×
Earth

Ocean Spray Emits More PFAS Than Industrial Polluters, Study Finds (theguardian.com) 5

An anonymous reader quotes a report from The Guardian: Ocean waves crashing on the world's shores emit more PFAS into the air than the world's industrial polluters, new research has found, raising concerns about environmental contamination and human exposure along coastlines. The study measured levels of PFAS released from the bubbles that burst when waves crash, spraying aerosols into the air. It found sea spray levels were hundreds of thousands times higher than levels in the water. The contaminated spray likely affects groundwater, surface water, vegetation, and agricultural products near coastlines that are far from industrial sources of PFAS, said Ian Cousins, a Stockholm University researcher and the study's lead author. "There is evidence that the ocean can be an important source [of PFAS air emissions]," Cousins said. "It is definitely impacting the coastline."

The Stockholm researchers several years ago found that PFAS from ocean waves crashing are released into the air around shorelines, then can travel thousands of kilometers through the atmosphere before the chemicals return to land. The new research looked at levels in the sea spray as waves crash by testing ocean samples between Southampton in the UK and Chile. The chemicals' levels were higher in the northern hemisphere in general because it is more industrialized and there is not much mixing of water across the equator, Cousins said. It is unclear what the findings mean for human exposure. Inhalation of PFAS is an issue, but how much of the chemicals are breathed in, and air concentrations further from the waves, is still unknown.

SuSE

openSUSE Factory Achieves Bit-By-Bit Reproducible Builds (phoronix.com) 5

Michael Larabel reports via Phoronix: While Fedora 41 in late 2024 is aiming to have more reproducible package builds, openSUSE Factory has already achieved a significant milestone in bit-by-bit reproducible builds. Since last month openSUSE Factory has been producing bit-by-bit reproducible builds sans the likes of embedded signatures. OpenSUSE Tumbleweed packages for that rolling-release distribution are being verified for bit-by-bit reproducible builds. SUSE/openSUSE is still verifying all packages are yielding reproducible builds but so far it's looking like 95% or more of packages are working out. You can learn more via the openSUSE blog.
United States

Two Major ISPs Threaten They'll Stop Complying With US FISA Orders (msn.com) 22

An anonymous reader shared this report from the Washington Post: U.S. government officials were scrambling Friday night to prevent what they fear could be a significant loss of access to critical national security information, after two major U.S. communications providers said they would stop complying with orders under a controversial surveillance law that is set to expire at midnight, according to five people familiar with the matter.

One communications provider informed the National Security Agency that it would stop complying on Monday with orders under Section 702 of the Foreign Intelligence Surveillance Act, which enables U.S. intelligence agencies to gather without a warrant the digital communications of foreigners overseas — including when they text or email people inside the United States. Another provider suggested that it would cease complying at midnight Friday unless the law is reauthorized, according to the people familiar with the matter, who spoke on the condition of anonymity to discuss sensitive negotiations.

The companies' decisions, which were conveyed privately and have not previously been reported, have alarmed national security officials, who strongly disagree with their position and argue that the law requires the providers to continue complying with the government's surveillance orders even after the statute expires. That's because a federal court this month granted the government a one-year extension to continue intelligence collection.

Media

Android Gets a New Software-Based AV1 Decoder (9to5google.com) 12

Ben Schoon reports via 9to5Google: Google's Arif Dikici confirmed on LinkedIn this week that Android is now using VideoLAN's (the makers of VLC) "dav1d" software decoder to allow AV1 to work on more devices. This is now available on all devices running Android 12 or higher via a software update. Mishaal Rahman points out that this started to roll out with the March 2024 Google Play system update.

Dikici says that "most" devices can at least support 720p at 30 frames per second, but that apps will need to opt in "for now" to support AV1 via software decoding. One app that has opted in is YouTube, which now uses AV1 on all compatible devices (though it may have reverted this). This may result in increased power usage depending on your device, though. Improvements on that front may be coming, though, says VideoLAN on Twitter/X.

Firefox

Firefox Nightly Expands To Linux On ARM64 (betanews.com) 3

BrianFagioli shares a report from BetaNews: Mozilla has announced Firefox Nightly for ARM64. This release will cater to the growing demand for support on ARM64 platforms, commonly referred to as AArch64. Feedback from the community has led Mozilla to expand the availability of Firefox Nightly. Users can now access the browser as both .tar archives and .deb packages, depending on their preference and requirements for installation.

For those who favor traditional methods, the .tar.bz2 binaries are accessible through Mozilla's downloads page by selecting the option for Firefox Nightly for Linux ARM64/AArch64. Meanwhile, users looking to utilize updates and installation through Mozilla's APT repository can follow specific instructions to install the firefox-nightly package.

United States

EPA Will Make Polluters Pay To Clean Up Two 'Forever Chemicals' (nytimes.com) 28

An anonymous reader shares a report: The Biden administration is designating two "forever chemicals," man-made compounds that are linked to serious health risks, as hazardous substances under the Superfund law, shifting responsibility for their cleanup to polluters from taxpayers. The new rule announced on Friday empowers the government to force the many companies that manufacture or use perfluorooctanoic acid, also known as PFOA, and perfluorooctanesulfonic acid, known as PFOS, to monitor any releases into the environment and be responsible for cleaning them up. Those companies could face billions of dollars in liabilities.

[...] The announcement follows an extraordinary move last week from the E.P.A. mandating that water utilities reduce the PFAS in drinking water to near-zero levels. The agency has also proposed to designate seven additional PFAS chemicals as hazardous waste. "President Biden understands the threat that forever chemicals pose to the health of families across the country," Michael S. Regan, the administrator of the E.P.A., said. "Designating these chemicals under our Superfund authority will allow E.P.A. to address more contaminated sites, take earlier action, and expedite cleanups, all while ensuring polluters pay for the costs to clean up pollution threatening the health of communities."

China

FBI Says Chinese Hackers Preparing To Attack US Infrastructure (reuters.com) 112

schwit1 shares a report from Reuters: Chinese government-linked hackers have burrowed into U.S. critical infrastructure and are waiting "for just the right moment to deal a devastating blow," FBI Director Christopher Wray said on Thursday. An ongoing Chinese hacking campaign known as Volt Typhoon has successfully gained access to numerous American companies in telecommunications, energy, water and other critical sectors, with 23 pipeline operators targeted, Wray said in a speech at Vanderbilt University.

China is developing the "ability to physically wreak havoc on our critical infrastructure at a time of its choosing," Wray said at the 2024 Vanderbilt Summit on Modern Conflict and Emerging Threats. "Its plan is to land low blows against civilian infrastructure to try to induce panic." Wray said it was difficult to determine the intent of this cyber pre-positioning which was aligned with China's broader intent to deter the U.S. from defending Taiwan. [...] Wray said China's hackers operated a series of botnets - constellations of compromised personal computers and servers around the globe - to conceal their malicious cyber activities. Private sector American technology and cybersecurity companies previously attributed Volt Typhoon to China, including reports by security researchers with Microsoft and Google.
China's Embassy in Washington said in a statement: "Some in the US have been using origin-tracing of cyberattacks as a tool to hit and frame China, claiming the US to be the victim while it's the other way round, and politicizing cybersecurity issues."
Communications

Northrop Grumman Working With SpaceX On US Spy Satellite System (reuters.com) 10

Longtime Slashdot reader SonicSpike shares a report from Reuters: Aerospace and defense company Northrop Grumman is working with SpaceX [...] on a classified spy satellite project already capturing high-resolution imagery of the Earth, according to people familiar with the program. The program, details of which were first reported by Reuters last month, is meant to enhance the U.S. government's ability to track military and intelligence targets from low-Earth orbits, providing high-resolution imagery of a kind that had traditionally been captured mostly by drones and reconnaissance aircraft. The inclusion of Northrop Grumman, which has not been previously reported, reflects a desire among government officials to avoid putting too much control of a highly-sensitive intelligence program in the hands of one contractor, four people familiar with the project told Reuters. 'It is in the government's interest to not be totally invested in one company run by one person,' one of the people said.

It's unclear whether other contractors are involved at present or could join the project as it develops. Northrop Grumman is providing sensors for some of the SpaceX satellites, the people familiar with the project told Reuters. Northrop Grumman, two of the people added, will test those satellites at its own facilities before they are launched. At least 50 of the SpaceX satellites are expected at Northrop Grumman facilities for procedures including testing and the installation of sensors in coming years, one of the people said. In March, Reuters reported that the National Reconnaissance Office, or NRO, in 2021 awarded a $1.8 billion contract to SpaceX for the classified project, a planned network of hundreds of satellites. So far, the people familiar with the project said, SpaceX has launched roughly a dozen prototypes and is already providing test imagery to the NRO, an intelligence agency that oversees development of U.S. spy satellites.

Ubuntu

Ubuntu 24.04 Yields a 20% Performance Advantage Over Windows 11 On Ryzen 7 Framework Laptop (phoronix.com) 62

Michael Larabel reports via Phoronix: With the Framework 16 laptop one of the performance pieces I've been meaning to carry out has been seeing out Linux performs against Microsoft Windows 11 for this AMD Ryzen 7 7840HS powered modular/upgradeable laptop. Recently getting around to it in my benchmarking queue, I also compared the performance of Ubuntu 23.10 to the near final Ubuntu 24.04 LTS on this laptop up against a fully-updated Microsoft Windows 11 installation. The Framework 16 review unit as a reminder was configured with the 8-core / 16-thread AMD Ryzen 7 7840HS Zen 4 SoC with Radeon RX 7700S graphics, a 512GB SN810 NVMe SSD, MediaTek MT7922 WiFi, and a 2560 x 1600 display.

In the few months of testing out the Framework 16 predominantly under Linux it's been working out very well. With also having a Windows 11 partition as shipped by Framework, after updating that install it made for an interesting comparison against the Ubuntu 23.10 and Ubuntu 24.04 performance. The same Framework 16 AMD laptop was used throughout all of the testing for looking at the out-of-the-box performance across Microsoft Windows 11, Ubuntu 23.10, and the near-final state of Ubuntu 24.04. [...]

Out of 101 benchmarks carried out on all three operating systems with the Framework 16 laptop, Ubuntu 24.04 was the fastest in 67% of those tests, the prior Ubuntu 23.10 led in 22% (typically with slim margins to 24.04), and then Microsoft Windows 11 was the front-runner just 10% of the time... If taking the geomean of all 101 benchmark results, Ubuntu 23.10 was 16% faster than Microsoft Windows 11 while Ubuntu 24.04 enhanced the Ubuntu Linux performance by 3% to yield a 20% advantage over Windows 11 on this AMD Ryzen 7 7840HS laptop. Ubuntu 24.04 is looking very good in the performance department and will see its stable release next week.

Privacy

Cops Can Force Suspect To Unlock Phone With Thumbprint, US Court Rules (arstechnica.com) 133

An anonymous reader quotes a report from Ars Technica: The US Constitution's Fifth Amendment protection against self-incrimination does not prohibit police officers from forcing a suspect to unlock a phone with a thumbprint scan, a federal appeals court ruled yesterday. The ruling does not apply to all cases in which biometrics are used to unlock an electronic device but is a significant decision in an unsettled area of the law. The US Court of Appeals for the 9th Circuit had to grapple with the question of "whether the compelled use of Payne's thumb to unlock his phone was testimonial," the ruling (PDF) in United States v. Jeremy Travis Payne said. "To date, neither the Supreme Court nor any of our sister circuits have addressed whether the compelled use of a biometric to unlock an electronic device is testimonial."

A three-judge panel at the 9th Circuit ruled unanimously against Payne, affirming a US District Court's denial of Payne's motion to suppress evidence. Payne was a California parolee who was arrested by California Highway Patrol (CHP) after a 2021 traffic stop and charged with possession with intent to distribute fentanyl, fluorofentanyl, and cocaine. There was a dispute in District Court over whether a CHP officer "forcibly used Payne's thumb to unlock the phone." But for the purposes of Payne's appeal, the government "accepted the defendant's version of the facts, i.e., 'that defendant's thumbprint was compelled.'" Payne's Fifth Amendment claim "rests entirely on whether the use of his thumb implicitly related certain facts to officers such that he can avail himself of the privilege against self-incrimination," the ruling said. Judges rejected his claim, holding "that the compelled use of Payne's thumb to unlock his phone (which he had already identified for the officers) required no cognitive exertion, placing it firmly in the same category as a blood draw or fingerprint taken at booking." "When Officer Coddington used Payne's thumb to unlock his phone -- which he could have accomplished even if Payne had been unconscious -- he did not intrude on the contents of Payne's mind," the court also said.

The Almighty Buck

Software Glitch Saw Aussie Casino Give Away Millions In Cash 17

A software glitch in the "ticket in, cash out" (TICO) machines at Star Casino in Sydney, Australia, saw it inadvertently give away $2.05 million over several weeks. This glitch allowed gamblers to reuse a receipt for slot machine winnings, leading to unwarranted cash payouts which went undetected due to systematic failures in oversight and audit processes. The Register reports: News of the giveaway emerged on Monday at an independent inquiry into the casino, which has had years of compliance troubles that led to a finding that its operators were unsuitable to hold a license. In testimony [PDF] given on Monday to the inquiry, casino manager Nicholas Weeks explained that it is possible to insert two receipts into TICO machines. That was a feature, not a bug, and allowed gamblers to redeem two receipts and be paid the aggregate amount. But a software glitch meant that the machines would return one of those tickets and allow it to be re-used -- the barcode it bore was not recognized as having been paid.

"What occurred was small additional amounts of cash were being provided to customers in circumstances when they shouldn't have received it because of that defect," Weeks told the inquiry. Local media reported that news of the free cash got around and 43 people used the TICO machines to withdraw money to which they were not entitled -- at least one of them a recovering gambling addict who fell off the wagon as the "free" money allowed them to fund their activities. Known abusers of the TICO machines have been charged, and one of those set to face the courts is accused of association with a criminal group. (The first inquiry into The Star, two years ago, found it may have been targeted by organized crime groups.)
United States

Feds Hit Coding Boot Camp With Big Fine For Allegedly Conning Students 38

The US Consumer Financial Protection Bureau (CFPB) has slapped coding boot camp BloomTech -- formerly known as Lambda School -- with several punishments for alleged deceptive business practices. From a report: The business, which claims on its site it will help students land their "dream job" in tech at companies like Amazon, Cisco, and Google, accepted the consent order without admitting or denying any wrongdoing. In an announcement yesterday, the CFPB said it had taken action against BloomTech and its CEO Austen Allred for allegedly not disclosing the true cost of its loans to students and allegedly claiming overoptimistic hiring rates for BloomTech graduates. BloomTech, formerly Lambda School, has operated since 2017 and offers six- to nine-month vocational programs in science and engineering, with a focus on computer technology.

"BloomTech and its CEO sought to drive students toward income share loans that were marketed as risk-free, but in fact carried significant finance charges and many of the same risks as other credit products," said Rohit Chopra, director of the CFPB. With income share loans or income share agreements, BloomTech allowed students to pay tuition later but in exchange had to pay a percentage of their future income, CFPB claimed. The agency alleged that BloomTech explicitly told students that its income share loans (which cost an average of $4k "finance charge" to use) weren't actually loans at all. The CFPB claimed in the settlement order a "significant majority" of students used these loans to finance their education, and alleged each student could end up paying up to $30k of their income to BloomTech to settle the loans.
From the CFPB's press release: BloomTech advertised on its website that 71 to 86 percent of students were placed in jobs within six months of graduation, when its non-public reporting to investors consistently showed placement rates closer to 50 percent. Allred tweeted that the school achieved a 100 percent job-placement rate in one of its cohorts, and later acknowledged in a private message that the sample size was just one student.
The Courts

Crypto Trader Eisenberg Convicted of Fraud in $110 Million Mango Markets Scheme (axios.com) 9

A jury found Avraham "Avi" Eisenberg guilty on all three counts of fraud and manipulation in a $110 million crypto trade scheme using the Mango Markets platform. Axios: The case was the first known test for a jury to decide whether existing U.S. laws governing fraud and market manipulation apply to the world of decentralized finance (DeFi). The 28-year-old Eisenberg will be held to account for his actions on Oct. 11, 2022, when a series of trades he made intentionally boosted the price of Mango Markets' native token, MNGO, as well as the price of futures contracts.

He used the inflated futures holdings as collateral to borrow other cryptocurrencies on the platform, then quickly withdrew those assets and walked away from his collateral. Eisenberg never disputed the facts of the strategy but contended that what he did was legal and permitted by the DeFi protocol, a principle in the industry known as "code is law." U.S. laws apply to DeFi: "Avraham Eisenberg ran a con," prosecutors said Wednesday, during closing arguments, continuing its momentum from last week. The word "con" was used at least six more times in those remarks.

Transportation

Boeing Aims To Bring Flying Cars To Asia By 2030 (nikkei.com) 82

U.S. aircraft manufacturer Boeing plans to enter the flying car business in Asia by 2030, looking to tap demand for the fast travel the vehicles could provide in the region's traffic-choked cities. Nikkei: Boeing Chief Technology Officer Todd Citron revealed the plans in an interview with Nikkei. The company is developing electric vertical take-off and landing (eVTOL) craft at subsidiary Wisk Aero. The aircraft will adopt autonomous technology, rare among eVTOL craft. The plan is to first obtain certification in the U.S. before expanding into Asia. Details of the Asia business will be finalized in the future, including whether Boeing will sell the aircraft to companies aiming to provide eVTOL transportation services or operate the services itself.

Boeing is currently considering which country in Asia to enter first, including Japan. In Japan, domestic startup SkyDrive and Germany's Volocopter are scheduled to operate air taxi services at the 2025 Osaka World Expo. Boeing opened a research and development base in Nagoya on Thursday. It first established R&D operations in Japan in 2022 but had been renting space from other companies until now.

Canada

Canadian Science Gets Biggest Boost To PhD and Postdoc Pay in 20 Years (nature.com) 23

Researchers in Canada got most of what they were hoping for in the country's 2024 federal budget, with a big boost in postgraduate pay and more funding for research and scientific infrastructure. From a report: "We are investing over $5 billion in Canadian brainpower," said finance minister Chrystia Freeland in her budget speech on 16 April. "More funding for research and scholarships will help Canada attract the next generation of game-changing thinkers."

Postgraduate students and postdoctoral researchers have been advocating for higher pay for the past two years through a campaign called Support Our Science. They requested an increase in the value, and number, of federal government scholarships, and got more than they asked for. Stipends for master's students will rise from Can$17,500 (US$12,700) to $27,000 per year, PhDs stipends that ranged from $20,000 to $35,000 will be set to a uniform annual $40,000 and most postdoctoral-fellowship salaries will increase from $45,000 to $70,000 per annum. The number of scholarships and fellowships provided will also rise over time, building to around 1,720 more per year after five years.

"We're very thrilled with this significant new investment, the largest investment in graduate students and postdocs in over 21 years," says Kaitlin Kharas, a PhD student at the University of Toronto, Canada, and executive director of Support Our Science. "It will directly support the next generation of researchers." Although only a small proportion of students and postdoctoral fellows receive these federal scholarships, other funders tend to use them as a guide for their own stipends. Many postgraduates said that low pay was forcing them to consider leaving Canada to pursue their scientific career, says Kharas, so this funding should help to retain talent in the country.

Slashdot Top Deals