignity and we think it is fine because we're getting these incredible services. Perhaps that worked in the early stages of the internet. But now we're waking up to the fact that the trade is much more serious and profound than we originally realized... I think we should be getting paid in a data dividend. Every time we post a photo or interact with a social media company we're putting information out there and that information should still be ours...

We've become like rats in a maze where we're constantly hit by messages from these companies know everything about us. They know more about us than our families do. We're responding to stimuli and we think we're making choices. But it's because we've shared so much over time that they have a keen sense of what we want. There's something fundamental at stake here, which is: What does human agency look like? What are our rights as citizens?
Yang also points out that when it comes to making things better, "it's not like individual consumers can band together to make this happen. Government needs to be a counterweight to the massive power and information inequities between us and the technology companies."

Yang also says people would be less desperate to sell their data if they were receiving his proposed Universal Basic Income -- but "if individuals want to share their data or information or even their private lives with other people, then that's their prerogative."

"Cyber-espionage operations from Cozy Bear, a threat actor believed to work for the Russian government, continued undetected for the past years by using malware families previously unknown to security researchers," reports BleepingComputer -- citing a surprisingly detailed report: Relying on stealthy communication techniques between infected systems and the command and control servers, the group managed to keep their activity under the radar for a long time. Cyber-espionage campaigns that likely started in 2013, collectively named "Operation Ghost," have been attributed to this group, and continued through 2019...

Researchers at ESET tracking this threat actor found at least three victims of Operation Ghost, all being European Ministries of Foreign Affairs including the Washington DC embassy of a European Union country. The victim count is likely larger but identifying them is difficult because the threat actor uses unique command and control infrastructure for each target.
The report notes the group used sites like Reddit, Twitter, and Imgur to deliver the URLs for some command-and-control servers, along with information hidden in images. And another stage of its malware platform used an even more robust site for its command-and-control server: Dropbox.

GitLab, a San-Francisco provider of hosted git software, recently changed its company handbook to declare that it won't ban potential customers on "moral/value grounds," and that employees should not discuss politics at work. The Register reports: The policy addition, created by co-founder and CEO Sid Sijbrandij and implemented as a git pull request, was merged (with no approval required) about two weeks ago. It was proposed to clarify that GitLab is committed to doing business with "customers with values that are incompatible with our own values." Such a declaration could run afoul of legal boundaries in some circumstances. While workers have no constitutional speech protection in the context of their employment, federal labor law requires that employees be allowed to discuss the terms and conditions of their employment and possible unlawful conduct like harassment, discrimination, and safety violations.

But it's perhaps understandable given how, over the past few years, workers in the tech industry have become more vocal in objecting to business deals with entities deemed to be immoral or work that conflicts with declared or presumed values. Sijbrandij amended his company's handbook to state: "We do not discuss politics in the workplace and decisions about what customer to serve might get political." And what reason does Sijbrandij's pull request provide to support this position? It says, "Efficiency is one of our values and vetting customers is time consuming and potentially distracting."

An anonymous reader quotes a report from ZDNet: While the 2020 U.S. presidential elections have lawmakers on edge over AI-generated fake videos, a new study by Netherlands-based deepfake-detection outfit Deeptrace shows that the main victims today are women. According to Deeptrace, deepfake videos have exploded in the past year, rising from 8,000 in December 2018 to 14,678 today. And not surprisingly for the internet, nearly all of the material is pornography, which accounts for 96% of the deepfake videos it's found online. The fake videos have been viewed 134 million times.

The numbers suggest deepfake porn is still niche but also growing quickly. Additionally, 90% of the fake content depicted women from the U.S., UK, and Canada, while 2% represented women from South Korea and 2% depicted women from Taiwan. "Deepfake pornography is a phenomenon that exclusively targets and harms women," the company notes. That small number of non-pornographic deepfake videos it analyzed on YouTube mostly contained (61%) synthesized male subjects. According to Henry Ajder, a researcher at Deeptrace, currently most of the deepfake porn involves famous women. But he reckons the threat to all women is likely to increase as it becomes less computationally expensive to create deepfakes. As for the political threat, there actually aren't that many cases where deepfakes have changed a political outcome.

The United States carried out a secret cyber operation against Iran in the wake of the Sept. 14 attacks on Saudi Arabia's oil facilities, which Washington and Riyadh blame on Tehran, two U.S. officials have told Reuters. From the report: The officials, who spoke on condition of anonymity, said the operation took place in late September and took aim at Tehran's ability to spread "propaganda." One of the officials said the strike affected physical hardware, but did not provide further details. The attack highlights how President Donald Trump's administration has been trying to counter what it sees as Iranian aggression without spiraling into a broader conflict.

Asked about Reuters reporting on Wednesday, Iran's Minister of Communications and Information Technology Mohammad Javad Azari-Jahromi said: "They must have dreamt it," Fars news agency reported. The U.S. strike appears more limited than other such operations against Iran this year after the downing of an American drone in June and an alleged attack by Iran's Revolutionary Guards on oil tankers in the Gulf in May. The United States, Saudi Arabia, Britain, France and Germany have publicly blamed the Sept. 14 attack on Iran, which denied involvement in the strike. The Iran-aligned Houthi militant group in Yemen claimed responsibility. Publicly, the Pentagon has responded by sending thousands of additional troops and equipment to bolster Saudi defenses -- the latest U.S. deployment to the region this year.

Democrats running for president had their most vigorous debate yet about the power of tech companies, finally bringing the long-simmering conversation about Big Tech into the mainstream of Democratic politics. From a report: The dozen Democratic candidates quarreled for almost 15 minutes at the fourth presidential debate about topics including digital privacy rights, the monopoly power of companies like Amazon, political fundraising in Silicon Valley, and whether politicians like Donald Trump should be banned from Twitter. It was the first time tech was discussed meaningfully on the Democratic debate stage -- and a sign that the media sees the growing techlash as enough of a concern that candidates should be pressed on it on national television. The combat mostly centered on Elizabeth Warren, the new presidential frontrunner who has made her proposal to break up tech companies like Facebook a cornerstone of her presidential run.

Many of her competitors said they were not willing to go as far as her, although several decided to take their own whacks at Silicon Valley from other angles. Beto O'Rourke offered the most direct criticism to Warren's plan, even comparing her approach to Trump's rhetoric about the press. "We will be unafraid to break up big businesses if we have to do that -- but I don't think it is the role of a president or a candidate for the presidency to specifically call out which companies will be broken up," O'Rourke said. "That's something that Donald Trump has done in part because he sees enemies in the press and wants to diminish their power. It's not something that we should do." Andrew Yang, the political neophyte running on tech-infused themes such as universal basic income, said Warren was correct in diagnosing the problem but that "using a 20th century antitrust framework will not work." Cory Booker would only say that his administration would "put people in place that enforce antitrust laws" but declined to sign on to the proposal to break up the tech giants. He did use some of the harshest language on the stage, saying that tech companies were responsible for a "massive crisis on our democracy."

The social media giant said it will not allow users to like, reply, share or retweet tweets from world leaders who break its rules. Instead, it will let users quote-tweet to allow ordinary users to express their opinions. The company said the move will help its users stay informed about global affairs, but while balancing the need to keep the site's rules in check. TechCrunch reports: Twitter has been in a bind, amid allegations that the company has not taken action against world leaders who break its rules. "When it comes to the actions of world leaders on Twitter, we recognize that this is largely new ground and unprecedented," Twitter said in an unbylined blog post on Tuesday. "We want to make it clear today that the accounts of world leaders are not above our policies entirely," the company said. Any user who tweets content promoting terrorism, making "clear and direct" threats of violence, and posting private information are all subject to ban. But Twitter said in cases involving a world leader, "we will err on the side of leaving the content up if there is a clear public interest in doing so." "Our goal is to enforce our rules judiciously and impartially," Twitter added in a tweet. "In doing so, we aim to provide direct insight into our enforcement decision-making, to serve public conversation, and protect the public's right to hear from their leaders and to hold them to account."

TechCrunch's Josh Constine argues Facebook, along with the other social networks, should flat out refuse to run campaign advertisements. An anonymous reader shares an excerpt: Permitting falsehood in political advertising would work if we had a model democracy, but we don't. Not only are candidates dishonest, but voters aren't educated, and the media isn't objective. And now, hyperlinks turn lies into donations and donations into louder lies. The checks don't balance. What we face is a self-reinforcing disinformation dystopia. That's why if Facebook, Twitter, Snapchat and YouTube don't want to be the arbiters of truth in campaign ads, they should stop selling them. If they can't be distributed safely, they shouldn't be distributed at all. No one wants historically untrustworthy social networks becoming the honesty police, deciding what's factual enough to fly. But the alternative of allowing deception to run rampant is unacceptable. Until voter-elected officials can implement reasonable policies to preserve truth in campaign ads, the tech giants should go a step further and refuse to run them. Facebook recently formalized its policy of allowing politicians to lie in ads and not be forced to verify their claims with third-party fact-checkers. In response to the policy, Elizabeth Warren decided to run ads claiming Facebook CEO Mark Zuckerberg endorses Trump because it's allowing his campaign lies.

In a statement responding to Warren's ad, Facebook spokesperson Andy Stone said the company believes political speech should be protected. "If Senator Warren wants to say things she knows to be untrue, we believe Facebook should not be in the position of censoring that speech," the Stone said.

"A fresh series of Facebook ads this week by Democratic presidential candidate Sen. Elizabeth Warren seeks to put the social media giant on the defensive -- by telling a lie," writes CNN.

An anonymous reader quotes their report: The ads, which began running widely on Thursday, start with a bold but obvious falsehood: That Facebook and its CEO Mark Zuckerberg have endorsed President Trump's reelection campaign.

"You're probably shocked," reads the ad, which has already reached tens of thousands of viewers nationwide. "And you might be thinking, 'how could this possibly be true?' Well, it's not."

The ad's own admission of a lie seeks to draw attention to a controversial Facebook policy Warren has spent days criticizing. Under the policy, Facebook exempts ads by politicians from third-party fact-checking... In a statement Friday responding to Warren's ad, Facebook spokesperson Andy Stone said the company believes political speech should be protected. "If Senator Warren wants to say things she knows to be untrue, we believe Facebook should not be in the position of censoring that speech," the Stone said...

Warren has become one of Facebook's key antagonists after first calling for it and other Silicon Valley giants -- such as Amazon, Google and Apple -- to be broken up. But her rift with Facebook deepened after leaked audio published by The Verge revealed Zuckerberg fretting about the potential consequences of a Warren presidency. "If she gets elected president, then I would bet that we will have a legal challenge, and I would bet that we will win the legal challenge," Zuckerberg is heard saying at a companywide meeting. "And does that still suck for us? Yeah. I mean, I don't want to have a major lawsuit against our own government. ... But look, at the end of the day, if someone's going to try to threaten something that existential, you go to the mat and you fight."

Warren responded via Twitter, "What would really 'suck' is if we don't fix a corrupt system that lets giant companies like Facebook engage in illegal anticompetitive practices, stomp on consumer privacy rights, and repeatedly fumble their responsibility to protect our democracy."

jimminy_cricket writes: Due to the ban placed on a Hearthstone player for supporting Hong Kong protestors, Blizzard is now receiving criticism from U.S. senators. "Blizzard shows it is willing to humiliate itself to please the Chinese Communist Party," Sen. Ron Wyden said, according to The Verge. "No American company should censor calls for freedom to make a quick buck." "Recognize what's happening here. People who don't live in China must either self censor or face dismissal & suspensions," Sen. Marco Rubio (R-FL) said in a tweet on Tuesday. "China using access to market as leverage to crush free speech globally. Implications of this will be felt long after everyone in U.S. politics today is gone."

An anonymous reader shares a report: An Iowa man is so bothered by the political climate that his psychologist says he asked for a higher dosage of his anxiety medication. A Chicago woman is so uneasy about politics that she has needed two dental implants to deal with her teeth-grinding habit. And a New York woman says she suffered her first flare-up of multiple sclerosis in 10 years due to political angst. Americans are stressed and politics is a major cause, according to psychologists, psychiatrists and recent surveys.

A study published in September in the journal PLOS One found that politics is a source of stress for 38% of Americans. "The major takeaway from this is that if our numbers are really anywhere in the ballpark, there are tens of millions of Americans who see politics as exacting a toll on their social, psychological, emotional and even physical health," says Kevin Smith, lead author of the study and chair of the political science department at the University of Nebraska-Lincoln.

In a letter to Joe Biden's presidential campaign, Facebook doubled down on its policy to allow speech from politicians to go unchecked regardless of the truthfulness of their claims. From a report: The letter was a response to the Biden campaign's request for Facebook to reject or demote ads from President Donald Trump's re-election campaign that contain false claims. The Biden campaign's original request to Facebook, addressed to CEO Mark Zuckerberg, COO Sheryl Sandberg and global elections policy chief Katie Harbath, pointed to an ad by the Trump campaign that contains a statement that has not been proven by evidence that the former vice president "offered Ukraine $1 billion to fire the prosecutor investigating a company affiliated with his son." The Biden campaign wrote: "The allegation of corrupt motive has been demonstrated to be completely false." The campaign said the claim should be covered by Facebook's pledge to reject political ads with "previously debunked content."

An anonymous reader quotes a report from The Verge: California has passed a law meant to prevent altered "deepfake" videos from influencing elections, in a plan that has raised free speech concerns. Last week, Gov. Gavin Newsom signed into law AB 730, which makes it a crime to distribute audio or video that gives a false, damaging impression of a politician's words or actions. The law applies to any candidate within 60 days of an election, but includes some exceptions. News media will be exempt from the requirement, as will videos made for satire or parody. Potentially deceptive video or audio will also be allowed if it includes a disclaimer noting that it's fake. The law will sunset in 2023. The report notes that Newsom also signed a law that would ban pornographic deepfakes made without consent.

A bipartisan panel of U.S. senators Tuesday called for sweeping action by Congress, the White House and Silicon Valley to ensure social media sites aren't used to interfere in the coming presidential election, delivering a sobering assessment about the weaknesses that Russian operatives exploited in the 2016 campaign. From a report: The Senate Intelligence Committee, a Republican-led panel that has been investigating foreign electoral interference for more than two and a half years, said in blunt language that Russians worked to damage Democrat Hillary Clinton while bolstering Republican Donald Trump -- and made clear that fresh rounds of interference are likely ahead of the 2020 vote. "Russia is waging an information warfare campaign against the U.S. that didn't start and didn't end with the 2016 election," said Sen. Richard Burr (R-N.C.), the committee's chairman. "Their goal is broader: to sow societal discord and erode public confidence in the machinery of government. By flooding social media with false reports, conspiracy theories, and trolls, and by exploiting existing divisions, Russia is trying to breed distrust of our democratic institutions and our fellow Americans." Though the 85-page report itself had extensive redactions, in the visible sections lawmakers urged their peers in Congress to act, including through the potential adoption of new regulations that would make who bought an ad more transparent. The report also called on the White House and the executive branch to adopt a more forceful, public role, warning Americans about the ways in which dangerous misinformation can spread while creating new teams within the U.S. government to monitor for threats and share intelligence with industry.

Microsoft disclosed today that Iranian state-sponsored hackers tried to hack into email accounts belonging to current and former US government officials, and members of a 2020 US presidential campaign. From a report: The attacks have taken place "in a 30-day period between August and September," Tom Burt, Corporate Vice President, Customer Security & Trust at Microsoft, said today. Microsoft's Threat Intelligence Center (MSTIC) linked the attacks to a group the company calls Phosphorous (other names are APT35, Charming Kitten, and the Ajax Security Team). The group has been linked to Iran's government in reports from multiple cyber-security vendors. Burt said the group operated in different stages. It first made more than 2,700 probes to identify consumer email accounts belonging to specific Microsoft customers. Once the group had a list of high-value targets, it went after 241 of those accounts, which included "accounts are associated with a U.S. presidential campaign, current and former US government officials, journalists covering global politics and prominent Iranians living outside Iran."

The FBI is investigating after someone allegedly tried to hack into West Virginia's mobile voting app during the 2018 midterm elections. From a report: One or more people allegedly attempted to hack into Voatz, an experimental app that lets voters who are active military or registered to vote abroad cast their votes from their phones, Mike Stuart, the US attorney for the Southern District of West Virginia, announced Tuesday. Stuart said in a statement that "there was no intrusion and the integrity of votes and the election system was not compromised," but that an investigation had begun, was "ongoing and no legal conclusions whatsoever have been made regarding the conduct of the activity or whether any federal laws were violated." West Virginia is the only state that currently allows for the system, though it's been used and is being considered in several cities and counties across the country.

"We just noticed a certain group of people from a certain part of the country tried to access the system. We stopped them, caught them and reported them to the authorities," Voatz co-founder and CEO Nimit Sawhney told CNN. "Somebody downloaded, registered and then tried to tamper with it, do something. We caught unauthorized activity, and they immediately got stopped," Sawhney said. He said he did not think the culprit was a sophisticated nation-state hacker looking to disrupt the election. Because Sawhney caught the activity last October, and elections are considered critical infrastructure, he felt he needed to report the incident to the FBI.

An anonymous reader quotes a report from Engadget: The voting machines that the U.S. will use in the 2020 election are still vulnerable to hacks. A group of ethical hackers tested a bunch of those voting machines and election systems (most of which they bought on eBay). They were able to crack into every machine, The Washington Post reports. Their tests took place this summer at a Def Con cybersecurity conference, but the group visited Washington to share their findings yesterday. A number of flaws allowed the hackers to access the machines, including weak default passwords and shoddy encryption. The group says the machines could be hacked by anyone with access to them, and if poll workers make mistakes or take shortcuts, the machines could be infiltrated by remote hackers.

Sen. Elizabeth Warren (D-Mass.) on Friday proposed reinstating a congressional office dedicated to improving tech expertise in order to beat back the growing power of technology companies' lobbying efforts. From a report: In a plan posted to her website, Warren -- one of the top Democratic presidential contenders -- said she wants to bring back the Office of Technology Assessment (OTA), which was set up in the 1970s and dissolved in 1995 under former House Speaker Newt Gingrich (R-Ga.). Congress stood up the OTA to deliver technology expertise to staffers and lawmakers, who often struggle to keep abreast with the latest developments in an advanced and complex industry. Since the OTA was defunded, the country's top tech companies, including Google, Apple, Amazon and Facebook, have invested millions in lobbying efforts, filling the knowledge gap, Warren said, with the message, "Trust us because we understand it and you don't." "Members of Congress should have the resources they need to make decisions without relying on corporate lobbyists," Warren said. There's been a recent spike in interest around the OTA, with lawmakers in the House and Senate proposing legislation that would reinstate the tech office to help lawmakers navigate the pressing regulatory concerns around Big Tech.