×
China

Declassified US Intelligence: Still No Evidence for Covid 'Lab Leak' Theory (reuters.com) 167

Reuters reports: U.S. intelligence agencies found no direct evidence that the COVID-19 pandemic stemmed from an incident at China's Wuhan Institute of Virology, a report declassified on Friday said.
America's Director of National Intelligence was responding to March legislation requiring declassification (within 90 days) of any information on possible links between the Wuhan Institute of Virology (or "WIV") and the origin of the COVID-19 pandemic. One key finding in the just-released report?

"We continue to have no indication that the Wuhan Institute of Virology's pre-pandemic research holdings included SARS-CoV-2 or a close progenitor, nor any direct evidence that a specific research-related incident occurred involving WIV personnel before the pandemic that could have caused the COVID pandemic." The information available to the U.S. Intelligence Community "indicates that the WIV first possessed SARS-CoV-2 in late December 2019, when WIV researchers isolated and identified the virus from samples from patients diagnosed with pneumonia of unknown causes."

And in addition, "All Intelligence Community agencies assess that SARS-CoV-2 was not developed as a biological weapon."

Beyond that, the report also emphasizes that "Almost all Intelligence Community agencies assess that SARS-CoV-2 was not genetically engineered," adding "Most agencies assess that SARS-CoV-2 was not laboratory-adapted; some are unable to make a determination." The National Intelligence Council and four other Intelligence Community agencies assess that the initial human infection with SARS-CoV-2 most likely was caused by natural exposure to an infected animal that carried SARS-CoV-2 or a close progenitor, a virus that probably would be more than 99 percent similar to SARS-CoV-2...

The Central Intelligence Agency and another agency remain unable to determine the precise origin of the COVID-19 pandemic, as both hypotheses rely on significant assumptions or face challenges with conflicting reporting.

The only two outliers appear to be the Department of Energy, which gives "low confidence" support to the lab-leak theory, and the FBI (whose Trump-appointed director "said he couldn't share many details of the agency's assessment because they were classified.")

Addressing rumors online, the report notes that the lab has performed public health-related research with the army, such as work on vaccines and therapeutics. This included working "with several viruses, including coronaviruses, but no known viruses that could plausibly be a progenitor of SARS-CoV-2."

And while several researchers were ill in the fall of 2019, their symptoms "were consistent with but not diagnostic of COVID-19... [T]he researchers' symptoms could have been caused by a number of diseases and some of the symptoms were not consistent with COVID-19... [T]hey experienced a range of symptoms consistent with colds or allergies with accompanying symptoms typically not associated with COVID-19, and some of them were confirmed to have been sick with other illnesses unrelated to COVID-19." And there's no indication any of them were ever hospitalized for COVID-19 symptoms.
AI

Stack Overflow Moderators Stop Work in Protest of Lax AI-Generated Content Guidelines (gizmodo.com) 41

Moderators of Stack Overflow have announced a strike in protest of the company's ban on moderating AI-generated content, claiming that this policy allows incorrect information and plagiarism to proliferate on the platform. Gizmodo reports: Last week in a post -- which has been downvoted at least 283 times -- Stack Overflow announced its new moderation policy that will only remove AI-generated content in specific instances, claiming that over-moderation of posts made with artificial intelligence was turning away human contributors. The company also said in its post that a strict standard of evidence needed to be used moving forward in order to manage AI content, and that that standard of evidence hasn't applied to most suspensions issued by moderators thus far. This directive was also communicated to the platform's moderation team privately before being posted publicly. The moderators of the website are claiming that this directive will allow AI content, which can frequently be incorrect, to run rampant on the forum while expressing discontent with Stack Overflow for not communicating this new policy more effectively.

"Stack Overflow, Inc. has decreed a near-total prohibition on moderating AI-generated content in the wake of a flood of such content being posted to and subsequently removed from the Stack Exchange network, tacitly allowing the proliferation of incorrect information ("hallucinations") and unfettered plagiarism on the Stack Exchange network. This poses a major threat to the integrity and trustworthiness of the platform and its content," the mods write in their letter to Stack Overflow. "Stack Overflow, Inc. has decreed a near-total prohibition on moderating AI-generated content in the wake of a flood of such content being posted to and subsequently removed from the Stack Exchange network, tacitly allowing the proliferation of incorrect information ("hallucinations") and unfettered plagiarism on the Stack Exchange network. This poses a major threat to the integrity and trustworthiness of the platform and its content," the mods write in their letter to Stack Overflow.

Stack Overflow moderators, like those at Wikipedia, are volunteers tasked with maintaining the integrity of the platform. The moderators say that they tried to express their concerns with the company's new policy through proper channels, but their anxieties fell on deaf ears. The mods plan to strike indefinitely, and will cease all actions including closing posts, deleting posts, flagging answers, and other tasks that help with website upkeep until AI policy has been retracted.

Programming

NYT: It's the End of Computer Programming As We Know It (nytimes.com) 224

Long-time Slashdot theodp writes: Writing for the masses in It's the End of Computer Programming as We Know It. (And I Feel Fine.), NY Times opinion columnist Farhad Manjoo explains that while A.I. might not spell the end of programming ("the world will still need people with advanced coding skills"), it could mark the beginning of a new kind of programming — "one that doesn't require us to learn code but instead transforms human-language instructions into software."

"Wasn't coding supposed to be one of the can't-miss careers of the digital age?," Manjoo asks. "In the decades since I puttered around with my [ZX] Spectrum, computer programming grew from a nerdy hobby into a vocational near-imperative, the one skill to acquire to survive technological dislocation, no matter how absurd or callous-sounding the advice. Joe Biden told coal miners: Learn to code! Twitter trolls told laid-off journalists: Learn to code! Tim Cook told French kids: Apprenez à programmer! Programming might still be a worthwhile skill to learn, if only as an intellectual exercise, but it would have been silly to think of it as an endeavor insulated from the very automation it was enabling. Over much of the history of computing, coding has been on a path toward increasing simplicity."

In closing, Manjoo notes that A.I. has alleviated one of his worries (one shared by President Obama). "I've tried to introduce my two kids to programming the way my dad did for me, but both found it a snooze. Their disinterest in coding has been one of my disappointments as a father, not to mention a source of anxiety that they could be out of step with the future. (I live in Silicon Valley, where kids seem to learn to code before they learn to read.) But now I'm a bit less worried. By the time they're looking for careers, coding might be as antiquated as my first PC."

Btw, there are lots of comments — 700+ and counting — on Manjoo's column from programming types and others on whether reports of programming's death are greatly exaggerated.

The Military

US To Stop Giving Russia Some New START Nuclear Arms Data (reuters.com) 34

New submitter terrorubic shares a report from Reuters: The United States said it will stop providing Russia some notifications required under the New START arms control treaty from Thursday, including updates on its missile and launcher locations, to retaliate for Moscow's 'ongoing violations' of the accord. In a fact sheet on its website, the State Department said it would also stop giving Russia telemetry information - remotely gathered data about a missile's flight - on launches of U.S. intercontinental and submarine-launched ballistic missiles.

Russian President Vladimir Putin has not formally withdrawn from the treaty, which limits deployed strategic nuclear arsenals. On Feb. 21, he said Russia would suspend participation, imperiling the last pillar of U.S.-Russian arms control. Signed in 2010 and due to expire in 2026, the New START treaty caps the number of strategic nuclear warheads that the countries can deploy. Under its terms, Moscow and Washington may deploy no more than 1,550 strategic nuclear warheads and 700 land- and submarine-based missiles and bombers to deliver them.
"The State Department said it continues to notify Russia of intercontinental ballistic missile (ICBM) and submarine ballistic missile (SLBM) launches in accordance with the 1988 Ballistic Missile Launch Notifications Agreement, and of strategic exercises in accordance with a separate 1989 accord," notes Reuters.
Piracy

Music Pirates Are Not Terrorists, Record Labels Argue In Court (torrentfreak.com) 46

An anonymous reader quotes a report from TorrentFreak: A Virginia jury held Cox liable for pirating subscribers because it failed to terminate accounts after repeated accusations, ordering the company to pay $1 billion in damages to the labels. This landmark ruling is currently under appeal. As part of the appeal, Cox informed the court of a supplemental authority that could support its position. The case in question is Twitter vs. Taamneh, in which the U.S. Supreme Court recently held that the social media platform isn't liable for ISIS terrorists, who used Twitter to recruit and raise funds. The Supreme Court rejected (PDF) the claim that Twitter aided-and-abetted terrorist activity, because it didn't "consciously and culpably" participate in the illegal activity. According to Cox, the same logic applies in its case, where the ISP was held liable for the piracy activities of subscribers.

"These same aiding-and-abetting principles animate copyright law's contributory liability doctrine, and they likewise foreclose liability here," an attorney for Cox informed the court. Cox argues that the Supreme Court ruling confirms that aiding-and-abetting liability only applies when parties knowingly took part in the activity. That runs contrary to the finding in its own dispute with the record labels, where "culpable expression and conduct" or "intent" were not required. "Though Twitter arises in a different context, its reasoning applies with full force and supports reversal of the contributory infringement verdict," Cox added. The two cases are indeed quite different, but ultimately they are about imposing liability on third-party services.

According to Cox, the Twitter terrorist ruling clearly shows that it isn't liable for pirating subscribers, but the music companies see things differently. Earlier this week, the music labels responded in court (PDF), countering Cox's arguments. They argue that the Twitter ruling doesn't apply to their piracy dispute with Cox, as the cases are grounded in different laws. While the music industry certainly isn't happy with pirates, the Cox case is a copyright matter while the Twitter lawsuit fell under the Justice Against Sponsors of Terrorism Act. And for now, pirates are not categorized as terrorists. After establishing the difference between pirates and terrorists, the music companies point out that Twitter wasn't directly connected to the misconduct. The platform's role was more passive and its connection to ISIS was more distant than Cox's connection to its subscribers. Cox took a more active role and materially contributed to the pirating activities, which stands no comparison to the Twitter case, plaintiffs argue.

The Military

After 78 Years, Autonomous Underwater Robots Locate Sunken WWII Destroyer (cnn.com) 39

"Over the past 13 years, Tim Taylor and Christine Dennison have scoured the ocean floor using autonomous underwater robots," according to a history writer's commentary on CNN, "to discover and document the wrecks of seven US submarines lost in World War II." Taylor and Dennison are ensuring that more families of those lost know where their loved ones' deep-water graves reside. They are racing against time as underwater development threatens many of these wrecks... Budget constraints hinder the Navy from devoting resources to undertaking these kinds of searches, according to Taylor, and his team is showing how private groups can fill the gap.
A philanthropic private investment group funds the expeditions, the article points out, adding that Taylor and Dennison "hope to employ the special autonomous underwater technology they created to help others map the ocean floor for environmental and other purposes."

Their latest find was part of the 82-day battle of Okinawa in 1945: The USS Mannert L. Abele, which the explorers found 4,500 feet under the Pacific Ocean and 81 miles from the nearest landmass, was the first American ship sunk by an unusual type of rocket-powered Japanese kamikaze plane... Though the Abele managed to shoot down two aircraft and damage or fend off others, at six minutes in, a Japanese fighter plunged into the destroyer's engine room and exploded, cutting off all electrical power. Just a minute later, another, much more unusual, plane slammed into the destroyer's hull. The Abele had been struck by a unique rocket-propelled kamikaze plane called the MXY7 Ohka ("Cherry Blossom"), which due to its very short range had to be carried under the belly of a larger bomber until close to US ships, whereupon it was released to soar toward its target at immense speed.

The detonation of this manned missile's 1.3 tons of explosives caused the ship to seemingly break into two and begin sinking. In a matter of minutes, 84 sailors and officers had been killed. Japanese aircraft strafed the surviving crew as they jumped into the oil-slick water, but two smaller landing craft escorting the Abele shot down two more planes and beat off the rest, managing to rescue 255 crew members.

Nearly eight decades later, modern robotics technologies allowed Taylor and Dennison to find the destroyer's submerged hull. In the past, Taylor noted, it would have been practically inconceivable for a small, private team to have undertaken the cumbersome search process that, Taylor estimated, would have taken four to five times as long and cost significantly more money...

It was on their last remaining day of a more-than-month-long search, just before bad weather would force them to conclude the expedition, that they spotted the Abele's wreck.

Python

PyPi is Reducing Stored IP Address Data (theregister.com) 10

The PyPi registry of open source Python packages "began evaluating ways to reduce the amount of identifying information that it stores," reports the Register, "even before the U.S. Justice Department came asking for data on suspect users."

But now, "the Python community package registry wants developers to understand that it's working to minimize the user data that it stores." The goal is not to be unable to respond to lawful requests for information; rather it's to store only the minimum amount of data necessary so as not to expose users to unnecessary privacy intrusion. Coincidentally, data minimization may prevent organizations from becoming a preferred source of on-demand surveillance: having excessive amounts of information about users invites legal demands, which staff then have to handle...

Mike Fiedler, a member of the PyPI admin team, said in a statement on Friday that the organization's effort to improve user privacy and security dates back to 2020. Since the receipt of the subpoenas in March and April, that effort has been reinvigorated.

Much of the concern focuses on IP address data, which gets stored in conjunction with web log access; user events such as logins; project events including uploads; events associated with recently introduced organizations; and administrative PyPI journal entries. According to Fiedler, PyPI was able to stop storing IP data for journal entries — an append-only transaction log — because these were only exposed to administrators... To obscure IP addresses, PyPI is salting them — adding an arbitrary value — and then hashing them — running the data through a one-way scrambling function that creates a value called a hash. This provides a way to store a reference to potentially identifying data without actually storing raw data... PyPI has been using its CDN provider Fastly to pass along a salted hash of the IP address for requests via a custom header, along with broad GeoIP data (the country and city where the user is located), and is using that instead of the raw IP address. In April, the registry adopted code changes for hashing and salting IP addresses for requests that PyPI handles directly in Warehouse, the web application that implements the official Python package index.

And over the past few days, it has been replacing IP addresses in the PyPI user interface with geolocation data. PyPI still relies on IP address information to identify abuse — the creation of malicious packages, harassments, and so on — but Fiedler says even that is being looked at. "We're thinking about how to manage that without storing IP data, but we're not there yet," he said. Fiedler says the PyPI team will be weighing whether it can remove IP data from event history records after a period of time and whether the service can handle all its requests via CDN.

Open Source

Peplum: F/OSS Distributed Parallel Computing and Supercomputing At Home With Ruby Infrastructure (ecsypno.com) 20

Slashdot reader Zapotek brings an update from the Ecsypno skunkworks, where they've been busy with R&D for distributed computing systems: Armed with Cuboid, Qmap was built, which tackled the handling of nmap in a distributed environment, with great results. Afterwards, an iterative clean-up process led to a template of sorts, for scheduling most applications in such environments.

With that, Peplum was born, which allows for OS applications, Ruby code and C/C++/Rust code (via Ruby extensions) to be distributed across machines and tackle the processing of neatly grouped objects.

In essence, Peplum:

- Is a distributed computing solution backed by Cuboid.
- Its basic function is to distribute workloads and deliver payloads across multiple machines and thus parallelize otherwise time consuming tasks.
- Allows you to combine several machines and built a cluster/supercomputer of sorts with great ease.

After that was dealt with, it was time to port Qmap over to Peplum for easier long-term maintenance, thus renamed Peplum::Nmap.

We have high hopes for Peplum as it basically means easy, simple and joyful cloud/clustering/super-computing at home, on-premise, anywhere really. Along with the capability to turn a lot of security oriented apps into super versions of themselves, it is quite the infrastructure.

Yes, this means there's a new solution if you're using multiple machines for "running simulations, to network mapping/security scans, to password cracking/recovery or just encoding your collection of music and video" -- or anything else: Peplum is a F/OSS (MIT licensed) project aimed at making clustering/super-computing affordable and accessible, by making it simple to setup a distributed parallel computing environment for abstract applications... TLDR: You no longer have to only imagine a Beowulf cluster of those, you can now easily build one yourself with Peplum.
Some technical specs: It is written in the Ruby programming language, thus coming with an entire ecosystem of libraries and the capability to run abstract Ruby code, execute external utilities, run OS commands, call C/C++/Rust routines and more...

Peplum is powered by Cuboid, a F/OSS (MIT licensed) abstract framework for distributed computing — both of them are funded by Ecsypno Single Member P.C., a new R&D and Consulting company.

Space

Virgin Orbit Shuts Down After Bankruptcy Sales (cnbc.com) 13

Virgin Orbit, a bankrupt rocket company spun off from Virgin Galactic, is shutting down after selling its facility leases and equipment to aerospace companies in an auction. CNBC reports: Spun out of Virgin Galactic in 2017 by founder Sir Richard Branson, Virgin Orbit reached rarefied air by flying multiple missions. But difficulty raising funds, and slow execution, brought the once multibillion-dollar company to bankruptcy and ultimately shut down. Monday's auction bids amount to about $36 million in total. Virgin Orbit's six or so rockets that were in various stages of manufacturing assembly, and its intellectual property, have yet to be sold, a Virgin Orbit spokesperson confirmed.

Rocket Lab successfully bid $16.1 million for the company's headquarters in Long Beach, California, which is about 140,000 square feet, the spokesperson said. Although founded in New Zealand, Rocket Lab was already a neighbor of Virgin Orbit, with a headquarters and facilities in the Long Beach area. Additionally, Rocket Lab's purchase includes assets such as 3D-printers and a specialty tank welding machine. In a press release, Rocket Lab said the Virgin Orbit assets will improve its production, manufacturing, and test capabilities, especially in developing its larger Neutron rocket.

Stratolaunch was awarded its $17 million "stalking horse" bid for Virgin Orbit's 747 jet. A Stratolaunch spokesperson, in a statement to CNBC, said the company "continually evaluates ways to increase our capacity to meet the imperative for testing hypersonic technologies via leap-ahead flight demonstrations." "We will share more news about the sale as it becomes available," Stratolaunch noted. Previously in the bankruptcy process, Virgin Orbit agreed to the terms of Stratolaunch's bid, which was to purchase the 747 jet "Cosmic Girl" and other aircraft assets. Stratolaunch has been developing its own airborne system, the world's largest airplane called "Roc," as a platform for hypersonic flight testing.

Launcher, a subsidiary of Vast Space, is purchasing the company's facility in Mojave, California -- as well as some machinery, equipment and inventory -- for $2.7 million. Virgin Orbit's Mojave leases include infrastructure such as rocket engine test stands and an aircraft hangar. A liquidation company, Inliper, is purchasing the company's office equipment for $650,000.

Google

'An Example of a Very Sad Google Account Recovery Failure and Its Effects' (vortex.com) 185

Time magazine once described Lauren Weinstein as an internet-policy expert and privacy advocate. Also a long-time Slashdot reader, he now brings this cautionary blog post "to share with you an example of what Google account recovery failure means to the people involved..."

In this case it's a 90-year-old woman who "For at least the last decade... was just using the stored password to login and check her email," according to an email Weinstein received: When her ancient iPad finally died, she tried to add the gmail account to her new replacement iPad. However, she couldn't remember the password in order to login.... I don't know if you've ever attempted to contact a human being at google tech support, but it's pretty much impossible. They also don't seem to have an exception mechanism for cases like this.

So she had to abandon hopes of viewing the google photos of her (now deceased) beloved pet, her contacts, her email subscriptions, reminders, calendar entries, etc... [I]t's difficult to know what to say to someone like this when she asks "what can we do now" and there are no options... It's tough to explain that your treasured photos can't be retrieved because you're not the sort of user that Google had in mind.

Weinstein adds "this is by no means the worst such case I've seen — not even close, unfortunately." I've been discussing these issues with Google for many years. I've suggested "ombudspeople", account escalation and appeal procedures that ordinary people could understand, and many other concepts. They've all basically hit the brick wall of Google suggesting that at their scale, nothing can be done about such "edge" cases.
Here's Google's page for providing an alternate recovery email address and phone number. Unfortunately, the 90-year-old woman's account "was created so long ago that she didn't need to provide any 'recovery' contacts at that time," according to the email, "or she may have used a landline phone number that's long been cancelled now..."
Education

700,000 Free Programmable 'Micro Bits' with LEDs Given to UK Schools (bbc.com) 54

It's an educational pocket-sized codable computer with a motion detector, compass, and other sensors. Wikipedia describes the micro:bit as "half the size of a credit card" -- (43 mm x 52 mm or 1.7 inches by 2.0 inches).

Now long-time Slashdot reader theodp writes: If British schoolchildren aren't inspired to code by the tiny 5x5 grid of LED lights on the micro:bit single-board computer, well it's not for lack of trying. The BBC on Monday announced a partnership with Microsoft, Arm, and others that will offer a classroom set of 30 free handheld BBC micro:bits (about 700,000 total devices) and brand-new teaching resources to every primary school across the UK "to support all schoolchildren and teachers..."

The news follows January's announcement of the Micro:bit Educational Foundation's newest partnership. They teamed with US-based/tech giant-backed nonprofit Code.org to offer teachers computing resources to incorporate the micro:bit in Code.org's CS Fundamentals curriculum (aimed at children in Kindergarten-5th Grade).

Microsoft is a Founding Partner of both the Micro:bit Educational Foundation and Code.org, and back in 2015 Microsoft also partnered with the BBC to provide an estimated 1 million free micro:bits to every 11- and 12-year old in the UK. A 2017 research paper reported that after testing with 15 teachers, "primarily comments around engagement were positive." But one skeptical teacher offered some doubts about the appeal of a small relatively low-tech device to younger children. "I mean I think it's cute but I could easily see why you know a 4K mobile phone screen is going to hold more appeal than regular LEDs ... I think there is merit in that but I could see how people would understandably go where's the screen?"

AI

Ask Slashdot: Why Should I Be Afraid of Artificial Intelligence? 275

"I keep reading and hearing about calls for regulations on artificial intelligence," writes long-time Slashdot reader bartoku , "and it pisses me off."

"I want more so called artificial intelligence, not less, and I do not want it to be regulated, filtered, restricted in anyway." I love that Deep Fakes are now available to the masses, and I stopped believing anything is real in 1997 after Hoffman and De Niro scared me in " Wag the Dog".

I love automation and I want more of it; robots please take my job. I want robots to go fight wars for me instead of our sons.

Surveillance is already terrifying, adding "Artificial Intelligence" does not really make it that much more scary; we all need to just starve the system of our personal data anyway. All the other arguments like crashing economic systems and discrimination just seemed to be based on stupid "Artificial Intelligence" hooked up to something it should not be...

Please scare me, or vote on your favorite sci-fi "Artificial Intelligence" scenario. I will be being boring and hope we can have a "good" Matrix; one where I am rich and sexy.

The original submission notes that they posed this question to ChatGPT — and to Google — but "I did not get a single compelling answer."

So share your own thoughts in the comments: why should this Slashdot user be afraid of AI?

NOTE: Though they didn't feel it conveyed the right tone, they also submitted their original post to Microsoft's Bing AI, which delivered this rewrite:

What are the real dangers of artificial intelligence? I am not convinced by the common arguments against it, such as regulation, deep fakes, automation, war, surveillance, economic disruption, or discrimination. I think these are either exaggerated or solvable problems. I actually want more artificial intelligence in my life, not less. Can you give me some compelling reasons why I should be afraid of artificial intelligence? Or what are some sci-fi scenarios that you find plausible or interesting? Personally, I would like a Matrix-like simulation where I can live out my fantasies.
Privacy

Freenet 2023: a Drop-in Decentralized Replacement for the Web - and More (freenet.org) 54

Wikipedia describes Freenet as "a peer-to-peer platform for censorship-resistant, anonymous communication," released in the year 2000. "Both Freenet and some of its associated tools were originally designed by Ian Clarke," Wikipedia adds. (And in 2000 Clarke answered questions from Slashdot's readers...)

And now Ian Clarke (aka Sanity — Slashdot reader #1,431) returns to share this announcement: Freenet, a familiar name to Slashdot readers for over 23 years, has undergone a radical transformation: Freenet 2023, or "Locutus". While the original Freenet was like a decentralized hard drive, the new Freenet is like a full decentralized computer, allowing the creation of entirely decentralized services like messaging, group chat, search, social networking, among others. The new Freenet is implemented in Rust and designed for efficiency, flexibility, and transparency to the end user.
"Designed for simplicity and flexibility, Freenet 2023 can be used seamlessly through your web browser, providing an experience that feels just like using the traditional web," explains the announcement...

And in the comments below, Ian points out that "When the new Freenet is up and running, I think it will be the first system of any kind that could host something like Wikipedia, not just the data but the wiki CMS system it's built on. An editable wikipedia, entirely decentralized and very scalable...

"We've already had interest from everyone from video game developers who want to build a decentralized MMORPG, to political advocacy groups across the political spectrum. Plenty of people value freedom."
Science

Physicists Create Biggest-Ever Schrodinger's Cat (scientificamerican.com) 56

Researchers in the Hybrid Quantum Systems Group at the Swiss Federal Institute of Technology in Zurich have put a sapphire crystal weighing 16 micrograms in a quantum-mechanical superposition of two vibrational states. The researchers "excited the crystal into vibrations such that its atoms oscillated back and forth simultaneously and in two opposite directions -- putting the entire crystal in what is known as a state of quantum superposition," reports Scientific American. From the report: As the research group reports in Science, this condition is much like that of the cat in the famous thought experiment of physicist Erwin Schrodinger. In Schrodinger's quantum-mechanical scenario, a cat is simultaneously alive and dead, depending on the decay of an atom that releases a vial of poison. The sapphire crystal in the new experiment has been put in the macroscopic equivalent of that "cat state." Such states can help scientists fathom how and why the laws of the quantum world transition into the rules of classical physics for larger objects.

To get the sapphire, which consists of about 10^17 atoms, to behave like a quantum-mechanical object, the research group set it to oscillate and coupled it to a superconducting circuit. (In the terms of the original thought experiment, the sapphire was the cat, and the superconducting circuit was the decaying atom.) The circuit was used as a qubit, or bit of quantum information that is simultaneously in the states "0" and "1." The circuit's superposition was then transferred to the oscillation of the crystal. Thus, the atoms in the crystal could move in two directions at the same time -- for example, up and down -- just as Schrodinger's cat is dead and alive at the same time. Importantly, the distance between these two states (alive and dead or up and down) had to be greater than the distance ascribed to the quantum uncertainty principle, which the ETH Zurich scientists confirmed. Using the superconducting qubit, the researchers succeeded in determining the distance between the crystal's two vibrational states. At about two billionths of a nanometer, it's tiny -- but still large enough to distinguish those two states from each other beyond doubt.

These findings have "pushed the envelope on what can be considered quantum mechanical in an actual lab experiment," says Shlomi Kotler, a physicist who studies quantum mechanical circuits at the Hebrew University of Jerusalem. Kotler did not participate in the study. [...] Kotler notes that finding larger cat states is a way of "stretching the limit" of observed quantum-mechanical objects -- in this case, by demonstrating that something as massive as 16 micrograms can exist in this state. (Though, to be clear, 16 micrograms is still microscopic.)

Security

Malware Turns Home Routers Into Proxies For Chinese State-Sponsored Hackers (arstechnica.com) 28

An anonymous reader quotes a report from Ars Technica: Researchers on Tuesday unveiled a major discovery -- malicious firmware that can wrangle a wide range of residential and small office routers into a network that stealthily relays traffic to command-and-control servers maintained by Chinese state-sponsored hackers. A firmware implant, revealed in a write-up from Check Point Research, contains a full-featured backdoor that allows attackers to establish communications and file transfers with infected devices, remotely issue commands, and upload, download, and delete files. The implant came in the form of firmware images for TP-Link routers. The well-written C++ code, however, took pains to implement its functionality in a "firmware-agnostic" manner, meaning it would be trivial to modify it to run on other router models.

The main purpose of the malware appears to relay traffic between an infected target and the attackers' command and control servers in a way that obscures the origins and destinations of the communication. With further analysis, Check Point Research eventually discovered that the control infrastructure was operated by hackers tied to Mustang Panda, an advanced persistent threat actor that both the Avast and ESET security firms say works on behalf of the Chinese government.

The researchers discovered the implant while investigating a series of targeted attacks against European foreign affairs entities. The chief component is a backdoor with the internal name Horse Shell. The three main functions of Horse Shell are: a remote shell for executing commands on the infected device; file transfer for uploading and downloading files to and from the infected device; and the exchange of data between two devices using SOCKS5, a protocol for proxying TCP connections to an arbitrary IP address and providing a means for UDP packets to be forwarded. The SOCKS5 functionality seems to be the ultimate purpose of the implant. By creating a chain of infected devices that establish encrypted connections with only the closest two nodes (one in each direction), it's difficult for anyone who stumbles upon one of them to learn the origin or ultimate destination or the true purpose of the infection. As Check Point researchers wrote:
"Learning from history, router implants are often installed on arbitrary devices with no particular interest, with the aim to create a chain of nodes between the main infections and real command and control," Check Point researchers wrote in a shorter write-up. "In other words, infecting a home router does not mean that the homeowner was specifically targeted, but rather that they are only a means to a goal."
Sci-Fi

UFO Hunters Built an Open-Source AI System To Scan the Skies (vice.com) 72

An anonymous reader shares an excerpt from a Motherboard article: Now, frustrated with a lack of transparency and trust around official accounts of UFO phenomena, a team of developers has decided to take matters into their own hands with an open source citizen science project called Sky360, which aims to blanket the earth in affordable monitoring stations to watch the skies 24/7, and even plans to use AI and machine learning to spot anomalous behavior. Unlike earlier 20th century efforts such as inventors proposing "geomagnetic detectors" to discover nearby UFOs, or more recent software like the short-lived UFO ID project, Sky360 hopes that it can establish a network of autonomously operating surveillance units to gather real-time data of our skies. Citizen-led UFO research is not new. Organizations like MUFON, founded in 1969, have long investigated sightings, while amateur groups like the American Flying Saucer Investigating Committee of Columbus even ran statistical analysis on sightings in the 1960s (finding that most of them happened on Wednesdays). However, Sky360 believes that the level of interest and the technology have now both reached an inflection point, where citizen researchers can actually generate large-scale actionable data for analysis all on their own.

The Sky360 stations consist of an AllSkyCam with a wide angle fish-eye lens and a pan-tilt-focus camera, with the fish-eye camera registering all movement. Underlying software performs an initial rough analysis of these events, and decides whether to activate other sensors -- and if so, the pan-tilt-focus camera zooms in on the object, tracks it, and further analyzes it. According to developer Nikola Galiot, the software is currently based on a computer vision "background subtraction" algorithm that detects any motion in the frame compared to previous frames captured; anything that moves is then tracked as long as possible and then automatically classified. The idea is that the more data these monitoring stations acquire, the better the classification will be. There are a combination of AI models under the hood, and the system is built using the open-source TensorFlow machine learning platform so it can be deployed on almost any computer. Next, the all-volunteer team wants to create a single algorithm capable of detection, tracking and classification all in one.

All the hardware components, from the cameras to passive radar and temperature gauges, can be bought cheaply and off-the-shelf worldwide -- with the ultimate goal of finding the most effective combinations for the lowest price. Schematics, blueprints, and suggested equipment are all available on the Sky360 site and interested parties are encouraged to join the project's Discord server. There are currently 20 stations set up across the world, from the USA to Canada to more remote regions like the Azores in the middle of the Atlantic [...] Once enough of the Sky360 stations have been deployed, the next step is to work towards real-time monitoring, drawing all the data together, and analyzing it. By striving to create a huge, open, transparent network, anyone would be free to examine the data themselves.

In June of this year, Sky360, which has a team of 30 volunteer developers working on the software, hopes to release its first developer-oriented open source build. At its heart is a component called 'SimpleTracker', which receives images frame by frame from the cameras, auto-adjusting parameters to get the best picture possible. The component determines whether something in the frame is moving, and if so, another analysis is performed, where a machine learning algorithm trained on the trajectories of normal flying objects like planes, birds, or insects, attempts to classify the object based on its movement. If it seems anomalous, it's flagged for further investigation.

Books

'Free Comic Book Day' 2023 Celebrations Include 'Ant-Sized' Blu-Ray Discs (freecomicbookday.com) 10

All across North America today, over 2,000 comic book stores are celebrating Free Comic Book Day. As it enters its third decade — the event started in 2001, according to Wikipedia — there'll be over two dozen free comic books to choose from this, and enthusiastic stores trying to dial up the fun even more.

16 stores are also giving away Ant-Man and The Wasp: Quantumania in special "ant-sized" boxes — the size of penny — with tiny versions of the cover art from the full-sized Blu-Ray disc boxes (along with a code for a digital version of the movie). The Bleeding Cool site has a running list of stores doing additional special "cool stuff," including cookie giveaways, discounts on paperbacks and comic books, and personal appearances by comic book writers and artists.

Geek-friendly free comic books this year:

Bleeding Cool also has previews the artwork from Star Trek: Prelude to Day of Blood, a teaser for a coming "comic book crossover event between IDW's main Star Trek comic and the Star Trek: Defiant series" (that's also accompanied by a Lower Decks comic book story).

Just remember, in 2017 NPR had this advice for visiting comics fans. "While you're there, buy something... The comics shops still have to pay for the 'free' FCBD books they stock, and they're counting on the increased foot traffic to lift sales."


Music

Grimes Unveils Software To Mimic Her Voice (pitchfork.com) 49

Canadian singer-songwriter Grimes went viral late last month when she invited her fans to create music using her voice, stating that should would split 50% of royalties for any successful AI-generated song. Now, the artist has unveiled an AI voice software, called Elf.Tech, to make it even easier for users to deepfake her voice for their own AI songs. Pitchfork reports: Artists can commercially release the results in exchange for half of any master-recording royalties. Grimes announced a pair of new songs, "Music for Machines" and "I Wanna Be Software," in tandem with the launch, though their release date has not been set. In a Twitter thread about the software, Grimes asked users to "be tasteful" but said she would only block extreme uses, such as an AI Grimes "Nazi anthem" ("unless it's somehow in jest a la The Producers I guess"). "Baby murder songs" are also off the menu.

Through Elf.Tech, Grimes has also shared a demo of her collaborative remake of Richie Hawtin's Plastikman track "Passage (Out)." Find it in the "Bounces" folder on the website. You can also access stems to train your own Grimes AI. The project is powered by the generative AI Triniti.

Hardware

Researchers Build World's First Wooden Transistor (ieee.org) 46

An anonymous reader shared this report from IEEE Spectrum: Transistors inside modern computer chips are several nanometers across, and switch on and off at hundreds of gigahertz. Organic electrochemical transistors, made for biodegradable applications, are milimeters in size and switch at kilohertz rates. The world's first wooden transistor, made by a collaboration of researchers through the Wallenberg Wood Science Center and reported this week in Publications of the National Academy of Sciences, is 3 centimeters across and switches at less than one Hertz. While it may not be powering any wood-based supercomputers anytime soon, it does hold out promise for specialized applications including biodegradable computing and implanting in into living plant material.

"It was very curiosity-driven," says Isak Engquist, a professor at Linköping University who led the effort. "We thought: 'Can we do it? Let's do it, let's put it out there to the scientific community and hope that someone else has something where they see these could actually be of use in reality...'"

Wood has great structural stability while being highly porous and efficiently transporting water and nutrients. The researchers leveraged these properties to create conducting channels inside the wood's pores and electrochemically modulate their conductivity with the help of a penetrating electrolyte. Of the 60,000 species, the team chose balsa wood for its strength, even when one of the components of its structure — lignin — was largely removed to make more room for conducting materials. To remove much of the lignin, pieces of balsa wood were treated with heat and chemicals for five hours. Then, the remaining cellulose-based structure was coated with a conducting polymer...

Since the pores inside wood are made for transporting water, the PEDOT:PSS solution readily spread through the tubes. Electron microscopy and X-ray imaging of the result revealed that the polymer decorated the insides of the tube structures. The resulting wood chunks conducted electricity along their fibers.

Wikipedia

Wikipedia Will Not Perform Online Safety Bill Age Checks (bbc.com) 26

Wikipedia will not comply with any age checks required under the Online Safety Bill, its foundation says. From a report: Rebecca MacKinnon, of the Wikimedia Foundation, which supports the website, says it would "violate our commitment to collect minimal data about readers and contributors." A senior figure in Wikimedia UK fears the site could be blocked as a result. But the government says only services posing the highest risk to children will need age verification. Wikipedia has millions of articles in hundreds of languages, written and edited entirely by thousands of volunteers around the world.

It is the eighth most-visited site in the UK, according to data from analytics company SimilarWeb. The Online Safety Bill, currently before Parliament, places duties on tech firms to protect users from harmful or illegal content and is expected to come fully into force some time in 2024. Neil Brown, a solicitor specialising in internet and telecoms law, says that under the bill, services likely to be accessed by children must have "proportionate systems and processes" designed to prevent them from encountering harmful content. That could include age verification.

Slashdot Top Deals