Ransomware group reports victim it breached to SEC regulators

Group tells SEC that the victim is in violation for not reporting it was hacked.

Ransomware group reports victim it breached to SEC regulators

Enlarge (credit: Getty Images)

One of the world’s most active ransomware groups has taken an unusual—if not unprecedented—tactic to pressure one of its victims to pay up: reporting the victim to the US Securities and Exchange Commission.

The pressure tactic came to light in a post published on Wednesday on the dark web site run by AlphV, a ransomware crime syndicate that’s been in operation for two years. After first claiming to have breached the network of the publicly traded digital lending company MeridianLink, AlphV officials posted a screenshot of a complaint it said it filed with the SEC through the agency’s website. Under a recently adopted rule that goes into effect next month, publicly traded companies must file an SEC disclosure within four days of learning of a security incident that had a “material” impact on their business.

“We want to bring to your attention a concerning issue regarding MeridianLink's compliance with the recently adopted cybersecurity incident disclosure rules,” AlphV officials wrote in the complaint. “It has come to our attention that MeridianLink, in light of a significant breach compromising customer data and operational information, has failed to file the requisite disclosure under item 1.05 of form 8-K within the stipulated four business days, as mandated by the new SEC rules.”

Read 10 remaining paragraphs | Comments

With each iteration, this supercar gets better—the McLaren 750S, tested

How do you improve on the McLaren 720S? More power, less weight, sharper handling.

A blue McLaren 750S seen head-on

Enlarge / McLaren Automotive got its start with the clinical MP4-12C. The 750S is an evolutionary descendant of that car and shows how far McLaren has come since 2011. (credit: McLaren)

What do you get the supercar that has everything? McLaren must have been thinking about that question when it came time to give the already rather good 720S a bit of a midlife refresh. The answer is more power, less weight, and a raft of updates here and there that make the new McLaren 750S more useable but also even better on track, if that's your thing.

Starting from a standard configuration, a 750S weighs 3,062 lbs (1,388 kg), 66 lbs (30 kg) less than the car it's replacing. But if you select the right combination of options, from single-piece carbon fiber racing seats to titanium wheel bolts, you can trim that down even further—McLaren says to as little as 2,815 lbs (1,277 kg), but that's a dry weight.

Regardless, the all-carbon fiber construction results in a car that's both very stiff and lighter than the competition. And the penalty for switching to a retractable hardtop roof is just 108 lbs (50 kg), although it does bring the car's center of gravity up a smidge.

Read 10 remaining paragraphs | Comments

AI with 90% error rate forces elderly out of rehab, nursing homes, suit claims

For the largest health insurer in the US, AI’s error rate is like a feature, not a bug.

UnitedHealthcare (UHC) health insurance company signage is displayed on an office building in Phoenix on July 19, 2023.

Enlarge / UnitedHealthcare (UHC) health insurance company signage is displayed on an office building in Phoenix on July 19, 2023. (credit: Getty | Patrick Fallon)

UnitedHealthcare, the largest health insurance company in the US, is allegedly using a deeply flawed AI algorithm to override doctors' judgments and wrongfully deny critical health coverage to elderly patients. This has resulted in patients being kicked out of rehabilitation programs and care facilities far too early, forcing them to drain their life savings to obtain needed care that should be covered under their government-funded Medicare Advantage Plan.

That's all according to a lawsuit filed this week in the US District Court for the District of Minnesota. The lawsuit is brought by the estates of two deceased people who were denied health coverage by UnitedHealth. The suit also seeks class-action status for similarly situated people, of which there may be tens of thousands across the country.

The lawsuit lands alongside an investigation by Stat News that largely backs the lawsuit's claims. The investigation's findings stem from internal documents and communications the outlet obtained, as well as interviews with former employees of NaviHealth, the UnitedHealth subsidiary that developed the AI algorithm called nH Predict.

Read 22 remaining paragraphs | Comments

“Make It Real” AI prototype wows devs by turning drawings into working software

Designer: “I think I need to go lie down.”

is super fun. I iterated through ~10 builds today and it cost me $0.90 using GPT4. The pong game is playable as described.

Enlarge / A shot of tldraw's "Make it Real" in action, provided by Ashe on X: "Ok...@tldraw is super fun. I iterated through ~10 builds today and it cost me $0.90 using GPT4. The pong game is playable as described." (credit: Ashe Oro)

On Wednesday, a collaborative whiteboard app maker called "tldraw" made waves online by releasing a prototype of a feature called "Make it Real" that lets users draw an image of software and bring it to life using AI. The feature uses OpenAI's GPT-4V API to visually interpret a vector drawing into functioning Tailwind CSS and JavaScript web code that can replicate user interfaces or even create simple implementations of games like Breakout.

"I think I need to go lie down," posted designer Kevin Cannon at the start of a viral X thread that featured the creation of functioning sliders that rotate objects on screen, an interface for changing object colors, and a working game of tic-tac-toe. Soon, others followed with demonstrations of drawing a clone of Breakout, creating a working dial clock that ticks, drawing the snake game, making a Pong game, interpreting a visual state chart, and much more.

Users can experiment with a live demo of Make It Real online. However, running it requires providing an API key from OpenAI, which is a security risk. If others intercept your API key, they could use it to rack up a very large bill in your name (OpenAI charges by the amount of data moving into and out of its API). Those technically inclined can run the code locally, but it will still require OpenAI API access.

Read 4 remaining paragraphs | Comments

SpaceX delays launch of its giant Starship rocket to swap out a part

SpaceX is now targeting Saturday for the second full-scale Starship test flight.

The upper stage of SpaceX's Super Heavy-Starship launch vehicle was removed from its position atop the rocket Thursday, clearing the way for the swap-out of a component on the booster stage.

Enlarge / The upper stage of SpaceX's Super Heavy-Starship launch vehicle was removed from its position atop the rocket Thursday, clearing the way for the swap-out of a component on the booster stage. (credit: Stephen Clark/Ars Technica)

BOCA CHICA BEACH, Texas—The launch of SpaceX's second full-size Starship rocket from South Texas is now scheduled for Saturday, a day later than previously planned, according to company founder Elon Musk.

This 24-hour delay will allow time for SpaceX technicians at the company's launch facility, known as Starbase, to replace a component on the rocket's stainless steel Super Heavy booster. There is a 20-minute launch window on Saturday, opening at 7 am CST (13:00 UTC), shortly after sunrise in South Texas.

A delay at this point is unsurprising. Starship is a complex launch vehicle with a sum of 39 methane-burning engines, each producing roughly a half-million pounds of thrust, powering its booster stage and upper stage. And this is only the second test flight of SpaceX's new full-scale, nearly 400-foot-tall (121-meter) rocket, the largest launch vehicle ever built.

Read 17 remaining paragraphs | Comments

Lilbits: HandBrake 1.7 released, Copilot for Windows 10 is coming, and older NOOK devices will lose features in 2024

Barnes & Noble has announced that it’s pulling the plug on some key features for the NOOK Simple Touch, NOOK Simple Touch with GlowLight, and NOOK GlowLight eReaders. By the middle of next year you’ll no longer be able to buy eBooks on…

Barnes & Noble has announced that it’s pulling the plug on some key features for the NOOK Simple Touch, NOOK Simple Touch with GlowLight, and NOOK GlowLight eReaders. By the middle of next year you’ll no longer be able to buy eBooks on those devices, register a device with a bn.com account, or sign in […]

The post Lilbits: HandBrake 1.7 released, Copilot for Windows 10 is coming, and older NOOK devices will lose features in 2024 appeared first on Liliputing.

Sonos has finally fixed the Dolby Atmos “pop of death” in its Arc soundbars

The fix involves filtering out digital audio errors that were notably “audible.”

Sonos Arc with Dolby Atmos illustrated in bouncing circular waves, in grayscale

Enlarge / Sonos notes that its Arc soundbar pairs "Dolby Atmos and the upward-firing drivers," which some users have not enjoyed during cacophonous pops. (credit: Sonos)

A bang, a gunshot, a "pop of death": Some owners of Sonos' Arc and second-gen Beam soundbars have been dealing with a striking audio disruption with their audio systems since at least December 2020.

The issue now has a fix, and it should already be available to users. Updating a Sonos mobile or desktop app and then checking for system updates should push the changes to Sonos speakers.

A Sonos staff member writes that the Arc and Beam soundbars "in certain home theater configurations process Dolby MAT," which delivers Atmos audio over HDMI connections. Sonos products could receive corrupted audio from that connection but were failing to filter out those bits, playing them instead. The corrupted audio "can manifest as a popping sound." The Sonos devices' improved Dolby decoder should no longer force listeners to hear what it sounds like when digital audio transmissions go awry.

Read 5 remaining paragraphs | Comments

Unauthorized “David Attenborough” AI clone narrates developer’s life, goes viral

“We observe the sophisticated Homo sapiens engaging in the ritual of hydration.”

Screen capture from a demo video of a fake, unauthorized David Attenborough narrating a developer's video feed.

Enlarge / Screen capture from a demo video of an AI-generated unauthorized David Attenborough voice narrating a developer's video feed. (credit: Charlie Holtz)

On Wednesday, Replicate developer Charlie Holtz combined GPT-4 Vision (commonly called GPT-4V) and ElevenLabs voice cloning technology to create an unauthorized AI version of the famous naturalist David Attenborough narrating Holtz's every move on camera. As of Thursday afternoon, the X post describing the stunt had garnered over 21,000 likes.

"Here we have a remarkable specimen of Homo sapiens distinguished by his silver circular spectacles and a mane of tousled curly locks," the false Attenborough says in the demo as Holtz looks on with a grin. "He's wearing what appears to be a blue fabric covering, which can only be assumed to be part of his mating display."

"Look closely at the subtle arch of his eyebrow," it continues, as if narrating a BBC wildlife documentary. "It's as if he's in the midst of an intricate ritual of curiosity or skepticism. The backdrop suggests a sheltered habitat, possibly a communal feeding area or watering hole."

Read 6 remaining paragraphs | Comments