Slashdot

Syndicate content Slashdot
News for nerds, stuff that matters
Updated: 56 min 51 sec ago

San Francisco's 58-Story Millennium Tower Seen Sinking From Space

11/30/2016 2:00am
An anonymous reader quotes a report from SFGate: Engineers in San Francisco have tunneled underground to try and understand the sinking of the 58-story Millennium Tower. Now comes an analysis from space. The European Space Agency has released detailed data from satellite imagery that shows the skyscraper in San Francisco's financial district is continuing to sink at a steady rate -- and perhaps faster than previously known. The luxury high-rise that opened its doors in 2009 has been dubbed the Leaning Tower of San Francisco. It has sunk about 16 inches into landfill and is tilting several inches to the northwest. Engineers have estimated the building is sinking at a rate of about 1-inch per year. The Sentinel-1 twin satellites show almost double that rate based on data collected from April 2015 to September 2016. The satellite data shows the Millennium Tower sunk 40 to 45 millimeters -- or 1.6 to 1.8 inches -- over a recent one-year period and almost double that amount -- 70 to 75 mm (2.6 to 2.9 inches) -- over its 17-month observation period, said Petar Marinkovic, founder and chief scientist of PPO Labs which analyzed the satellite's radar imagery for the ESA along with Norway-based research institute Norut. The Sentinel-1 study is not focused on the Millennium Tower but is part of a larger mission by the European Space Agency tracking urban ground movement around the world, and particularly subsidence "hotspots" in Europe, said Pierre Potin, Sentinel-1 mission manager for the ESA. The ESA decided to conduct regular observations of the San Francisco Bay Area, including the Hayward Fault, since it is prone to tectonic movement and earthquakes, said Potin, who is based in Italy. Data from the satellite, which is orbiting about 400 miles (700 kilometers) from the earth's surface, was recorded every 24 days. The building's developer, Millennium Partners, insists the building is safe for occupancy and could withstand an earthquake.

Read more of this story at Slashdot.

India Unveils the World's Largest Solar Power Plant

11/29/2016 10:30pm
Kamuthi in Tamil Nadu, India is now home to the world's largest solar plant that adds 648 MW to the country's generating capacity. Previously, the Topaz Solar Farm in California, which was completed two years ago and has a capacity of 550 MW, held the title. Aljazeera reports: The solar plant, built in an impressive eight months, is cleaned every day by a robotic system, charged by its own solar panels. At full capacity, it is estimated to produce enough electricity to power about 150,000 homes. The project is comprised of 2.5 million individual solar modules, and cost $679 million to build. The new plant has helped nudge India's total installed solar capacity across the 10 GW mark, according to a statement by research firm Bridge to India, joining only a handful of countries that can make this claim. As solar power increases, India is expected to become the world's third-biggest solar market from next year onwards, after China and the U.S.

Read more of this story at Slashdot.

Muni System Hacker Hit Others By Scanning For Year-Old Java Vulnerability

11/29/2016 9:05pm
An anonymous reader quotes a report from Ars Technica: The attacker who infected servers and desktop computers at the San Francisco Metropolitan Transit Agency (SFMTA) with ransomware on November 25 apparently gained access to the agency's network by way of a known vulnerability in an Oracle WebLogic server. That vulnerability is similar to the one used to hack a Maryland hospital network's systems in April and infect multiple hospitals with crypto-ransomware. And evidence suggests that SFMTA wasn't specifically targeted by the attackers; the agency just came up as a target of opportunity through a vulnerability scan. In an e-mail to Ars, SFMTA spokesperson Paul Rose said that on November 25, "we became aware of a potential security issue with our computer systems, including e-mail." The ransomware "encrypted some systems mainly affecting computer workstations," he said, "as well as access to various systems. However, the SFMTA network was not breached from the outside, nor did hackers gain entry through our firewalls. Muni operations and safety were not affected. Our customer payment systems were not hacked. Also, despite media reports, no data was accessed from any of our servers." That description of the ransomware attack is not consistent with some of the evidence of previous ransomware attacks by those behind the SFMTA incident -- which Rose said primarily affected about 900 desktop computers throughout the agency. Based on communications uncovered from the ransomware operator behind the Muni attack published by security reporter Brian Krebs, an SFMTA Web-facing server was likely compromised by what is referred to as a "deserialization" attack after it was identified by a vulnerability scan. A security researcher told Krebs that he had been able to gain access to the mailbox used in the malware attack on the Russian e-mail and search provider Yandex by guessing its owner's security question, and he provided details from the mailbox and another linked mailbox on Yandex. Based on details found in e-mails for the accounts, the attacker ran a server loaded with open source vulnerability scanning tools to identify and compromise servers to use in spreading the ransomware, known as HDDCryptor and Mamba, within multiple organizations' networks.

Read more of this story at Slashdot.

Religious Experiences Have Similar Effect On Brain As Taking Drugs, Study Finds

11/29/2016 8:25pm
A new study published in the journal Social Neuroscience finds through functional MRI scans that religious and spiritual experiences can trigger reward systems like love and drugs. "These are areas of the brain that seem like they should be involved in religious and spiritual experience. But yet, religious neuroscience is such a young field -- and there are very few studies -- and ours was the first study that showed activation of the nucleus accumbens, an area of the brain that processes reward," said Dr. Jeffrey Anderson, a neuroradiologist at the University of Utah and lead author of the study. CNN reports: For the study, 19 devout young adult Mormons had their brains scanned in fMRI machines while they completed various tasks. The tasks included resting for six minutes, watching a six-minute church announcement about membership and financial reports, reading quotations from religious leaders for eight minutes, engaging in prayer for six minutes, reading scripture for eight minutes, and watching videos of religious speeches, renderings of biblical scenes and church member testimonials. During the tasks, participants were asked to indicate when they were experiencing spiritual feelings. As the researchers analyzed the fMRI scans taken of the participants, they took a close look at the degree of spiritual feelings each person reported and then which brain regions were simultaneously activated. The researchers found that certain brain regions consistently lit up when the participants reported spiritual feelings. The brain regions included the nucleus accumbens, which is associated with reward; frontal attentional, which is associated with focused attention; and ventromedial prefrontal cortical loci, associated with moral reasoning, Anderson said. Since the study results were seen only in Mormons, Anderson said, more research is needed to determine whether similar findings could be replicated in people of other faiths, such as Catholics or Muslims.

Read more of this story at Slashdot.

Holding Shift + F10 During Windows 10 Updates Opens Root CLI, Bypasses BitLocker

11/29/2016 7:45pm
An anonymous reader quotes a report from BleepingComputer: Windows security expert and infrastructure trainer Sami Laiho says that by holding SHIFT + F10 while a Windows 10 computer is installing a new OS build, an attacker can open a command-line interface with SYSTEM privileges. This CLI debugging interface also grants the attacker full access to the computer's hard drive data, despite the presence of BitLocker. The CLI debugging interface is present when updating to new Windows 10 and Windows 10 Insiders builds. The most obvious exploitation scenario is when a user leaves his computer unattended during the update procedure. A malicious insider can open the CLI debugger and perform malicious operations under a root user, despite BitLocker's presence. But there are other scenarios where Laiho's SHIFT + F10 trick can come in handy. For example when police have seized computers from users who deployed BitLocker or when someone steals your laptop. Windows 10 defaults help police/thieves in this case because these defaults forcibly update computers, even if the user hasn't logged on for weeks or months. This CLI debugging interface grants the attacker full access to the computer's hard drive, despite the presence of BitLocker. The reason is that during the Windows 10 update procedure, the OS disables BitLocker while the Windows PE (Preinstallation Environment) installs a new image of the main Windows 10 operating system. "This [update procedure] has a feature for troubleshooting that allows you to press SHIFT + F10 to get a Command Prompt," Laiho writes on his blog. "The real issue here is the Elevation of Privilege that takes a non-admin to SYSTEM (the root of Windows) even on a BitLocker (Microsoft's hard disk encryption) protected machine." Laiho informed Microsoft of the issue and the company is apparently working on a fix.

Read more of this story at Slashdot.

Facebook Is Bringing Games Like Pac-Man, Space Invaders To Messenger and Your News Feed

11/29/2016 7:05pm
Facebook is launching Instant Games, "a new HTML5 cross-platform gaming experience" that is available on Messenger and Facebook News Feed for both mobile and web users. Since they're built on the HTML5 mobile web standard, the games load in seconds and don't need to be downloaded. Instant Games is available in 30 countries and launches with 17 games "from classic developers like Bandai Namco, Konami, and Taito as well as newer studios like Zynga and King," writes Josh Constine via TechCrunch: The biggest draw of Instant Games is how quick you can start playing. You tap the game controller icon in one of your message threads, choose a game from the list, it loads in seconds, you play a short round, and your high score gets automatically posted to the private or group chat thread. You can even share a stylized high score screenshot that you can Doodle on top of like Snapchat to trash talk your opponents. And if you share a game to the News Feed, friends can jump right into the action from Facebook's app or website. For now, the platform is in closed beta, but developers can apply to build Instant Games here.

Read more of this story at Slashdot.

It Will Soon Be Illegal To Punish Customers Who Criticize Businesses Online

11/29/2016 6:20pm
An anonymous reader quotes a report from Ars Technica: Congress has passed a law protecting the right of U.S. consumers to post negative online reviews without fear of retaliation from companies. The bipartisan Consumer Review Fairness Act was passed by unanimous consent in the U.S. Senate yesterday, a Senate Commerce Committee announcement said. The bill, introduced in 2014, was already approved by the House of Representatives and now awaits President Obama's signature. The Consumer Review Fairness Act -- full text available here -- voids any provision in a form contract that prohibits or restricts customers from posting reviews about the goods, services, or conduct of the company providing the product or service. It also voids provisions that impose penalties or fees on customers for posting online reviews as well as those that require customers to give up the intellectual property rights related to such reviews. The legislation empowers the Federal Trade Commission to enforce the new law and impose penalties when necessary. The bill also protects reviews that aren't available via the Internet.

Read more of this story at Slashdot.

Google Successfully Uses Machine Learning To Detect Diabetic Retinopathy

11/29/2016 5:40pm
BrianFagioli writes from a report via BetaNews: Diabetic eye disease is caused by retinopathy. Affected diabetics can have small tears inside the eye, causing bleeding. Over time, they can lose vision, and ultimately, they can go blind. Luckily, Google has been trying to use machine learning to detect diabetic retinopathy. Guess what? The search giant has seen much success. Not only are the computers able to detect the disease at the same level as ophthalmologists, but Google is actually slightly better! "A few years ago, a Google research team began studying whether machine learning could be used to screen for diabetic retinopathy (DR). Today, in the Journal of the American Medical Association, we've published our results: a deep learning algorithm capable of interpreting signs of DR in retinal photographs, potentially helping doctors screen more patients, especially in underserved communities with limited resources," says Lily Peng, MD Ph.D., Product Manger at Google. She goes on to say "our algorithm performs on par with the ophthalmologists, achieving both high sensitivity and specificity. [...] For example, on the validation set described in Figure 2, the algorithm has a F-score of 0.95, which is slightly better than the median. F-score of the 8 ophthalmologists we consulted (measured at 0.91)."

Read more of this story at Slashdot.

Europe Is Getting a Network of 'Ultra-Fast, High-Powered' EV Chargers

11/29/2016 5:00pm
An anonymous reader quotes a report from The Verge: BMW Group, Daimler AG, Ford, and Volkswagen have entered into a partnership to create a network of high-speed charging stations for electric vehicles across Europe. The new chargers will be capable of doling out up to 350 kW of power -- which would make them almost three times as powerful as Tesla's Supercharging stations. The result will be "the highest-powered charging network in Europe," according to a statement released by the manufacturers. The automakers say that construction will begin in 2017 with "about 400 sites" being targeted, and that the network will have "thousands of high-powered charging points" available by 2020. Those four major conglomerates will be "equal partners" in the joint venture, but according to the statement they are encouraging other manufacturers to "participate in the network." One of the reasons for bothering to call on other automakers to hook into this system is because there's a standards war happening with fast charging networks. The charging network announced today will use the Combined Charging System (CCS) technology, which is what that most major automakers already use for their EVs. But Nissan, Toyota, and Honda are notable holdouts from CCS, because many of their EVs and plug-in hybrids use a competing standard known as CHAdeMO.

Read more of this story at Slashdot.

Microsoft Brings Collaborative Editing To PowerPoint On Desktop

11/29/2016 4:20pm
Microsoft today said that it has enhanced certain versions of its PowerPoint presentation-building program with real-time collaborative editing. VentureBeat adds: This feature came to Word on desktop last year. And before that it was available through Office Online. Microsoft said last year that real-time coauthoring would come to all of its desktop apps, and now Microsoft is executing on that commitment. Just like in Google Docs, Sheets, and Slides, this feature lets you "see what others are typing as it happens on a given slide," Microsoft Office corporate vice president Kirk Koenigsbauer wrote in a blog post. The feature is live now in PowerPoint on Windows for people who subscribe to Office 365 and belong to the Office Insider program. In addition, it's now available to everyone in PowerPoint Mobile on Windows tablets, Koenigsbauer wrote.

Read more of this story at Slashdot.

Jolla's Sailfish OS Now Certified as Russian Government's First 'Android Alternative'

11/29/2016 3:40pm
The future for one of the few remaining alternative mobile OS platforms, Jolla's Sailfish OS, looks to be taking clearer shape. Today the Finnish company which develops and maintains the core code, with the aim of licensing it to others, announced Sailfish has achieved domestic certification in Russia for government and corporate use. TechCrunch adds:In recent years the Russian government has made moves to encourage the development of alternatives to the duopoly of US-dominated smartphone platforms, Android and Apple's iOS -- flagging Sailfish as one possibility, along with Tizen. Although Sailfish looks to have won out as the preferred Android alternative for Russia at this point. The government has said it wants to radically reduce its reliance on foreign mobile OSes -- to 50 per cent by 2025 vs the 95 per cent of the market garnered by Android and iOS in 2015. Sailfish's local certification in Russia also follows an announcement earlier this year that a new Russian company, Open Mobile Platform (OMP), had licensed the OS with the intention of developing a custom version of the platform for use in the domestic market. So, in other words, a Russian, strategic 'Android alternative' is currently being built on Sailfish.

Read more of this story at Slashdot.

The Internet Archive Is Building a Canadian Copy To Protect Itself From Trump

11/29/2016 3:00pm
The Internet Archive, a digital library nonprofit that preserves billions of webpages for the historical record, is building a backup archive in Canada after the election of Donald Trump. The Verge adds: Today, it began collecting donations for the Internet Archive of Canada, intended to create a copy of the archive outside the United States. "On November 9th in America, we woke up to a new administration promising radical change," writes founder Brewster Kahle. "It was a firm reminder that institutions like ours, built for the long-term, need to design for change. For us, it means keeping our cultural materials safe, private and perpetually accessible. It means preparing for a web that may face greater restrictions. It means serving patrons in a world in which government surveillance is not going away; indeed it looks like it will increase."

Read more of this story at Slashdot.

Boot Camp Might Damage Speakers on 2016 MacBook Pro

11/29/2016 2:20pm
An anonymous reader writes:One of the things an Apple Mac can do that Windows 10 machines can't do -- at least easily and completely legally -- is run both Windows and MacOS. Interestingly, it's Apple's Boot Camp utility that makes this feat possible, which essentially enables Macs of all flavors to boot directly to Windows 10 and use the Mac as if it were a Windows machine. Usually, this is a fairly straightforward process that works well, with the resulting Boot Camp configuration doing fairly well at mimicking a Windows 10 machine with a few hardware limitations. As of the 2016 MacBook Pro machines, however, it appears that Boot Camp might be causing some serious and uncharacteristic audio issues. It appears that the new speakers running on the refreshed MacBook Pro line aren't working so well with the obsolete drivers provided in the current version of MacOS Sierra Boot Camp. Users are reporting the issue on all models of the 2016 MacBook Pro, and they are not experiencing the issue in MacOS. Virtual machines using Parallels or other software are also not experiencing the issue, providing more support of a bad audio driver causing the problem in Boot Camp.

Read more of this story at Slashdot.

Samsung Electronics Considers Split as Investor Pressure Builds

11/29/2016 1:40pm
Tech giant Samsung Electronics, under pressure from shareholders to improve investor returns, said on Tuesday it will consider creating a holding company in what would be the biggest shake-up in its 47-year history. Reuters reports: The move and a plan to raise dividends come after U.S. hedge fund Elliott Management in October called for the South Korean firm to split itself into a holding vehicle and an operating company. However, the world's top maker of smartphones, memory chips and televisions, said it was "absolutely neutral" about whether to proceed and provided little detail on the potential restructuring, underwhelming investors. "The review does not indicate the management or the board's intention one way or another," the company said in a statement, adding it had hired external advisers for a review expected to take at least six months. Shares in Samsung, worth $224 billion combined, finished unchanged on the day at 1.677 million won ($1,434) each. The 2016 dividend boost fell short of some expectations, while uncertainty over the restructuring kept investors at bay, analysts said.

Read more of this story at Slashdot.

The UK Is About to Legalize Mass Surveillance [Update]

11/29/2016 1:30pm
From a report on Motherboard: On Tuesday, the UK is due to pass its controversial new surveillance law, the Investigatory Powers Act, according to the Home Office. The Act, which has received overwhelming support in both the House of Commons and Lords, formally legalizes a number of mass surveillance programs revealed by Edward Snowden in 2013. It also introduces a new power which will force internet service providers to store browsing data on all customers for 12 months. Civil liberties campaigners have described the Act as one of the most extreme surveillance laws in any democracy, while law enforcement agencies believe that the collection of browsing data is vital in an age of ubiquitous internet communications. "The Investigatory Powers Act 2016 will ensure that law enforcement and the security and intelligence agencies have the powers they need in a digital age to disrupt terrorist attacks, subject to strict safeguards and world-leading oversight," a statement from the Home Office reads. Much of the Act gives stronger legal footing to the UK's various bulk powers, including "bulk interception," which is, in general terms, the collection of internet and phone communications en masse. In June 2013, using documents provided by Edward Snowden, The Guardian revealed that the GCHQ taps fibre-optic undersea cables in order to intercept emails, internet histories, calls, and a wealth of other data. Update: "Snooper's charter" bill has become the law. The home secretary said:"The Investigatory Powers Act is world-leading legislation, that provides unprecedented transparency and substantial privacy protection. "The government is clear that, at a time of heightened security threat, it is essential our law enforcement and security and intelligence services have the power they need to keep people safe. The internet presents new opportunities for terrorists and we must ensure we have the capabilities to confront this challenge. But it is also right that these powers are subject to strict safeguards and rigorous oversight."

Read more of this story at Slashdot.

It's Not Just You, iCloud Calendar Spam is On the Rise

11/29/2016 1:00pm
New submitter petersike writes: If you're using iCloud to sync your calendar across your devices, chances are you just received a bunch of spammy invites over the last few days. Many users are reporting fake events about Black Friday 'deals' coming from Chinese users. If you're looking for cheap Ray-Ban or Louis Vuitton knockoffs, you might find these invites useful. Otherwise, you might be wondering: why is this a thing? If you use your calendar for work, you already rely on calendar invites to invite other people to meetings and events. All major calendar backends support this feature -- Google Calendar, Microsoft Exchange and Apple's iCloud. And it's quite a convenient feature as you only need to enter an email address to send these invitations. You don't need to be in the same company or even in your recipient's address book. But it's also yet another inbox -- and like every inbox out there, it can get abused.

Read more of this story at Slashdot.

Russia Falls Behind In Annual Space Launches For First Time Ever

11/29/2016 12:20pm
From a report on the Moscow Times: This year, for the first time in history, Russia has fallen behind the United States and China as the world's leading launcher of space rockets. Russia will finish 2016 with just 18 launches, according to open source data, compared to China's 19 and America's 20 launches. Alexander Ivanov, deputy chief of Russia's Roscosmos space agency, said on Nov. 29 that the launch rate has decreased because Moscow's space strategy has changed. Currently, it's top priority is reviving existing and aging satellite groupings. But there are other reasons Russia's launch rate may be falling behind. Since the 1957 launch of Sputnik, the world's first satellite, Russia has been the undisputed leader in annual launch rates -- a figure that spoke to the general health of its space program and aerospace industry. At the peak of the Soviet space program, Russia often launched around 100 rockets a year. Since 1957, Russia has launched over 3,000 rockets -- roughly twice as many as the U.S. But with the Russian economy in crisis, space budgets have plummeted. Funding for the next decade of Russian space activity stands at just 1.4 trillion rubles ($21.5 billion), a figure that was only finalized after three rounds of cuts to proposed funding, which began at 3.4 trillion rubles ($52.3 billion). The U.S. space agency, NASA, received a budget of $19.3 billion in 2016 alone. To make matters worse, Russian rockets are becoming uncharacteristically undependable.

Read more of this story at Slashdot.

Uber Drivers Demand Higher Pay in Nationwide Protest

11/29/2016 11:40am
Uber drivers will join forces with fast food, home care and airport workers in a nationwide protest on Tuesday. Their demand: higher pay. From a report on CNET: Calling it the "Day of Disruption," drivers for the ride-hailing company in two dozen cities, including Boston, Chicago, Los Angeles and San Francisco, will march at airports and in shopping areas carrying signs that read, "Your Uber Driver is Arriving Striking." The protest underscores the dilemma Uber faces as it balances the needs of its drivers with its business. Valued at $68 billion, Uber is the highest-valued venture-backed company worldwide. But as it has cut the cost of rides to compete with traditional taxi services, Uber reportedly has experienced trouble turning a profit. Unlike many other workers involved in Tuesday's protests, Uber drivers are not members of a union. In fact, Uber doesn't even classify its drivers as employees. Instead the company considers drivers independent contractors. This classification means the company isn't responsible for many costs, including health insurance, paid sick days, gas, car maintenance and much more. However, Uber still sets drivers' rates and the commission it pays itself, which ranges between 20 percent and 30 percent. "I'd like a fair day's pay for my hard work," Adam Shahim, a 40-year-old driver from Pittsburgh, California, said in a statement. "So I'm joining with the fast-food, airport, home care, child care and higher education workers who are leading the way and showing the country how to build an economy that works for everyone, not just the few at the top."

Read more of this story at Slashdot.

This Cyber Monday Was the Biggest Online Shopping Day, Ever

11/29/2016 11:00am
Cyber Monday is likely to have been the biggest online shopping day in history, according to an analysis of visits to US retail websites. Online spending in the US yesterday hit a new record with $3.39bn spent online, a 10.2 percent increase year-over-year -- ahead even of Black Friday, when $3.34bn was spent. ZDNet adds:Cyber Monday is expected to generate slightly less mobile revenue than Black Friday at $1.19bn, but that's still a 48 percent increase on last year, according to the analysis by Adobe. Consumers have spent a total of $39.9bn online so far this month, it said, up 7.4 percent on last November, with 27 out of 28 days seeing online sales of over $1bn. The five best-selling toys in terms of quantity sold on Cyber Monday were Lego, Shopkins, Nerf, Barbie, and Little Live Pets. The five best-selling electronic products were Sony PlayStation 4, Microsoft Xbox, Samsung 4K TVs, Apple iPads, and Amazon Fire tablets, the company said.

Read more of this story at Slashdot.

Amazon Worker Jumps Off Company Building After Email Note

11/29/2016 10:20am
An anonymous reader writes: An Amazon employee was injured when he leaped off a building at the company's Seattle headquarters in what police characterized as a suicide attempt. The man, who wasn't identified by authorities, sent an e-mail visible to hundreds of co-workers, including Chief Executive Officer Jeff Bezos, before the incident occurred, according to a report on Bloomberg. The man survived the fall from Amazon's 12-story Apollo building at about 8:45 a.m. local time Monday and was taken to a Seattle hospital, police said. The man had recently put in a request to transfer to a different department, but was placed on an employee improvement plan, a step that can lead to termination if performance isn't improved, said the person, who asked not to be identified discussing company personnel matters. More than 20,000 people work in multiple buildings at Amazon's headquarters.

Read more of this story at Slashdot.

novalug.com