リーディングビュー

O'Reilly Reports Increasing Interest in Cybersecurity, AI, Go, Rust, and C++

"Focus on the horse race and the flashy news and you'll miss the real stories," argues Mike Loukides, the content strategy VP at O'Reilly Media. So instead he shares trends observed on O'Reilly's learning platform in the first nine months of 2021: While new technologies may appear on the scene suddenly, the long, slow process of making things that work rarely attracts as much attention. We start with an explosion of fantastic achievements that seem like science fiction — imagine, GPT-3 can write stories! — but that burst of activity is followed by the process of putting that science fiction into production, of turning it into real products that work reliably, consistently, and fairly. AI is making that transition now; we can see it in our data. But what other transitions are in progress...? Important signals often appear in technologies that have been fairly stable. For example, interest in security, after being steady for a few years, has suddenly jumped up, partly due to some spectacular ransomware attacks. What's important for us isn't the newsworthy attacks but the concomitant surge of interest in security practices — in protecting personal and corporate assets against criminal attackers. That surge is belated but healthy.... Usage of content about ransomware has almost tripled (270% increase). Content about privacy is up 90%; threat modeling is up 58%; identity is up 50%; application security is up 45%; malware is up 34%; and zero trust is up 23%. Safety of the supply chain isn't yet appearing as a security topic, but usage of content about supply chain management has seen a healthy 30% increase.... Another important sign is that usage of content about compliance and governance was significantly up (30% and 35%, respectively). This kind of content is frequently a hard sell to a technical audience, but that may be changing.... This increase points to a growing sense that the technology industry has gotten a regulatory free ride and that free ride is coming to an end. Whether it's stockholders, users, or government agencies who demand accountability, enterprises will be held accountable. Our data shows that they're getting the message. According to a study by UC Berkeley's School of Information, cybersecurity salaries have crept slightly ahead of programmer salaries in most states, suggesting increased demand for security professionals. And an increase in demand suggests the need for training materials to prepare people to supply that demand. We saw that play out on our platform.... C++ has grown significantly (13%) in the past year, with usage that is roughly twice C's. (Usage of content about C is essentially flat, down 3%.) We know that C++ dominates game programming, but we suspect that it's also coming to dominate embedded systems, which is really just a more formal way to say "internet of things." We also suspect (but don't know) that C++ is becoming more widely used to develop microservices. On the other hand, while C has traditionally been the language of tool developers (all of the Unix and Linux utilities are written in C), that role may have moved on to newer languages like Go and Rust. Go and Rust continue to grow. Usage of content about Go is up 23% since last year, and Rust is up 31%. This growth continues a trend that we noticed last year, when Go was up 16% and Rust was up 94%.... Both Rust and Go are here to stay. Rust reflects significantly new ways of thinking about memory management and concurrency. And in addition to providing a clean and relatively simple model for concurrency, Go represents a turn from languages that have become increasingly complex with every new release. Other highlights from their report: "Quantum computing remains a topic of interest. Units viewed is still small, but year-over-year growth is 39%. That's not bad for a technology that, honestly, hasn't been invented yet...." "Whether it's the future of finance or history's biggest Ponzi scheme, use of content about cryptocurrency is up 271%, with content about the cryptocurrencies Bitcoin and Ethereum (ether) up 166% and 185% respectively...." "Use of JavaScript content on our platform is surprisingly low — though use of content on TypeScript (a version of JavaScript with optional static typing) is up.... Even with 19% growth, TypeScript has a ways to go before it catches up; TypeScript content usage is roughly a quarter of JavaScript's..." "Python, Java, and JavaScript are still the leaders, with Java up 4%, Python down 6%, and JavaScript down 3%...." "Finally, look at the units viewed for Linux: it's second only to Kubernetes. While down very slightly in 2021, we don't believe that's significant. Linux has long been the most widely used server operating system, and it's not ceding that top spot soon."

Read more of this story at Slashdot.

  •  

Apple's AirTags Catch a Moving Van Driver Lying About His Location

Moving halfway across America, from Colorado to New York, Austin and Valerie McNulty had a bad experience after hiring a moving company that subcontracted the work to another moving company. But they'd also included an Apple AirTag in one of their boxes, Newsweek reports: A moving guy reportedly told Austin that he "just picked up the stuff" and would take another day or two. Due to the AirTag, the couple knew the moving guy was not in Colorado but was just less than five hours away in Harrisburg, Pennsylvania. As for the family's possessions, which were supposed to be inventoried and in a safe location, GPS tracking showed that neither action allegedly occurred. "It turns out [the items] just stayed overnight in a sketchy part of New Jersey," Austin told Newsweek. According to Austin, that same driver who allegedly lied about his whereabouts told Austin in a phone call that he went to see "his lady" and that was part of the delay.... "I think we would have been waiting a lot longer for our home goods to arrive [if we didn't have the AirTag]," Valerie said.... "I would say that AirTags are fairly inexpensive and it's an easy way to hold the third parties accountable." "When we brought up the fact that we knew his exact location he hung up on us," Valerie McNulty said in a Facebook post (which has been shared more than 4,600 times) — although the driver did eventually call back a few minutes later and the items were delivered the next day. ABC News reports that the driver "was put on probation" according to his moving company — which also added that it "plans to use AirTags for tracking their drivers in the future." Valerie McNulty argued to ABC News that "I was never tracking the driver, that was never my intention. I was tracking my belongings." Yet the Washington Post notes the story "comes amid a robust debate about the small plastic-and-metal disks, which launched last spring: Are they creepy or helpful? The trackers have been found on expensive cars, presumably so they could be stolen. But they can also be attached to commonly lost valuables, like keys, to make finding them easier." Apple Insider reports a Pennsylvania state legislator is even proposing legislation making it a crime to track someone else's location or belongings without their consent, adding that if passed in Pennsylvania the law would "create a precedent for other states to follow suit if passed." ZDNet quotes a remark from the Director of Cyber-Security at the Electronic Frontier Foundation to the BBC, calling Apple's AirTags "a perfect tool for stalking." But ZDNet columnist Chris Matyszczyk adds "That's the problem with technology, isn't it? For every potential good use, there are at least several pain-inducing, criminal-pleasing, world-ending uses. Too often, the bad outweighs the good, especially in the public eyes and ears. Here, though, is a tale of a woman who's glad she used an AirTag for her own surveillance purposes.... This whole tale makes me wonder, though, what we've come to and where we're going.... If our default is that we can trust no one and fear everyone, how can we ever really get along?

Read more of this story at Slashdot.

  •  

YouTube-DL Forks to Continue Supporting Older Versions of Python

Wikipedia defines youtube-dl as "a free and open source download manager for video and audio from YouTube and over 1,000 other video hosting websites." It was created in 2006, and "According to libraries.io, 308 other packages and 1.43k repositories depend on it." The project now has over 106,000 stars on GitHub, and by one calculation it's their fourth-most starred project that's written in Python. A new issue today describes the project as "Under new management." I hope that we'll be able to make a new release soon and subsequently keep the program more up-to-date than has been the case for the last few months. The project has a fork https://github.com/yt-dlp that offers a lot of extra functions but demands an up-to-date Python version. This project will continue to target Python version 2.6, 2.7, or 3.2+, at least until no-one complains about 2.6 compatibility. Pull Requests are very welcome, although there is a significant back-log to be handled. Back-ports of yt-dlp features are also welcome. Finally, I'd encourage anyone else who is interested in sharing maintenance duties to establish a track record and make themselves known. We want to keep this popular project alive with a community of future maintainers.

Read more of this story at Slashdot.

  •  

America Races to Salvage Its Sunken F-35 Warplane - Before China Does

"A race against time is under way for the U.S. Navy to reach one of its downed fighter jets — before the Chinese get there first," reports the BBC: The $100m (£74m) F-35C plane came down in the South China Sea after what the Navy describes as a "mishap" during take-off from the USS Carl Vinson. The jet is the Navy's newest, and crammed with classified equipment. As it is in international waters, it is technically fair game. Whoever gets there first, wins. The prize? All the secrets behind this very expensive, leading-edge fighting force.... A U.S. salvage vessel looks to be at least 10 days away from the crash site. That's too late, says defence consultant Abi Austen, because the black box battery will die before then, making it harder to locate the aircraft. "It's vitally important the U.S. gets this back," she says. "The F-35 is basically like a flying computer. It's designed to link up other assets — what the Air Force calls 'linking sensors to shooters'." The BBC describes the plane as the U.S. Navy's first "low observable" carrier-based aircraft, "which enables it to operate undetected in enemy airspace." And it's also "the most powerful fighter engine in the world," flying at speeds up to 1,200 mph, or Mach 1.6. After the $100 million warplane crash-landed onto the deck of an aircraft carrier — and then tumbled into the water — images of the crash appeared on social media, reports CNN. Thanks to Slashdot reader Thelasko for submitting the story!

Read more of this story at Slashdot.

  •  

Ask Slashdot: Do You Test Your Web pages With Microsoft Edge?

`Long-time Slashdot reader shanen writes: If you're doing any web page programming for money, then I'm pretty sure you're paid to support Edge, too. Probably even required to test it. So this question is really directed to the relative amateur programmers among us. As I think about the topic from my overly philosophic perspective, I even considered asking "Do you feel pressured or even blackmailed to support MS Edge?" The original submission tells the story of a homegrown app involving "moderately complicated data structures embedded in JavaScript files that are loaded on the fly..." that might grow into an 800K re-write. "Since it's mostly for my own use, I don't care at all about Edge, but it got me to thinking and led to this question." So do others uses Edge to test their web pages? Long-time Slashdot reader Z00L00K has already answered, "I don't. If I test I avoid the quite erratic variations that Javascript can create as much as possible and resort to HTML and CSS Validators." How about the rest of you? Use the comments to share your own thoughts, opinions, and experiences. Do you test your web pages with Microsoft Edge?

Read more of this story at Slashdot.

  •  

US Space Force Wants to Fund 'Space Junk'-Cleaning Startups

America's Department of Defense "wants to clean up space...at least the increasingly polluted region in low Earth orbit, where thousands of bits of debris, spent rocket stages and dead satellites whiz uncontrollably," writes the Washington Post. They're reporting that America's Space Force has now launched a program to give companies seed money to develop space-cleaning technology to eventually demo in space (starting with awards of $250,000 that rise as high as $1.5 million). The name of the program: Orbital Prime. The issue also has gotten the attention of the White House. Its Office of Science and Technology Policy recently held a meeting asking for input from space industry leaders about what to do about the problem. Speaker after speaker said that governments around the world need to fund these efforts to help create a market for companies to operate. They also said that it had become an imperative for the governments largely responsible for the problem in the first place. "If the U.S. Navy had had a derelict ship sitting in sovereign waters, creating a safety hazard, the U.S. Navy would go out and grab that ship," said Doug Loverro, a former top Pentagon and NASA space official. "And I'm not sure why we don't see the same responsibility for government for their derelict ships and their derelict bodies that are in space today." Or as James Lowenthal, a professor of astronomy at Smith College in Michigan, put it: "Just as we rely on the government to protect the air we breathe and the water we drink, we have to rely on the government to protect the resource and the global commons of low Earth orbit." Europe and Britain have also begun to work toward cleaning up debris — a move that's long overdue, space industry experts say. ClearSpace, a Swiss company, has a contract with the European Space Agency to remove a large piece of debris — a symbol that the issue is finally being addressed. It proposes using a spacecraft with large arms that would grapple the debris like a Venus' flytrap. "This is why we're here. Because we think change is possible," said Luc Piguet, ClearSpace's co-founder and CEO. "And we think we can build a space industry that operates with a different model, where maintenance is just a normal part of it." "This debris and associated congestion threaten the longer sustainability of the space domain," said Space Force's vice chief of space operations, in a video advertising the seed-money program, adding that America's Department of Defense tracks 40,000 objects in orbit the size of a fist or larger, with at least 10 times as many smaller objects the Pentagon can't reliably track.

Read more of this story at Slashdot.

  •  

The Pope Denounces Misinformation 'Infodemic' About Vaccines

The Washington Post reports: Pope Francis denounced on Friday the "distortion of reality based on fear" that has ripped across the world during the coronavirus pandemic, but he also called for compassion, urging journalists to help those misled by coronavirus-related misinformation and fake news to better understand the scientific facts. "We can hardly fail to see that these days, in addition to the pandemic, an 'infodemic' is spreading: A distortion of reality based on fear, which in our global society leads to an explosion of commentary on falsified if not invented news," the leader of the world's Catholics said. Meeting with members of the International Catholic Media Consortium on COVID-19 Vaccines — a fact-checking network that aims to combat misinformation — the pope said that being fully informed by scientific data was a human right. "To be properly informed, to be helped to understand situations based on scientific data and not fake news, is a human right. Correct information must be ensured above all to those who are less equipped, to the weakest and to those who are most vulnerable. Francis, 85, received the Pfizer-BioNTech coronavirus shot last year and has been vocal about the importance of vaccines. "Fake news has to be refuted, but individual persons must always be respected, for they believe it often without full awareness or responsibility," he said Friday.

Read more of this story at Slashdot.

  •  

After 56 years, SEGA Officially Sells Off All Its Arcades

There may still be cabinets in rows with flashing lights and electronic sounds — but Polygon reports a historic change in the world of videogame arcades: Even though arcades all over the world have been in a steady decline over the past 20 years, owing to the ubiquity of console and PC gaming, they've kept a fairly major place in Japan's gaming culture. However, in 2020 with the COVID-19 pandemic, even Japan's arcades started to falter. In late 2020 Sega sold 85% of its shares in the company's arcades, which are run by the Sega Entertainment division, to Genda. Now, as new variants of COVID-19 crop up and the arcade business continues to struggle, Sega has sold the remaining shares to Genda as well, according to Eurogamer and Tojodojo. Sega's arcades will be renamed GiGO throughout Japan, according to a tweet from Genda chief executive Takashi Kataoka. "It's worth noting that although Sega's Entertainment business ran its arcade locations, the company manufactured and sold arcade machines themselves separately and will likely continue to do so," reports Video Games Chronicle. And "While it is sad to see an era of Sega's history come to an end, this doesn't mean Sega will stop making actual arcade games," notes the Metro, which points out that Sega "has continued to supply arcades with new games right up to the present day." But Syfy Wire notes the news comes "after a remarkable 56 years maintaining a coin-operated gaming presence from its native Japan." In memory Eurogamer shared it editor-in-chief's posts about visiting Tokyo's iconic arcade and anime district Akihabara.

Read more of this story at Slashdot.

  •  

Domestic Extremists Have Plotted to Disrupt US Power Grid, DHS Bulletin Warns

CBS News reports that foreign cyberattackers aren't the only potential threat to America's electrical power grid: Domestic violent extremists have been planning to try to disrupt the U.S. power grid and will probably keep doing so, according to a Department of Homeland Security intelligence bulletin shared with law enforcement agencies and utility operators Monday and obtained by CBS News. "Domestic violent extremists have developed credible, specific plans to attack electricity infrastructure since at least 2020, identifying the electric grid as a particularly attractive target given its interdependency with other infrastructure sectors," the bulletin reads. It warns that extremists "adhering to a range of ideologies will likely continue to plot and encourage physical attacks against electrical infrastructure." Still, the bulletin notes that, "Absent significant technical knowledge or insider assistance, small scale attacks are unlikely to cause widespread, multi-state power loss but may result in physical damage that poses risks to operations or personnel."

Read more of this story at Slashdot.

  •  

As Chile Drafts New Constitution, 'Citizen Proposals' Urge Free Software and User Freedom

The nation of Chile "is in the midst of governmental changes," writes the Free Software Foundation, "and with these changes comes the opportunity for the people of Chile to make their voices heard for long-term benefits to their digital rights and freedoms. "Chilean activists have submitted three constitutional proposals relating to free software and user freedom, but they need signatures in order to have these proposals submitted to the constitutional debate." FSF community member Felix Freeman writes: Chile is living a historic moment. For the first time, it is drafting a constitution with constituents elected democratically, on a participatory basis, and with the participation of native peoples. 154 people are in charge of drafting the new fundamental charter of the country, and they have arranged a mechanism of popular participation based on the collection of support: 15,000 signatures are required to submit citizen proposals to the constitutional debate directly. The opportunity to achieve substantive and long-term change for digital rights and freedom of software and other intellectual works is unique in Chile's history, and may not be repeated in our lifetime. This is why four communities historically related to the use and dissemination of free software in Chile got together to draft three of these proposals, which are: - Access to knowledge - Technological and digital sovereignty - Internet privacy These constitutional proposals explain principles of the nation, the rights of citizens, and the duties of the state concerning them. The inclusion of the constitutional articles will allow and promote the creation of laws that defend our freedoms and rights effectively. They are not the end of the road for intellectual freedoms and digital rights, but only the beginning.... People of any nationality can support us by spreading the word all over the Internet. [A Spanish-language version is available HERE.]

Read more of this story at Slashdot.

  •  

Highest Temperatures Ever in 2021 Led To Catastrophic Weather

NBC News analyzed data from 8,892 weather stations with records going back at least 30 years. 691 of them recorded their highest temperature ever in 2021. And there's more cause for concern: Each January, the National Oceanic and Atmospheric Administration, NASA and the European Union Earth observation agency Copernicus publish reports on the previous year's temperature data. Copernicus ranked 2021 as the fifth-hottest year since 1850, while NOAA and NASA ranked it as the sixth-hottest since 1880... In 2021, as Europe recorded its hottest summer, June's weather anomalies in North America were so significant that the continent recorded its hottest June in 171 years, according to the January Copernicus report. The record-breaking heat was even more notable, scientists say, given that 2021 was a La Niña year, in which climate patterns in the Pacific Ocean produce cooler temperatures across the globe. An August 2021 United Nations International Panel on Climate Change report concluded that climate change caused by humans "is already affecting many weather and climate extremes in every region across the globe." Friederike Otto [senior lecturer in climate science at the Grantham Institute for Climate Change and the Environment in London who helped write the report] said that last year's weather events proved 2021 was "a year that made the evidence unavoidable." Scientists say damaging spring frosts — such as the one that destroyed winemakers' crops in France last April — are an example of a weather event that is more likely in a warming world. Denis Lesgourgues, co-owner of ChÃteau Haut Selve, a vineyard in southwest France, lost 60 percent of his crop during last year's spring freeze. Warmer winters have caused grapevine buds to grow earlier in the year, leaving them vulnerable to previously harmless early spring frosts. Lesgourgues said that now if the buds are out when the frosts hit, they die and are unable to grow grapes.... In other parts of the world, the increased heat can become a matter of life or death. In Portland, the June heat wave sent temperatures up to 116 degrees, shattering heat records by as much as 9 degrees Fahrenheit (5 degrees Celsius) and killing hundreds of people in the region.

Read more of this story at Slashdot.

  •  

Everyday Objects Can Run Artificial Intelligence Software

Slashdot reader sciencehabit quotes Science magazine: Imagine using any object around you—a frying pan, a glass paperweight—as the central processor in a neural network, a type of artificial intelligence that loosely mimics the brain to perform complex tasks. That's the promise of new research that, in theory, could be used to recognize images or speech faster and more efficiently than computer programs that rely on silicon microchips. To demonstrate the concept, the researchers built neural networks in three types of physical systems, which each contained up to five processing layers. In each layer of a mechanical system, they used a speaker to vibrate a small metal plate and recorded its output using a microphone. In an optical system, they passed light through crystals. And in an analog-electronic system, they ran current through tiny circuits. In each case, the researchers encoded input data, such as unlabeled images, in sound, light, or voltage. For each processing layer, they also encoded numerical parameters telling the physical system how to manipulate the data. To train the system, they adjusted the parameters to reduce errors between the system's predicted image labels and the actual labels. In one task, they trained the systems, which they call physical neural networks (PNNs), to recognize handwritten digits. In another, the PNNs recognized seven vowel sounds. Accuracy on these tasks ranged from 87% to 97%, they report in this week's issue of Nature. In the future, researchers might tune a system not by digitally tweaking its input parameters, but by adjusting the physical objects—warping the metal plate, say. The team is most excited about PNNs' potential as smart sensors that can perform computation on the fly. A microscope's optics might help detect cancerous cells before the light even hits a digital sensor, or a smartphone's microphone membrane might listen for wake words. These "are applications in which you really don't think about them as performing a machine-learning computation," they say, but instead as being "functional machines."

Read more of this story at Slashdot.

  •  

IRS 'Looking Into' Alternatives to Face-Scanning After Privacy Complaints - and Long Wait Times

Last week America's Internal Revenue Service announced a live-video-feed verification of taxpayer's faces would be required by this summer access online tax service. But now the Washington Post reports that "complaints of confusing instructions and long wait times to complete the sign-up have caused an unknown number to abandon the process in frustration." "The $86 million ID.me contract with the IRS also has alarmed researchers and privacy advocates who say they worry about how Americans' facial images and personal data will be safeguarded in the years to come." There is no federal law regulating how the data can be used or shared. While the IRS couldn't say what percentage of taxpayers use the agency's website, internal data show it is one of the federal government's most-viewed websites, with more than 1.9 billion visits last year. The partnership with ID.me has drawn anger from some members of Congress, including Sen. Ron Wyden (D-Ore.), who tweeted that he was "very disturbed" by the plan and would push the IRS for "greater transparency." Rep. Ted Lieu (D-Calif.) called it "a very, very bad idea by the IRS" that would "further weaken Americans' privacy." The Senate Finance Committee is working to schedule briefings with the IRS and ID.me on the issue, a committee aide said.... "No one should be forced to submit to facial recognition as a condition of accessing essential government services," Wyden said in a separate statement. "I'm continuing to seek more information about ID.me and other identity verification systems being used by federal agencies." A Treasury official said Friday that the department was "looking into" alternatives to ID.me, saying Treasury and the IRS always are interested in improving "taxpayers experience...." About 70 million Americans who have filed for unemployment insurance, pandemic assistance grants, child tax credit payments or other services already have been scanned by the McLean, Va.-based company, which says its client list includes 540 companies; 30 states, including California, Florida, New York and Texas; and 10 federal agencies, including Social Security, Labor and Veterans Affairs.... Equifax, the credit-reporting company that previously confirmed taxpayers' data for the IRS, had its $7 million contract suspended in 2017 after hackers exposed the personal information of 148 million people... [ID.me] says 9 of 10 applicants can verify their identity through a self-service face scan in five minutes or less. Anyone who hits a snag is funneled into the backup video-chat verification process...But some who have tried to verify their identities through ID.me for other purposes have reported agonizing delays: cryptic glitches in Colorado, website errors in Arizona, five-hour waits in North Carolina, days-long waits in California and weeks-long benefit delays in New York. The security blogger Brian Krebs wrote last week that he faced a three-hour wait trying to confirm his IRS account, three months before the tax-filing deadline.... The company said it intends to expand its workforce beyond the 966 agents who now handle video-chat verification for the entire country. It has also opened hundreds of in-person identity-verification centers — replicating, in essence, what government offices have done for decades. The article also points out that advertising is also a key part of ID.me's operation, with people signing up through their web site asked if they want to subscribe to "offers and discounts" — though the company stresses people do have to opt in. And in addition, the article adds, "If a person is using ID.me to confirm their identity with a government agency, the company will not use that verification information for 'marketing or promotional purposes,' the company's privacy policy says." But a senior counsel at the Electronic Privacy Information Center complained to the Post that "We haven't even gone the step of putting regulations in place and deciding if facial recognition should even be used like this. We're just skipping right to the use of a technology that has clearly been shown to be dangerous and has issues with accuracy, disproportionate impact, privacy and civil liberties." A spokesperson for the U.S. Treasury Department also told Bloomberg News "that any taxpayer who does not want to use ID.me can opt against filing his or her taxes online." "We believe in the importance of protecting the privacy of taxpayers, while also ensuring criminals are not able to gain access to taxpayer accounts," LaManna added, arguing that it's been "impossible" for the IRS to develop its own cutting-edge identification program because of "the lack of funding for IRS modernization."

Read more of this story at Slashdot.

  •  
❌