It’s been 20 years since the launch of Mac OS X

It’s macOS 11 now, but the DNA is the same.

Promotional image from Apple event.

Enlarge / When presenting a new path forward, Apple CEO Tim Cook put the ARM transition up with the Mac's other big transitions: PowerPC, MacOS X, and Intel. (credit: Apple)

It was two decades ago to the day—March 24, 2001—that Mac OS X first became available to users the world over. We're not always big on empty sentimentality here at Ars, but the milestone seemed worthy of a quick note.

Of course, Mac OS X (or macOS 10 as it was later known) didn't quite survive to its 20th birthday; last year's macOS Big Sur update brought the version number up to 11, ending the reign of X.

But despite its double life on x86 and ARM processors and its increasingly close ties to iOS and iPadOS, today's macOS is still very much a direct descendant of that original Mac OS X release. Mac OS X, in turn, evolved in part from Steve Jobs' NeXT operating system—which had recently been acquired by Apple—and its launch was the harbinger of the second Jobs era at Apple.

Read 6 remaining paragraphs | Comments

Facebook shuts down hackers who infected iOS and Android devices

Social media platform used to spread malware that spied on Uyghurs.

Stock photo of skull and crossbones on a smartphone screen.

Enlarge (credit: Getty Images)

Facebook said it has disrupted a hacking operation that used the social media platform to spread iOS and Android malware that spied on Uyghur people from the Xinjiang region of China.

Malware for both mobile OSes had advanced capabilities that could steal just about anything stored on an infected device. The hackers, which researchers have linked to groups working on behalf of the Chinese government, planted the malware on websites frequented by activists, journalists, and dissidents who originally came from Xinjiang and had later moved abroad.

“This activity had the hallmarks of a well-resourced and persistent operation while obfuscating who’s behind it,” Mike Dvilyanski, head of Facebook cyber espionage investigations, and Nathaniel Gleicher, the company’s head of security policy, wrote in a post on Wednesday. “On our platform, this cyber espionage campaign manifested primarily in sending links to malicious websites rather than direct sharing of the malware itself.”

Read 7 remaining paragraphs | Comments

Former Trump vaccine czar fired over substantiated sexual harassment claim

GSK hired a law firm for an investigation, which substantiated the claims.

Two men in suits stand by a podium.

Enlarge / President Donald Trump listens as Moncef Slaoui, the former head of GlaxoSmithKlines vaccines division, speaks about coronavirus vaccine development in the Rose Garden of the White House on May 15, 2020, in Washington, DC. (credit: Drew Angerer | Getty Images)

Moncef Slaoui, the former head scientist for the Trump administration’s Operation Warp Speed, has been fired from his position as chair of a biomedical company’s board of directors after an internal investigation substantiated allegations of sexual harassment against him.

Slaoui was chair of the board directors for Galvani Bioelectronics, a company formed through a partnership between pharmaceutical giant GlaxoSmithKline and Verily Life Sciences (formerly Google Life Sciences). GSK is the majority shareholder of Galvani.

According to an announcement by GSK, the company received a letter from one of its employees containing allegations of sexual harassment and “inappropriate conduct” by Slaoui, which occurred several years ago while he was working there.

Read 6 remaining paragraphs | Comments

Daily Deals (3-24-2021)

Best Buy is running a 3-day flash sale with discounts on a range of products. Among other things, you can pick up a Lenovo Yoga 7i 14″ convertible laptop with an Intel Core i7 Tiger Lake processor, 12GB of RAM, and 512GB of storage for $730. Mea…

Best Buy is running a 3-day flash sale with discounts on a range of products. Among other things, you can pick up a Lenovo Yoga 7i 14″ convertible laptop with an Intel Core i7 Tiger Lake processor, 12GB of RAM, and 512GB of storage for $730. Meanwhile Amazon and B&H are selling the latest iPad […]

The post Daily Deals (3-24-2021) appeared first on Liliputing.

Having it all: Protecting biodiversity, carbon capture, and fish stocks

Researchers scan the world’s oceans to find ideal locations for protection.

Image of a fishing boat.

Enlarge (credit: NOAA)

Right now, only 2.7 percent of the ocean is part of a marine protection area, a far cry from the goal of 30 percent by 2030 that many countries have pledged to reach. But even as the coastal nations of the world begin to make headway on adding protections, a group of researchers is pretty sure it has found a better way of going about things.

The group's research, recently published in Nature, suggests ways to optimize marine protected areas around the globe. The study, done by more than two dozen international researchers, offers insight in the best ways to bolster fish population, biodiversity, and carbon sequestration potential in the ocean.

"The world has decided to invest more into marine protected areas, and we want to make sure that there is a good return on that investment, and for that we need a plan," said Boris Worm, one of the paper's authors and a marine biologist at Dalhousie University in Nova Scotia.

Read 13 remaining paragraphs | Comments

Slack pledges update to “Connect DM” after realizing harassment exists

Users immediately spotted the gaping loophole the company didn’t notice.

Shadowy Slack usage.

Enlarge / Shadowy Slack usage. (credit: Pavlo Gonchar | SOPA Images | LightRocket | Getty Images)

Ubiquitous work-chat platform Slack this morning rolled out a new feature, Connect DM, that allows users to send direct messages to people they don't work with. Hours later, the company is already saying "our bad" and promising an update after users demonstrated almost immediately how easy it is to use Connect DM to abuse or harass others.

Slack first rolled out Slack Connect last year, which allowed for companies to create channels shared between multiple Slack servers to facilitate business operations. Basically, if you work for Widget Film Production Inc. and you are collaborating on a project with Venue Studio Corp., Widget employees and Venue employees can both join a shared Slack channel to discuss location scouting for their upcoming project.

Today, however, Slack added a feature that allows anyone in the world with a paid account to send a direct message request to any other Slack user in the world (even if they do not have a paid account). Ilan Frank, Slack's VP of product, told tech news site Protocol that Slack is deliberately positioning itself to become the chat platform of choice for the business world. "When someone opens up their phone, if they're connecting with their friends, they click on Facebook or WhatsApp," Frank said. "If they're connecting with someone they work with, regardless of where that person works, they should be clicking on Slack."

Read 5 remaining paragraphs | Comments

RIAA: Stream-Ripper ‘Yout’ Would Have No Business If Users Could Download From YouTube

YouTube-ripping service Yout and the RIAA are continuing their legal battle in the United States. Yout believes its service is legal but the RIAA insists that its purpose is to provide users with pirated downloads instead of lawful streams. In its latest response, the RIAA rejects the claim that Yout does little more than a regular browser might, noting that if that was the case, it would have no business.

From: TF, for the latest news on copyright battles, piracy and more.

RIAAAfter the RIAA’s attempt last year to have youtube-dl removed from Github, YouTube-ripping service Yout.com carried out a preemptive strike in an effort to have itself declared legal.

Yout.com filed a complaint in a Connecticut court, arguing that previous actions by the RIAA to have its homepage delisted from Google, based on alleged circumvention of YouTube’s ‘rolling cipher’ technology, were wrongful and damaged its business.

Early Argument and Responses

In its motion to dismiss, the RIAA said that just because Yout had “figured out” how to defeat YouTube’s cipher, that didn’t mean the mechanism could not be considered a Technological Protection Measure (TPM) under section 1201 of the DMCA. The industry group also noted that under 17 U.S.C. § 512(f), remedies are only available for misrepresentations in notices regarding alleged copyright infringement, not those that allege circumvention.

Last month, Yout countered the RIAA’s motion to dismiss, arguing that it does not decrypt, bypass or avoid any measures on YouTube. It did not ‘abuse’ YouTube’s technological measures, it ‘used’ them, since YouTube freely gives up signature values to anyone who requests them, including people using only a browser.

Yout further claimed that in order to prove a violation under section 1201, the RIAA must show not only circumvention but also indicate which works had been infringed. Yout also argued that in response to the RIAA’s claim that no remedy is available for misrepresentations regarding circumvention, the RIAA’s notices to Google imply contributory copyright infringement, for which remedies are available.

Response To Yout’s Opposition of RIAA’s Motion to Dismiss

With no obvious end in sight for the legal ping-pong, the RIAA has now filed its response to Yout’s rejection of the industry group’s motion to dismiss. It is notably blunt, leveraging Yout’s description of its service against it, and offering more information on what should be considered a TPM and when circumvention takes place.

“Whether the Yout service circumvents turns on two questions: whether the rolling cipher is an effective TPM and whether the Yout service circumvents that TPM. While Plaintiff tries to confuse the issues, the controlling legal standards and the complaint’s own allegations make clear that the answer to both questions is yes,” the RIAA writes.

Effective Technological Protection Measures

The industry group highlights Yout’s claim that since it was able to obtain YouTube’s signature values without using a “password, key, or other secret knowledge”, then the video platform’s rolling cipher is ineffective. According to the RIAA, this ignores that, under law, a TPM “effectively controls access to a work” if, “in the ordinary course of its operation” it does so without further “processing or treatment”. Yout previously stated that a technological process was required to access the file.

That the process to obtain the signature values was easy for Yout, is irrelevant, the RIAA adds. The industry group says that case law indicates that the effectiveness of a TPM must be assessed from the “level of the ordinary consumer”, not from the level of the party that has successfully bypassed a TPM.

“The very existence of the Yout service shows that the rolling cipher is effective from the level of ordinary consumers. If the rolling cipher were not effective, Plaintiff’s customers would have no need for the Yout service in the first place,” the RIAA writes.

“[T]hey would simply obtain the signature value themselves and gain access to the digital sound recording file. Plaintiff’s service exists precisely because YouTube’s rolling cipher prevents them from turning legal streams on YouTube into illegal downloads. The rolling cipher is an effective TPM.”

RIAA Turns Yout’s Statements Against It

The RIAA continues by taking Yout’s explanation of how its service operates and using that to show that the platform is acting illegally.

“When using an ordinary web browser as intended, [a YouTube user] can only receive a stream of the sound recording through the YouTube video player; the user is not granted access to the location of the digital file and cannot download it. To get around this protection, the Yout service ‘interprets the JavaScript program sent by YouTube’ and ‘derives a signature value’ to access the protected file and so the user can copy the audio stream as an MP3 file,” the label group writes.

In response to Yout’s earlier claim that making “use” of the signature value does not equal “abuse”, the RIAA counters by saying that Yout does not “use” the value in the same way that a YouTube user’s browser does when it streams music from YouTube.

“The Yout service provides its users the means to get around the rolling cipher’s protections so they can get access to the copyrighted file — access that is not authorized by the copyright owners or YouTube. That is circumvention,” the RIAA’s reply reads.

The music group also notes that just because Yout alleges that YouTube’s signature value can be “freely accessed by anyone who seeks it”, it does not follow that there has been no violation of section 1201 of the DMCA. The RIAA notes that RealNetworks was previously held liable for using keys found in authorized DVD players so that the company’s customers could play DVDs and gain unauthorized access to movie files.

“[W]hen the keys were used in the authorized manner, the DVD player only played back the movie. The circumvention consisted of the offending party’s use of the same keys, but for the unauthorized access to a digital copy of the copyrighted work that the user could then copy. The Yout service does the same thing,” says the RIAA.

“Indeed, if consumers could [use their browsers to turn authorized streams into unauthorized downloads], they would not need the Yout service, and Plaintiff would have no business. Thus, the rolling cipher is an effective TPM.”

RIAA’s Anti-Circumvention Notices Sent to Google

Again, the RIAA points out that section 512(f) of the DMCA only penalizes misrepresentations about alleged copyright infringement, not misrepresentations about alleged circumvention.

Yout had previously claimed that the RIAA’s takedown notices, alleging circumvention offenses, “impute allegations of copyright infringement”. The RIAA says the penalties available under section 512(f) relate to regular takedown notices sent under section 512(c)(3)(A), which are required to list the locations of allegedly infringing content.

“RIAA’s notices did not include this information because they were not notices of infringement,” the RIAA notes.

In summary, the RIAA believes the court should rule on its motion to dismiss as a matter of law, without allowing Yout to further amend its complaint. If it did, however, that would only strengthen the RIAA’s case.

“The Court can decide this motion as a matter of law based on Plaintiff’s current, albeit oversimplified, allegations. Further amendment would be futile because any additional facts would only further support RIAA’s legal arguments. RIAA respectfully requests that the Court dismiss Plaintiff’s FAC [First Amended Complaint] with prejudice,” the reply concludes.

The RIAA’s reply in support of its motion to dismiss can be found here (pdf)

From: TF, for the latest news on copyright battles, piracy and more.

Microsoft is bringing new icons to Windows 10 File Explorer

The latest Windows 10 Insider Preview Build brings a change that sounds boring, but actually looks rather striking. File Explorer is getting new icons. Rather than a set of yellow folders with small icons spilling out to let you know if you’re l…

The latest Windows 10 Insider Preview Build brings a change that sounds boring, but actually looks rather striking. File Explorer is getting new icons. Rather than a set of yellow folders with small icons spilling out to let you know if you’re looking at downloads, documents, pictures, music, or videos, for example, Windows 10 Insider […]

The post Microsoft is bringing new icons to Windows 10 File Explorer appeared first on Liliputing.

Event Horizon Telescope captures new view of black hole in polarized light

It should yield insight into how black holes gobble up matter and emit powerful jets.

Two years ago, the Event Horizon Telescope (EHT) made headlines with its announcement of the first direct image of a black hole. Science magazine named the image its Breakthrough of the Year. Now the EHT collaboration is back with another groundbreaking result: a new image of the same black hole, this time showing how it looks in polarized light. The ability to measure that polarization for the first time—a signature of magnetic fields at the black hole's edge—is expected to yield fresh insight into how black holes gobble up matter and emit powerful jets from their cores. The new findings were described in three papers published in The Astrophysical Journal Letters.

"This work is a major milestone: the polarization of light carries information that allows us to better understand the physics behind the image we saw in April 2019, which was not possible before," said co-author Iván Martí-Vidal, coordinator of the EHT Polarimetry Working Group and a researcher at the University of Valencia, Spain. "Unveiling this new polarized-light image required years of work due to the complex techniques involved in obtaining and analyzing the data."

As Ars' John Timmer reported back in 2019:

Read 8 remaining paragraphs | Comments