×
Printer

HP Built Printer Ink Monopoly With Forced Dynamic Security Updates, Lawsuit Says (arstechnica.com) 30

HP has used its "Dynamic Security" firmware updates to "create a monopoly" of replacement printer ink cartridges, a lawsuit filed against the company on January 5 claims. From a report: The lawsuit, which is seeking class-action certification, represents yet another form of litigation against HP for bricking printers when they try to use ink that doesn't bear an HP logo. The lawsuit (PDF), which was filed in US District Court in the Northern District of Illinois, names 11 plaintiffs and seeks an injunction against HP requiring the company to disable its printer firmware updates from preventing the use of non-HP branded ink. The lawsuit also seeks monetary damages greater than $5,000,000 and a trial by jury. [...] HP was wrong to issue a firmware update affecting printer functionality, and users were not notified that accepting firmware updates "could damage any features of the printer," the lawsuit says.
The Courts

Judges in England and Wales Given Cautious Approval To Use AI in Writing Legal Opinions (apnews.com) 23

Press2ToContinue writes: England's 1,000-year-old legal system -- still steeped in traditions that include wearing wigs and robes -- has taken a cautious step into the future by giving judges permission to use artificial intelligence to help produce rulings . The Courts and Tribunals Judiciary last month said AI could help write opinions but stressed it shouldn't be used for research or legal analyses because the technology can fabricate information and provide misleading, inaccurate and biased information.

"Judges do not need to shun the careful use of AI," said Master of the Rolls Geoffrey Vos, the second-highest ranking judge in England and Wales. "But they must ensure that they protect confidence and take full personal responsibility for everything they produce." At a time when scholars and legal experts are pondering a future when AI could replace lawyers, help select jurors or even decide cases, the approach spelled out Dec. 11 by the judiciary is restrained. But for a profession slow to embrace technological change, it's a proactive step as government and industry -- and society in general -- react to a rapidly advancing technology alternately portrayed as a panacea and a menace.

Google

Google Faces Multibillion-Dollar US Patent Trial Over AI Tech (reuters.com) 27

Alphabet's Google is set to go before a federal jury in Boston on Tuesday in a trial over accusations that processors it uses to power AI technology in key products infringe a computer scientist's patents. From a report: Singular Computing, founded by Massachusetts-based computer scientist Joseph Bates, claims Google copied his technology and used it to support AI features in Google Search, Gmail, Google Translate and other Google services. A Google court filing said that Singular has requested up to $7 billion in monetary damages, which would be more than double the largest-ever patent infringement award in U.S. history.

Google spokesperson Jose Castaneda called Singular's patents "dubious" and said that Google developed its processors "independently over many years." "We look forward to setting the record straight in court," Castaneda said.

Government

Biden Administration To Unveil Contractor Rule Set To Upend Gig Economy (reuters.com) 213

An anonymous reader quotes a report from Reuters: The administration of U.S. President Joe Biden will release a final rule as soon as this week that will make it more difficult for companies to treat workers as independent contractors rather than employees that typically cost a company more, an administration official said. The U.S. Department of Labor rule, which was first proposed in 2022 and is likely to face legal challenges, will require that workers be considered employees entitled to more benefits and legal protections than contractors when they are "economically dependent" on a company.

A range of industries will likely be affected by the rule, which will take effect later this year, but its potential impact on app-based services that rely heavily on contract workers has garnered the most attention. Shares of Uber, Lyft and DoorDash all tumbled at least 10% when the draft rule was proposed in October 2022. The rule is among regulations with the most far-reaching impacts issued by the Labor Department office that enforces U.S. wage laws, according to Marc Freedman, vice president at the U.S. Chamber of Commerce, the largest U.S. business lobby. But he said the draft version of the rule provides little guidance to companies on where to draw the line between employees and contractors. "Economic dependence is an elusive concept that in some cases may end up being defined by the eyes of the beholder," Freedman said.

The Labor Department in the proposed rule said it would consider factors such as a worker's "opportunity for profit or loss, investment, permanency, the degree of control by the employer over the worker, (and) whether the work is an integral part of the employer's business." The rule replaces a Trump administration regulation that said workers who own their own businesses or have the ability to work for competing companies, such as a driver who works for Uber and Lyft, can be treated as contractors. [...] The Biden administration has said the Trump-era rule violated U.S. wage laws and was out of step with decades of federal court decisions, and worker advocates have said a more strict standard was necessary to combat the rampant misclassification of workers in some industries.

Verizon

Verizon Customers Could Get Up to $100 in $100M Settlement Over 'Administrative Charge' Fees (cnn.com) 13

CNN reports that some Verizon customers "might have found an unexpected surprise in the mail this week: An opportunity to receive a refund as part of a proposed $100 million settlement from a class-action lawsuit." Eligible customers are receiving postcards or emails alerting them to file a claim by April 15 to receive up to $100, which is the result of the lawsuit accusing Verizon of charging fees that were "unfair and not adequately disclosed."

At issue is Verizon's "administrative charge," which the plaintiffs said were "misleading" because that fee wasn't disclosed in their plan's advertised monthly price and were charged in a "deceptive and unfair manner." Verizon has denied the claims and said in a statement that it "clearly identifies and describes its wireless consumer admin charge multiple times during the sales transaction, as well as in its marketing, contracts and billing." A company spokesperson said that the charge "helps our company recover certain regulatory compliance and network related costs."

"The payout is at least $15," adds CNN, "and might be more depending on how long the customer used Verizon and the number of customers who file a claim."
Music

Spotify's Editorial Playlists Are Losing Influence Amid AI Expansion (bloomberg.com) 14

Once a dominant force in music discovery, Spotify's famed playlists like RapCaviar, which significantly influenced mainstream music and artist visibility, are losing ground. As the music industry shifts towards algorithmic suggestions and TikTok emerges as a major music promoter, Spotify's strategy evolves with more automated music discovery and less emphasis on human-curated playlists, signaling a potential end to the era where a few key playlists could make a star overnight. Bloomberg reports: Enter TikTok. In the late 2010s, as the algorithmic controlled, short-form video app emerged as a growing force in music promotion, Spotify took notice. On an earnings call in 2020, Spotify Chief Executive Officer Daniel Ek noted that users were increasingly opting for algorithmic suggestions and that Spotify would be leaning into the trend. "As we're getting better and better at personalization, we're serving better and better content and more and more of our users are choosing that," he said. From there, Spotify began implementing a number of changes that over time significantly altered the fundamental dynamics of how playlists get composed. Among other things, the company had already introduced a standardized pitching form that all artists and managers must use to submit tracks for playlist consideration. One former employee says the tool was created to foster a more merit-based system with a greater emphasis on data -- and less focus on the taste of individual curators. The goal, in part, was to give independent and smaller artists without the resources to personally court key playlist editors a better chance at placements. It was also a way to better protect the public-facing editors who in the early days were sometimes subjected to harassment from people disgruntled over their musical choices.

As the automated submission system took hold, the editors gradually grew more anonymous and less associated with particular playlists. In a handbook for the editorial team, Spotify instructed curators not to claim ownership of any one playlist. At the same time, Spotify began introducing multiple splashy features meant to encourage algorithm-driven listening, including an AI DJ and Daylist, two features that constantly change to fit listeners' habits and interests. (Spotify says "human expertise" guides the AI DJ.) Last year, Spotify laid off members of the teams involved in making playlists as part of its various cuts. And over time, the shift in emphasis has had consequences outside the company as well. These days, the same music industry sources who in the late 2010s learned to obsess over what was included and excluded from key Spotify playlists have started noticing something else -- it no longer seems to matter as much. Employees at different major labels say they've seen streams coming from RapCaviar drop anywhere from 30% to 50%.

The trend towards automated music discovery at Spotify shows no sign of slowing down. One internal presentation titled "Recapturing the Zeitgeist" encourages editorial curators to better utilize data. According to the people who have seen the plan, in addition to putting together a playlist, editorial curators would tag songs to help the algorithm accurately place them on relevant playlists that are automatically personalized for individual subscribers. The company has also shifted some human-curated playlists to personalized versions, including selections with seven-figure followings, like Housewerk and Indie Pop. These days, Spotify is also promoting something called Discovery Mode, wherein labels and artist teams can submit songs for additional algorithm pushes in exchange for a lower royalty rate. These tracks can only surface on personalized listening sessions, a former employee said, meaning Spotify would have a financial incentive to push people to them over editorially curated playlists. (For now, Discovery Mode songs only surface in radio or autoplay listening sessions.)
The shift toward algorithmic distribution isn't necessarily a bad thing, says Dan Smith, US general manager at Armada, an independent dance label. "The way fans discovered new music was radio back in the day, then Spotify editorial playlists, then there were a few years where people only discovered new music through TikTok," Brad said. "All those things still work ... we're all just trying different ways to make sure songs get to the right people."
Crime

Firmware Prank Causes LED Curtain In Russia To Display 'Slava Ukraini' (therecord.media) 109

Alexander Martin reports via The Record: The owner of an apartment in Veliky Novgorod in Russia has been arrested for discrediting the country's armed forces after a neighbor alerted the police to the message 'Slava Ukraini' scrolling across their LED curtains. When police went to the scene, they saw the garland which the owner had hung in celebration of the New Year and a "slogan glorifying the Armed Forces of Ukraine," as a spokesperson for the Ministry of Internal Affairs told state-owned news agency TASS. The apartment owner said the garland was supposed to display a "Happy New Year" greeting, TASS reported.

Several other people in Russia described a similar experience on the AlexGyver web forum, linked to a DIY blog popular in the country. They said at the stroke of midnight on New Year's Eve, their LED curtains also began to show the "Glory to Ukraine" message in Ukrainian. It is not clear whether any of these other posters were also arrested. The man in Veliky Novgorod will have to defend his case in court, according to TASS. Police have seized the curtain itself.

An independent investigation into the cause of the message by the AlexGyver forum users found that affected curtains all used the same open-source firmware code. The original code appears to have originated in Ukraine before someone created a fork translated into Russian. According to the Telegram channel for AlexGyver, the code had been added to the original project on October 18, and then in December the people or person running the fork copied and pasted that update into their own version. "Everyone who downloaded and updated the firmware in December received a gift," the Telegram channel wrote. The message was "really encrypted, hidden from the 'reader' of the code, and is displayed on the first day of the year exclusively for residents of Russia by [geographic region]."

Bitcoin

Sam Bankman-Fried Spared a Second Trial 52

In a letter (PDF) citing "strong public interest in a prompt resolution," U.S. prosecutors said they do not plan to proceed with a second trial of FTX founder Sam Bankman-Fried (SBF). The Register reports: The prosecutors reasoned that much of the evidence that would be submitted had already been considered in his October trial -- an event which yielded a guilty verdict after just four hours of jury deliberation. Although forgoing an additional trial means not holding SBF accountable for conspiracy to make unlawful campaign contributions, additional court dates would most certainly delay a scheduled March 2024 sentencing, as it would require negotiating with The Bahamas regarding terms of extradition.

SBF was extradited to the US from The Bahamas, where his crypto exchange FTX was headquartered, in December 2022. While the island nation agreed to extradition on seven out of eight charges, local authorities did not consent to extradition on a charge of conspiracy to make unlawful campaign contributions. US courts were therefore unable to pursue the eighth charge.

SBF's first trial yielded seven guilty verdicts. Those included two counts of conspiracy to commit wire fraud, two counts of wire fraud, conspiracy to commit commodities fraud, conspiracy to commit securities fraud, and conspiracy to commit money laundering. Together they carry a combined maximum sentence of 110 years. However, even though the campaign finance charge was not pursued, it could be considered relevant in sentencing matters, wrote the attorneys in their filing. The prosecutors' letter detailed that the sentencing judgment will also "likely include orders of forfeiture and restitution for the victims of the defendant's crimes."
The Courts

The Humble Emoji Has Infiltrated the Corporate World (theatlantic.com) 56

An anonymous reader shares a report: A court in Washington, D.C., has been stuck with a tough, maybe impossible question: What does full moon face emoji mean? Let me explain: In the summer of 2022, Ryan Cohen, a major investor in Bed Bath & Beyond, responded to a tweet about the beleaguered retailer with this side-eyed-moon emoji. Later that month, Cohen -- hailed as a "meme king" for his starring role in the GameStop craze -- disclosed that his stake in the company had grown to nearly 12 percent; the stock price subsequently shot up. That week, he sold all of his shares and walked away with a reported $60 million windfall.

Now shareholders are suing him for securities fraud, claiming that Cohen misled investors by using the emoji the way meme-stock types sometimes do -- to suggest that the stock was going "to the moon." A class-action lawsuit with big money on the line has come to legal arguments such as this: "There is no way to establish objectively the truth or falsity of a tiny lunar cartoon," as Cohen's lawyers wrote in an attempt to get the emoji claim dismissed. That argument was denied, and the court held that "emojis may be actionable."

The humble emoji -- and its older cousin, the emoticon -- has infiltrated the corporate world, especially in tech. Last month, when OpenAI briefly ousted Sam Altman and replaced him with an interim CEO, the company's employees reportedly responded with a vulgar emoji on Slack. That FTX, the failed cryptocurrency exchange once run by Sam Bankman-Fried, apparently used these little icons to approve million-dollar expense reports was held up during bankruptcy proceedings as a damning example of its poor corporate controls. And in February, a judge allowed a lawsuit to move forward alleging that an NFT company called Dapper Labs was illegally promoting unregistered securities on Twitter, because "the 'rocket ship' emoji, 'stock chart' emoji, and 'money bags' emoji objectively mean one thing: a financial return on investment."

AI

US Supreme Court's Roberts Urges 'Caution' as AI Reshapes Legal Field (reuters.com) 65

AI represents a mixed blessing for the legal field, U.S. Supreme Court Chief Justice John Roberts said in a year-end report published on Sunday, urging "caution and humility" as the evolving technology transforms how judges and lawyers go about their work. From a report: Roberts struck an ambivalent tone in his 13-page report. He said AI had potential to increase access to justice for indigent litigants, revolutionize legal research and assist courts in resolving cases more quickly and cheaply while also pointing to privacy concerns and the current technology's inability to replicate human discretion.

"I predict that human judges will be around for a while," Roberts wrote. "But with equal confidence I predict that judicial work - particularly at the trial level - will be significantly affected by AI." The chief justice's commentary is his most significant discussion to date of the influence of AI on the law, and coincides with a number of lower courts contending with how best to adapt to a new technology capable of passing the bar exam but also prone to generating fictitious content, known as "hallucinations." Roberts emphasized that "any use of AI requires caution and humility." He mentioned an instance where AI hallucinations had led lawyers to cite non-existent cases in court papers, which the chief justice said is "always a bad idea." Roberts did not elaborate beyond saying the phenomenon "made headlines this year."

The Almighty Buck

Burned Investors Ask 'Where Were the Auditors?' A Court Says 'Who Cares?' (wsj.com) 88

One of the country's most influential courts has asked the nation's top securities regulator for its views on an uncomfortable subject: whether audit reports by outside accounting firms actually matter. From a report: The court already ruled that, at least in one case, they didn't. That case, where an insurer overstated profits and an auditor signed off on its books, led to an investor lawsuit against the auditor that was dismissed. In its ruling, the court said the audit report was so general an investor wouldn't have relied on it. The decision could have broad ramifications for the Securities and Exchange Commission, which oversees corporate financial disclosures, and for the auditing industry, which charged about $17 billion last year for blessing the books of publicly listed companies in the U.S.

The ruling, by a three-judge panel of the Second U.S. Circuit Court of Appeals, prompted three former SEC officials to tell the court it got the answer wrong. They asked the court to reconsider its decision, noting that the SEC in a previous enforcement case had said that "few matters could be more important to investors" than whether a company's financial statements had been subjected to a properly conducted annual audit. The court responded by inviting the SEC to file a brief expressing its views on the former officials' arguments. The SEC in a court filing said that "the commission has an interest in ensuring its views on this issue are considered by the court." Its brief is due Feb. 16. The court ruling involved a lawsuit by investors over an audit gone wrong. AmTrust Financial Services, an insurance company, had overstated its profit, and BDO USA, its outside accounting firm, had blessed the numbers.

AI

Will AI Just Waste Everyone's Time? (newrepublic.com) 167

"The events of 2023 showed that A.I. doesn't need to be that good in order to do damage," argues novelist Lincoln Michel in the New Republic: This March, news broke that the latest artificial intelligence models could pass the LSAT, SAT, and AP exams. It sparked another round of A.I. panic. The machines, it seemed, were already at peak human ability. Around that time, I conducted my own, more modest test. I asked a couple of A.I. programs to "write a six-word story about baby shoes," riffing on the famous (if apocryphal) Hemingway story. They failed but not in the way I expected. Bard gave me five words, and ChatGPT produced eight. I tried again, specifying "exactly six words," and received eight and then four words. What did it mean that A.I. could best top-tier lawyers yet fail preschool math?

A year since the launch of ChatGPT, I wonder if the answer isn't just what it seems: A.I. is simultaneously impressive and pretty dumb. Maybe not as dumb as the NFT apes or Zuckerberg's Metaverse cubicle simulator, which Silicon Valley also promised would revolutionize all aspects of life. But at least half-dumb. One day A.I. passes the bar exam, and the next, lawyers are being fined for citing A.I.-invented laws. One second it's "the end of writing," the next it's recommending recipes for "mosquito-repellant roast potatoes." At best, A.I. is a mixed bag. (Since "artificial intelligence" is an intentionally vague term, I should specify I'm discussing "generative A.I." programs like ChatGPT and MidJourney that create text, images, and audio. Credit where credit is due: Branding unthinking, error-prone algorithms as "artificial intelligence" was a brilliant marketing coup)....

The legal questions will be settled in court, and the discourse tends to get bogged down in semantic debates about "plagiarism" and "originality," but the essential truth of A.I. is clear: The largest corporations on earth ripped off generations of artists without permission or compensation to produce programs meant to rip us off even more. I believe A.I. defenders know this is unethical, which is why they distract us with fan fiction about the future. If A.I. is the key to a gleaming utopia or else robot-induced extinction, what does it matter if a few poets and painters got bilked along the way? It's possible a souped-up Microsoft Clippy will morph into SkyNet in a couple of years. It's also possible the technology plateaus, like how self-driving cars are perpetually a few years away from taking over our roads. Even if the technology advances, A.I. costs lots of money, and once investors stop subsidizing its use, A.I. — or at least quality A.I. — may prove cost-prohibitive for most tasks....

A year into ChatGPT, I'm less concerned A.I. will replace human artists anytime soon. Some enjoy using A.I. themselves, but I'm not sure many want to consume (much less pay for) A.I. "art" generated by others. The much-hyped A.I.-authored books have been flops, and few readers are flocking to websites that pivoted to A.I. Last month, Sports Illustrated was so embarrassed by a report they published A.I. articles that they apologized and promised to investigate. Say what you want about NFTs, but at least people were willing to pay for them.

"A.I. can write book reviews no one reads of A.I. novels no one buys, generate playlists no one listens to of A.I. songs no one hears, and create A.I. images no one looks at for websites no one visits.

"This seems to be the future A.I. promises. Endless content generated by robots, enjoyed by no one, clogging up everything, and wasting everyone's time."
China

That Chinese Spy Balloon Used an American ISP to Communicate, Say US Officials (nbcnews.com) 74

NBC News reports that the Chinese spy balloon that flew across the U.S. in February "used an American internet service provider to communicate, according to two current and one former U.S. official familiar with the assessment."

it used the American ISP connection "to send and receive communications from China, primarily related to its navigation." Officials familiar with the assessment said it found that the connection allowed the balloon to send burst transmissions, or high-bandwidth collections of data over short periods of time.

The Biden administration sought a highly secretive court order from the federal Foreign Intelligence Surveillance Court to collect intelligence about it while it was over the U.S., according to multiple current and former U.S. officials. How the court ruled has not been disclosed. Such a court order would have allowed U.S. intelligence agencies to conduct electronic surveillance on the balloon as it flew over the U.S. and as it sent and received messages to and from China, the officials said, including communications sent via the American internet service provider...

The previously unreported U.S. effort to monitor the balloon's communications could be one reason Biden administration officials have insisted that they got more intelligence out of the device than it got as it flew over the U.S. Senior administration officials have said the U.S. was able to protect sensitive sites on the ground because they closely tracked the balloon's projected flight path. The U.S. military moved or obscured sensitive equipment so the balloon could not collect images or video while it was overhead.

NBC News is not naming the internet service provider, but says it denied that the Chinese balloon had used its network, "a determination it said was based on its own investigation and discussions it had with U.S. officials." The balloon contained "multiple antennas, including an array most likely able to collect and geolocate communications," according to reports from a U.S. State Depratment official cited by NBC News in February. "It was also powered by enormous solar panels that generated enough power to operate intelligence collection sensors, the official said.

Reached for comment this week, a spokesperson for the Chinese Embassy in Washington told NBC News that the balloon was just a weather balloon that had accidentally drifted into American airspace.
AI

Michael Cohen Used AI To Feed Lawyer Bogus Cases (nytimes.com) 52

Michael D. Cohen, the onetime fixer for former President Donald J. Trump, said in newly unsealed court papers that he had mistakenly given his lawyer bogus legal citations after the AI program Google Bard cooked them up for him. From a report: The fictitious citations were then used in a motion provided to a Manhattan federal judge. Mr. Cohen, who pleaded guilty in 2018 to campaign finance violations and served time in prison, had asked for an early end to court supervision of his case now that he was out of prison and had complied with the conditions of his release. In a sworn declaration made public on Friday, Mr. Cohen explained that he had not kept up with "emerging trends (and related risks) in legal technology and did not realize that Google Bard was a generative text service that, like ChatGPT, could show citations and descriptions that looked real but actually were not."

He also said he did not realize that the lawyer filing the motion on his behalf, David M. Schwartz, "would drop the cases into his submission wholesale without even confirming that they existed." The revelation could have serious implications for the Manhattan criminal case against Mr. Trump, in which Mr. Cohen is expected to serve as the star witness. The former president's lawyers have long attacked Mr. Cohen as a serial fabulist; now, they will have a brand-new example.

The Courts

Clowns Sue Clowns.com For Wage Theft (404media.co) 42

An anonymous reader quotes a report from 404 Media: A group of clowns is suing their former employer Clowns.com for multiple labor law violations, according to recently filed court records. Four people -- Brayan Angulo, Cameron Pille, Janina Salorio, and Xander Black -- filed a federal lawsuit on Wednesday alleging Adolph Rodriguez and Erica Barbuto, owners of Clowns.com and their former bosses, misclassified them as independent workers for years, and failed to pay them for their time. The Long Island-based company, which provides entertainers for events, violated the Fair Labor Standards Act and the New York Labor Law, the lawsuit claims.

The owners of Clowns.com didn't give employees detailed pay statements as required by New York law, the lawsuit alleges. "As a result, Plaintiffs did not know how precisely their weekly pay was being calculated, and were thus deprived of information that could be used to challenge and prevent the theft of their wages," it says. The clowns weren't paid for time "spent at the warehouse gathering and loading equipment and supplies into vehicles," or for travel time between parties, or when parties went on for longer than expected, they claim.
Pille said she's "proud to join with my clown colleagues" to stand up to wage theft and misclassification. "For years, Clowns.com has treated clowns, who are largely young actors with no prior training in clowning who sign up for this job to make ends meet, as independent contractors."
AI

New York Times Copyright Suit Wants OpenAI To Delete All GPT Instances (arstechnica.com) 157

An anonymous reader shares a report: The Times is targeting various companies under the OpenAI umbrella, as well as Microsoft, an OpenAI partner that both uses it to power its Copilot service and helped provide the infrastructure for training the GPT Large Language Model. But the suit goes well beyond the use of copyrighted material in training, alleging that OpenAI-powered software will happily circumvent the Times' paywall and ascribe hallucinated misinformation to the Times.

The suit notes that The Times maintains a large staff that allows it to do things like dedicate reporters to a huge range of beats and engage in important investigative journalism, among other things. Because of those investments, the newspaper is often considered an authoritative source on many matters. All of that costs money, and The Times earns that by limiting access to its reporting through a robust paywall. In addition, each print edition has a copyright notification, the Times' terms of service limit the copying and use of any published material, and it can be selective about how it licenses its stories.

In addition to driving revenue, these restrictions also help it to maintain its reputation as an authoritative voice by controlling how its works appear. The suit alleges that OpenAI-developed tools undermine all of that. [...] The suit seeks nothing less than the erasure of both any GPT instances that the parties have trained using material from the Times, as well as the destruction of the datasets that were used for the training. It also asks for a permanent injunction to prevent similar conduct in the future. The Times also wants money, lots and lots of money: "statutory damages, compensatory damages, restitution, disgorgement, and any other relief that may be permitted by law or equity."

Government

India Targets Apple Over Its Phone Hacking Notifications (washingtonpost.com) 100

In October, Apple issued notifications warning over a half dozen India lawmakers of their iPhones being targets of state-sponsored attacks. According to a new report from the Washington Post, the Modi government responded by criticizing Apple's security and demanding explanations to mitigate political impact (Warning: source may be paywalled; alternative source). From the report: Officials from the ruling Bharatiya Janata Party (BJP) publicly questioned whether the Silicon Valley company's internal threat algorithms were faulty and announced an investigation into the security of Apple devices. In private, according to three people with knowledge of the matter, senior Modi administration officials called Apple's India representatives to demand that the company help soften the political impact of the warnings. They also summoned an Apple security expert from outside the country to a meeting in New Delhi, where government representatives pressed the Apple official to come up with alternative explanations for the warnings to users, the people said. They spoke on the condition of anonymity to discuss sensitive matters. "They were really angry," one of those people said.

The visiting Apple official stood by the company's warnings. But the intensity of the Indian government effort to discredit and strong-arm Apple disturbed executives at the company's headquarters, in Cupertino, Calif., and illustrated how even Silicon Valley's most powerful tech companies can face pressure from the increasingly assertive leadership of the world's most populous country -- and one of the most critical technology markets of the coming decade. The recent episode also exemplified the dangers facing government critics in India and the lengths to which the Modi administration will go to deflect suspicions that it has engaged in hacking against its perceived enemies, according to digital rights groups, industry workers and Indian journalists. Many of the more than 20 people who received Apple's warnings at the end of October have been publicly critical of Modi or his longtime ally, Gautam Adani, an Indian energy and infrastructure tycoon. They included a firebrand politician from West Bengal state, a Communist leader from southern India and a New Delhi-based spokesman for the nation's largest opposition party. [...] Gopal Krishna Agarwal, a national spokesman for the BJP, said any evidence of hacking should be presented to the Indian government for investigation.

The Modi government has never confirmed or denied using spyware, and it has refused to cooperate with a committee appointed by India's Supreme Court to investigate whether it had. But two years ago, the Forbidden Stories journalism consortium, which included The Post, found that phones belonging to Indian journalists and political figures were infected with Pegasus, which grants attackers access to a device's encrypted messages, camera and microphone. In recent weeks, The Post, in collaboration with Amnesty, found fresh cases of infections among Indian journalists. Additional work by The Post and New York security firm iVerify found that opposition politicians had been targeted, adding to the evidence suggesting the Indian government's use of powerful surveillance tools. In addition, Amnesty showed The Post evidence it found in June that suggested a Pegasus customer was preparing to hack people in India. Amnesty asked that the evidence not be detailed to avoid teaching Pegasus users how to cover their tracks.
"These findings show that spyware abuse continues unabated in India," said Donncha O Cearbhaill, head of Amnesty International's Security Lab. "Journalists, activists and opposition politicians in India can neither protect themselves against being targeted by highly invasive spyware nor expect meaningful accountability."
Transportation

US Engine Maker Will Pay $1.6 Billion To Settle Claims of Emissions Cheating (nytimes.com) 100

An anonymous reader quotes a report from the New York Times: The United States and the state of California have reached an agreement in principle with the truck engine manufacturer Cummins on a $1.6 billion penalty to settle claims that the company violated the Clean Air Act by installing devices to defeat emissions controls on hundreds of thousands of engines, the Justice Department announced on Friday. The penalty would be the largest ever under the Clean Air Act and the second largest ever environmental penalty in the United States. Defeat devices are parts or software that bypass, defeat or render inoperative emissions controls like pollution sensors and onboard computers. They allow vehicles to pass emissions inspections while still emitting high levels of smog-causing pollutants such as nitrogen oxide, which is linked to asthma and other respiratory illnesses.

The Justice Department has accused the company of installing defeat devices on 630,000 model year 2013 to 2019 RAM 2500 and 3500 pickup truck engines. The company is also alleged to have secretly installed auxiliary emission control devices on 330,000 model year 2019 to 2023 RAM 2500 and 3500 pickup truck engines. "Violations of our environmental laws have a tangible impact. They inflict real harm on people in communities across the country," Attorney General Merrick Garland said in a statement. "This historic agreement should make clear that the Justice Department will be aggressive in its efforts to hold accountable those who seek to profit at the expense of people's health and safety."

In a statement, Cummins said that it had "seen no evidence that anyone acted in bad faith and does not admit wrongdoing." The company said it has "cooperated fully with the relevant regulators, already addressed many of the issues involved, and looks forward to obtaining certainty as it concludes this lengthy matter. Cummins conducted an extensive internal review and worked collaboratively with the regulators for more than four years." Stellantis, the company that makes the trucks, has already recalled the model year 2019 trucks and has initiated a recall of the model year 2013 to 2018 trucks. The software in those trucks will be recalibrated to ensure that they are fully compliant with federal emissions law, said Jon Mills, a spokesman for Cummins. Mr. Mills said that "next steps are unclear" on the model year 2020 through 2023, but that the company "continues to work collaboratively with regulators" to resolve the issue. The Justice Department partnered with the Environmental Protection Agency in its investigation of the case.

Open Source

What Comes After Open Source? Bruce Perens Is Working On It (theregister.com) 89

An anonymous reader quotes a report from The Register: Bruce Perens, one of the founders of the Open Source movement, is ready for what comes next: the Post-Open Source movement. "I've written papers about it, and I've tried to put together a prototype license," Perens explains in an interview with The Register. "Obviously, I need help from a lawyer. And then the next step is to go for grant money." Perens says there are several pressing problems that the open source community needs to address. "First of all, our licenses aren't working anymore," he said. "We've had enough time that businesses have found all of the loopholes and thus we need to do something new. The GPL is not acting the way the GPL should have done when one-third of all paid-for Linux systems are sold with a GPL circumvention. That's RHEL." RHEL stands for Red Hat Enterprise Linux, which in June, under IBM's ownership, stopped making its source code available as required under the GPL. Perens recently returned from a trip to China, where he was the keynote speaker at the Bench 2023 conference. In anticipation of his conversation with El Reg, he wrote up some thoughts on his visit and on the state of the open source software community. One of the matters that came to mind was Red Hat.

"They aren't really Red Hat any longer, they're IBM," Perens writes in the note he shared with The Register. "And of course they stopped distributing CentOS, and for a long time they've done something that I feel violates the GPL, and my defamation case was about another company doing the exact same thing: They tell you that if you are a RHEL customer, you can't disclose the GPL source for security patches that RHEL makes, because they won't allow you to be a customer any longer. IBM employees assert that they are still feeding patches to the upstream open source project, but of course they aren't required to do so. This has gone on for a long time, and only the fact that Red Hat made a public distribution of CentOS (essentially an unbranded version of RHEL) made it tolerable. Now IBM isn't doing that any longer. So I feel that IBM has gotten everything it wants from the open source developer community now, and we've received something of a middle finger from them. Obviously CentOS was important to companies as well, and they are running for the wings in adopting Rocky Linux. I could wish they went to a Debian derivative, but OK. But we have a number of straws on the Open Source camel's back. Will one break it?"

Another straw burdening the Open Source camel, Perens writes, "is that Open Source has completely failed to serve the common person. For the most part, if they use us at all they do so through a proprietary software company's systems, like Apple iOS or Google Android, both of which use Open Source for infrastructure but the apps are mostly proprietary. The common person doesn't know about Open Source, they don't know about the freedoms we promote which are increasingly in their interest. Indeed, Open Source is used today to surveil and even oppress them." Free Software, Perens explains, is now 50 years old and the first announcement of Open Source occurred 30 years ago. "Isn't it time for us to take a look at what we've been doing, and see if we can do better? Well, yes, but we need to preserve Open Source at the same time. Open Source will continue to exist and provide the same rules and paradigm, and the thing that comes after Open Source should be called something else and should never try to pass itself off as Open Source. So far, I call it Post-Open." Post-Open, as he describes it, is a bit more involved than Open Source. It would define the corporate relationship with developers to ensure companies paid a fair amount for the benefits they receive. It would remain free for individuals and non-profit, and would entail just one license. He imagines a simple yearly compliance process that gets companies all the rights they need to use Post-Open software. And they'd fund developers who would be encouraged to write software that's usable by the common person, as opposed to technical experts.

Pointing to popular applications from Apple, Google, and Microsoft, Perens says: "A lot of the software is oriented toward the customer being the product -- they're certainly surveilled a great deal, and in some cases are actually abused. So it's a good time for open source to actually do stuff for normal people." The reason that doesn't often happen today, says Perens, is that open source developers tend to write code for themselves and those who are similarly adept with technology. The way to avoid that, he argues, is to pay developers, so they have support to take the time to make user-friendly applications. Companies, he suggests, would foot the bill, which could be apportioned to contributing developers using the sort of software that instruments GitHub and shows who contributes what to which products. Merico, he says, is a company that provides such software. Perens acknowledges that a lot of stumbling blocks need to be overcome, like finding an acceptable entity to handle the measurements and distribution of funds. What's more, the financial arrangements have to appeal to enough developers. "And all of this has to be transparent and adjustable enough that it doesn't fork 100 different ways," he muses. "So, you know, that's one of my big questions. Can this really happen?"
Perens believes that the General Public License (GPL) is insufficient for today's needs and advocates for enforceable contract terms. He also criticizes non-Open Source licenses, particularly the Commons Clause, for misrepresenting and abusing the open-source brand.

As for AI, Perens views it as inherently plagiaristic and raises ethical concerns about compensating original content creators. He also weighs in on U.S.-China relations, calling for a more civil and cooperative approach to sharing technology.

You can read the full, wide-ranging interview here.
Apple

Apple Watch Import Ban Temporarily Stopped By US Appeals Court (cnbc.com) 17

An appeals court on Wednesday temporarily stopped the import ban on Apple's latest Apple Watches, allowing the company to continue selling the wearables. CNBC reports: Apple stopped selling its Series 9 and Ultra 2 watches last week in response to an International Trade Commission order in October that found the blood oxygen sensor in the devices had infringed on intellectual property from Masimo, a medical technology company that sells to hospitals. "The motion for an interim stay is granted to the extent that the Remedial Orders are temporarily stayed," a court filing Wednesday said.

On Monday, the Biden administration declined to pause the ITC ban. Apple filed the appeal with the U.S. Court of Appeals for the Federal Circuit on Tuesday. The company continues to seek a longer stay. The ITC will need to reply by Jan. 10. The stay means Apple may be able to sell the latest models of one of its most important products during the busiest time of the year. Apple Watch sales are reported as part of Apple's wearables business, which reported $39.8 billion in sales in Apple's fiscal 2023, which ended in September.

Slashdot Top Deals