Stories
Slash Boxes
Comments

SoylentNews is people

SoylentNews is powered by your submissions, so send in your scoop. Only 16 submissions in the queue.

Log In

Log In

Create Account  |  Retrieve Password


Site News

Join our Folding@Home team:
Main F@H site
Our team page


Funding Goal
For 6-month period:
2022-07-01 to 2022-12-31
(All amounts are estimated)
Base Goal:
$3500.00

Currently:
$438.92

12.5%

Covers transactions:
2022-07-02 10:17:28 ..
2022-10-05 12:33:58 UTC
(SPIDs: [1838..1866])
Last Update:
2022-10-05 14:04:11 UTC --fnord666

Support us: Subscribe Here
and buy SoylentNews Swag


We always have a place for talented people, visit the Get Involved section on the wiki to see how you can make SoylentNews better.

Do you put ketchup on the hot dog you are going to consume?

  • Yes, always
  • No, never
  • Only when it would be socially awkward to refuse
  • Not when I'm in Chicago
  • Especially when I'm in Chicago
  • I don't eat hot dogs
  • What is this "hot dog" of which you speak?
  • It's spelled "catsup" you insensitive clod!

[ Results | Polls ]
Comments:86 | Votes:239

posted by martyb on Wednesday September 29 2021, @10:25PM   Printer-friendly
from the long-arm-of-the-law dept.

Russia arrests cybersecurity expert on treason charge:

The founder of one of Russia’s largest cybersecurity companies has been arrested on suspicion of state treason and will be held in a notorious prison run by the security services for the next two months, a Moscow court said on Wednesday.

The charges against Ilya Sachkov, founder of Group-IB, are classified and details of them were not immediately clear. State-run news agency Tass cited an anonymous source who said Sachkov denied passing on secret information to foreign intelligence services.

[...] Dmitry Peskov, president Vladimir Putin’s spokesman, told reporters on Wednesday that Sachkov’s arrest “had nothing to do with the business and investment climate in our country,” according to Interfax.

“He was in a grey area because of the industry he worked in. The secret services consider cybersecurity to be part of their territory. So either he crossed a line, or he crossed somebody’s interests,” said a person who has worked with Sachkov.

[...] In 2019, a court sentenced a former top FSB[*] cyber security official to 22 years on treason charges for passing information along to the US. A former senior executive at Kaspersky Lab, Russia’s top cyber security firm, was sentenced to 14 years in prison in the same case, details of which were not made public.

[*] Federal Security Service. Ever wonder how "Federal Security Service" is translated into "FSB" instead of "FSS"?

Wikipepida elaborates (emphasis added):

The Federal Security Service of the Russian Federation (FSB RF; Russian: Федеральная служба безопасности Российской Федерации (ФСБ), tr. Federal'naya sluzhba bezopasnosti Rossiyskoy Federatsii, IPA: [fʲɪdʲɪˈralʲnəjə ˈsluʐbə bʲɪzɐˈpasnəstʲɪ rɐˈsʲijskəj fʲɪdʲɪˈratsɨɪ]) is the principal security agency of Russia and the main successor agency to the Soviet Union's KGB. Its main responsibilities are within the country and include counter-intelligence, internal and border security, counter-terrorism, and surveillance as well as investigating some other types of grave crimes and federal law violations. It is headquartered in Lubyanka Square, Moscow's center, in the main building of the former KGB. According to the 1995 Federal Law "On the Federal Security Service", the director of the FSB is appointed by and directly answerable to, the president of Russia.

posted by martyb on Wednesday September 29 2021, @07:39PM   Printer-friendly
from the can-you-top-this? dept.

Physicists may have cracked the case of “Zen” stones balanced on ice pedestals:

Visit the Small Sea of Lake Baikal in Russia during the winter and you'll likely see an unusual phenomenon: a flat rock balanced on a thin pedestal of ice, akin to stacking Zen stones common to Japanese gardens. The phenomenon is sometimes called a Baikal Zen formation. The typical explanation for how these formations occur is that the rock catches light (and heat) from the Sun and this melts the ice underneath until just a thin pedestal remains to support it. The water under the rock refreezes at night, and it's been suggested that wind may also be a factor.

Now, two French physicists believe they have solved the mystery of how these structures form, according to a new paper published in the Proceedings of the National Academy of Sciences—and their solution has nothing to do with the thermal conduction of the stone. Rather, they attribute the formation to a phenomenon known as sublimation, whereby snow or ice evaporates directly into vapor without passing through a water phase. Specifically, the shade provided by the stone hinders the sublimation rates of the surrounding ice in its vicinity, while the ice further away sublimates at a faster rate.

Many similar formations occur naturally in nature, such as hoodoos (tall, spindly structures that form over millions of years within sedimentary rock), mushroom rocks or rock pedestals (the base has been eroded by strong dusty winds), and glacier tables (a large stone sitting precariously on top of a narrow pedestal of ice). But the underlying mechanisms by which they form can be very different.


Original Submission

posted by martyb on Wednesday September 29 2021, @04:49PM   Printer-friendly
from the jestsons-meet-skynet dept.

Amazon’s indoor camera drone is ready to fly around your house

Next up: cameras. Amazon's crazy indoor, flying drone camera—the ambiguously named "Ring Always Home Cam"—is actually for sale now in the US. This was announced a full year ago, but now it's available "exclusively by invitation" for $249.99. This is a "Day 1 Edition" (read: a beta product). So Amazon isn't letting just anyone buy it. You can request an invitation to give Amazon money on the product page.

In case you've not had enough dystopian future products:
Amazon’s Astro Robot is Straight Out of the Jetsons


Original Submission

posted by janrinok on Wednesday September 29 2021, @02:06PM   Printer-friendly

From: Techdirt

Content moderation is a can of worms. For Internet infrastructure intermediaries, it’s a can of worms that they are particularly poorly positioned to tackle. And yet Internet infrastructure elements are increasingly being called on to moderate content—content they may have very little insight into as it passes through their systems.

The vast majority of all content moderation happens on the “top” layer of the internet—such as social media and websites, places online that are the most visible to an average user. If a post violates a platform’s terms of service, the post is usually blocked or taken down. If a user continues to post content that violates a platform’s terms, then the user’s account is often suspended. These types of content moderation practices are increasingly understood by average Internet users.

Less often discussed or understood are the types of services facilitated via actors in the Internet ecosystem that both support and exist under the upper content layers of the Internet.

Many of these companies host content, supply cloud services, register domain names, provide web security, and many more features of what could be described as the plumbing services of the Internet. But instead of water and sewage, the Internet deals in digital information. In theory, these “infrastructure intermediaries” could moderate content, but for reasons of convention, legitimacy, and practicality they don’t usually do it on purpose.

However, some notable recent exemptions may be setting precedent.

Amazon Web Services removed Wikileaks from their system in 2010. Cloudflare kicked off the Daily Stormer. An Italian court ordered Cloudflare to remove a copyright infringing site. Amazon suspended hosting for Parler.

What does all this mean? Infrastructure may have the means to perform “content moderation,” but it is critical to consider the effects of this trend to prevent harming the Internet’s underlying architecture. In principle, Internet service providers, registries, cloud providers and other infrastructure intermediaries should be agnostic to the content which passes over their systems.

[...] Policymakers must consider the unintended impacts of content moderation proposals on infrastructure intermediaries. Legislating without due diligence to understand the impact on the unique role of these intermediaries could be detrimental to the success of the Internet, and an increasing portion of the global economy that relies on Internet infrastructure for daily life and work.

[...] Conducting impact assessments prior to regulation is one way to mitigate the risks. The Internet Society created the Internet Impact Assessment Toolkit to help policymakers and communities assess the implications of change—whether those are policy interventions or new technologies.

Policy changes that impact the different layers of the Internet are inevitable. But we must all ensure that these policies are well crafted and properly scoped to keep the Internet working and successful for everyone.

Austin Ruckstuhl is a Project & Policy Advisor at the Internet Society where he works on Internet impact assessments, defending encryption and supporting Community Networks as access solutions.

Should online content be controlled ? If yes, Is there a better way to censor online content and who should have the authority to do so ??


Original Submission

posted by martyb on Wednesday September 29 2021, @11:21AM   Printer-friendly
from the oo-ee-oo-ah-ah-ting-tang-walla-walla-bing-bang dept.

Great ape's consonant and vowel-like sounds travel over distance without losing meaning:

Researchers from the University of Warwick's Department of Psychology set out to collect empirical data to investigate the model. They selected a range of sounds from previously collected audio recordings of orangutan communications. Specific consonant-like and vowel-like signals were played out and re-recorded across the rainforest at set distances of 25, 50, 75 and 100 meters. The quality and content of the signals received were analyzed.

[...] The team found that although the quality of the signal may have degraded, the content of the signal was still intact—even at long distance. In fact the informational characteristics of calls remained uncompromised until the signal became inaudible. This calls into question the existing and accepted theory of language development.

Dr. Adriano Lameira, an evolutionary psychologist from the University of Warwick, led the study. He said:

"We used our bank of audio data recordings from our studies of orangutan in Indonesia. We selected the clear vowel-like and consonant-like signals and played them out and re-recorded them over measured distances in a rainforest setting. The purpose of this study was to look at the signals themselves and understand how they behaved as a package of information. This study is neat because it is only across distance that you can hope to assess this error limit theory—it disregards other aspects of communication like gestures, postures, mannerisms and facial expressions.

"The results show that these signals seem to be impervious to distance when it comes to encoding information.

Journal Reference:
Adriano R. Lameira, António Alexandre, Marco Gamba, et al. Orangutan information broadcast via consonant-like and vowel-like calls breaches mathematical models of linguistic evolution, Biology Letters (DOI: https://royalsocietypublishing.org/doi/10.1098/rsbl.2021.0302)


Original Submission

posted by martyb on Wednesday September 29 2021, @08:33AM   Printer-friendly

Quantum computing hits the desktop, no cryo-cooling required:

Extreme vacuums, mu metals and microkelvin-temperature cryogenic cooling: this is not a recipe for affordable, portable or easily scalable quantum computing power. But an Australian-born startup says it has developed a quantum microprocessor that needs none of these things. Indeed, it runs happily at room temperature. Right now, it's the size of a rack unit. Soon, it'll be the size of a decent graphics card, and before too long it'll be small enough to fit in mobile devices alongside traditional processors.

If this company does what it says it can, you'll be able to integrate the advantages of quantum into computers of just about any size, freeing this powerful new technology from the constraints of supercomputer size and expense. Quantum software and calculations won't need to be done through a fast connection to a mainframe or the cloud, it'll be done on-site where it's needed. Pretty disruptive stuff.

Quantum Brilliance was founded in 2019 on the back of research undertaken by its founders at the Australian National University, where they developed techniques to manufacture, scale and control qubits embedded in synthetic diamond.

[...] This field itself is not new – indeed, room-temperature quantum qubits have been around experimentally for more than 20 years. Quantum Brilliance's contribution to the field is in working out how to manufacture these tiny things precisely and replicably, as well as in miniaturizing and integrating the control structures you need to get information in and out of the qubits – the two key areas that have held these devices back from scaling beyond a few qubits to date.

"Because diamond is such a rigid material," says QB co-founder and COO Mark Luo over a Zoom call, "it's really able to hold a lot of these properties in place – that allow these quantum phenomena to be more stable compared to other systems out there. Given that rigidity, we can actually leverage off a lot of pre-existing classical control systems."

[...] The company has already built a number of "Quantum development kits" in rack units, each with around 5 qubits to work with, and it's placing them with customers already, for benchmarking, integration, co-design opportunities and to let companies start working out where they'll be advantageous once they hit the market in a ~50-qubit "Quantum Accelerator" product form by around 2025. "We think over a decade," says Luo, "we can even produce a quantum system-on-a-chip for mobile devices. Because this is truly material science technology that can achieve that."


Original Submission

posted by martyb on Wednesday September 29 2021, @05:50AM   Printer-friendly
from the what's-in-your-wallet? dept.

70% of Millennials Are Living Paycheck to Paycheck: Survey:

Millennials' wallets are rather skimpy.

Seventy percent of the generation said they're living paycheck to paycheck, according to a survey by PYMNTS and LendingClub, which analyzed economic data and census-balanced surveys of over 28,000 Americans. It found that about 54% of Americans live paycheck to paycheck, but millennials had the biggest broke energy.

By contrast, 40% of baby boomers and seniors said they live paycheck to paycheck, the least of any generation. Living paycheck to paycheck reflects economic needs and wants just as much, if not more than, incomes or wealth levels, according to the report. Age and family status also factor in greatly. This explains why millennials, who turn ages 25 to 40 this year, are struggling.

[...] It doesn't help that millennials have faced one economic challenge after another since the oldest of them graduated into the dismal job market of the 2008 financial crisis. A dozen years later, many are still grappling with the lingering effects of The Great Recession, struggling to build wealth while trying to afford soaring costs for things like housing and healthcare and shouldering the lion's share of America's student-loan debt.

The pandemic threw yet another wrench into their plans by giving them their second recession and second housing crisis before the age of 40. The report acknowledges that the pandemic played a major role in that stretched thin feeling.

[...] It seems, then, that it's a combination of external economic circumstances, a precarious life stage, and some spending habits that are leaving millennials feeling strapped for cash.


Original Submission

posted by martyb on Wednesday September 29 2021, @03:07AM   Printer-friendly
from the more-like-"Big-Brother"-on-wheets dept.

Amazon’s Astro robot is straight out of The Jetsons:

Amazon is rolling out (literally) a robot that can help monitor your home. Powered by Amazon Alexa and a bunch of artificial intelligence (AI) technology while patrolling about on a set of wheels, the Astro robot can handle numerous tasks, from providing a view of inside the home when you’re out to delivering a message to Mom.

The robot carries the same name as the dog from The Jetsons, but its simple face, rolling mechanism and, of course, advanced tech, make it much more similar to Rosey. Amazon's Astro relies on AI, sensors, computer vision, and voice and edge computing to perform various workloads.

For example, Astro can roll around your home and give you a live view of what it sees. That means you can check on your pet, look out for intruders, or make sure you turned the oven off. Astro is mobile thanks to a technology Amazon has dubbed Intelligent Motion. It uses simultaneous location and mapping (SLAM) to ensure Astro makes its way around without crashing into stuff—even if someone forgot something on the floor that wasn’t there before.

[...] Astro will ultimately be available for $1,449.99. However, there’s a $999.99 introductory price as part of Amazon’s Day 1 Editions early access program, and that includes a six-month trial of Ring Protect Pro. Amazon plans to start inviting participants to buy Astro in the US “later this year.”


Original Submission

posted by martyb on Wednesday September 29 2021, @12:20AM   Printer-friendly
from the what's-in-a-name? dept.

We’re about to run out of Atlantic hurricane names:

It has been another record-setting hurricane season in the Atlantic basin, with a total of 19 named storms so far. It has been so busy that, with still more than two months to go until the season's end, the National Hurricane Season is probably going to run out of names for the second year in a row.

Currently in the Atlantic, Hurricane Sam is rampaging across open waters. Fortunately this major hurricane is unlikely to threaten any landmasses. Behind Sam, it's possible that Victor and Wanda will form during the next few days. Neither of these storms, either, poses any immediate threat to land.

If they do form, these two storms would exhaust the allotment of "official" names the National Hurricane Season uses for tropical storms and hurricanes. (Because the letters Q, U, X, Y, and Z are not commonly used for names, they don't appear on the list of Atlantic names). In years past, the Miami-based hurricane center would then start assigning Greek letters for excess named storms.

[...] And so after last season, the World Meteorological Organization—which is designated by the United Nations to handle weather issues—decided to create a supplemental list of names in lieu of the Greek alphabet. These storm names, beginning with Adria, Braylen, and Caridad, will come into play this year if more than two named storms form during the remainder of 2021. This seems likely given that about 25 percent of activity during any given Atlantic season occurs after October 1. One particular area of concern next month is the Western Caribbean Sea, which has sea surface temperatures several degrees above normal.


Original Submission

posted by martyb on Tuesday September 28 2021, @08:47PM   Printer-friendly
from the They-wouldn't-do-THAT...-would-they? dept.

CIA developed plans to kidnap Julian Assange, per report

The Trump administration's CIA actively developed plans to kidnap or assassinate Wikileaks founder Julian Assange during his seclusion in London's Ecuadorian embassy, according to a detailed new report from Yahoo News. Scenarios included abducting Assange from the embassy, intercepting a Russian effort to extract him, or an outright assassination attempt. While none of the operations were ever approved, they paint an alarming portrait of intelligence agencies' ongoing obsession with Wikileaks and its controversial founder.

As sources, Yahoo cites conversations with more than 30 former US officials. Among those, eight provided details on plans to kidnap Assange.

The report mostly details operations developed during the Trump administration, which placed fewer restraints on the CIA and was less troubled by the implications of launching direct operations against a figure many saw as a journalist. The issue became particularly heated in March of 2017, when Wikileaks published a catalog of hacking tools developed by the CIA. After that, "WikiLeaks was a complete obsession of Pompeo's," a source told Yahoo.

Also at The Guardian and The Hill.

Previously: Wikileaks and CIA Hacking Tools -- Security Firms Assess Impact as Tech Companies Offered Access


Original Submission

posted by martyb on Tuesday September 28 2021, @06:01PM   Printer-friendly
from the clearly-there's-a-problem dept.

'Chilling': Facial recognition firm Clearview AI hits watchdog groups with subpoenas:

Clearview AI, the controversial facial recognition company that scrapes public images from social media to aid law enforcement probes, has subpoenaed internal documents from some of the groups that first exposed its activities.

The firm served subpoenas in August to civil society coalition Open The Government, its policy analyst Freddy Martinez and the police accountability nonprofit that he’d previously founded, Lucy Parsons Labs — demanding any correspondence they’d had with journalists about Clearview and its leaders, as well as information they’d uncovered about the company and its founders in public records requests, over the last four years.

The subpoenas, obtained by POLITICO, could draw the groups into lengthy court battles and, they argue, dissuade others from taking on Clearview or other companies working on potentially problematic technologies.

David Brody, counsel and senior fellow for privacy and technology at the nonprofit Lawyers’ Committee for Civil Rights Under Law, said the move could be seen as an attempt to deter the advocacy groups, and journalists, from future investigations.

[...] Authorities have been using Clearview’s software for several years to try to match images in government databases and surveillance footage with billions of personal photos posted to the internet. Privacy, human rights and civil liberties advocates have long raised alarm about facial recognition technology as both intrusive and biased. It has been shown to disproportionately misidentify women and people of color.

Clearview's attorney Andrew J. Lichtman said in a statement that “Clearview AI is vigorously defending itself against claims in multi-district litigation and therefore has served subpoenas to appropriate parties relating to its defense.”


Original Submission

posted by janrinok on Tuesday September 28 2021, @03:15PM   Printer-friendly
from the it's-not-dead-it's-just-resting dept.

Hubble telescope helps find six 'dead' galaxies from the early universe:

You'd think large galaxies in the early universe would have had plenty of 'fuel' left for new stars, but a recent discovery suggests that wasn't always the case. Astronomers using the Hubble Space Telescope and the Atacama Large Millimeter/Submillimeter Array (ALMA) have found six early galaxies (about 3 billion years after the Big Bang) that were unusually "dead" — that is, they'd run out of the cold hydrogen necessary for star formation. This was the peak period for star births, according to lead researcher Kate Whitaker, so the disappearance of that hydrogen is a mystery.

The team found the galaxies thanks to strong gravitational lensing, using galaxy clusters to bend and magnify light from the early universe. Hubble identified where stars had formed in the past, while ALMA detected cold dust (a stand-in for the hydrogen) to show where stars would have formed if the necessary ingredients had been present.

The galaxies are believed to have expanded since, but not through star creation. Rather, they grew through mergers with other small galaxies and gas. Any formation after that would have been limited at most.

From CNET we read:

"The most massive galaxies in our universe formed incredibly early, just after the Big Bang happened," Kate Whitaker, a professor of astronomy at University of Massachusetts-Amherst and lead author of a new study, said in a statement. "But for some reason, they have shut down. They're no longer forming new stars."

It turns out, some old galaxies merely ran low on star fuel, or cold gas, early on in their lifetimes. The results of the group's study were published Wednesday in the journal Nature and could rewrite our knowledge of how the universe evolved.

Journal Reference:
Katherine E. Whitaker, Christina C. Williams, Lamiya Mowla, et al. Quenching of star formation from a lack of inflowing gas to galaxies, Nature (DOI: 10.1038/s41586-021-03806-7)


Original Submission

posted by FatPhil on Tuesday September 28 2021, @12:31PM   Printer-friendly
from the when-a-crash-is-more-than-a-crash dept.

Tesla owners can now request ‘Full Self-Driving’, prompting criticism from regulators and safety advocates:

SAN FRANCISCO — Tesla began letting owners request its “Full Self-Driving” software early Saturday, opening up for wide release its most advanced driver-assistance suite and signaling thousands of drivers will soon be on the road with the unregulated and largely untested features.

It’s the first time the company has let typical owners upgrade to the software it terms self-driving, although the name itself is an exaggeration by industry and regulatory standards. Tesla chief executive Elon Musk had said owners would be able to request this weekend the upgraded suite of advanced driver-assistance features, which Tesla says is a beta, although they wouldn’t receive the capabilities right away.

Owners will have to agree to let Tesla monitor their driving behavior through the company insurance calculator. Tesla issued a detailed guide specifying the criteria under which they would be graded. If their driving is deemed to be “good” over a seven day period, Musk said on Twitter, “beta access will be granted.”

It’s the latest twist in a saga that has regulators, safety advocates and family of Tesla crash victims up in arms because of the potential for chaos as the technology is unleashed on real-world roads. Until now, roughly 2,000 beta testers have had access to the technology.


Original Submission

This weekend’s release would make it available to those who have purchased the now-$10,000 software upgrade, and those who have purchased a subscription from Tesla for about $100 to $200 per month — if they can first pass Tesla’s safety monitoring.

[...] already, investigators are looking at its predecessor, dubbed Autopilot. That navigates vehicles from highway on-ramp to off-ramp, can park and summon cars, with a driver monitoring the software. The National Highway Traffic Safety Administration opened an investigation last month into around a dozen crashes involving parked emergency vehicles while Autopilot was engaged.

“Full Self-Driving” expands Autopilot’s capabilities to city streets and offers the ability to navigate the vehicle turn-by-turn, from point A to point B.

Tesla and NHTSA did not immediately respond to requests for comment. Tesla has repeatedly argued that Autopilot is safer than cars in manual driving when the modes are compared using Tesla data and information from NHTSA.

Musk has said “Autopilot is unequivocally safer” than typical cars. The data is not directly comparable, however, because Autopilot is supposed to be activated on certain types of roads in conditions where it can function properly. [...]

posted by martyb on Tuesday September 28 2021, @09:46AM   Printer-friendly
from the you-can-lead-a-horse-to-water dept.

A pill to treat Covid-19: 'We're talking about a return to, maybe, normal life'

Within a day of testing positive for covid-19 in June, Miranda Kelly was sick enough to be scared. At 44, with diabetes and high blood pressure, Kelly, a certified nursing assistant, was having trouble breathing, symptoms serious enough to send her to the emergency room.

[....] But the Kellys, who live in Seattle, had agreed just after their diagnoses to join a clinical trial at the nearby Fred Hutch cancer research center that's part of an international effort to test an antiviral treatment that could halt covid early in its course.

By the next day, the couple were taking four pills, twice a day. Though they weren't told whether they had received an active medication or placebo, within a week, they said, their symptoms were better. Within two weeks, they had recovered.

"I don't know if we got the treatment, but I kind of feel like we did," Miranda Kelly said. "To have all these underlying conditions, I felt like the recovery was very quick."

[....] At least three promising antivirals for covid are being tested in clinical trials, with results expected as soon as late fall or winter, said Carl Dieffenbach, director of the Division of AIDS at the National Institute of Allergy and Infectious Diseases, who is overseeing antiviral development.

"I think that we will have answers as to what these pills are capable of within the next several months," Dieffenbach said.

An effective treatment would be great for those who get covid despite the availability of, or even having received, vaccinations.


Original Submission

posted by chromas on Tuesday September 28 2021, @07:07AM   Printer-friendly
from the OpenSSH dept.

OpenSSH 8.8 has been released and with it comes a heads up that there will be major changes to how the scp utility operates, starting in one of the next releases. Specifically, scp has been retooled to use the SFTP protocol under the hood. This will leave most behavior unchanged and most times there will be no perceived difference. However, some scripts which make use of globbing might need minor adjustment to work properly in the future:

A near-future release of OpenSSH will switch scp(1) from using the legacy scp/rcp protocol to using SFTP by default.

Legacy scp/rcp performs wildcard expansion of remote filenames (e.g. "scp host:* .") through the remote shell. This has the side effect of requiring double quoting of shell meta-characters in file names included on scp(1) command-lines, otherwise they could be interpreted as shell commands on the remote side.

This creates one area of potential incompatibility: scp(1) when using the SFTP protocol no longer requires this finicky and brittle quoting, and attempts to use it may cause transfers to fail. We consider the removal of the need for double-quoting shell characters in file names to be a benefit and do not intend to introduce bug- compatibility for legacy scp/rcp in scp(1) when using the SFTP protocol.

Another area of potential incompatibility relates to the use of remote paths relative to other user's home directories, for example - "scp host:~user/file /tmp". The SFTP protocol has no native way to expand a ~user path. However, sftp-server(8) in OpenSSH 8.7 and later support a protocol extension "expand-path@openssh.com" to support this.

The new behavior is now present in scp but currently off by default. It can be tested using the temporary -s option. Later, the -O option will force use of the original scp/rcp protocol for the cases where SFTP may be unavailable or incompatible.

Compared to scp/rcp, SFTP is a new protocol but only relatively speaking. Importantly, it has been engineered from the ground up to operate as securely as possible. In contrast, scp has been written without a formal specification other than to operate like the late rcp did, but over SSH. Currently, scp requires expansion of glob patterns using the remote system's shell. That can be eliminated by dropping scp and switching to SFTP beneath it all.

Previously:
(2019) Oh, SSH, IT Please see this: Malicious Servers can fsck with your PC's Files During scp Slurps
(2018) OpenSSH SFTP Chroot Code Execution
(2014) OpenSSH No Longer has to Depend on OpenSSL


Original Submission