×
Security

Ransomware Hits Capitol Hill Contractor (therecord.media) 41

A company that provides a user engagement platform for US politicians has suffered a ransomware attack, leaving many lawmakers unable to email their constituents for days. From a report: The attack, which hit DC-based iConstituent, has affected the offices of nearly 60 House lawmakers across both parties, Punchbowl News reported earlier today, citing House officials, lawmakers, and office aides. Catherine Szpindor, the Chief Administrative Officer of the House, said she was informed of the attack, which appears to have been limited to iConstituent's e-newsletter service and did not impact the company's GovText text messaging system. Szpindor, which is in charge of House cybersecurity, was also quick to distance the US government's network from the attack. "At this time, the CAO is not aware of any impact to House data," Szpindor told Punchbowl News. "The CAO is coordinating with the impacted offices supported by iConstituent and has taken measures to ensure that the attack does not affect the House network and offices' data."
United States

US Recovers Millions in Cryptocurrency Paid To Colonial Pipeline Ransomware Hackers (cnn.com) 162

US investigators have recovered millions of dollars in cryptocurrency paid in ransom to hackers whose attack prompted the shutdown of the key East Coast pipeline last month, CNN reported Monday, citing people briefed on the matter. From the report: The Justice Department on Monday is expected to announce details of the operation led by the FBI with the cooperation of the Colonial Pipeline operator, the people briefed on the matter said. The ransom recovery is a rare outcome for a company that has fallen victim to a debilitating cyberattack in the booming criminal business of ransomware. Colonial Pipeline Co. CEO Joseph Blount told The Wall Street Journal In an interview published last month that the company complied with the $4.4 million ransom demand because officials didn't know the extent of the intrusion by hackers and how long it would take to restore operations. But behind the scenes, the company had taken early steps to notify the FBI and followed instructions that helped investigators track the payment to a cryptocurrency wallet used by the hackers, believed to be based in Russia. US officials have linked the Colonial attack to a criminal hacking group known as Darkside that is said to share its malware tools with other criminal hackers. Update: Law-enforcement officials said they have seized nearly 64 bitcoin of 75 bitcoin in ransom paid.
United States

FDA Approves Alzheimer's Drug Despite Fierce Debate Over Whether It Works (nytimes.com) 90

The Food and Drug Administration on Monday approved the first new medication for Alzheimer's disease in nearly two decades, a contentious decision, made despite opposition from the agency's independent advisory committee and some Alzheimer's experts who said there was not enough evidence that the drug can help patients. From a report: The drug, aducanumab, which will go by the brand name Aduhelm, is a monthly intravenous infusion intended to slow cognitive decline in people with mild memory and thinking problems. It is the first approved treatment to attack the disease process of Alzheimer's instead of just addressing dementia symptoms. Recognizing that clinical trials of the drug had provided incomplete evidence to demonstrate effectiveness, the F.D.A. granted approval on the condition that the manufacturer, Biogen, conduct a new clinical trial. During the several years it could take for that trial to be concluded, the drug will be available to patients, the agency said. If the post-market study, called a Phase 4 trial, fails to show the drug is effective, the F.D.A. can -- but is not required to -- rescind its approval.
Communications

White House Hires Broadband Expert (axios.com) 98

Lisa Hone, a longtime Federal Communications Commission attorney with deep expertise in broadband policy, has joined the National Economic Council team to steer the Biden administration's broadband expansion efforts. From a report: Expanding broadband internet service to all Americans is a top priority for the Biden White House. Hone's primary focus is ensuring that money Congress allocated through the American Rescue Plan Act is spent appropriately. The administration is trying to include broadband in infrastructure legislation, as the pandemic underscored the importance of reliable and affordable broadband connections to Americans' ability to participate in remote school, work, tele-health and e-commerce. Hone, who officially started her job as as senior adviser for broadband and technology policy last week, is now the White House's point person on broadband deployment efforts happening across the government.
IBM

Will Labor Shortages Give Workers More Power? (msn.com) 174

It's been argued that technology (especially automation) will continue weakening the position of workers. But today the senior economics correspondent for The New York Times argues a "profound shift" happening in America is instead something else.

"For the first time in a generation, workers are gaining the upper hand..." Up and down the wage scale, companies are becoming more willing to pay a little more, to train workers, to take chances on people without traditional qualifications, and to show greater flexibility in where and how people work. The erosion of employer power began during the low-unemployment years leading up to the pandemic and, given demographic trends, could persist for years. March had a record number of open positions, according to federal data that goes back to 2000, and workers were voluntarily leaving their jobs at a rate that matches its historical high. Burning Glass Technologies, a firm that analyzes millions of job listings a day, found that the share of postings that say "no experience necessary" is up two-thirds over 2019 levels, while the share of those promising a starting bonus has doubled.

People are demanding more money to take a new job. The "reservation wage," as economists call the minimum compensation workers would require, was 19 percent higher for those without a college degree in March than in November 2019, a jump of nearly $10,000 a year, according to a survey by the Federal Reserve Bank of New York... [T]he demographic picture is not becoming any more favorable for employers eager to fill positions. Population growth for Americans between ages 20 and 64 turned negative last year for the first time in the nation's history. The Congressional Budget Office projects that the potential labor force will grow a mere 0.3 to 0.4 percent annually for the remainder of the 2020s; the size of the work force rose an average of 0.8 percent a year from 2000 to 2020.

The article describes managers now "being forced to learn how to operate amid labor scarcity... At the high end of the labor market, that can mean workers are more emboldened to leave a job if employers are insufficiently flexible on issues like working from home..."

But it also notes a ride-sharing driver who switched to an IBM apprenticeship for becoming a cloud storage engineer, and former Florida nightclub bouncer Alex Lorick, who became an IBM mainframe technician, "part of a deliberate effort by IBM to rethink how it hires and what counts as a qualification for a given job." [IBM] executives concluded that the qualifications for many jobs were unnecessarily demanding. Postings might require applicants to have a bachelor's degree, for example, in jobs that a six-month training course would adequately prepare a person for.

"By creating your own dumb barriers, you're actually making your job in the search for talent harder," said Obed Louissaint, IBM's senior vice president for transformation and culture. In working with managers across the company on training initiatives like the one under which Mr. Lorick was hired, "it's about making managers more accountable for mentoring, developing and building talent versus buying talent."

"I think something fundamental is changing, and it's been happening for a while, but now it's accelerating," Mr. Louissaint said.

The Media

America's FBI Withdraws Demand for IP Addresses of Readers of a Newspaper's Story During a 35-Minute Window (msn.com) 257

UPDATE: America's Federal Bureau of Investigation has now "withdrawn a subpoena demanding records from USA TODAY that would identify readers of a February story about a southern Florida shootout that killed two agents and wounded three others," the newspaper reported today.

Friday USA Today had reported that it's "fighting a subpoena from the FBI demanding records that would identify readers of a February story" about a Southern Florida shooting that killed two of the investigative agency's agents and wounded three others.

Long-time Slashdot reader schwit1 shared their original report on Friday: In a motion filed in federal district court in Washington, D.C. asking a judge to quash the subpoena, Gannett, USA TODAY's parent company, said the effort is not only unconstitutional but also violates the Justice Department's own rules... The subpoena, issued in April, demands the production of records containing IP addresses and other identifying information "for computers and other electronic devices" that accessed the story during a 35-minute time frame starting at 8:03 p.m. on the day of the shooting.

"Being forced to tell the government who reads what on our websites is a clear violation of the First Amendment," Maribel Perez Wadsworth, USA TODAY's publisher, said in a statement. "The FBI's subpoena asks for private information about readers of our journalism...."

The subpoena, signed by an FBI agent in Maryland, said the records relate to a criminal investigation. But it's unclear how USA TODAY's readership records are related to the investigation of the Florida shooting, or why the FBI is focusing on the time frame. Wadsworth said Gannett's attorneys tried to contact the FBI before and after the company fought the subpoena in court, but she said the FBI has yet to provide any meaningful explanation of the basis for the subpoena.

The FBI and the Justice Department declined to comment.

Cellphones

Carriers Agree To Start Sharing Vertical Location Data For 911 Calls (xda-developers.com) 23

The three major carriers in the U.S. have now agreed to start providing vertical location data for 911 calls, which will help first responders quickly locate 911 callers in multi-story buildings. XDA Developers reports: The FCC wrote in its announcement, "FCC Acting Chairwoman Jessica Rosenworcel today announced breakthrough agreements with America's three largest mobile phone providers to start delivering vertical location information in connection with 911 calls nationwide in the coming days. This information will help first responders quickly locate 911 callers in multi-story buildings, which will reduce response times and ultimately save lives."

The FCC first announced in 2015 that carriers would be required to start sharing vertical location data. The original deadline was June 2nd, 2021, but AT&T, T-Mobile, and Verizon wanted an 18-month extension (allegedly due to issues testing the functionality during the COVID-19 pandemic). With the deadline rapidly approaching, the FCC began an investigation in April to find out what was taking carriers so long. All three major carriers have now agreed to start providing vertical location data to 911 call centers within the next seven days, and each company will pay a $100,000 settlement. The agreement also increases the scope of the vertical location data; instead of the data only being provided in select areas, vertical location information will be provided by carriers across the entire United States. However, it will likely take longer than a week for the vertical data to be used in most 9-1-1 call centers, as the change will require updated software and (possibly) additional training for emergency dispatchers.

United States

Biden Order Bans Investment in Dozens of Chinese Defense, Tech Firms (reuters.com) 98

President Joe Biden signed an executive order on Thursday that bans U.S. entities from investing in dozens of Chinese companies with alleged ties to defense or surveillance technology sectors. From a report: The move, which his administration says expands the scope of a legally flawed Trump-era order, drew anger from Beijing. The Treasury Department will enforce and update on a "rolling basis" the new list of about 59 companies, which bars buying or selling publicly traded securities in target companies, and replaces an earlier list from the Department of Defense, senior administration officials told reporters. The order prevents U.S. investment from supporting the Chinese military-industrial complex, as well as military, intelligence, and security research and development programs, Biden said in the order. "In addition, I find that the use of Chinese surveillance technology outside the PRC and the development or use of Chinese surveillance technology to facilitate repression or serious human rights abuse constitute unusual and extraordinary threats," Biden said, using the acronym for the People's Republic of China.
Communications

Biden Administration Makes $1 billion in Grants Available for Broadband on Tribal Lands (theverge.com) 42

The Biden administration will make $1 billion in grants available to expand broadband access and adoption on tribal lands, Vice President Kamala Harris announced at the White House Thursday. From a report: The funds, from the Commerce Department's National Telecommunications and Information Administration (NTIA), will be made to eligible Native American, Alaska Native, and Native Hawaiian entities for broadband deployment, to support digital inclusion, workforce development, telehealth, and distance learning. "For generations, a lack of infrastructure investment in Indian Country has left Tribes further behind in the digital divide than most areas of the country," Department of Interior Secretary Deb Haaland said in a statement. "We have a responsibility as a country to build infrastructure that will fuel economic development, keep communities safe, and ensure everyone has opportunities to succeed."

According to the Commerce Department, census figures show only half of households on tribal lands subscribe to home internet service, and some areas lack even the most basic cellphone reception. More than 20 percent of people living on tribal lands don't have broadband access at home. And during the pandemic as schools closed, some students at tribal-serving schools had to drive for miles to find a strong enough connection to participate in online classes.

United States

US To Give Ransomware Hacks Similar Priority as Terrorism (reuters.com) 66

The U.S. Department of Justice is elevating investigations of ransomware attacks to a similar priority as terrorism in the wake of the Colonial Pipeline hack and mounting damage caused by cyber criminals, a senior department official told Reuters. From the report: Internal guidance sent on Thursday to U.S. attorney's offices across the country said information about ransomware investigations in the field should be centrally coordinated with a recently created task force in Washington. "It's a specialized process to ensure we track all ransomware cases regardless of where it may be referred in this country, so you can make the connections between actors and work your way up to disrupt the whole chain," said John Carlin, acting deputy attorney general at the Justice Department.

Last month, a cyber criminal group that the U.S. authorities said operates from Russia, penetrated a pipeline operator on the U.S. East Coast, locking its systems and demanding a ransom. The hack caused a shutdown lasting several days, led to a spike in gas prices, panic buying and localized fuel shortages in the southeast. Colonial Pipeline decided to pay the hackers who invaded their systems nearly $5 million to regain access, the company said.

United States

Supreme Court Narrows Scope of CFAA Computer Hacking Law (therecord.media) 79

The United States Supreme Court has ruled today in a 6-3 vote to overturn a hacking-related conviction for a Georgia police officer, and by doing so, it also narrowed down the scope of the US' primary hacking law, the Computer Fraud and Abuse Act. From a report: The ruling, No. 19-783, comes in the Van Buren v. United States case of Nathan Van Buren, a former police sergeant in Cumming, Georgia, who was sentenced to 18 months in prison in May 2018 for taking a bribe of $5,000 to look up a license plate for a woman one of his informants met at a local strip club. Prosecutors charged Van Buren under the CFAA and argued that even if the police officer had been authorized to access the police database as part of his work duties, he "exceeded authorized access" when he performed a search against department internal policies. In subsequent appeals, Van Buren argued that the "exceeds authorized access" language in the CFAA was too broad and requested that the US Supreme Court rule on the matter, in a case the court decided to pick up and heard arguments last year.
Power

Bill Gates' Next Generation Nuclear Reactor To Be Built In Wyoming (reuters.com) 334

Billionaire Bill Gates' advanced nuclear reactor company TerraPower LLC and PacifiCorp have selected Wyoming to launch the first Natrium reactor project on the site of a retiring coal plant, the state's governor said on Wednesday. Reuters reports: TerraPower, founded by Gates about 15 years ago, and power company PacifiCorp, owned by Warren Buffet's Berkshire Hathaway, said the exact site of the Natrium reactor demonstration plant is expected to be announced by the end of the year. Small advanced reactors, which run on different fuels than traditional reactors, are regarded by some as a critical carbon-free technology than can supplement intermittent power sources like wind and solar as states strive to cut emissions that cause climate change.

The project features a 345 megawatt sodium-cooled fast reactor with molten salt-based energy storage that could boost the system's power output to 500 MW during peak power demand. TerraPower said last year that the plants would cost about $1 billion. Late last year the U.S. Department of Energy awarded TerraPower $80 million in initial funding to demonstrate Natrium technology, and the department has committed additional funding in coming years subject to congressional appropriations.

United States

Facebook Says US Is the Top Target of Disinformation Campaigns (axios.com) 62

Of the 150 disinformation campaigns that Facebook has caught and removed in the past four years, the U.S. has been the most frequent target by far, according to a new threat intelligence report from Facebook. Axios reports: "I think it's significant that while we saw a lot of foreign targeting of the U.S. ahead of 2020 election, there was also a lot of domestic targeting," says Nathaniel Gleicher, Facebook's head of security policy. One campaign the company points to was the network operated by a U.S. based marketing firm, working on behalf of its clients, including a pro-Trump organization. In total, the company said there were 16 takedowns of coordinated inauthentic behavior networks, or disinformation campaigns, ahead of the 2020 elections. Of those 16 networks, five originated in Russia, five originated in Iran, and five originated in the the U.S. One originated in China.
Security

Top Meat Supplier is the Latest Victim of a Cyberattack (axios.com) 45

Major meat supplier JBS USA was the latest victim of an organized cybersecurity attack, with servers in North American and Australian affected, the company said Sunday. From a report: Why it matters: JBS USA is the largest producer of beef in the country, The Hill notes, and also is a major supplier of poultry and pork. The disclosure of the attack comes as cyber threats have picked up over the last year. Last month, Colonial Pipeline was taken offline by its operator because of a cyberattack.

In March, a cyber-espionage unit backed by the Chinese government resulted in 30,000 U.S. victims, including many small businesses and local governments. Earlier this year, the U.S. intelligence community assessed that Russia was responsible for the major SolarWinds attack. Nine federal agencies and more than 100 private sector groups were compromised in the attack, per the Hill.

United States

Europe To US: Pass New Laws If You Want a Data-Transfer Deal (politico.eu) 42

The United States must pass new legislation to limit how its national security agencies access Europeans' data if Washington and Brussels are to hammer out a new deal on transferring people's digital information across the Atlantic, according to European Commission Vice President Vera Jourova. From a report: Speaking at POLITICO's AI summit on Monday, the Czech politician said the U.S. needed to create legally binding laws to provide European Union citizens' the ability to challenge bulk data collection by federal authorities in U.S. courts. The goal, she said, would be "to have legally binding rules, or rule, on the U.S. side guaranteeing this. It's of course the best and the strongest way to do that," said Jourova when asked if the Commission would accept a presidential executive order or would require new U.S. legislation to provide EU citizens with the power to sue over how U.S. national security agencies collected and used their data.
United States

SpongeBob and 'Transformers' Cost US Taxpayers $4 Billion, Study Says (nytimes.com) 143

An anonymous reader shares a report: Dismissed by critics and devoured by fans, "Transformers: Age of Extinction" was the top box office film in 2014, bringing in $1.1 billion, with more than three-quarters of those dollars coming from overseas. ViacomCBS's Paramount Pictures, which distributed the computer animated action-fest, saved much of that money by licensing the international rights through a complex strategy designed to avoid paying U.S. taxes, according to a study published on Tuesday by the Centre for Research on Multinational Corporations, a nonprofit group funded in part by the Dutch Ministry of Foreign Affairs.

It is common practice for multinational corporations to take advantage of tax shelters. The report offers a rare look at how one company has pulled it off. ViacomCBS, a media giant that came into being after the 2019 merger of the sibling companies, has used the same strategy for all its entertainment properties, according to the report. Since 2002, ViacomCBS and its predecessor companies Viacom and CBS together avoided paying $3.96 billion in U.S. corporate income tax through a system that involved subsidiaries in Barbados, the Bahamas, Luxembourg, the Netherlands and Britain, according to the report. Much of the $30 billion in non-U.S. royalty revenue brought in by the company's film and TV franchises, such as "SpongeBob," "Star Trek" and "Mission: Impossible," has not been subject to corporate taxes, the study determined.

United States

Two New Laws Restrict Police Use of DNA Search Method (nytimes.com) 80

New laws in Maryland and Montana are the first in the nation to restrict law enforcement's use of genetic genealogy, the DNA matching technique that in 2018 identified the Golden State Killer, in an effort to ensure the genetic privacy of the accused and their relatives. From a report: Beginning on Oct. 1, investigators working on Maryland cases will need a judge's signoff before using the method, in which a "profile" of thousands of DNA markers from a crime scene is uploaded to genealogy websites to find relatives of the culprit. The new law, sponsored by Democratic lawmakers, also dictates that the technique be used only for serious crimes, such as murder and sexual assault. And it states that investigators may only use websites with strict policies around user consent. Montana's new law, sponsored by a Republican, is narrower, requiring that government investigators obtain a search warrant before using a consumer DNA database, unless the consumer has waived the right to privacy.

The laws "demonstrate that people across the political spectrum find law enforcement use of consumer genetic data chilling, concerning and privacy-invasive," said Natalie Ram, a law professor at the University of Maryland who championed the Maryland law. "I hope to see more states embrace robust regulation of this law enforcement technique in the future." Privacy advocates like Ms. Ram have been worried about genetic genealogy since 2018, when it was used to great fanfare to reveal the identity of the Golden State Killer, who murdered 13 people and raped dozens of women in the 1970s and '80s. After matching the killer's DNA to entries in two large genealogy databases, GEDmatch and FamilyTreeDNA, investigators in California identified some of the culprit's cousins, and then spent months building his family tree to deduce his name -- Joseph James DeAngelo Jr. -- and arrest him.

Education

California's Controversial Math Overhaul Focuses on Equity (latimes.com) 308

A plan to reimagine math instruction for 6 million California students has become ensnared in equity and fairness issues -- with critics saying proposed guidelines will hold back gifted students and supporters saying it will, over time, give all kindergartners through 12th-graders a better chance to excel. From a report: The proposed new guidelines aim to accelerate achievement while making mathematical understanding more accessible and valuable to as many students as possible, including those shut out from high-level math in the past because they had been "tracked" in lower level classes. The guidelines call on educators generally to keep all students in the same courses until their junior year in high school, when they can choose advanced subjects, including calculus, statistics and other forms of data science.

Although still a draft, the Mathematics Framework achieved a milestone Wednesday, earning approval from the state's Instructional Quality Commission. The members of that body moved the framework along, approving numerous recommendations that a writing team is expected to incorporate. The commission told writers to remove a document that had become a point of contention for critics. It described its goals as calling out systemic racism in mathematics, while helping educators create more inclusive, successful classrooms. Critics said it needlessly injected race into the study of math. The state Board of Education is scheduled to have the final say in November.

China

China Allows Couples To Have Three Children (bbc.com) 276

China has announced that it will allow couples to have up to three children, after census data showed a steep decline in birth rates. From a report: China scrapped its decades-old one-child policy in 2016, replacing it with a two-child limit which has failed to lead to a sustained upsurge in births. The cost of raising children in cities has deterred many Chinese couples. The latest move was approved by President Xi Jinping at a meeting of top Communist Party officials. It will come with "supportive measures, which will be conducive to improving our country's population structure, fulfilling the country's strategy of actively coping with an ageing population and maintaining the advantage, endowment of human resources," according to Xinhua news agency.
The Military

YouTube Channel Remembers and Preserves Ads From US Military's TV Service (stripes.com) 18

The American Forces Network is a U.S. government TV and radio broadcast service provided by the military for overseas personnel. But there's an interesting quirk. As an official Department of Defense product, it's not allowed to run ads or even mention commercial products, according to Stars and Stripes. "Instead, it lets commanders put out messages about force protection, weather, current events and base services."

And that's where things get creative...

Killer vending machines, security-conscious hamsters and a roommate who devolves into a caveman. These are some of the memorable features of Garry Terrell's vast collection of military-grade videos from the American Forces Network and its predecessor, the Armed Forces Radio and Television Service. The son of a former U.S. soldier, Terrell is trying to preserve "all things AFN/AFRTS," and boasts over 3,600 videos on the YouTube channel AFRTSfan. He began his collection nearly three decades ago, after learning that little had been done to save the many AFN spots that serve as a touchstone for troops and military families who've lived overseas.

The military-made productions fill what would normally be ad time in broadcasts back home... Because they're broadcast across various theaters, the ads served as "kind of like this bonding thing" for kids' friend groups frequently reshaped by duty station changes, said Sabine Brown, an airman's daughter who grew up in Germany in the 80s and 90s. For Terrell, whose mother is German, "it was just my local TV and radio provider" growing up on the bases where his father served as a career U.S. soldier in the 70s and 80s. He took it for granted until the early 90s Base Realignment and Closure process threatened to shutter bases he'd grown up on.

"Fearing that AFN might also go away, I decided to try and collect some AFN radio and TV items to add to my ever-growing memory book of Germany," he said in an email. "I felt like I was in a race against time."

He began contacting and befriending AFN staff and alumni, growing his collection through contributions from his expanding network of AFN insiders and "superfans." He started sharing this burgeoning library on YouTube over a decade ago, creating something of a time capsule, with spots that run the gamut from cringe-inducing, silly or lame to fun, brilliant and truly memorable.

The article notes that the videos once were even affectionately lampooned in a duet by two folk-singing Air Force pilots — which apparently remembers, among other things, the AFN ad illustrating the importance of the power-of-attorney by re-dubbing an old Hercules movie.

Slashdot Top Deals