Stories
Slash Boxes
Comments

SoylentNews is people

Log In

Log In

Create Account  |  Retrieve Password


Site News

Join our Folding@Home team:
Main F@H site
Our team page


Funding Goal
For 6-month period:
2022-07-01 to 2022-12-31
(All amounts are estimated)
Base Goal:
$3500.00

Currently:
$438.92

12.5%

Covers transactions:
2022-07-02 10:17:28 ..
2022-10-05 12:33:58 UTC
(SPIDs: [1838..1866])
Last Update:
2022-10-05 14:04:11 UTC --fnord666

Support us: Subscribe Here
and buy SoylentNews Swag


We always have a place for talented people, visit the Get Involved section on the wiki to see how you can make SoylentNews better.

The Best Star Trek

  • The Original Series (TOS) or The Animated Series (TAS)
  • The Next Generation (TNG) or Deep Space 9 (DS9)
  • Voyager (VOY) or Enterprise (ENT)
  • Discovery (DSC) or Picard (PIC)
  • Lower Decks or Prodigy
  • Strange New Worlds
  • Orville
  • Other (please specify in comments)

[ Results | Polls ]
Comments:63 | Votes:77

posted by janrinok on Wednesday January 18 2023, @10:48PM   Printer-friendly

Unix is dead. Long live Unix!:

It's the end of an era. As The Reg covered last week, IBM has transferred development of AIX to India. Why should IBM pay for an expensive US-based team to maintain its own proprietary flavor of official Unix when it paid 34 billion bucks for its own FOSS flavor in Red Hat?

Here at The Reg FOSS desk, we've felt this was coming ever since we reported that Big Blue was launching new POWER servers which didn't support AIX – already nearly eight years ago. Even if it was visibly coming over the horizon, this is a significant event: AIX is the last proprietary Unix which was in active development, and constitutes four of the 10 entries in the official Open Group list.

Within Oracle, Solaris is in maintenance mode. Almost exactly six year ago, we reported that the next major release, Solaris 12, had disappeared from Oracle's roadmap. HPE's HP-UX is also in maintenance mode because there's no new hardware to run it on. Itanium really is dead now and at the end that's all HP-UX could run on. It's over a decade since we reported that HP investigated but canceled an effort to port it to x86-64.

The last incarnation of the SCO Group, Xinuos, is still around and offers not one but two proprietary UNIX variants: SCO OpenServer, descended from SCO Xenix, and UnixWare, descended from Novell's Unix. We note that OpenServer 10, a more modern OS based on FreeBSD 10, has disappeared from Xinuos's homepage. It's worth pointing out that the SCO Group was the company formerly known as Caldera, and isn't the same SCO as the Santa Cruz Operation which co-created Xenix with Microsoft in the 1980s.

There used to be two Chinese Linux distros which had passed the Open Group's testing and could use the Unix trademark: Inspur K/UX and Huawei EulerOS. Both companies have let the rather expensive trademark lapse, though. But the important detail here is that Linux passed and was certified as a UNIX™. And it wasn't just one distro, although both were CentOS Linux derivatives. We suspect that any Linux would breeze through because several many un-Unix-like OSes have passed before.

[...] Ever since Windows NT in 1993, Windows has had a POSIX environment. Now, with WSL, it arguably has two of them, and we suspect that if Microsoft were so inclined, it could have Windows certified as an official Unix-compatible OS.

[...] But this illustrates the difficulty of definining precisely what the word "Unix" means in the 21st century. It hasn't meant "based on AT&T code" since Novell bought Unix System Labs from AT&T in 1993, kept the code, and donated the trademark to the Open Group. Since that time, if it passes the Open Group's testing (and you pay a fee to use the trademark), it's UNIX™. Haiku hasn't so it isn't. Linux has so it is. But then so is z/OS, which is a direct descendant of OS/390, or IBM MVS as it was called when it was launched in 1974. In other words, an OS which isn't actually based on, similar to, or even related to Unix.


Original Submission

posted by janrinok on Wednesday January 18 2023, @08:06PM   Printer-friendly
from the stable-confusion dept.

US firm Getty Images on Tuesday threatened to sue a tech company it accuses of illegally copying millions of photos for use in an artificial intelligence (AI) art tool:

Getty, which distributes stock images and news photos including those of AFP, accused Stability AI of profiting from its pictures and those of its partners. Stability AI runs a tool called Stable Diffusion that allows users to generate mash-up images from a few words of text, but the firm uses material it scrapes from the web often without permission.

The question of copyright is still in dispute, with creators and artists arguing that the tools infringe their intellectual property and AI firms claiming they are protected under "fair use" rules.

Tools like Stable Diffusion and Dall-E 2 exploded in popularity last year, quickly becoming a global sensation with absurd images in the style of famous artists flooding social media.

Related:


Original Submission

posted by janrinok on Wednesday January 18 2023, @05:24PM   Printer-friendly
from the CAMM-do-attitude dept.

CAMM = Compression Attached Memory Module

CAMM to Usurp SO-DIMM Laptop Memory Form Factor Says JEDEC Member

So, farewell, SO-DIMM. After a quarter century of service in laptop, all-in-ones and other compact designs, it looks like the end of the road for SO-DIMM is in sight. JEDEC committee member and Dell Senior Distinguished Engineer, Tom Schnell, told PC World that the new 'CAMM Common Spec' will be the next RAM standard for laptops. There already seems to have been a lot of progress in the background, with the v0.5 spec already approved by 20 or so companies in the task group, and JEDEC expected to finalize the v1.0 spec in the second half of this year.

[...] The new information from PC World editor Gordon Ung's chat with Tom Schnell helps us weigh up some of the pros and cons of CAMM, and point to some ways it has progressed from Dell's pre-JEDEC-approved spec. Apparently, as well as improved density (more RAM capacity in a smaller space), CAMM is amenable to "scaling to ever higher clock speeds." Specifically, the new information indicates that the DDR5-6400 'brick wall' for SO-DIMMs will be shrugged off by CAMMs.

When CAMM reaches devices, there are a couple of tech advances which could help spur its adoption. We mentioned the faster DDR5 speeds above, but it is thought that CAMM could really take off when DDR6 arrives. Another appealing variation might be for adding LPDDR(6) memory to laptops. Traditionally LPDDR memory is soldered, so the new spring contact fitting modules might mean much better upgradability for the thinnest and lightest devices which tend to use LPDDR memory.

DIMM, memory module.

Previously: Dell Defends its Controversial New Laptop Memory (CAMM)


Original Submission

posted by mrpg on Wednesday January 18 2023, @02:40PM   Printer-friendly

Controversy erupts over non-consensual AI mental health experiment:

On Friday, Koko co-founder Rob Morris announced on Twitter that his company ran an experiment to provide AI-written mental health counseling for 4,000 people without informing them first, The Verge reports. Critics have called the experiment deeply unethical because Koko did not obtain informed consent from people seeking counseling.

Koko is a nonprofit mental health platform that connects teens and adults who need mental health help to volunteers through messaging apps like Telegram and Discord.

On Discord, users sign into the Koko Cares server and send direct messages to a Koko bot that asks several multiple-choice questions (e.g., "What's the darkest thought you have about this?"). It then shares a person's concerns—written as a few sentences of text—anonymously with someone else on the server who can reply anonymously with a short message of their own.

During the AI experiment—which applied to about 30,000 messages, according to Morris—volunteers providing assistance to others had the option to use a response automatically generated by OpenAI's GPT-3 large language model instead of writing one themselves (GPT-3 is the technology behind the recently popular ChatGPT chatbot).


Original Submission

posted by mrpg on Wednesday January 18 2023, @11:55AM   Printer-friendly

SEC sues law firm for client list in the Hafnium cyberattack:

The US Securities and Exchange Commission (SEC) has sued international law firm Covington & Burling for details about 298 of the biz's clients whose information was accessed by a Chinese state-sponsored hacking group in November 2020.

The data theft in question is the now-infamous Microsoft Exchange attack in which Hafnium exploited four zero-day vulnerabilities in the email platform to steal data from US-based defense contractors, law firms, and infectious disease researchers.

Covington was one of the breached law firms, and the intrusion gave the Beijing-backed cyberspies access to some of Covington's clients that are regulated by the US agency.

"Covington has admitted that a foreign actor intentionally and maliciously accessed the files of Covington's clients, including companies regulated by the Commission," the lawsuit says [PDF]. "In light of this reported breach, the Commission is seeking to determine whether the malicious activity resulted in violations of the federal securities laws to the detriment of investors."


Original Submission

posted by mrpg on Wednesday January 18 2023, @09:15AM   Printer-friendly
from the Hm... dept.

Airbus Begins Testing Autonomous Emergency Flight Tech:

If you've traveled by plane a handful of times, chances are you've been on an Airbus. The aerospace corporation's planes are some of the most commonly-used commercial aircraft in the world, comparable only with Boeing's 747 line and Antonov's An-24. Now, with a project titled DragonFly, there's a chance Airbus' passenger jets could eventually incorporate autonomous flight technology.

DragonFly is an initiative under Airbus UpNext, a division responsible for testing and validating new tech prior to rollout. In a blog post Thursday, UpNext shared that DragonFly focuses on "derisking" emergency operations by detecting issues and autonomously solving them if crew members are unable to take action. Airbus is hoping to achieve this through biomimicry, or engineering that takes inspiration from living things. It should come as no surprise that UpNext is modeling its autonomous system after an actual dragonfly, which uses its massive eyes to see in 360° and differentiate important landmarks.

"The systems we are developing and testing are similarly designed to review and identify features in the landscape that enable the aircraft to 'see' and safely maneuver within its surroundings," the division's blog post reads. At the DragonFly's core are a series of sensors, which work alongside computer algorithms to process visual data. These calculations are designed to help pilots land in low visibility and extreme weather conditions. In a situation in which the crew is busy or incapacitated, DragonFly will use these novel insights to land autonomously, redirecting to the nearest appropriate airport if necessary. UpNext claims the system will eventually reach a point where it can independently land at any airport in the world.


Original Submission

posted by mrpg on Wednesday January 18 2023, @06:30AM   Printer-friendly
from the ...-as-if-it-were-a-bad-thing dept.

Chuck E. Cheese still uses floppy disks in 2023, but not for long:

On Sunday, a Chuck E. Cheese employee named Stewart Coonrod posted a TikTok video that documents the process of installing a new song-and-dance show on an old Chuck E. Cheese animatronics system—a process that involves a 3.5-inch floppy disk and two DVDs. Coonrod says it is the last update before his store undergoes a remodel that will remove the animatronics altogether.

Coonrod's Chuck E. Cheese location in Darien, Illinois, was originally a Show-Biz Pizza restaurant but changed over to Chuck E. Cheese branding in 1991. It includes a single Chuck E. Cheese animatronics character (called "Cyberamics" in the parlance of the company) surrounded by four video screens in a setup called "Studio C," first introduced in 1998.

Currently, those 25-year-old setups are being phased out nationwide in favor of a remodel that replaces the animatronics character with a dance floor. It's the end of the line for Cyberamics, but a few stores still use them, and the parent company ships out updates on floppy and DVD to match the legacy system.


Original Submission

posted by mrpg on Wednesday January 18 2023, @03:45AM   Printer-friendly
from the Deep-into-that-darkness-peering dept.

Peering deep into the cellular universe: Allen Institute researchers map cell parts in 3D:

Our cells are built from smaller structures that specialize in the key tasks of life, from cell division to cellular trash collection. And how those smaller parts fit together in three dimensions can affect the health of cells and of the body.

Researchers at Seattle's Allen Institute for Cell Science and their colleagues have now developed a way to quantitatively map how these cellular components are arranged in space. Their approach, published in Nature, has the potential to be adapted broadly by scientists to investigate how cells operate.

The researchers analyzed more than 200,000 human stem cells at high resolution in three dimensions. They assessed the position of multiple internal structures, each visualized by a fluorescent label.

[...] The researchers found that some structures were always located in about the same place, whereas others showed more variability in their placement. They could measure how cellular organization shifted as cells entered cell division or otherwise changed state. And they could simulate cell transitions such as changes in the cytoskeleton that occur in cells at the edge of a cell colony. .


Original Submission

posted by mrpg on Wednesday January 18 2023, @12:59AM   Printer-friendly
from the riddle-me-$this dept.

Messenger billed as better than Signal is riddled with vulnerabilities:

Academic researchers have discovered serious vulnerabilities in the core of Threema, an instant messenger that its Switzerland-based developer says provides a level of security and privacy "no other chat service" can offer. Despite the unusually strong claims and two independent security audits Threema has received, the researchers said the flaws completely undermine assurances of confidentiality and authentication that are the cornerstone of any program sold as providing end-to-end encryption, typically abbreviated as E2EE.

Threema has more than 10 million users, which include the Swiss government, the Swiss army, German Chancellor Olaf Scholz, and other politicians in that country. Threema developers advertise it as a more secure alternative to Meta's WhatsApp messenger. It's among the top Android apps for a fee-based category in Switzerland, Germany, Austria, Canada, and Australia. The app uses a custom-designed encryption protocol in contravention of established cryptographic norms.

Researchers from the Zurich-based ETH research university reported on Monday that they found seven vulnerabilities in Threema that seriously call into question the true level of security the app has offered over the years. Two of the vulnerabilities require no special access to a Threema server or app to cryptographically impersonate a user. Three vulnerabilities require an attacker to gain access to a Threema server. The remaining two can be exploited when an attacker gains access to an unlocked phone, such as at a border crossing.


Original Submission

posted by mrpg on Tuesday January 17 2023, @10:15PM   Printer-friendly
from the Hunt3r_2 dept.

89% of the department's high-value assets didn't use multi-factor authentication:

More than a fifth of the passwords protecting network accounts at the US Department of the Interior—including Password1234, Password1234!, and ChangeItN0w!—were weak enough to be cracked using standard methods, a recently published security audit of the agency found.

[...] The results weren't encouraging. In all, the auditors cracked 18,174—or 21 percent—of the 85,944 cryptographic hashes they tested; 288 of the affected accounts had elevated privileges, and 362 of them belonged to senior government employees. In the first 90 minutes of testing, auditors cracked the hashes for 16 percent of the department's user accounts.

The audit uncovered another security weakness—the failure to consistently implement multi-factor authentication (MFA). The failure extended to 25—or 89 percent—of 28 high-value assets (HVAs), which, when breached, have the potential to severely impact agency operations.


Original Submission

posted by mrpg on Tuesday January 17 2023, @07:36PM   Printer-friendly
from the hopefully-tin-foil-hat-free dept.

Examining the Impact of 6G Telecommunications on Society:

With greater global connectivity, the case for 6G telecommunications has become more apparent than ever before. The generations of wireless cellular technology (or the Gs) have been incrementing every 10 years: 1G prior to 1990, 2G in 1990, 3G in 2000, 4G in 2010, and 5G in 2020. We expect 6G to roll out in 2030.

[...] The pace of technological development is now swifter than ever, but societal implications often become afterthoughts.

[...] In the lead-up to announcing the SDGs, Jeffrey D. Sachs—while he was special advisor to the U.N. secretary-general—proposed in April 2015 an integrated vision for sustainable development. The integrated approach would advance a "holistic vision of systems analysis, where we have to understand how natural, technological, and sociopolitical systems interact," Sachs said.

[...] A recent example that illustrates the point was the rollout of 5G in 2020. It required the installation of cellphone towers or masts. Because community members did not understand the benefits of the installations or were not sufficiently consulted, several of the towers were not renewed. Some even were set on fire. With fast advancements in AI expected thanks to 6G, the fear of technology and what it might or might not do continues to be discussed in many parts of the world.


Original Submission

posted by hubie on Tuesday January 17 2023, @04:51PM   Printer-friendly
from the I'm-sure-it-will-be-fine dept.

Over 120 PLC models contain a serious vulnerability—and no fix is on the way:

In 2009, the computer worm Stuxnet crippled hundreds of centrifuges inside Iran's Natanz uranium enrichment plant by targeting the software running on the facility's industrial computers, known as programmable logic controllers. The exploited PLCs were made by the automation giant Siemens and were all models from the company's ubiquitous, long-running SIMATIC S7 product series. Now, more than a decade later, Siemens disclosed today that a vulnerability in its S7-1500 series could be exploited by an attacker to silently install malicious firmware on the devices and take full control of them.

The vulnerability was discovered by researchers at the embedded device security firm Red Balloon Security after they spent more than a year developing a methodology to evaluate the S7-1500's firmware, which Siemens has encrypted for added protection since 2013. Firmware is the low-level code that coordinates hardware and software on a computer. The vulnerability stems from a basic error in how the cryptography is implemented, but Siemens can't fix it through a software patch because the scheme is physically burned onto a dedicated ATECC CryptoAuthentication chip. As a result, Siemens says it has no fix planned for any of the 122 S7-1500 PLC models that the company lists as being vulnerable.

Siemens says that because the vulnerability requires physical access to exploit on its own, customers should mitigate the threat by assessing "the risk of physical access to the device in the target deployment" and implementing "measures to make sure that only trusted personnel have access to the physical hardware." The researchers point out, though, that the vulnerability could potentially be chained with other remote access vulnerabilities on the same network as the vulnerable S7-1500 PLCs to deliver the malicious firmware without in-person contact. [...]

[...] "This separate crypto core is a very rudimentary chip. It's not like a big processor, so it doesn't really know who it's talking to or what's going on in the broader context," Red Balloon's Skipper says. "So if you can tell it the right things that you observed the processor telling it, it will talk to you as if you are the processor. So we can get in between the processor and the crypto core and then we basically tell it, 'Hey, we are the processor and we are going to give you some data and we want you to encrypt it.' And the little crypto core isn't going to question that. It just does it."

Siemens notes that the vulnerabilities are not related to the company's own firmware update process and do not give attackers the ability to hijack that distribution channel. But the fact that any S7-1500 can become a firmware-blessing oracle is significant and bestows a power that individual devices should not have, undermining the whole purpose of encrypting the firmware in the first place.

[...] Though Siemens says it is addressing the S7-1500 vulnerability in new models, the population of vulnerable 1500s in industrial control and critical infrastructure systems around the world is extensive, and these units will remain in use for decades.

"Siemens is saying that this will not be fixed, so it's not just a zero-day—this will remain a forever day until all the vulnerable 1500s go out of service," Cui says. "It could be dangerous to leave this unaddressed."


Original Submission

posted by janrinok on Tuesday January 17 2023, @02:05PM   Printer-friendly

The FTC has scheduled a hearing for August 2, well after the deal is supposed to close:

The US Federal Trade Commission (FTC) has thrown a monkey wrench into Microsoft's plan to acquire Activision. According to a scheduling order filed last week, the FTC's antitrust lawsuit hearing against the deal will not begin until August 2. This date is well past the contracted deadline of July 18, 2023, effectively triggering a breach in the agreement.

Technically, a failed closure would require Microsoft to pay Activision a $3 billion "breakup fee." However, since something outside of Microsoft's and Activision's control is causing the delay, it's more likely the two will have to start over and cut a new deal. What that means is as yet unclear.

The original agreement was to pay Activision $95 per share, a 40-percent premium over its then $65 market price. Since then, Activision's stock has traded in the mid-to-high 70s. It is currently priced at $76.90, theoretically putting Activision in a better bargaining position for a redeal.

However, Activision's public stance has been that it wants the merger just as much as Microsoft does. So it's within the realm of possibility that the two shake hands and say, "Same deal."

Microsoft and Activision agreed to the merger nearly a year ago. At the time, both companies expected to have the acquisition closed as early as November 2022. However, the record-breaking $68.7 billion buyout immediately got the attention of multiple regulators in several countries, including the FTC.


Original Submission

posted by janrinok on Tuesday January 17 2023, @11:23AM   Printer-friendly

The latest version of Pi's mainstream camera module has autofocus, HDR and wide angle:

Raspberry Pi has released an updated camera, Camera Module 3 (aka Camera v3 or Camera Module v3), with an MSRP of $25 for standard or $35 for the wide angle version. The new module brings more pixels, rivalling the High Quality Camera's 12MP while keeping the smaller sensor-on-a-board form factor. What's new about this tiny camera is autofocus. This is the first official Raspberry Pi camera with autofocus, though Arducam's High Resolution camera delivered that functionality last year.

The Raspberry Pi camera was the first official accessory from Raspberry Pi, way back in 2013. The original 5MP model was updated to v2 in 2016 which brought 8MP to the game. Then the cameras got a bit more "serious" with the 12MP Raspberry Pi High Quality Camera in 2020; this version brought interchangeable lenses and a plethora of choices for the keen photographer, but it's pricey and doesn't come with a lens.

Fast forward to 2023 and we have a new mainstream Pi camera, the Raspberry Pi Camera v3 which updates the original camera's sensor-on-a-board form factor to pack a 12MP Sony IMX708 sensor and auto focus. It also comes in four flavors: standard, wide angle, NOIR and NOIR wide angle.

Specs, comparisons to legacy cameras and test results available at Tom's Hardware.

Previously:


Original Submission

posted by janrinok on Tuesday January 17 2023, @08:37AM   Printer-friendly
from the old-school-AI dept.

With all the bruhaha around ChatGPT, GPT-3 and friends like: Jasper, Article Forge and growthbar, let me just reminisce about the summer of 1984 when I made a word-salad generator that would log on to (teenage enemy) BBSs at 4 in the morning and fill their pages with uncanny valley residing content peppered with local usernames and hot topics of the day, fed at a semi-human imitating 140-240 baud with occasional pauses "for thought" - sysops would sometimes listen to their servers and content dumped in at full speed sounds different than human driven keyboard output, but humans can be imitated...

Swerving back to the title content: Garage Band, similar to AI story writers, Garage Band is one of many Digital Audio Workstation programs out there, used by the likes of Moby, Ed Sheeran, Trent Reznor, and let's be honest: "Avid Pro Tools is the DAW of choice, being used by producers on 65% of the top 100 albums from the past 10 years." The thing about Garage Band is: if you have any recent Apple gear (we still have a 6 year old iPad mini), then you have it included with your OS: for free. If not, there are many many free, low cost, and not so low cost DAW tools out there, but focusing on the "so free it's bundled with the OS" Garage Band, which has gadzillions of tutorials available, let me just hit the high points of what I discovered yesterday after basically ignoring the depth of what DAWs have become over the last 40 years.

See, in 1983 I was directly programming the 4 channel sound synthesizer on Atari 400/800 computers, in 1989 I built a MIDI controlled sound synthesizer out of some PLDs and a (fixed point 16 bit) TI DSP. I briefly opened various DAW softwares over the years since then, including Garage Band about 5-6 years ago - even bought a little keyboard as controller input to Garage Band for the kids to see if they would take an interest (they didn't). At that time, I went just deep enough into the software to see the drum sequencer and the thousands upon thousands of synthesizer voices, fancy real instrument interfaces, etc. What I didn't discover at that time were the Autoplayers - which basically give the DAW operator a studio full of session musicians who can drum in various styles and auto-play appropriate melody lines, chord progressions, etc. on basically all the instruments, started with a single click, then tunable in three to thirty dimensions to whatever you may be looking for in your musical production.

Couple this with ChatGPT writing lyrics and a good singing synthesizer or two, and Pop music is going to have a hard time keeping up with the flood of semi-original studio quality productions coming out of pre-teens' bedrooms.

Still, after playing with it for a few hours yesterday, what's still lacking is the "soul" of the songs. Sure, it sounds professional, because it is more professionally played than most professional musicians can manage. There are only 12 tones in the scale and only so many chord progressions that "sound right" in western music, it wouldn't be too hard to run the gamut of available permutations - maybe copyright them all so we can finally beat Mickey Mouse at his own game: if every melody possible is copyrighted in 2023, there's no way to copyright any new ones...

Anyway, 13 year old school kids - given AI assistance in writing their poetry and music - can probably relate better to other 11-13 year old school kids about the issues that matter to them today than any corporate record producers ever could. If they can focus on their songwriting for more than a couple of hours, they are on a much more level playing field today than four guys from Liverpool having to get lucky hooking up with production, distribution and promotion sufficient to ignite their popularity.

And, I suppose that's the thing about AI generated writing, as well. If it's used as a tool, with a decent amount of care, feeding and editing of the output, it can help real writers write better articles in much less time than they used to have to invest. Too bad that it's also being used by bad writers putting in low effort to generate a flood of uncanny valley crap that takes far too much effort to spot as junk and sort it from good content.

Were you looking for a point? This is more of an Art-house post, the point is left to you: the reader / responder in the comments below. Find your own point, and share.


Original Submission