Author name: Kelly Newman

unleash-the-beast:-high-performance-cycle’s-electric-mountain-bike

Unleash the beast: High Performance Cycle’s electric mountain bike

Cars, e-bikes, e-mountain bikes, hpc, mountain bikes / /
Image of a large, dark green mountain bike against a grey stone wall.

John TImmer

I found myself in the air long enough to give some thought to how I could land while remaining atop the bicycle I had been riding the instant before I hit the jump. Based on similar experiences while skiing, I immediately recognized that this invariably meant very bad things. A few seconds later, as I was brushing dirt out of the abrasions I had just picked up, I contemplated where I had gone wrong.

Once again, I had misunderstood HPC’s Trailblazer e-mountain bike. Doing so had become a feature of the time I spent using the bike.

The Trailblazer looks like a solid, hefty beast of a bike (that’s not an insult—I got compliments on its looks while taking a train to some trails). It’s covered with components that are likely to be unfamiliar to people who know the default sets that come with bikes from large manufacturers. But if you do some research on the components, you realize that the Trailblazer was specced by someone with deep knowledge and fairly particular tastes. And the ride the bike provided has some surprisingly subtle qualities that took me a while to adjust to.

Spare parts

High Performance Cycles offers two models of Trailblazer, the base and the Pro, and both have the same carbon fiber frame. They differ almost entirely based on their components, with the Pro having mostly top-of-the-line material befitting its $9,000 price tag and the base model costing $6,400 for very-good-but-still-a-step-down level components. You can increase the price of either by purchasing more capacious batteries, faster chargers, lights, or even an internal geared hub. (Note that the company has just updated the specs for 2024.)

You can also pay to boost the motor to one capable of speeds that will make you a danger to yourself and others, which will also make the bike illegal to use on anything but private property. Let’s get one thing out of the way here: Making an e-bike that can reach 65 km/hr (40 mph), as some Trailblazer configurations can, is a mistake. But HPC sent me the low-end model that behaved as a standard Class 1 e-bike, with a maximum speed of 32 km/hr (20 mph), so that’s what this review is about.

The suspension system from DVO.

Enlarge / The suspension system from DVO.

John Timmer

Most of the components you’ll find on mountain bike frames come from just a handful of manufacturers. And HPC relies on some of them (notably SRAM drivetrains). But smaller design companies stay afloat through a combination of replacements for broken parts, tempting people with upgrades, or offering some specific features that aren’t well-served by the more generic designs of major manufacturers. The Trailblazer leans heavily into those.

For example, the tires come from Kenda and have a reputation for great grip at the expense of high rolling resistance—a drawback that matters less when you have an electric assist. The forks and shocks come from a company called DVO and have an adjustment that, based on what I’ve read, should help compensate for the added weight of the hardware. Bafang, which provides the motor, isn’t a household name, but it’s a major player in electrified cycling. I’d already identified the WTB Volt as a highly rated saddle and was pleased to find one on the bike to try out. I could go through the rest of the bike’s specs and say similar things about the other components.

I ended up liking the WTB seat a great deal.

Enlarge / I ended up liking the WTB seat a great deal.

John Timmer

Overall, the parts list felt quirky, and it might give someone who’s expecting big names some pause. But every component I looked into had some features that made it a good (or at least interesting) choice for an e-mountain bike.

Unleash the beast: High Performance Cycle’s electric mountain bike Read More »

google-sues-two-crypto-app-makers-over-allegedly-vast-“pig-butchering”-scheme

Google sues two crypto app makers over allegedly vast “pig butchering” scheme

crypto scams, Cryptocurrency, Google, google play, Google Play Store, Google Voice, Google Workspace, play store, Policy, racketeering, youtube / /

Foul Play —

Crypto and other investment app scams promoted on YouTube targeted 100K users.

–

Google sues two crypto app makers over allegedly vast “pig butchering” scheme

Google has sued two app developers based in China over an alleged scheme targeting 100,000 users globally over four years with at least 87 fraudulent cryptocurrency and other investor apps distributed through the Play Store.

The tech giant alleged that scammers lured victims with “promises of high returns” from “seemingly legitimate” apps offering investment opportunities in cryptocurrencies and other products. Commonly known as “pig-butchering schemes,” these scams displayed fake returns on investments, but when users went to withdraw the funds, they discovered they could not.

In some cases, Google alleged, developers would “double down on the scheme by requesting various fees and other payments from victims that were supposedly necessary for the victims to recover their principal investments and purported gains.”

Google accused the app developers—Yunfeng Sun (also known as “Alphonse Sun”) and Hongnam Cheung (also known as “Zhang Hongnim” and “Stanford Fischer”)—of conspiring to commit “hundreds of acts of wire fraud” to further “an unlawful pattern of racketeering activity” that siphoned up to $75,000 from each user successfully scammed.

Google was able to piece together the elaborate alleged scheme because the developers used a wide array of Google products and services to target victims, Google said, including Google Play, Voice, Workspace, and YouTube, breaching each one’s terms of service. Perhaps most notably, the Google Play Store’s developer program policies “forbid developers to upload to Google Play ‘apps that expose users to deceptive or harmful financial products and services,’ including harmful products and services ‘related to the management or investment of money and cryptocurrencies.'”

In addition to harming Google consumers, Google claimed that each product and service’s reputation would continue to be harmed unless the US district court in New York ordered a permanent injunction stopping developers from using any Google products or services.

“By using Google Play to conduct their fraud scheme,” scammers “have threatened the integrity of Google Play and the user experience,” Google alleged. “By using other Google products to support their scheme,” the scammers “also threaten the safety and integrity of those other products, including YouTube, Workspace, and Google Voice.”

Google’s lawsuit is the company’s most recent attempt to block fraudsters from targeting Google products by suing individuals directly, Bloomberg noted. Last year, Google sued five people accused of distributing a fake Bard AI chatbot that instead downloaded malware to Google users’ devices, Bloomberg reported.

How did the alleged Google Play scams work?

Google said that the accused developers “varied their approach from app to app” when allegedly trying to scam users out of thousands of dollars but primarily relied on three methods to lure victims.

The first method relied on sending text messages using Google Voice—such as “I am Sophia, do you remember me?” or “I miss you all the time, how are your parents Mike?”—”to convince the targeted victims that they were sent to the wrong number.” From there, the scammers would apparently establish “friendships” or “romantic relationships” with victims before moving the conversation to apps like WhatsApp, where they would “offer to guide the victim through the investment process, often reassuring the victim of any doubts they had about the apps.” These supposed friends, Google claimed, would “then disappear once the victim tried to withdraw funds.”

Another strategy allegedly employed by scammers relied on videos posted to platforms like YouTube, where fake investment opportunities would be promoted, promising “rates of return” as high as “two percent daily.”

The third tactic, Google said, pushed bogus affiliate marketing campaigns, promising users commissions for “signing up additional users.” These apps, Google claimed, were advertised on social media as “a guaranteed and easy way to earn money.”

Once a victim was drawn into using one of the fraudulent apps, “user interfaces sought to convince victims that they were maintaining balances on the app and that they were earning ‘returns’ on their investments,” Google said.

Occasionally, users would be allowed to withdraw small amounts, convincing them that it was safe to invest more money, but “later attempts to withdraw purported returns simply did not work.” And sometimes the scammers would “bilk” victims out of “even more money,” Google said, by requesting additional funds be submitted to make a withdrawal.

“Some demands” for additional funds, Google found, asked for anywhere “from 10 to 30 percent to cover purported commissions and/or taxes.” Victims, of course, “still did not receive their withdrawal requests even after these additional fees were paid,” Google said.

Which apps were removed from the Play Store?

Google tried to remove apps as soon as they were discovered to be fraudulent, but Google claimed that scammers concocted new aliases and infrastructure to “obfuscate their connection to suspended fraudulent apps.” Because scammers relied on so many different Google services, Google was able to connect the scheme to the accused developers through various business records.

Fraudulent apps named in the complaint include fake cryptocurrency exchanges called TionRT and SkypeWallet. To make the exchanges appear legitimate, scammers put out press releases on newswire services and created YouTube videos likely relying on actors to portray company leadership.

In one YouTube video promoting SkypeWallet, the supposed co-founder of Skype Coin uses the name “Romser Bennett,” which is the same name used for the supposed founder of another fraudulent app called OTCAI2.0, Google said. In each video, a completely different presumed hired actor plays the part of “Romser Bennett.” In other videos, Google found the exact same actor plays an engineer named “Rodriguez” for one app and a technical leader named “William Bryant” for another app.

Another fraudulent app that was flagged by Google was called the Starlight app. Promoted on TikTok and Instagram, Google said, that app promised “that users could earn commissions by simply watching videos.”

The Starlight app was downloaded approximately 23,000 times and seemingly primarily targeted users in Ghana, allegedly scamming at least 6,000 Ghanian users out of initial investment capital that they were told was required before they could start earning money on the app.

Across all 87 fraudulent apps that Google has removed, Google estimated that approximately 100,000 users were victimized, including approximately 8,700 in the United States.

Currently, Google is not aware of any live apps in the Play Store connected to the alleged scheme, the complaint said, but scammers intent on furthering the scheme “will continue to harm Google and Google Play users” without a permanent injunction, Google warned.

Google sues two crypto app makers over allegedly vast “pig butchering” scheme Read More »

101-studies-flagged-as-bogus-covid-cure-pusher-sees-career-unravel

101 studies flagged as bogus COVID cure pusher sees career unravel

COVID-19, Didier Raoult, health, hydroxychloroquine, research ethics, Science / /

Career-killer —

It’s a past-due reckoning for French microbiologist Didier Raoult, critics say.

–

Microbiologist Didier Raoult addresses a press conference on COVID-19 at the IHU medical institute in Marseille on April 20, 2022.

Enlarge / Microbiologist Didier Raoult addresses a press conference on COVID-19 at the IHU medical institute in Marseille on April 20, 2022.

A scientific journal published by Elsevier has reportedly posted a stunning 101 expressions of concern on studies connected to Didier Raoult, a disgraced French microbiologist who gained international prominence amid the pandemic by promoting, with little evidence, that the malaria drug hydroxychloroquine could treat COVID-19—a claim that has now been firmly debunked.

According to Retraction Watch, the journal New Microbes and New Infections posted 101 expressions of concern on Raoult’s works recently, including a 2023 study that drew sharp criticism. The study involved giving hydroxychloroquine to tens of thousands of COVID-19 patients after data indicated that it wasn’t effective and the French government rescinded permission for its use against COVID-19. An op-ed in the major French newspaper Le Monde described the study as “the largest ‘wild’ therapeutic trial known to date.”

The expressions of concern also come as Raoult saw his tenth study retracted, Retraction Watch noted.

While Raoult’s unfounded claims about hydroxychloroquine drew initial attention to his COVID-19-related work—with critics quickly noting flaws and weaknesses in his studies—his high-profile claims led critics and sleuths to dive deeper into his extensive publication record. There, they claim they found evidence of long-standing and egregious ethics violations, which were recently laid out in an investigative report by Science Magazine.

Essentially, critics claim Raoult and the institute that he led until 2021, the Hospital Institute of Marseille Mediterranean Infection (IHU), conducted hundreds of studies on humans without appropriate ethical approval or oversight or adequate consent from all participants, the Science investigation found. The IHU work spanned a wide variety of research topics, which involved collecting a variety of biological samples from patients, including vaginal swabs, feces, blood, urine, and breast milk.

However, critics noted 248 IHU studies that reused the same ethical approval code, “09-022,” despite being very different studies that included different kinds of sampling. The critics claim that the studies required separate ethical approvals and additional oversight. They also found that at least 17 studies relied on vulnerable populations, including refugees and people living in homeless shelters, raising serious questions about consent. Some of the studies were also conducted in African countries, where evidence of local ethical approval was either absent or incomplete.

Raoult told the magazine that his research groups had the appropriate ethical approval and said that his critics, whom he described as stalkers and cyber harassers, did not understand how French biomedical laws work.

In Elsevier’s expressions of concern and a linked “Publisher’s Note” from November, the publisher said that the concern was over “the articles’ adherence to Elsevier’s publishing ethics policies and the appropriate conduct of research involving human participants.” Elsevier is still investigating the matter but indicated that the expressions of concern are added “if it is deemed that there is a particular need to alert readers to serious concerns while [the] investigation is ongoing.”

Raoult has had nearly 50 studies likewise flagged over ethical concerns in PLOS journals, Retraction Watch noted. The latest of his studies to be retracted was in the journal Scientific Reports, with the editors there also stating it was due to a lack of ethical oversight. “The paper cites approval from an institutional ethics committee in France, but samples used in this study were also sourced from Algeria, Saudi Arabia, and Niger,” the retraction notice says. “The Authors were not able to provide documentation of approval from ethics committees in these countries or of compliance with local regulations regarding the use of such samples in research.”

Raoult is currently under criminal investigation in France.

101 studies flagged as bogus COVID cure pusher sees career unravel Read More »

waymo-and-uber-eats-start-human-less-food-deliveries-in-phoenix

Waymo and Uber Eats start human-less food deliveries in Phoenix

Google, Tech, Uber Eats, waymo / /

Someday the robots will be mad that we aren’t tipping them —

You’ll need to run outside when your robot delivery arrives.

–

A Waymo Jaguar I-Pace.

Enlarge / A Waymo Jaguar I-Pace.

Waymo

Your next food delivery driver may be a robot.

Waymo and Uber have been working together on regular Ubers for a while, but the two companies are now teaming up for food delivery. Automated Uber Eats is rolling out to Waymo’s Phoenix service area. Waymo says this will start in “select merchants in Chandler, Tempe and Mesa, including local favorites like Princess Pita, Filiberto’s, and Bosa Donuts.”

Phoenix Uber Eats customers can fire up the app and order some food, and they might see the message “autonomous vehicles may deliver your order.” Waymo says you’ll be able to opt out of robot delivery at checkout if you want.

  • The pop-up screen if a Waymo is delivering your order.

    Waymo

Of course, the big difference between human and robot food delivery is that the human driver will take your food door to door, while for the Waymo option, you’ll need to run outside and flag down your robot delivery vehicle when it arrives. Just like regular Uber, you’ll get a notification through the app when it’s time. The food should be in the trunk. If you get paired with a Waymo, your delivery tip will be refunded. Waymo doesn’t explain how the restaurant side of things will work, but inevitably, some poor food server will need to run outside when the Waymo arrives.

It seems pretty wasteful to have a 2-ton, crash-tested vehicle designed to seat five humans delivering a small bag of food, but at least the Jaguar i-Pace Waymos are all-electric. It’s a shame Waymo’s smaller “Firefly” cars were retired. There are smaller, more purpose-built food delivery bots out there—Uber Eats is partnered with Serve Robotics for smaller robot delivery—but these are all sidewalk-cruising, walking-speed robots that can only go a few blocks. The Nuro R3 (Nuro is also partnered with Uber) seems like a good example of what a road-going delivery should look like—it’s designed for food and not people, and it comes with heated or cooled food compartments. Waymo is still the industry leader in automated driving, though.

Waymo and Uber Eats start human-less food deliveries in Phoenix Read More »

pentagon-calls-for-tighter-integration-between-military-and-commercial-space

Pentagon calls for tighter integration between military and commercial space

Commercial space, military space, Science, Space, space force / /
Aerial view of the Pentagon on March 31.

Enlarge / Aerial view of the Pentagon on March 31.

Photo by Daniel Slim/AFP via Getty Images

A strategy document released by the Pentagon this week lays out where the US military can most effectively rely on the commercial space industry and what missions should remain in government hands.

“This marks a new effort to harness the remarkable innovation of the commercial space sector to enhance our resilience and strengthen integrated deterrence as a department,” said John Plumb, assistant secretary of defense for space policy.

The Space Force already buys a lot from the commercial space industry. The military doesn’t build or own satellite launch vehicles—those come from commercial companies. While the Space Force operates government-owned reconnaissance and surveillance satellites, it also buys supplementary data and imagery from the commercial industry.

“To protect our men and women in uniform and to ensure the space services they rely on will be available when needed, the department has a responsibility to leverage all tools available, and those tools include commercial solutions,” Plumb said Tuesday. “From launch to space domain awareness to satellite communications and more, the commercial sector’s ability to innovate, to scale production and to rapidly refresh their technology is opening the door to all kinds of possibilities.”

The Pentagon defines the commercial space sector as companies that develop capabilities for sale on the commercial market, where the military is one of many customers. This is separate from the Pentagon’s procurement of government-owned airplanes and satellites from the defense industry.

Ripe for exploitation

Build or buy is an age-old question facing everyone from homeowners to billion-dollar enterprises. When it comes to space, the Pentagon is buying more than ever. The military’s new strategy document outlines 13 mission areas for national security space, and while the commercial space industry is rapidly growing, the Pentagon predominately buys commercial services in only one of those mission areas.

“Out of those 13, the only that’s clearly primarily commercial now is SAML.. which is Space Access, Mobility and Logistics, and space access is launch,” Plumb said. “So SpaceX, Firefly, Rocket Lab, all these different companies doing commercial launch, that’s where the commercial sector clearly can provide services.”

A SpaceX Falcon 9 rocket lifts off February 14 with satellites for the US military's Missile Defense Agency. Another Falcon 9 awaits launch in the foreground.

Enlarge / A SpaceX Falcon 9 rocket lifts off February 14 with satellites for the US military’s Missile Defense Agency. Another Falcon 9 awaits launch in the foreground.

Currently, the military classifies six mission areas as a hybrid of government and commercial capabilities:

  • Cyberspace operations
  • Satellite communications
  • Spacecraft operations,
  • Intelligence, surveillance, and reconnaissance
  • Space domain awareness (tracking of space objects)
  • Environmental monitoring.

In the remaining six mission areas, “a preponderance of functions must be performed by the government, while a select few could be performed by the commercial sector,” officials wrote in the commercial space strategy. In these areas, there is not yet a viable commercial market outside of the government, or commercial capabilities don’t match the government’s needs. These areas include:

  • Command and control (including nuclear command, control, and communications)
  • Electromagnetic warfare
  • Nuclear detonation detection
  • Missile warning
  • Position, navigation, and timing (GPS).

A major tenet of the commercial space strategy is for the military to support the development of new commercial space capabilities. This could involve supporting technology demonstrations and funding scientific research. Over time, new technology and new markets could bring more mission areas into the hybrid or commercial lists.

“I think what this strategy hopes to do is say, yes, continue working on bringing commercial entities in,” Plumb said. “This is actually a thing we want you to do, not just a thing you should be experimenting with.”

Pentagon calls for tighter integration between military and commercial space Read More »

google-might-make-users-pay-for-ai-features-in-search-results

Google might make users pay for AI features in search results

AI, Google, Google Gemini / /

Pay-eye for the AI —

Plan would represent a first for what has been a completely ad-funded search engine.

–

You think this cute little search robot is going to work for free?

Enlarge / You think this cute little search robot is going to work for free?

Google might start charging for access to search results that use generative artificial intelligence tools. That’s according to a new Financial Times report citing “three people with knowledge of [Google’s] plans.”

Charging for any part of the search engine at the core of its business would be a first for Google, which has funded its search product solely with ads since 2000. But it’s far from the first time Google would charge for AI enhancements in general; the “AI Premium” tier of a Google One subscription costs $10 more per month than a standard “Premium” plan, for instance, while “Gemini Business” adds $20 a month to a standard Google Workspace subscription.

While those paid products offer access to Google’s high-end “Gemini Advanced” AI model, Google also offers free access to its less performant, plain “Gemini” model without any kind of paid subscription.

When ads aren’t enough?

Under the proposed plan, Google’s standard search (without AI) would remain free, and subscribers to a paid AI search tier would still see ads alongside their Gemini-powered search results, according to the FT report. But search ads—which brought in a reported $175 billion for Google last year—might not be enough to fully cover the increased costs involved with AI-powered search. A Reuters report from last year suggested that running a search query through an advanced neural network like Gemini “likely costs 10 times more than a standard keyword search,” potentially representing “several billion dollars of extra costs” across Google’s network.

Cost aside, it remains to be seen if there’s a critical mass of market demand for this kind of AI-enhanced search. Microsoft’s massive investment in generative AI features for its Bing search engine has failed to make much of a dent in Google’s market share over the last year or so. And there has reportedly been limited uptake for Google’s experimental opt-in “Search Generative Experience” (SGE), which adds chatbot responses above the usual set of links in response to a search query.

“SGE never feels like a useful addition to Google Search,” Ars’ Ron Amadeo wrote last month. “Google Search is a tool, and just as a screwdriver is not a hammer, I don’t want a chatbot in a search engine.”

Regardless, the current tech industry mania surrounding anything and everything related to generative AI may make Google feel it has to integrate the technology into some sort of “premium” search product sooner rather than later. For now, FT reports that Google hasn’t made a final decision on whether to implement the paid AI search plan, even as Google engineers work on the backend technology necessary to launch such a service

Google also faces AI-related difficulties on the other side of the search divide. Last month, the company announced it was redoubling its efforts to limit the appearance of “spammy, low-quality content”—much of it generated by AI chatbots—in its search results.

In February, Google shut down the image generation features of its Gemini AI model after the service was found inserting historically inaccurate examples of racial diversity into some of its prompt responses.

Google might make users pay for AI features in search results Read More »

bird-flu-flare:-cattle-in-5-states-now-positive-as-texas-egg-farm-shuts-down

Bird flu flare: Cattle in 5 states now positive as Texas egg farm shuts down

bird flu, CDC, Chickens, dairy cows, eggs, health, hens, Highly pathogenic avian influenza, influenza, Science, USDA / /

flare-up —

The risk to the general public remains low, federal officials say.

–

Chicken eggs are disposed of at a quarantined farm with bird flu in Israel's northern village of Margaliot on January 3, 2022.

Enlarge / Chicken eggs are disposed of at a quarantined farm with bird flu in Israel’s northern village of Margaliot on January 3, 2022.

The flare-up of highly pathogenic bird flu continues to widen in US livestock after federal officials confirmed last week that the virus has spread to US cows for the first time. The virus has now been detected in dairy cows in at least five states, a single person in Texas exposed to infected cows, and an egg farm in Texas, all spurring yet more intense monitoring and biosecurity vigilance as the situation continues to evolve.

As of Tuesday, seven dairy herds in Texas, two in Kansas, and one each in Idaho, Michigan, and New Mexico had tested positive for the virus. The affected dairy herd in Michigan had recently received cows from one of the infected herds in Texas. It remains unclear if there is cow-to-cow transmission of the flu virus.

The virus—a highly pathogenic H5N1 avian influenza or HPAI—has been devastating wild birds worldwide for the past several years. Throughout the devastating outbreak, the flu virus has spilled over to various species, including big cats in zoos, river otters, bears, dolphins, seals, squirrels, and foxes. While cows were an unexpected addition to the list, federal officials noted last week that affected dairy farms had found dead wild birds on their farms, suggesting that wild birds introduced the virus to the cows, not an intermediate host.

On Monday, the Centers for Disease Control and Protection reported that a person in Texas who had contact with infected dairy cows had tested positive for the HPAI. The person’s only symptom was eye redness. The CDC said the person was treated with an antiviral for flu and was recovering. It is the second case of HPAI found in a person in the US. The first case was in a person in Colorado who was directly exposed to poultry infected with the virus. In that case, the person’s only symptom was fatigue over a few days. The person recovered. The CDC considers the risk of HPAI to the general public to be low.

Low risk

Meanwhile, the virus continues to spread to less-surprising animals: chickens. On Tuesday, Cal-Maine Foods, Inc., the country’s largest producer of fresh eggs, reported that HPAI was detected in one of its facilities in Texas. The facility is located in Parmer County, which sits at the border of Texas and New Mexico. It’s unclear if the egg facility is close to any of the affected dairy herds. Cal-Maine, following the US Department of Agriculture biosecurity protocols, immediately shut down the facility. Approximately 1.6 million hens and 337,000 pullets—young hens—were culled. Cal-Maine said the hens represented about 3.6 percent of the company’s total flock.

Since the outbreak began in wild birds, the virus has led to the deaths of over 82 million commercial and backyard birds in the US, with 48 states affected and over 1,000 outbreaks reported. The infections have spurred increases in egg and poultry prices.

It’s unclear if the virus will have the same effect on milk or beef, but so far, it appears that it will not. In the infected herds, the virus appears to only be affecting a small percentage of animals, particularly older animals, and they generally recover. As the USDA puts it there’s “little to no associated mortality reported.” Milk from sick cows is always diverted from the milk supply, but even if milk contaminated with HPAI were to make it into the supply, the virus would be destroyed in the pasteurization process.

Still, the continued, widespread outbreak and spillovers of HPAI in various species highlight the ever-present risk that influenza viruses could mix together, combining genetic fragments of different strains (genetic reassortment) to create a new strain that could spark outbreaks or even a pandemic in humans. In the current outbreak among dairy cattle, federal researchers were quick to check the genetic sequence of the HPAI, finding that, so far, the strain lacks mutations in key genetic regions that would signal the virus has become more infectious to humans. For now, the USDA and the CDC report that the risk to the public is low.

Bird flu flare: Cattle in 5 states now positive as Texas egg farm shuts down Read More »

spotify’s-second-price-hike-in-9-months-will-target-audiobook-listeners

Spotify’s second price hike in 9 months will target audiobook listeners

Spotify, streaming, Tech / /

Searching for profits —

Bloomberg report claims price hike coming to Australia, Pakistan, and the UK first.

–

Spotify logo on phone screen with headphones around the phone

Spotify Premium subscriptions include up to 15 hours of audiobook listening. But starting in April, the company will charge an extra $1 to $2 per month for the feature, Bloomberg reported today, citing anonymous “people familiar with the matter.” The reported price hike would be the second that Spotify customers have faced in nine months.

Currently, Spotify charges nothing for its free plan with ads, $5.99/month for students, $10.99/month for its Premium plan, $14.99/month for its Duo Premium plan for two users, and $16.99/month for its Family Premium plan with up to six users.

Bloomberg reported that individual plan prices will go up by approximately $1 per month and multi-member plans will increase by $2 per month.

The changes will reportedly start in Australia, Pakistan, the United Kingdom, and two other markets by the end of this month. Subscribers in the US will reportedly see prices rise “later this year.”

Spotify will usher the changes by offering a ‘new’ basic tier that lets users access everything on Spotify except audiobooks for $10.99/month, per Bloomberg. That would mean that people who only use Spotify for listening to music and/or podcasts would avoid paying a higher monthly rate. Basic plan members will still be able to buy audiobooks through Spotify, Bloomberg said.

Bloomberg didn’t specify whether Spotify would default current subscribers to this plan so that their monthly costs wouldn’t change or if users would have to take steps to sign up for what would be marketed as a new plan. It also didn’t mention if the basic plan would have additional drawbacks.

The upcoming price increase would be Spotify’s second since it introduced Premium pricing in 2011. In July, Spotify bumped the starting Premium price from $9.99/month to $10.99/month. Spotify’s announcement followed price hikes from rivals like Amazon Music and Tidal.

Spotify tries to be profitable

Spotify may deem these changes necessary to buoy audiobook revenue. The company is heavily invested in the sector and spent $123 million to acquire Findaway in July 2022. Spotify said it was the second biggest audiobook brand after Audible, citing Bookstat data published in The New York Times. But as it stands, Spotify only generates revenue from audiobooks if users go beyond the 15 hours per month limit included in their Premium plan, per Bloomberg.

Spotify, which launched in 2008, hasn’t had a profitable year (although it has reported profitable quarters at times). Audiobooks represent an opportunity for the company to diversify revenue streams beyond its traditional routes, which include paying hefty royalty fees. Spotify says it paid $9 billion in music-related royalties last year, or about 69.7 percent of its 2023 revenue ($13.2 billion). Bloomberg said Spotify’s music industry partners “have been pushing Spotify and its competitors to raise prices” amid concerns about royalty prices.

Spotify has also invested over $1 billion in a podcast business that is currently unprofitable (although Bloomberg noted that Spotify expects this to change in 2024). In December, Spotify announced it was laying off 17 percent of employees.

Audiobooks could help Spotify’s wallets. But charging extra for a service it’s been pushing since October risks losing some of the listeners it’s earned. At the same time, if Spotify ensures that long-time users who simply want Spotify for its original bread-and-butter aren’t impacted, it could help minimize disruption.

As with any price hike, though, Spotify’s changing pricing structure will force users to reassess whether they want to keep paying for Spotify or consider alternatives. Those who’ve been waiting for Spotify to offer high-fidelity audio since 2021, for example, may decide the app doesn’t fit their needs.

A Spotify spokesperson declined to comment on Bloomberg’s report to Ars Technica.

Spotify’s second price hike in 9 months will target audiobook listeners Read More »

how-to-hack-the-jacksonville-jaguars’-jumbotron-(and-end-up-in-jail-for-220-years)

How to hack the Jacksonville Jaguars’ jumbotron (and end up in jail for 220 years)

Football, hacking, jumbotron, nfl, Security / /
Three examples of the video screen tampering.

Enlarge / Three examples of the video screen tampering.

US DOJ

Was someone messing with the Jacksonville Jaguars’ giant jumbotron?

On September 16, 2018, the Jaguars were playing the New England Patriots when the in-stadium screen experienced, in the US government’s words, “a loss in reference sync which manifested as a large horizontal green lines [sic] appearing across one whole video board.”

On November 18, during a game against the Pittsburgh Steelers, it happened again—but this time, entire video sub-boards filled with green.

Then, on December 2, 2018, the Indianapolis Colts came to town and the jumbotron glitched a third time as “a single video board experienced a change of what seemed to be the zoom of one of the base graphics displayed.”

The Jaguars’ IT staff could not at the time replicate any of these video errors, and they began to suspect that what they were seeing was not a technical problem but some sort of attack. Digging into log files, they quickly found that the source of the December 2 problem was “a command to change a specific parameter” of the video control software.

Where had the command come from? An Abekas Mira video control server known as MIRA9120. The Abekas Mira was meant to help in the production and display of instant replay video to be shown in-stadium on the massive jumbotron, but this particular server had been either decommissioned or kept on hand as a spare. In any event, the team thought the server was in storage. But when they went looking, MIRA9120 turned out to be sitting in the main server room, installed on a rack just beside the active Abekas Mira servers.

IT staffers started poking around in MIRA9120 and found the remote-access software TeamViewer, suggesting that someone had been controlling MIRA9120 from somewhere else. But only limited data about the culprit could be gleaned, because the TeamViewer instance had connection logging disabled.

On December 3, the Jaguars’ IT staff disconnected MIRA9120 from the other video control servers—but they left it powered on and in place. Then they turned TeamViewer’s connection logging back on. The idea was to set up a honeypot in case the attacker returned.

During the December 16 game against Washington, TeamViewer recorded another connection into MIRA9120. The TeamViewer account number that accessed the machine was logged, and the information was passed to the FBI, which was now actively investigating the situation. Agents sent a subpoena to TeamViewer, which in February 2019 provided the IP address of the machine that had used the account in question on that day.

This IP address was controlled by Comcast, so a subpoena to Comcast finally turned up the information the Jaguars wanted: MIRA9120 was accessed on December 16 from a home in St. Augustine, Florida—a home where Samuel Arthur Thompson was living.

The secret

The Jags knew Thompson. He had spent nearly five years as a contractor for the football team, helping Jacksonville design and install their stadium screen technology. After installation, Thompson helped to run the system during football games.

Thompson also had a secret: He had been convicted of sexually abusing a 14-year-old boy in Alabama in 1988. Thompson had not reported this to the Jaguars, either, though his contract required such a disclosure.

Someone had found out about the conviction and sent an anonymous letter about it to the Jaguars’ management. Once the letter arrived, the Jaguars terminated Thompson’s contract. His last day with the team had been February 23, 2018. The relationship was thought to be over—but maybe it wasn’t.

A closer search of network traffic and log files from that February day revealed that Thompson himself had installed TeamViewer onto MIRA9120 at 9: 09 am. So the pieces all fit: disgruntled employee on final day of work, the TeamViewer install, the IP address in St. Augustine.

But the FBI didn’t secure a warrant until the summer of 2019. Only in July did the FBI raid Thompson’s home in rather polite style, simply knocking on the door. (Thompson would later complain in a court filing that agents should have yelled out who they were and why they were there. He was strongly displeased about being surprised.) Thompson’s child opened the door. When Thompson himself came over, he still had his unlocked iPhone in hand—and an agent immediately grabbed it.

Then the case became something else entirely—because the phone had child sex abuse material (CSAM) on it.

How to hack the Jacksonville Jaguars’ jumbotron (and end up in jail for 220 years) Read More »

man-pleads-guilty-to-stealing-former-coworker’s-identity-for-30-years

Man pleads guilty to stealing former coworker’s identity for 30 years

ancestry.com, Identity theft, Policy / /

“My life is over” —

Victim was jailed for 428 days after LA cops failed to detect true identity.

–

Man pleads guilty to stealing former coworker’s identity for 30 years

A high-level Iowa hospital systems administrator, Matthew Kierans, has admitted to stealing a coworker’s identity and posing as William Donald Woods for more than 30 years, The Register reported.

On top of using Woods’ identity to commit crimes and rack up debt, Kierans’ elaborate identity theft scheme led to Woods’ incarceration after Kierans’ accused his victim of identity theft and Los Angeles authorities failed to detect which man was the true William Donald Woods. Kierans could face up to 32 years in prison, The Register reported, and must pay a $1.25 million fine.

According to a proposed plea agreement with the US Attorney’s Office for the Northern District of Iowa, Kierans met Woods “in about 1988” when they worked together at a hot dog stand in New Mexico. “For the next three decades,” Kierans used Woods’ “identity in every aspect of his life,” including when obtaining “employment, insurance, a social security number, driver’s licenses, titles, loans, and credit,” as well as when paying taxes. Kierans even got married and had a child using Woods’ name.

Kierans apparently hatched the scheme in 1990 when he was working as a newspaper carrier for the Denver Post. That’s when he first obtained an identification document in Woods’ name. The next year, Kierans bought a vehicle for $600 using two checks in Woods’ name, the plea agreement said. After both checks bounced, Kierans “absconded with the stolen vehicle to Idaho, where the car broke down and he abandoned it.” As a result, an arrest warrant was issued in Woods’ name, while Kierans moved to Oregon and the whereabouts of the real Woods was seemingly unknown.

Eventually in summer 2012, Kierans relocated to Wisconsin, researching Woods’ family history on Ancestry.com and then fraudulently obtaining Woods’ certified birth certificate from the State of Kentucky, seemingly to aid his job hunt. Sometime in 2013, Kierans was hired by a hospital in Iowa City to work remotely from Wisconsin as a “high level administrator in the hospital’s information technology department,” using Woods’ birth certificate and a fictitious I-9 form to pass the hospital background check.

Over the next decade, Kierans earned about $700,000 in that role, while furthering his identity theft scheme. Between 2016 and 2022, Kierans used Woods’ name, Social Security number, and date of birth and “repeatedly obtained” eight “vehicle and personal loans” from two credit unions, each one totaling between $15,000 and $44,000.

Woods only discovered the identity theft in 2019, when he was homeless and discovered that he inexplicably had $130,000 in debt to his name. Woods attempted to close bank accounts that Kierans had opened in Woods’ name, and that’s when Kierans went on the defense, successfully pushing to get Woods arrested to conceal Kierans’ decades of identity theft.

LAPD fails to detect true identity

In 2019, Woods walked into the branch of a national bank in Los Angeles, telling an assistant branch manager that “he had recently discovered that someone was using his credit and had accumulated large amounts of debt,” the plea agreement said.

Woods presented his real Social Security card and an authentic state of California ID card, but the assistant branch manager became suspicious when Woods could not answer security questions that Kierans had set for the bank accounts.

The bank employee called the phone number listed on the accounts, which was Kierans’ number. At that point, Kierans correctly answered the security questions, and the assistant branch manager contacted the Los Angeles Police Department to investigate Woods.

As a result of LAPD’s investigation—which included contacting Kierans and reviewing Kierans’ fraudulent documents, which at times used a different middle name—Woods was arrested for unauthorized use of personal information. Subsequently, Woods was charged with committing felony crimes of identity theft and false impersonation, facing as much as three years’ incarceration for each count.

Woods continued insisting that he was the real victim of identity theft, while the California court system insisted he was actually Kierans. This continued until December 2019 when a state public defender told a court that Woods did not have the mental competency to stand trial. The court ordered Woods to be detained in a publicly funded California mental hospital until his mental competency improved, where he was given psychotropic medication in 2020.

Ultimately, in March 2021, Woods was convicted of the felony charges and after his release, he was ordered to “use only” what California decided was his “true name, Matthew Kierans.” In total, Woods spent 428 days in jail and 147 days in a mental hospital because California officials failed to detect his true identity.

Man pleads guilty to stealing former coworker’s identity for 30 years Read More »

copilot-key-is-based-on-a-button-you-probably-haven’t-seen-since-ibm’s-model-m

Copilot key is based on a button you probably haven’t seen since IBM’s Model M

AI, copilot, generative ai, Keyboards, laptops, microsoft, Tech, Windows, Windows 11 / /

Microsoft chatbot button —

Left-Shift + Windows key + F23

–

A Dell XPS 14 laptop with a Copilot key.

Enlarge / A Dell XPS 14 laptop. The Copilot key is to the right of the right-Alt button.

In January, Microsoft introduced a new key to Windows PC keyboards for the first time in 30 years. The Copilot key, dedicated to launching Microsoft’s eponymous generative AI assistant, is already on some Windows laptops released this year. On Monday, Tom’s Hardware dug into the new addition and determined exactly what pressing the button does, which is actually pretty simple. Pushing a computer’s integrated Copilot button is like pressing left-Shift + Windows key + F23 simultaneously.

Tom’s Hardware confirmed this after wondering if the Copilot key introduced a new scan code to Windows or if it worked differently. Using the scripting program AuthoHotkey with a new laptop with a Copilot button, Tom’s Hardware discovered the keystrokes registered when a user presses the Copilot key. The publication confirmed with Dell that “this key assignment is standard for the Copilot key and done at Microsoft’s direction.”

F23

Surprising to see in that string of keys is F23. Having a computer keyboard with a function row or rows that take you from F1 all the way to F23 is quite rare today. When I try to imagine a keyboard that comes with an F23 button, vintage keyboards come to mind, more specifically buckling spring keyboards from IBM.

IBM’s Model F, which debuted in 1981 and used buckling spring switches over a capacitive PCB, and the Model M, which launched in 1985 and used buckling spring switches over a membrane sheet, both offered layouts with 122 keys. These layouts included not one, but two rows of function keys that would leave today’s 60 percent keyboard fans sweating over the wasted space.

But having 122 keys was helpful for keyboards tied to IBM business terminals. The keyboard layout even included a bank of keys to the left of the primary alpha block of keys for even more forms of input.

An IBM Model M keyboard with an F23 key.

Enlarge / An IBM Model M keyboard with an F23 key.

The 122-key keyboard layout with F23 lives on. Beyond people who still swear by old Model F and M keyboards, Model F Labs and Unicomp both currently sell modern buckling spring keyboards with built-in F23 buttons. Another reason a modern Windows PC user might have access to an F23 key is if they use a macro pad.

But even with those uses in mind, the F23 key remains rare. That helps explain why Microsoft would use the key for launching Copilot; users are unlikely to have F23 programmed for other functions. This was also likely less work than making a key with an entirely new scan code.

The Copilot button is reprogrammable

When I previewed Dell’s 2024 XPS laptops, a Dell representative told me that the integrated Copilot key wasn’t reprogrammable. However, in addition to providing some interesting information about the newest PC key since the Windows button, Tom’s Hardware’s revelation shows why the Copilot key is actually reprogrammable, even if OEMs don’t give users a way to do so out of the box. (If you need help, check out the website’s tutorial for reprogramming the Windows Copilot key.)

I suspect there’s a strong interest in reprogramming that button. For one, generative AI, despite all its hype and potential, is still an emerging technology. Many don’t need or want access to any chatbot—let alone Microsoft’s—instantly or even at all. Those who don’t use their system with a Microsoft account have no use for the button, since being logged in to a Microsoft account is required for the button to launch Copilot.

A rendering of the Copilot button.

Enlarge / A rendering of the Copilot button.

Microsoft

Additionally, there are other easy ways to launch Copilot on a computer that has the program downloaded, like double-clicking an icon or pressing Windows + C, that make a dedicated button unnecessary. (Ars Technica asked Microsoft why the Copilot key doesn’t just register Windows + C, but the company declined to comment. Windows + C has launched other apps in the past, including Cortana, so it’s possible that Microsoft wanted to avoid the Copilot key performing a different function when pressed on computers that use Windows images without Copilot.)

In general, shoehorning the Copilot key into Windows laptops seems premature. Copilot is young and still a preview; just a few months ago, it was called Bing Chat. Further, the future of generative AI, including its popularity and top uses, is still forming and could evolve substantially during the lifetime of a Windows laptop. Microsoft’s generative AI efforts could also flounder over the years. Imagine if Microsoft went all-in on Bing back in the day and made all Windows keyboards have a Bing button, for example. Just because Microsoft wants something to become mainstream doesn’t mean that it will.

This all has made the Copilot button seem more like a way to force the adoption of Microsoft’s chatbot than a way to improve Windows keyboards. Microsoft has also made the Copilot button a requirement for its AI PC certification (which also requires an integrated neural processing unit and having Copilot pre-installed). Microsoft plans to make Copilot keys a requirement for Windows 11 OEM PCs eventually, it told Ars Technica in January.

At least for now, the basic way that the Copilot button works means you can turn the key into something more useful. Now, the tricky part would be finding a replacement keycap to eradicate Copilot’s influence from your keyboard.

Listing image by Microsoft

Copilot key is based on a button you probably haven’t seen since IBM’s Model M Read More »

the-best-robot-to-search-for-life-could-look-like-a-snake

The best robot to search for life could look like a snake

astrobiology, astronomy, Biology, Enceladus, planetary science, Robots, Science / /
Image of two humans sitting behind a control console dressed in heavy clothing, while a long tube sits on the ice in front of them.

Enlarge / Trying out the robot on a glacier.

Icy ocean worlds like Europa or Enceladus are some of the most promising locations for finding extra-terrestrial life in the Solar System because they host liquid water. But to determine if there is something lurking in their alien oceans, we need to get past ice cover that can be dozens of kilometers thick. Any robots we send through the ice would have to do most of the job on their own because communication with these moons takes as much as 155 minutes.

Researchers working on NASA Jet Propulsion Laboratory’s technology development project called Exobiology Extant Life Surveyor (EELS) might have a solution to both those problems. It involves using an AI-guided space snake robot. And they actually built one.

Geysers on Enceladus

The most popular idea to get through the ice sheet on Enceladus or Europa so far has been thermal drilling, a technique used for researching glaciers on Earth. It involves a hot drill that simply melts its way through the ice. “Lots of people work on different thermal drilling approaches, but they all have a challenge of sediment accumulation, which impacts the amount of energy needed to make significant progress through the ice sheet,” says Matthew Glinder, the hardware lead of the EELS project.

So, instead of drilling new holes in ice, the EELS team focuses on using ones that are already there. The Cassini mission discovered geyser-like jets shooting water into space from vents in the ice cover near Enceladus’ south pole. “The concept was you’d have a lander to land near a vent and the robot would move on the surface and down into the vent, search the vent, and through the vent go further down into the ocean”, says Matthew Robinson, the EELS project manager.

The problem was that the best Cassini images of the area where that lander would need to touch down have a resolution of roughly 6 meters per pixel, meaning major obstacles to landing could be undetected. To make things worse, those close-up images were monocular, which meant we could not properly figure out the topography. “Look at Mars. First we sent an orbiter. Then we sent a lander. Then we sent a small robot. And then we sent a big robot. This paradigm of exploration allowed us to get very detailed information about the terrain,” says Rohan Thakker, the EELS autonomy lead. “But it takes between seven to 11 years to get to Enceladus. If we followed the same paradigm, it would take a century,” he adds.

All-terrain snakes

To deal with unknown terrain, the EELS team built a robot that could go through almost anything—a versatile, bio-inspired, snake-like design about 4.4 meters long and 35 centimeters in diameter. It weighs about 100 kilograms (on Earth, at least). It’s made of 10 mostly identical segments. “Each of those segments share a combination of shape actuation and screw actuation that rotates the screws fitted on the exterior of the segments to propel the robot through its environment,” explains Glinder. By using those two types of actuators, the robot can move using what the team calls “skin propulsion,” which relies on the rotation of screws, or using one of various shape-based movements that rely on shape actuators. “Sidewinding is one of those gaits where you are just pressing the robot against the environment,” Glinder says.

The basic design also works on surfaces other than ice.

Enlarge / The basic design also works on surfaces other than ice.

The standard sensor suite is fitted on the head and includes a set of stereo cameras providing a 360-degree viewing angle. There are also inertial measuring units (IMUs) that use gyroscopes to estimate the robot’s position, and lidar sensors. But it also has a sense of touch. “We are going to have torque force sensors in each segment. This way we will have direct torque plus direct force sensing at each joint,” explains Robinson. All this is supposed to let the EELS robot safely climb up and down Enceladus’ vents, hold in place in case of eruptions by pressing itself against the walls, and even navigate by touch alone if cameras and lidar don’t work.

But perhaps the most challenging part of building the EELS robot was its brain.

The best robot to search for life could look like a snake Read More »