Slashdot

Slashdot

Consortium is Creating 'Passports' to Track Contents and Repair History of Europe's EV Batteries
US Seeks to Steal Putin's Top Scientists by Loosening Their Visa Requirements
Mac Studio's M1 Ultra Chip Outperforms on Computational Fluid Dynamics Benchmarks
After Microsoft Releases Patch for RPC Exploit: What the Honeypot Saw
Webb Telescope Captures Five Different, Dazzling Views of a Nearby Galaxy
Can Elon Musk Spur Cybersecurity Innovation At Twitter?
How Russians - and Ukranians - are Using Stolen Data
Alibaba Cloud Gets More of Android Working On RISC-V Silicon
Saudi Arabia Launches Cloud Seeding Operation To Increase Rainfall
Mars Helicopter Spots Wreckage From Perseverance Landing
16 States, Several Environmental Groups Sue USPS Over Purchase of Gas-Guzzling Mail Trucks
Gavin Newsom Reconsiders Closure of Diablo Canyon Nuclear Power Plant
India To Launch Open E-Commerce Network To Take On Amazon, Walmart
Interactive Fiction Compiler 'Inform 7' Is Now Open Source
Bandcamp at Centre of Dispute Between Epic Games and Google

Consortium is Creating 'Passports' to Track Contents and Repair History of Europe's EV Batteries

Posted: 30 Apr 2022 01:34 PM PDT

Slashdot reader schwit1 shares this report from an automotive blog called The Truth About Cars: A group of German automakers, chemical concerns, and battery producers have announced the joint development of a "battery passport" designed to help government regulators trace the history of the cells. The consortium is funded by the German government and is supposed to work in tandem with new battery regulations that are being prepared by the European Union. According to the German economic ministry, officially the Federal Ministry for Economic Affairs and Climate Action, the overarching plan is for the EU to mandate traceable hardware be installed in all batteries used in the continent by 2026. Those intended for use in electric vehicles are up first, with the passport scheme also serving to chronicle everything from the vehicle's repair history to where the power cell's raw materials were sourced. Reuters reports that batteries "could carry a QR code linking to an online database where EV owners, businesses or regulators could access information on the battery's composition." This digital tool should also make it easier to recycle raw materials inside batteries, the government statement said, which would cut dependence on foreign suppliers which control the vast majority of resources, like lithium and nickel, essential for battery production.

Read more of this story at Slashdot.

US Seeks to Steal Putin's Top Scientists by Loosening Their Visa Requirements

Posted: 30 Apr 2022 12:34 PM PDT

"The Biden administration has a plan to rob Vladimir Putin of some of his best innovators," reports Bloomberg, "by waiving some visa requirements for highly educated Russians who want to come to the U.S., according to people familiar with the strategy." One proposal, which the White House included in its latest supplemental request to Congress, is to drop the rule that Russian professionals applying for an employment-based visa must have a current employer. It would apply to Russian citizens who have earned master's or doctoral degrees in science, technology, engineering or mathematics in the U.S. or abroad, the proposal states. A spokesman for the National Security Council confirmed that the effort is meant to weaken Putin's high-tech resources in the near term and undercut Russia's innovation base over the long run — as well as benefit the U.S. economy and national security. Specifically, the Biden administration wants to make it easier for top-tier Russians with experience with semiconductors, space technology, cybersecurity, advanced manufacturing, advanced computing, nuclear engineering, artificial intelligence, missile propulsion technologies and other specialized scientific areas to move to the U.S. Biden administration officials have said they've seen significant numbers of high-skilled technology workers flee Russia because of limited financial opportunities from the sanctions the U.S. and allies have imposed after Putin's invasion on Ukraine. The provision would expire in four years.

Read more of this story at Slashdot.

Mac Studio's M1 Ultra Chip Outperforms on Computational Fluid Dynamics Benchmarks

Posted: 30 Apr 2022 11:34 AM PDT

Dr. Craig Hunter is a mechanical/aerospace engineer with over 25 years of experience in software development. And now Dixie_Flatline (Slashdot reader #5,077) describes Hunter's latest experiment: Craig Hunter has been running Computational Fluid Dynamics (CFD) benchmarks on Macs for years--he has results going back to 2010 with an Intel Xeon 5650, with the most recent being a 28-core Xeon W from 2019. He has this to say about why he thinks CFD benchmarks are a good test: "As shown above, we see a pretty typical trend where machines get less and less efficient as more and more cores join the computation. This happens because the computational work begins to saturate communications on the system as data and MPI instructions pass between the cores and memory, creating overhead. It's what makes parallel CFD computations such a great real world benchmark. Unlike simpler benchmarks that tend to make CPUs look good, the CFD benchmark stresses the entire system and shows us how things hold up as conditions become more and more challenging." With just 6 cores, the Mac Studio's M1 Ultra surpasses the 2019 Xeon before literally going off the original chart. He had to double the x-axis just to fit the M1's performance in. Unsurprisingly, he seems impressed: "We know from Apple's specs and marketing materials that the M1 Ultra has an extremely high 800 GB/sec memory bandwidth and an even faster 2.5 TB/sec interface between the two M1 Max chips that make up the M1 Ultra, and it shows in the CFD benchmark. This leads to a level of CPU performance scaling that I don't even see on supercomputers."

Read more of this story at Slashdot.

After Microsoft Releases Patch for RPC Exploit: What the Honeypot Saw

Posted: 30 Apr 2022 10:34 AM PDT

Long-time Slashdot reader UnderAttack writes: After Microsoft patched and went public with CVE-2022-26809, the recent Remote Procedure Call vulnerability, the SANS Internet Storm Center set up a complete Windows 10 system exposing port 445/TCP "to the world." The system is not patched for the RPC vulnerability. But so far, while it has seen thousands of attacks against SMB a day, nothing yet for the new RPC vulnerability.... But still, attackers are heavily hitting other vulnerabilities like of course still ETERNALBLUE From the article: Should you stop rushing out the April patch? Absolutely not. I hope you are already done applying the patch. But the April Windows patch had several additional gems, not just patches for RPC. Chatter about CVE-2022-26809 has died down, but as they say: Sometimes the quiet ones are the dangerous ones, and people able to exploit this vulnerability may not broadcast what they are doing on social media. The article is credited to Johannes B. Ullrich, Ph.D. , Dean of Research at the security site SANS.edu. Interestingly, Ullrich's byline is hyperlinked to a Google+ profile which has been unavailable for nearly three years.

Read more of this story at Slashdot.

Webb Telescope Captures Five Different, Dazzling Views of a Nearby Galaxy

Posted: 30 Apr 2022 09:34 AM PDT

Long-time Slashdot reader schwit1 shares a report from Inverse: It only took 25 years of development, 17 years of construction, eight launch delays, and five months of alignments, but finally, the James Webb Space Telescope is almost ready for prime time. New photos released by the European Space Agency — and an accompanying video from NASA — show images of stars taken by a fully aligned space telescope, instruments and all. The image shows snapshots from each of Webb's three imaging instruments, plus its spectrograph and guidance sensor. The images show a field of stars in the Large Magellanic Cloud (LMC), a galaxy near the Milky Way about 158,000 light-years away. If it orbits our galaxy, it would be, by far, the largest satellite galaxy. But there's a chance it's just passing through or slowly merging with our galaxy.

Read more of this story at Slashdot.

Can Elon Musk Spur Cybersecurity Innovation At Twitter?

Posted: 30 Apr 2022 08:34 AM PDT

"Twitter DMs should have end to end encryption like Signal," Elon Musk tweeted Wednesday to his 89 million followers, "so no one can spy on or hack your messages." And on Monday, Musk also announced hopes to "authenticate all humans." But now Security Week is wondering if Musk's acquisition of Twitter will ultimately mean not just better security at Twitter but also innovation for the entire cybersecurity industry: Twitter has struggled with consistent security leadership, hiring and firing multiple CISOs even as nation-state adversaries target Twitter's massive user base with computer-generated disinformation campaigns...."Even if you don't like the guy, you have to root for Twitter to beat the bots," said one prominent CISO interviewed by SecurityWeek on Tuesday. "I think we will all benefit from any security features they [Twitter] can create." Jamie Moles, a senior technical manager at ExtraHop, said the bot-elimination mission could have spinoff benefits for the entire industry. "While this seems like a Sisyphean task, if he's successful, the methods used by Twitter to eliminate bots from the platform may generate new techniques that improve the detection and identification of spam emails, spam posts, and other malicious intrusion attempts," Moles said. If Musk and his team can train AI to be more effective in combating this, it may well be a boon to security practitioners everywhere," Moles added. "Identity is one area I expect to see movement. In addition to just detecting bots and spam better, I think we will see Twitter do a better job around verifying humans. There are a lot of things to fix there," said one CISO who requested anonymity because his company does security-related business with Twitter. Industry watchers also expect to see the company improve the multi-factor authentication (MFA) adoption numbers among its massive user base.... If Twitter can build a reliably secure platform with a new approach to distinguishing between human and bot traffic and fresh flavors of MFA and encryption, this could be a big win for the entire industry and users around the world. Thanks to Slashdot reader wiredmikey for sharing the story

Read more of this story at Slashdot.

How Russians - and Ukranians - are Using Stolen Data

Posted: 30 Apr 2022 07:34 AM PDT

While Russia's "relentless digital assaults" on Ukraine might seem less damaging than anticipated, the attacks actually focused on a different goal with "chilling potential consequences," reports the Associated Press. "Data collection." Even in an early February blog post, Microsoft said Russia's intelligence agency had tried "exfiltrating sensitive information" over the previous six months from military, government, military, judiciary and law enforcement agencies. The AP reports: Ukrainian agencies breached on the eve of the February 24 invasion include the Ministry of Internal Affairs, which oversees the police, national guard and border patrol. A month earlier, a national database of automobile insurance policies was raided during a diversionary cyberattack that defaced Ukrainian websites. The hacks, paired with prewar data theft, likely armed Russia with extensive details on much of Ukraine's population, cybersecurity and military intelligence analysts say. It's information Russia can use to identify and locate Ukrainians most likely to resist an occupation, and potentially target them for internment or worse. "Fantastically useful information if you're planning an occupation," Jack Watling, a military analyst at the U.K. think tank Royal United Services Institute, said of the auto insurance data, "knowing exactly which car everyone drives and where they live and all that." As the digital age evolves, information dominance is increasingly wielded for social control, as China has shown in its repression of the Uyghur minority. It was no surprise to Ukrainian officials that a prewar priority for Russia would be compiling information on committed patriots. "The idea was to kill or imprison these people at the early stages of occupation," Victor Zhora, a senior Ukrainian cyber defense official, alleged.... There is little doubt political targeting is a goal. Ukraine says Russian forces have killed and kidnapped local leaders where they grab territory.... The Ukrainian government says the Jan. 14 auto insurance hack resulted in the pilfering of up to 80% of Ukrainian policies registered with the Motor Transport Bureau. But the article also points out that Ukraine also "appears to have done significant data collection — quietly assisted by the U.S., the U.K., and other partners — targeting Russian soldiers, spies and police, including rich geolocation data." Serhii Demediuk [deputy secretary of Ukraine's National Security and Defense Council] said the country knows "exactly where and when a particular serviceman crossed the border with Ukraine, in which occupied settlement he stopped, in which building he spent the night, stole and committed crimes on our land." "We know their cell phone numbers, the names of their parents, wives, children, their home addresses," who their neighbors are, where they went to school and the names of their teachers, he said. Analysts caution that some claims about data collection from both sides of the conflict may be exaggerated. But in recordings posted online by Ukrainian Digital Transformation Minister Mikhailo Fedorov, callers are heard phoning the far-flung wives of Russian soldiers and posing as Russian state security officials to say parcels shipped to them from Belarus were looted from Ukrainian homes. In one, a nervous-sounding woman acknowledges receiving what she calls souvenirs — a woman's bag, a keychain. The caller tells her she shares criminal liability, that her husband "killed people in Ukraine and stole their stuff." She hangs up.

Read more of this story at Slashdot.

Alibaba Cloud Gets More of Android Working On RISC-V Silicon

Posted: 30 Apr 2022 06:00 AM PDT

An anonymous reader quotes a report from The Register: Alibaba Cloud has advanced its work to port Android to the RISC-V architecture. The Chinese cloud giant has spent more than a year working on a port of the Google-spawned OS and in January 2021 showed off a GUI powered by Android 10 running on silicon designed by T-Head Semiconductor -- an Alibaba subsidiary that designs its own RISC-V chip. Alibaba Cloud has now revealed it's working on Android 12, and has integrated third-party vendor modules. The result is Android on RISC-V that's capable of playing audio and video, running Wi-Fi and Bluetooth radios, and driving cameras. The company has also "enabled more system enhancement features such as core tool sets, third-party libraries and SoC board support package on RISC-V," which collectively make RISC-V a better target for Android. Another advance is successful trials of TensorFlow Lite models on RISC-V. That effort means Android on RISC-V should be capable running workloads like image and audio classification and Optical Character Recognition. Alibaba Cloud hasn't detailed whether its porting efforts are directed to any particular processor, but is keen to point out that its homegrown Xuantie C906 processor recently aced the MLPerf Tiny v0.7 benchmark -- a test applied to Internet of Things devices. The company has also pointed out that its home-grown RISC-V kit has already been employed in smart home appliances, automotive applications, and edge computing. [...] The Xuantie C906 uses Alibaba-designed cores that are -- as required for RISC-V users -- available on GitHub. When the firm has a complete version of Android on RISC-V, it "will be an important step towards China's goal of reducing its reliance on technology that other nations can control with restrictions such as trade bans," notes The Register. "As RISC-V is open source, preventing its flow to China is all but impossible."

Read more of this story at Slashdot.

Saudi Arabia Launches Cloud Seeding Operation To Increase Rainfall

Posted: 30 Apr 2022 03:00 AM PDT

Saudi Arabia, the world's largest oil exporter, is turning to cloud-seeding to increase rainfall. Interesting Engineering reports: The country initiated the first phase of its cloud-seeding operation in areas above the capital Riyadh, al-Qassim, and Hail on Tuesday, according to Arab News. The weather modification technique is being executed as part of an effort to increase the country's yearly rainfall, which does not exceed 100 millimeters a year, by 10 to 20 percent. Cloud-seeding is a technique that involves introducing chemicals to clouds, like small particles of silver iodide, to induce more rain from a cloud. This causes water droplets to congregate around them, and the water particles clash with one another, growing larger and increasing the likelihood of rainfall. Ayman Ghulam, head of the National Center of Meteorology and supervisor of the cloud-seeding program, said the program's operations room opened on Monday at the center's headquarters in Riyadh, and the first flights took place in the capital's vicinity, according to Gulf News. He stated that they met their objectives in terms of the results and timeliness of the seeding operations. The center will provide quarterly updates on developments. The program will track cloud formations across the country to find the optimal locations for seeding efforts, which would use "environmentally friendly" materials to increase precipitation in targeted areas. The cloud seeding initiative, according to Gluham, is one of the "promising ways" of preserving water balance in a safe, adaptable, and cost-effective manner.

Read more of this story at Slashdot.

Mars Helicopter Spots Wreckage From Perseverance Landing

Posted: 30 Apr 2022 12:00 AM PDT

New pictures from the Ingenuity helicopter offer a fresh perspective of the wreckage left behind when the Perseverance rover landed on Mars last year, NASA said on Wednesday. The Verge reports: Launched in 2020, the Perseverance rover successfully landed on the Red Planet in 2021, with the mission of finding ancient signs of life on Mars. The rover carried the Ingenuity helicopter onboard -- an experimental project that scientists on Earth hoped would be able to see sights that the rover couldn't. Perseverance went through a grueling process known as the seven minutes of terror to descend onto the Martian surface. As it entered the atmosphere, a heat shield helped protect the rover from the blistering heat of reentry and slowed it down dramatically. After that, the massive parachute deployed out of the backshell (a cone-shaped part of the descent vehicle), slowing it down even more. At that point, the backshell and parachute separated from Perseverance and let the descent stage take over, using rocket thrusters and a "sky crane" to gently lower the rover to a smooth landing. On April 19th, Ingenuity took photographs that captured the remains of Perseverance's parachute and the rover's protective backshell, a cone-shaped part of the descent vehicle that carried the parachute and helped protect the rover on its way to the surface. Strewn around the site were debris from where the two crashed into the surface after separating from the rover. The backshell ended up hitting the ground at about 78 miles per hour, according to NASA. From the pictures, it appears that the parachute, the lines connecting the parachute to the spacecraft, and the coating on the outside of the backshell all survived the trip to the surface, NASA says, though more analysis of the pictures will happen in the coming weeks.

Read more of this story at Slashdot.

16 States, Several Environmental Groups Sue USPS Over Purchase of Gas-Guzzling Mail Trucks

Posted: 29 Apr 2022 08:30 PM PDT

An anonymous reader quotes a report from Ars Technica: The US Postal Service is facing lawsuits from 16 states and several environmental groups challenging its decision to buy tens of thousands of gasoline-powered delivery vehicles instead of electric vehicles. As previously reported, the Environmental Protection Agency says the gas-powered trucks being ordered by the USPS "are expected to achieve only 8.6 miles per gallon (mpg), barely improving over the decades-old long-life vehicles that achieve 8.2 mpg." The USPS countered that the vehicles get 14.7 mpg when air conditioning isn't being used and that the trucks' size will make it possible to deliver the same amount of mail in fewer trips. The USPS plan is to buy 50,000 to 165,000 vehicles over 10 years. Of those, at least 10 percent are slated to be battery-electric vehicles (BEV). [...] A lawsuit filed by California and 15 other states on Thursday said the USPS failed "to follow a process mandated by the National Environmental Policy Act (NEPA)," continuing: "Instead, the Postal Service first chose a manufacturer with minimal experience in producing electric vehicles, signed a contract, and made a substantial down payment for new vehicles. Only then did the Postal Service publish a cursory environmental review to justify the decision to replace 90 percent of its delivery fleet with fossil-fuel-powered, internal combustion engine vehicles, despite other available, environmentally preferable alternatives. In doing so, the Postal Service failed to comply with even the most basic requirements of NEPA." The lawsuit seeks an injunction forcing the USPS to stop the vehicle purchases "until it has complied with NEPA." It was filed against the USPS and Postmaster General Louis DeJoy, who was appointed by the USPS Board of Governors in 2020 under then-President Donald Trump. All 16 states involved in the lawsuit have Democratic attorneys general. They allege that the USPS "violated well-established legal precedent prohibiting 'an irreversible and irretrievable commitment of resources' before completing the NEPA process by signing contracts with a defense company (Oshkosh Defense, LLC) to procure vehicles six months before even releasing its draft environmental review and a year prior to issuing the Final Environmental Impact Statement ('Final EIS') and Record of Decision." The states also claim the USPS failed to consider and evaluate reasonable alternatives. "Specifically, the Postal Service did not properly evaluate several environmental impacts of its action, including air quality, environmental justice, and climate harms, by simply assuming that any upgrade to its vehicle fleet would have positive impacts on the environment," the complaint said. States also alleged the USPS "failed to ensure the scientific integrity of its analysis by relying on unfounded assumptions regarding the costs and performance of electric vehicles, infrastructure, and gas prices, and refusing to identify the source of the data relied upon in the Final EIS." "The Postal Service conducted a robust and thorough review and fully complied with all of our obligations under NEPA," a USPS spokesperson told Ars. The statement continues: "The Postal Service is fully committed to the inclusion of electric vehicles as a significant part of our delivery fleet even though the investment will cost more than an internal combustion engine vehicle. That said, as we have stated repeatedly, we must make fiscally prudent decisions in the needed introduction of a new vehicle fleet. We will continue to look for opportunities to increase the electrification of our delivery fleet in a responsible manner, consistent with our operating strategy, the deployment of appropriate infrastructure, and our financial condition, which we expect to continue to improve as we pursue our plan."

Read more of this story at Slashdot.

Gavin Newsom Reconsiders Closure of Diablo Canyon Nuclear Power Plant

Posted: 29 Apr 2022 07:02 PM PDT

gordm writes: Following appeals from scientists, a Stanford and MIT study showing Diablo Canyon could save California $21 Billion, demand curtailment and a projected power supply shortfall, Gov. Gavin Newsom is now considering keeping the Diablo Canyon nuclear plant open. Diablo Canyon generated 6% of California's total electricity in 2021 and 12% of California's carbon-free electricity. Elon Musk has tweeted in support of keeping Diablo Canyon open, and in support of keeping European nuclear power plants running. According to the L.A. Times, Newsom said the state would seek out a share of $6 billion in federal funds meant to rescue nuclear reactors facing closure. The money comes from the Biden administration's recently announced effort to rescue nuclear power plants at risk of closing. "The requirement is by May 19 to submit an application, or you miss the opportunity to draw down any federal funds if you want to extend the life of that plant," Newsom said. "We would be remiss not to put that on the table as an option." A spokesperson for the governor clarified that Newsom still wants to see the facility shut down long term. "It's been six years since PG&E agreed to close the plant near San Luis Obispo, rather than invest in expensive environmental and earthquake-safety upgrades," the report notes. "But Newsom's willingness to consider a short-term reprieve reflects a shift in the politics of nuclear power after decades of public opposition fueled by high-profile disasters such as Chernobyl and Three Mile Island, as well as the Cold War."

Read more of this story at Slashdot.

India To Launch Open E-Commerce Network To Take On Amazon, Walmart

Posted: 29 Apr 2022 06:25 PM PDT

Hmmmmmm shares a report from Reuters: India will on Friday launch an open network for digital commerce (ONDC) as the government tries to end the dominance of U.S. companies Amazon.com and Walmart in the fast-growing e-commerce market, a government document showed. The launch of the platform comes after India's antitrust body on Thursday raided domestic sellers of Amazon and some of Walmart's Flipkart following accusations of competition law violations. The government's so-called ONDC platform will allow buyers and sellers to connect and transact with each other online, no matter what other application they use. It will be soft-launched on Friday before being expanded, the trade ministry told Reuters. The government document said that two large multinational players controlled more than half of the country's e-commerce trade, limiting access to the market, giving preferential treatment to some sellers and squeezing supplier margins. It did not name the companies. The document said India's ONDC plan aimed to onboard 30 million sellers and 10 million merchants online. The plan is to cover at least 100 cities and towns by August.

Read more of this story at Slashdot.

Interactive Fiction Compiler 'Inform 7' Is Now Open Source

Posted: 29 Apr 2022 05:45 PM PDT

New submitter Mononymous writes: Created by Graham Nelson, Inform 7 compiles a powerful object-oriented language resembling English into a working text adventure. Friendly GUIs for various platforms have been open source for many years, but the core compiler remained proprietary. Now, 16 years after its initial freeware release, Nelson has released the source code under the Artistic License 2.0 in a public GitHub repo. Inform 7 is one of the largest "literate programs" ever released.

Read more of this story at Slashdot.

Bandcamp at Centre of Dispute Between Epic Games and Google

Posted: 29 Apr 2022 05:01 PM PDT

An anonymous reader shares a report: If you'd told us that Bandcamp's acquisition by Epic Games would lead fairly swiftly to an argument with a tech giant, our money would have been on that giant being Apple. Nope. Epic Games is seeking a court injunction against Google, over changing rules on its Google Play Store for Android. Bandcamp CEO Ethan Diamond blogged about the dispute overnight, noting that since 2015, Bandcamp has used its own billing system to process payments made for music and merch within its Android app. "However, Google is now modifying its rules to require Bandcamp (and other apps like it) to exclusively use Google Play Billing for payments for digital goods and services, and pay a revenue share to Google," wrote Diamond. "If Google's policy changes stand, beginning on June 1st, we would have to either pass Google's fees on to consumers (making Android a less attractive platform for music fans), pass fees on to artists (which we would never do), permanently run our Android business at a loss, or turn off digital sales in the Android app." Diamond also said that the new policy could see a delay in payments for artists and labels, from the current 24-48 hours to "15 to 45 days after a sale," while Epic's filing notes that Google's system can't be used for purchases of physical items (merch and physical music), which would force it to use two separate payment systems anyway.

Read more of this story at Slashdot.

Comments