Teen’s jailing shows exactly how Facebook will help anti-abortion states

A teen shared one message, then cops requested all her data without her consent.

Teen’s jailing shows exactly how Facebook will help anti-abortion states

Enlarge (credit: Charles McQuillan / Stringer | Getty Images News)

For the first time since Roe v. Wade was overturned, there's a clear example showing exactly how Facebook will react to law enforcement requests for abortion data without user consent.

Forbes reports that a 17-year-old named Celeste Burgess in Nebraska had her Facebook messages subpoenaed by detective Ben McBride, who suspected that Burgess' reported stillborn birth was a medication abortion. In the officer's affidavit, he explains that he asked that Meta not notify the teen of the request for her Facebook data because she might tamper with or destroy evidence. Court records show that Meta complied with the logic.

Meta did not immediately respond to Ars' request for comment on this case, but previously, Meta has said that "we notify users (including advertisers) about requests for their information before disclosing it unless we are prohibited by law from doing so or in exceptional circumstances, such as where a child is at risk of harm, emergencies, or when notice would be counterproductive."

Read 11 remaining paragraphs | Comments

China’s secretive space plane flies higher and longer than before

So what is it doing up there? Secret, space-y stuff, of course.

A Long March 2F carrier rocket carrying the Shenzhou-14 spacecraft blasts off from the Jiuquan Satellite Launch Center on June 5, 2022.

Enlarge / A Long March 2F carrier rocket carrying the Shenzhou-14 spacecraft blasts off from the Jiuquan Satellite Launch Center on June 5, 2022. (credit: VCG/VCG via Getty Images)

Last week one of China's most reliable rockets, the Long March 2F vehicle, took off from a spaceport in the Gobi Desert carrying a secretive space plane.

In a short report on the launch by China's state-owned Xinhua news service, the government provided little detail about the "reusable test spacecraft" beyond saying it would remain in orbit for "a period of time" and providing technical verification of reusable and in-orbit services.

This is the second time China launched what is believed to be a small space plane, likely similar in size and scope to the US Space Force's experimental X-37B vehicle. This uncrewed X-37B resembles NASA's space shuttle, but at less than 10 meters in length, it is considerably smaller. The vehicle's cargo bay can hold something about the size of a standard refrigerator.

Read 5 remaining paragraphs | Comments

Parallels Desktop 18 for Mac adds ProMotion support

Seamless gaming controller syncing, USB 3.0 improvements, and more.

A marketing splash image for Parallels Desktop 18, from the company's YouTube video about the release.

Enlarge / A marketing splash image for Parallels Desktop 18, from the company's YouTube video about the release. (credit: Parallels)

Mac-based virtualization software Parallels launched a new version today. As with most updates to the suite, Parallels Desktop 18 adds support for new Apple hardware features, improves Windows virtualization, and expands compatibility.

The two headlining features of Parallels Desktop 18 are ProMotion support and several new features and optimizations for playing Windows games on Macs.

The first feature is pretty straightforward: Parallels now fully supports automatic refresh rate changes up to 120 Hz, matching the ProMotion feature in the M1-based 14-inch and 16-inch MacBook Pro.

Read 7 remaining paragraphs | Comments

Biden signs bill injecting billions into US chipmaking to combat shortage

The CHIPS and Science Act authorizes subsidies up to $200 billion over 10 years.

Biden signs bill injecting billions into US chipmaking to combat shortage

Enlarge (credit: Chip Somodevilla / Staff | Getty Images News)

Chipmakers eager to receive huge subsidies stood with President Joe Biden as he signed a bill injecting $52.7 billion into their industry today. Executives from companies like Micron, Intel, HP, and Lockheed Martin witnessed the flick of Biden's pen, alongside auto industry leaders and other stakeholders. They are hopeful that these new subsidies will end "a persistent shortage" in memory chips that Reuters reports has affected "everything from cars, weapons, washing machines, and video games."

In total, the CHIPS and Science Act—also known as the Creating Helpful Incentives to Produce Semiconductors for America Act—authorizes up to $200 billion in subsidies over 10 years, should the US decide to continue investing. The long-term vision is to shove the US ahead of China and other invested countries in a global race to become a chip industry leader.

Once the law is enacted, the Department of Commerce will decide on rules for how grants will be disbursed, dictating who gets how much money and for how long. Because advanced semiconductor production that's necessary for chipmaking requires a significant investment of time and money, venture capitalists have been less likely to fund long-term projects. This law positions the federal government to fill that funding gap while advancing highly coveted technology domestically.

Read 15 remaining paragraphs | Comments

PrimeWire Replacement HydraWire Sacrifices Itself to Hollywood

A lawsuit filed last year by several Hollywood studios and Netflix targeting illegal streaming veteran PrimeWire now resembles a war of attrition. As efforts to gather intelligence and seize domains continue, the studios have also been dealing with PrimeWire replacement ‘HydraWire’. But despite the numerous hurdles, all signs point to the plaintiffs toughing the case out for as long as it takes.

From: TF, for the latest news on copyright battles, piracy and more.

mpaIn April 2022, several Hollywood studios and Netflix won an injunction to shut down PrimeWire, a long-standing illegal streaming site and continuous thorn in the side of the MPA.

The injunction was granted after the studios filed a massive copyright infringement lawsuit against PrimeWire in 2021. It aimed to close the platform down for a good after close to a decade of disruption activity against the site produced somewhat limited results. This time around the studios have the upper hand but not without some complications.

PrimeWire Inactive But Domains Mostly Intact

After the injunction was handed down the US, PrimeWire initially took no action but eventually modified its operations and pledged to offer a legitimate service.

The studios didn’t believe a single word and moved to seize new domain PrimeWire.tf, hoping to add it to a list of other PrimeWire domains already subject to disabling and seizure. On that front, PrimeWire.ag and .vc are non-operational but PrimeWire.li and PrimeWireStatus.org remain in use.

At the time of writing the same is true for PrimeWire.tf but last month a new domain entered the mix.

The Rapid Rise and Fall of HydraWire

At the end of May, the MPA’s anti-piracy team became of a new site called HydraWire. Its .tv domain had been registered a day after the MPA won its preliminary injunction in April and as far as the studios were concerned, this was just PrimeWire by another name.

Evidence presented in court made that assertion difficult to challenge but with the site gaining traffic, it needed to be stopped as soon as possible. The studios decided that HydraWire.tv should be added to the now permanent injunction but perhaps didn’t anticipate what came next.

On July 19 and on behalf of the studios, an attorney at law firm Munger, Tolles & Olson LLP submitted a message via the contact form at HydraWire giving notice of their upcoming motion.

In common with the people behind PrimeWire, who haven’t appeared in court but have communicated anonymously with the plaintiffs, the alleged owner of HydraWire also responded anonymously two days later. The message was that the intentions of HydraWire’s operator had been misunderstood by the plaintiffs.

“The sender of this email claims to have launched HydraWire. They say they did so because they ‘saw an opportunity to have a website with lot[s] of visitors’ and ‘wanted to continue [PrimeWire’s] legacy’,” the studios informed the court this week.

“The emailer then said they had ‘shut down hydrawire for good’ and offered to ‘transfer the domain’ to Plaintiffs.”

HydraWire Throws in the Towel

Swift resolutions haven’t featured prominently in the case thus far so the MPA’s anti-piracy team wasted no time in seizing the opportunity.

“In an effort to put a temporary stop to this latest infringement of their rights, Plaintiffs accepted the transfer of the domain and took control of the domain, which is now offline,” the studios reveal.

Jan Van Voorn, Executive Vice President and Chief of Global Content Protection, reveals the process began quickly and was over in a week.

“On or about July 23, 2022, GCP investigators used the authorization code provided in correspondence from [email address] to initiate a transfer of the hydrawire.tv domain to the MPA’s control. On or about August 1, 2022, GCP investigators confirmed that hydrawire.tv has been transferred to the MPA,” his declaration reads.

MPA Still Wants HydraWire.tv Added to Injunction

While this domain takeover was comparatively easy, the studios are still taking time to keep the court informed of every new detail. They’re also building a pretty solid picture of the plaintiffs doing everything by the book and the defendants falling short in every possible way.

Aside from PrimeWire’s general failure to appear, the studios strongly suspect that by following the PrimeWire ‘playbook’ of apparent capitulation in the face of an injunction, those behind HydraWire betrayed their connections. The MPA’s anti-piracy team appear unable to prove they’ve been talking to the same people but for now at least, that doesn’t matter.

The plaintiffs say that HydraWire was inspired by PrimeWire and was designed to continue its legacy. Text from PrimeWire was duplicated on HydraWire and there was a feature for PrimeWire users to migrate their libraries across. The very appearance of HydraWire showed disrespect for the court injunction and at any minute it could reappear under a new domain to rinse and repeat, they add.

“For these reasons, as well as those stated in Plaintiffs’ motion, Plaintiffs respectfully request that the Court grant their motion to modify the permanent injunction and extend the time for Defendants to take discovery in support of their damages claims,” the motion concludes.

Perhaps the most striking aspect of this and earlier motions is the determination of the MPA to punish any move designed to breathe new life into PrimeWire. It’s certainly possible that other ventures under different branding are already making headway but, given the pressure, the original PrimeWire seems unlikely to have a future in any obviously recognizable form.

The motion and supporting documents can be found here (1,2,3, pdf)

From: TF, for the latest news on copyright battles, piracy and more.

US blacklisting of Tornado Cash sparks outcry from cryptocurrency industry

Tornado Cash banned over money laundering but has legitimate uses as privacy tool.

Abstract image of a blockchain displays ones and zeroes imposed on interconnected chain links.

Enlarge (credit: Getty Images | Yuichiro Chino)

The US Treasury Department blacklisted the virtual currency mixer Tornado Cash on Monday, saying the system "has been used to launder more than $7 billion worth of virtual currency since its creation in 2019." The platform was added to the Specially Designated Nationals and Blocked Persons List (SDN), prohibiting all transactions on Tornado Cash by people in the US "unless authorized by a general or specific license issued by OFAC [Office of Foreign Assets Control]", the Treasury Department announcement said.

"As a result of today's action, all property and interests in property of the entity above, Tornado Cash, that is in the United States or in the possession or control of US persons is blocked and must be reported to OFAC," the announcement said. There is reportedly over $412 million of assets on Tornado Cash. Prices of Tornado's crypto token TORN plummeted after the blacklisting announcement.

The Treasury action was criticized within the crypto industry because it affects any US person using Tornado Cash, not just those involved in money laundering or other crimes. The SDN list is generally used to "identify persons involved in terrorism, enemy states, or other state-sanctioned activities and ensure that these individuals cannot get the benefit of the US financial system," Coin Center Executive Director Jerry Brito and Research Director Peter Van Valkenburgh wrote yesterday. Coin Center is a cryptocurrency research and advocacy group.

Read 18 remaining paragraphs | Comments

10 malicious Python packages exposed in latest repository attack

Supply-chain attacks are moving GitHub toward digitally signed packages.

Supply-chain attacks, like the latest PyPi discovery, insert malicious code into seemingly functional software packages used by developers. They're becoming increasingly common.

Enlarge / Supply-chain attacks, like the latest PyPi discovery, insert malicious code into seemingly functional software packages used by developers. They're becoming increasingly common. (credit: Getty Images)

Researchers have discovered yet another set of malicious packages in PyPi, the official and most popular repository for Python programs and code libraries. Those duped by the seemingly familiar packages could be subject to malware downloads or theft of user credentials and passwords.

Check Point Research, which reported its findings Monday, wrote that it didn't know how many people had downloaded the 10 packages, but it noted that PyPi has 613,000 active users, and its code is used in more than 390,000 projects. Installing from PyPi through the pip command is a foundational step for starting or setting up many Python projects. PePy, a site that estimates Python project downloads, suggests most of the malicious packages saw hundreds of downloads.

Such supply-chain attacks are becoming increasingly common, especially among open source software repositories that support a wide swath of the world's software. Python's repository is a frequent target, with researchers finding malicious packages in September 2017JuneJuly, and November 2021; and June of this year. But trick packages have also been found in RubyGems in 2020NPM in December 2021, and many more open source repositories.

Read 5 remaining paragraphs | Comments

Nokia lawsuit forces Oppo and OnePlus out of the German market

Nokia and Oppo fight over patent renewal fees, just like in a TV carriage dispute.

Oppo's store in Germany has been stripped of all phone info (translated).

Enlarge / Oppo's store in Germany has been stripped of all phone info (translated). (credit: Ron Amadeo)

Many Chinese brands have somehow escaped the global smartphone patent wars, but Oppo and OnePlus are feeling the pain in Germany due to a Nokia patent lawsuit. As the site Juve Patent reports, Nokia received two favorable patent rulings last week, and OnePlus and its parent company Oppo were ordered to cease and desist their infringement. For now, ceasing infringement means shutting down sales in Germany.

This is Nokia Corporation, the cellular infrastructure company, not HMD, which licenses the "Nokia" brand for smartphones. Nokia and Oppo used to have a patent licensing agreement, but it recently expired. Just as we've seen in cable carriage disputes, the two companies were in negotiations for renewal, but disagreements over the price led to a deal not happening. Oppo told its side of this familiar story to Juve Patent, saying, "The day after the 4G agreement between Oppo and Nokia expired, Nokia immediately went to court. They had previously demanded an unreasonably high contract renewal fee."

The court cases are still ongoing, and appeals are still possible, but Oppo has taken the proactive step of shutting down all sales in Germany. Oppo's German site has been stripped of all phone info and now only hosts a message saying (through translation) that "product information is currently not available on our website." The site also mentions that Oppo products will continue to work, and support channels will keep running. OnePlus' site still lists phone info, but the store now displays an error page if you try to see phone listings.

Read 1 remaining paragraphs | Comments

The next desktop-sized OLED monitor will cost $3,500

The 31.5-inch PA32C targets appropriately sized work, not big-screen entertainment.

Two Asus ProArt PA32DC OLED monitors.

Enlarge / Two Asus ProArt PA32DC OLED monitors. (credit: Asus)

OLED screens are slowly but surely making their way to desktops. The contrast-rich panel display tech is scattered across premium laptops, but when it comes to PC monitors, most options in the US are too big to fit on a typical desk. There are some, primarily from LG, but we need more options. The latest OLED looks to be the 31.5-inch ProArt PA32DC, which Asus announced Tuesday, and it will be available in October for $3.500.

Barring any surprise releases, the PA32DC should be the next member of a growing group of OLED monitors that can fit atop a desk. For a while, the OLED monitor space has been dominated by juggernauts and, even among the more moderately sized options, gaming displays. The PA32DC targets professionals and creatives to accommodate their office setup in a way that's rare for today's OLED monitors (the exceptions being LG's UltraFine series of 26.5-inch and 31.5-inch OLED monitors and portable monitors using OLED).

Asus' 4K OLED monitor has an impressive specs sheet, including 100 percent sRGB, 99 percent DCI-P3 and Adobe RGB, and 80 percent Rec. 2020 coverage. The display also foregoes a color filter, which Asus claimed helped the monitor achieve a color accuracy of Delta E <1.

Read 11 remaining paragraphs | Comments

Windows 11 encryption bug could cause data loss, temporary slowdowns on newer PCs

Recent Windows updates can resolve the problem but not undo damage.

Windows 11 encryption bug could cause data loss, temporary slowdowns on newer PCs

Enlarge (credit: Microsoft)

Microsoft has published a knowledge base article acknowledging a problem with encryption acceleration in the newest versions of Windows that could result in data corruption. The company recommends installing the June 2022 security updates for Windows 11 and Windows Server 2022 "to prevent further damage," though there are no suggested solutions for anyone who has already lost data because of the bug.

The problems only affect relatively recent PCs and servers that support Vector Advanced Encryption Standard (VAES) instructions for accelerating cryptographic operations. Microsoft says affected systems use AES-XTS or AES-GCM instructions "on new hardware." Part of the AVX-512 instruction set, VAES instructions are supported by Intel's Ice Lake, Tiger Lake, Rocket Lake, and Alder Lake architectures—these power some 10th-generation Core CPUs for laptops, as well as all 11th- and 12th-gen Core CPUs. AMD's upcoming Zen 4 architecture also supports VAES, though by the time these chips are released in the fall, the patches will have had plenty of time to proliferate.

Microsoft says that the problem was caused when it added “new code paths” to support the updated encryption instructions in SymCrypt, Windows’ cryptographic function library. These code paths were added in the initial release of Windows 11 and Windows Server 2022, so the problem shouldn't affect older versions like Windows 10 or Windows Server 2019. 

Read 1 remaining paragraphs | Comments