×
The Courts

Supreme Court Allows Reddit Mods To Anonymously Defend Section 230 (arstechnica.com) 152

An anonymous reader quotes a report from Ars Technica: Over the past few days, dozens of tech companies have filed briefs in support of Google in a Supreme Court case that tests online platforms' liability for recommending content. Obvious stakeholders like Meta and Twitter, alongside popular platforms like Craigslist, Etsy, Wikipedia, Roblox, and Tripadvisor, urged the court to uphold Section 230 immunity in the case or risk muddying the paths users rely on to connect with each other and discover information online. Out of all these briefs, however, Reddit's was perhaps the most persuasive (PDF). The platform argued on behalf of everyday Internet users, whom it claims could be buried in "frivolous" lawsuits for frequenting Reddit, if Section 230 is weakened by the court. Unlike other companies that hire content moderators, the content that Reddit displays is "primarily driven by humans -- not by centralized algorithms." Because of this, Reddit's brief paints a picture of trolls suing not major social media companies, but individuals who get no compensation for their work recommending content in communities. That legal threat extends to both volunteer content moderators, Reddit argued, as well as more casual users who collect Reddit "karma" by upvoting and downvoting posts to help surface the most engaging content in their communities.

"Section 230 of the Communications Decency Act famously protects Internet platforms from liability, yet what's missing from the discussion is that it crucially protects Internet users -- everyday people -- when they participate in moderation like removing unwanted content from their communities, or users upvoting and downvoting posts," a Reddit spokesperson told Ars. Reddit argues in the brief that such frivolous lawsuits have been lobbed against Reddit users and the company in the past, and Section 230 protections historically have consistently allowed Reddit users to "quickly and inexpensively" avoid litigation. [...]

The Supreme Court will have to weigh whether Reddit's arguments are valid. To help make its case defending Section 230 immunity protections for recommending content, Reddit received special permission from the Supreme Court to include anonymous comments from Reddit mods in its brief. This, Reddit's spokesperson notes, is "a significant departure from normal Supreme Court procedure." The Electronic Frontier Foundation, a nonprofit defending online privacy, championed the court's decision to allow moderators to contribute comments anonymously.
"We're happy the Supreme Court recognized the First Amendment rights of Reddit moderators to speak to the court about their concerns," EFF's senior staff attorney, Sophia Cope, told Ars. "It is quite understandable why those individuals may be hesitant to identify themselves should they be subject to liability in the future for moderating others' speech on Reddit."

"Reddit users that interact with third-party content -- including 'hosting' content on a sub-Reddit that they manage, or moderating that content -- could definitely be open to legal exposure if the Court carves out "recommending' from Section 230's protections, or otherwise narrows Section 230's reach," Cope told Ars.
United States

Meta, Twitter, Microsoft and Others Urge Supreme Court Not To Allow Lawsuits Against Tech Algorithms 78

A wide range of businesses, internet users, academics and even human rights experts defended Big Tech's liability shield in a pivotal Supreme Court case about YouTube algorithms, with some arguing that excluding AI-driven recommendation engines from federal legal protections would cause sweeping changes to the open internet. From a report: The diverse group weighing in at the Court ranged from major tech companies such as Meta, Twitter and Microsoft to some of Big Tech's most vocal critics, including Yelp and the Electronic Frontier Foundation. Even Reddit and a collection of volunteer Reddit moderators got involved. In friend-of-the-court filings, the companies, organizations and individuals said the federal law whose scope the Court could potentially narrow in the case -- Section 230 of the Communications Decency Act -- is vital to the basic function of the web. Section 230 has been used to shield all websites, not just social media platforms, from lawsuits over third-party content.

The question at the heart of the case, Gonzalez v. Google, is whether Google can be sued for recommending pro-ISIS content to users through its YouTube algorithm; the company has argued that Section 230 precludes such litigation. But the plaintiffs in the case, the family members of a person killed in a 2015 ISIS attack in Paris, have argued that YouTube's recommendation algorithm can be held liable under a US antiterrorism law. In their filing, Reddit and the Reddit moderators argued that a ruling enabling litigation against tech-industry algorithms could lead to future lawsuits against even non-algorithmic forms of recommendation, and potentially targeted lawsuits against individual internet users.
Games

The First 'Bored Ape' NFT Game Costs $2,300+ For Three Weeks of Play (arstechnica.com) 52

An anonymous reader quotes a report from Ars Technica: Owners of Yuga Labs' infamous "Bored Ape" non-fungible tokens (and related crypto tokens) get free access to a simple endless runner/tunnel racing game called Dookey Dash today. But some members of the "exclusive" Bored Ape Yacht Club (BAYC) are already selling a chance to play the time-limited game for thousands of dollars on the secondary market. Listings on the OpenSea exchange show a current floor price of 1.49 ETH (about $2,293) for a "Sewer Pass" NFT that grants access to Dookey Dash until February 8. In less than 24 hours, the exchange has seen 8,394 ETH (about $12.8 million) in Sewer Pass transactions, with some passes selling for as much as 5.75 ETH (about $8,770).

While wash trading and/or crypto laundering could be driving some of those those Sewer Pass transactions, some players are clearly clamoring for access to Dookey Dash and are willing to spend to get it. But that demand isn't being driven by any sort of novel or transcendent gameplay experience that Yuga Labs is offering. Instead, NFT speculators are trying to use the game to get in on the ground floor of what they hope will be the next artificially scarce, high-demand digital asset.

In an extensive FAQ, Yuga Labs describes Dookey Dash as a "skill-based mint." That means a player's highest score in Dookey Dash is tied to the player's Sewer Pass NFT (one Sewer Pass allows as many attempts as a player can tolerate before the February 8 deadline arrives). Sewer Pass holders will then be able to trade their pass for a mysterious "Power Source" NFT during "The Summoning," which starts on February 15. The quality of those Power Sources will apparently be tied to each Sewer Pass' relative position on the game's final leaderboard, with rarer "traits" being associated with higher scores. The player at the very top of the leaderboard will be the only one to get the "Ultimate Power Source," whatever that means. [...]

Social Networks

Supreme Court Poised To Reconsider Key Tenets of Online Speech (nytimes.com) 241

The cases could significantly affect the power and responsibilities of social media platforms. From a report: For years, giant social networks like Facebook, Twitter and Instagram have operated under two crucial tenets. The first is that the platforms have the power to decide what content to keep online and what to take down, free from government oversight. The second is that the websites cannot be held legally responsible for most of what their users post online, shielding the companies from lawsuits over libelous speech, extremist content and real-world harm linked to their platforms. Now the Supreme Court is poised to reconsider those rules, potentially leading to the most significant reset of the doctrines governing online speech since U.S. officials and courts decided to apply few regulations to the web in the 1990s.

On Friday, the Supreme Court is expected to discuss whether to hear two cases that challenge laws in Texas and Florida barring online platforms from taking down certain political content. Next month, the court is scheduled to hear a case that questions Section 230, a 1996 statute that protects the platforms from liability for the content posted by their users. The cases could eventually alter the hands-off legal position that the United States has largely taken toward online speech, potentially upending the businesses of TikTok, Twitter, Snap and Meta, which owns Facebook and Instagram. "It's a moment when everything might change," said Daphne Keller, a former lawyer for Google who directs a program at Stanford University's Cyber Policy Center.

Encryption

iOS 16.3 Expands Advanced Data Protection Option For iCloud Encryption Globally (macrumors.com) 17

Apple today announced that Advanced Data Protection is expanding beyond the United States. MacRumors reports: Starting with iOS 16.3, the security feature will be available globally, giving users to option to enable end-to-end encryption for many additional iCloud data categories, including Photos, Notes, Voice Memos, Messages backups, device backups, and more. iOS 16.3 is currently in beta and expected to be released to the public next week.

By default, Apple stores encryption keys for some iCloud data types on its servers to ensure that users can recover their data if they lose access to their Apple ID account. If a user enables Advanced Data Protection, the encryption keys are deleted from Apple's servers and stored on a user's devices only, preventing Apple, law enforcement, or anyone else from accessing the data, even if iCloud servers were to be breached.

iCloud already provides end-to-end encryption for 14 data categories without Advanced Data Protection turned on, including Messages (excluding backups), passwords stored in iCloud Keychain, Health data, Apple Maps search history, Apple Card transactions, and more. Advanced Data Protection expands this protection to the vast majority of iCloud categories, with major exceptions including the Mail, Contacts, and Calendar apps.
For more information, you can read Apple's Advanced Data Protection support document.
Bitcoin

Crypto Conglomerate DCG Suspends Dividends Amid Distress At Genesis Unit (cointelegraph.com) 16

An anonymous reader quotes a report from CoinTelegraph: Venture capital firm Digital Currency Group (DCG) has told shareholders it is halting its quarterly dividend payments until further notice as it attempts to preserve liquidity. According to the letter sent to shareholders on Jan. 17, the firm is focused on "strengthening our balance sheet by reducing operating expenses and preserving liquidity." Its financial issues are derived from the woes of its subsidiary, crypto broker Genesis Global Trading, which reportedly owes creditors more than $3 billion and DCG is also considering selling some of the assets within its portfolio.

Customers are currently unable to withdraw funds from Genesis after it halted withdrawals on Nov. 16, which has prompted Cameron Winklevoss -- on behalf of his exchange Gemini and its users with funds on Genesis -- to call for the board of DCG to remove Barry Silbert as CEO of the firm in a Jan. 10 open letter. According to Winklevoss, Genesis owes Gemini $900 million for funds that were lent to Genesis as part of Gemini's Earn program, which offers customers the ability to earn an annual yield of up to 7.4%. He also claimed DCG owed $1.675 billion to Genesis although DCG boss Barry Silbert denied this. Soon after, on Jan. 12, the United States Securities and Exchange Commission (SEC) poured fuel on the fire charging both firms with offering unregistered securities through the Earn program.
DCG "owns Grayscale Investments and its series of digital asset trusts and has invested in over 200 companies within the crypto industry including recognizable names such as blockchain analysis firm Chainalysis, stablecoin issuer Circle and digital asset exchange Kraken," notes the report.
Android

Google Reportedly Working On 'Grogu' Tracker To Compete With Apple's AirTags (9to5google.com) 40

According to new research, Google is working on a new Bluetooth tracker device to compete with Apple's AirTags. 9to5Google reports: Since 2021, Google has included ultra-wideband (UWB) connectivity in its high-end "Pro" phones like the Pixel 6 Pro and Pixel 7 Pro. For now, the hardware has only been used for niche cases like unlocking a luxury car or sending files to a friend, but it's been clear that Google intends for UWB to be used more often. [...] To build up its own "Finder Network," compete with Apple AirTags, and potentially make UWB more useful on Pixel phones, Google is reportedly developing its own tracking accessory. The information comes courtesy of Android researcher and frequent Pixel leaker Kuba Wojciechowski.

The tracker is said to be in development under the codename "Grogu" -- a reference to the popular Star Wars series "The Mandalorian" -- alongside the alternate names "GR10" and "Groguaudio." The only other tidbits that have been uncovered so far suggest that the Nest team is seemingly taking lead on the development and that the tracker may be available in multiple colors. The "Groguaudio" codename suggests that Google's tracker would potentially come equipped with a speaker. On Apple's AirTags, a built-in speaker serves as both a privacy measure and a location aid, as if you move someone else's AirTag after it's been separated from them, it will beep. This is just one of many potential privacy issues that Google will need to work through before launching a tracker accessory like this one.

Role Playing (Games)

Game Makers Stage Mass Exodus From Dungeons & Dragons' 'Open' License (arstechnica.com) 181

Following controversial changes to Dungeons & Dragons' decades-old Open Gaming License (OGL), "many prominent third-party RPG publishers now say they're abandoning the OGL, regardless of what changes [publisher Wizards of the Coast (WotC)] officially releases in a coming new version," reports Ars Technica. "What's more, many in the community have now lost faith in WotC's stewardship of the licensed rules system that has underpinned so much of the industry's last two decades." From the report: Pathfinder publisher Paizo Inc. is behind perhaps the biggest effort to move the industry away from WotC's OGL. The company announced last Thursday that it is creating a new Open RPG Creative License (ORC) designed to be "open, perpetual, and irrevocable." [...] Regardless of the legal fate of the OGL, Paizo says it wants to "irrevocably and unquestionably keep alive the spirit of the Open Game License" with its new ORC. The system-agnostic license, designed with the help of IP law firm Azora Law, will eventually be controlled and protected by a nonprofit akin to the Linux Foundation, the company says. Until that new license is ready, upcoming Paizo products will be printed without any explicit license, the company says.

Paizo's ORC effort has already drawn some significant support from the community. Call of Cthulhu and Runequest publisher Chaosium, which never used the WotC OGL for its products in the first place, nonetheless writes that it's "very happy to be working with the rest of the industry to come up with a system-wide OGL that anyone can use." Popular D&D module publisher Kobold Press has also lent its support to Paizo's ORC product but stopped just short of committing to use it for its just-announced Core Fantasy ruleset, codenamed Project Black Flag. Instead, Kobold says it is "wait[ing] to see exactly what shape the Open Gaming License might take in this new era" and "will review the terms and consider whether they fit the needs of our audience and our business goals" when the updated OGL is eventually released. Mutants & Masterminds publisher Green Ronin is also on board with the ORC, with founder and President Chris Pramas publicly comparing the current OGL fiasco to WotC's disastrous attempt to push a new Game System License for the 4th edition of Dungeons & Dragons back in 2008.

Apart from the companies backing Paizo's ORC -- including Legendary Games and Rogue Genius -- some tabletop publishers are creating their own licenses or finding other ways to extricate themselves from the WotC OGL. Blade Runner RPG and Mutant: Year Zero publisher Free League, for instance, says it's overhauling its unique Year Zero Engine to remove any WotC OGL content. At the same time, it's creating a new "irrevocable, worldwide, and royalty-free" license for anyone who wants to use that engine in their own games. [...] Old-School Essentials publisher Necrotic Gnome has similarly announced that it's "moving away from the OGL" for its future products. The company is leaving a bit of wiggle room, saying it will be "keeping an eye on developments" and that its next move "will depend on how the OGL topic develops over the coming months." But Necrotic Gnome adds that "the direction is clear," and that direction is toward "an alternative open license," which could end up being Paizo's ORC.
Arcadia publisher MCDM and publisher Basic Fantasy also have plans to abandon the D&D 5th edition ruleset. "Troll Lord Games, meanwhile, publicly abandoned the OGL weeks ago and liquidated its existing stock of 5th-edition D&D products, 'never to be revisited again, in any edition,'" adds Ars.
Apple

Apple TV Requires You To Have an iPhone To Accept New iCloud Terms and Conditions (9to5mac.com) 99

An anonymous reader shares a report: A viral tweet today highlights a somewhat frustrating limitation with the Apple TV software. As of a recent software update, tvOS expects users have access to an iPhone or iPad in order to do things like accept new iCloud terms and conditions, or update their Apple ID settings. Although most people who use the Apple TV 4K box are deeply ensconced in the Apple ecosystem, this doesn't apply to everyone. Up until recently, the Apple TV could be used essentially independently. It was assumed to be a standalone device, not an accessory. Not so much, anymore. Moreover, these changes mean Apple TV users who have Macs -- but no personal iOS devices -- are also left in the lurch.

Most of the Apple TV can be used without needing access to other Apple hardware. You can set up the Apple TV from scratch completely independently, install apps, and make purchases. Typical Apple ID management duties can be performed from a web browser on a PC, if occasionally necessary. However, there are some tasks -- seemingly more prevalent than ever as of tvOS 16 -- that the Apple TV expects you to do on an iOS device signed in with the same account. This viral tweet from @hugelgupf showcases perhaps the most egregious example: accepting new iCloud terms and conditions requires an iOS device.

AI

Microsoft Azure OpenAI Service Now Generally Available, With ChatGPT On the Way 18

In a blog post this evening, Microsoft announced the general availability of Azure OpenAI Service, which allows businesses to power their apps with large-scale AI models, including GPT-3.5, DALL-E 2, and Codex. VentureBeat reports: According to a press statement, availability is "restricted to customers who meet and adhere to the standards for responsible and ethical AI principles that Microsoft has set and published (linked here). Customers are required to apply for access describing their intended use-case or application before they are given access to the service."

Microsoft CEO Satya Nadella tweeted the announcement, adding that "ChatGPT is coming soon to the Azure Open AI Service, which is now generally available, as we help customers apply the world's most advanced AI models to their own business imperatives." OpenAI tweeted the news, adding that "We've learned a lot from the ChatGPT research preview and have been making important updates based on user feedback. ChatGPT will be coming to our API and Microsoft's Azure OpenAI Service soon."
Cloud

Basecamp Details 'Obscene' $3.2 Million Bill That Prompted It To Quit the Cloud (theregister.com) 95

An anonymous reader shares a report: David Heinemeier Hansson, CTO of 37Signals -- which operates project management platform Basecamp and other products -- has detailed the colossal cloud bills that saw the outfit quit the cloud in October 2022. The CTO and creator of Ruby On Rails did all the sums and came up with an eye-watering cloud bill for $3,201,564 in 2022 -- or $266,797 each month. Plenty of that spend -- $759,983 -- went on compute, in the form of Amazon Web Services' EC2 and EKS services.

On Twitter, Hansson contrasted that cost with the spend needed to acquire servers packing 288 vCPUs and plenty more besides over three years. Hansson was at pains to point out that even that bill was the result of a concerted effort to keep it low. "Getting this massive spend down to just $3.2 million has taken a ton of work. The ops team runs a vigilant cost-inspection program, with monthly reporting and tracking, and we've entered into long-term agreements on Reserved Instances and committed usage, as part of a Private Pricing Agreement," he wrote. "This is a highly optimized budget."

AI

CNET Used AI to Write 75 Articles (buzzfeednews.com) 44

From BuzzFeed News: Technology news outlet CNET has been found to be using Artificial Intelligence (AI) to write articles about personal finance without any prior announcement or explanation. The articles, which numbered at 73, covered topics such as "What Is Zelle and How Does It Work?" and had a small disclaimer at the bottom of each reading, "This article was generated using automation technology and thoroughly edited and fact-checked by an editor on our editorial staff." The bylines on these articles read "CNET Money Staff" without any indication that they were generated by AI.

The use of AI to write these articles was first brought to light by a Twitter user, and further investigation revealed that the articles have been generated using AI since November 2022....

Note: This article was written entirely by ChatGPT and reviewed by a human editor. (Actually, we had to rewrite the prompt a few times to get it to stop inserting factual errors.)

CNET's editor in chief defends their AI-written stories: I use the term "AI assist" because while the AI engine compiled the story draft or gathered some of the information in the story, every article on CNET — and we publish thousands of new and updated stories each month — is reviewed, fact-checked and edited by an editor with topical expertise before we hit publish. That will remain true as our policy no matter what tools or tech we use to create those stories.

Our reputation as a fact-based, unbiased source of news and advice is based on being transparent about how we work and the sources we rely on. So in the past 24 hours, we've changed the byline to CNET Money and moved our disclosure so you won't need to hover over the byline to see it: "This story was assisted by an AI engine and reviewed, fact-checked and edited by our editorial staff...." Will we make more changes and try new things as we continue to test, learn and understand the benefits and challenges of AI? Yes.

Games

Videogame Studio Called 'Proletariat' Declines to Recognize Union (msn.com) 59

An anonymous reader shares a report from the Washington Post: Staff at Activision Blizzard-owned video game studio Proletariat — whose name is a term for the working class — announced their intention to form a union in December of last year. "Well, what'd you expect?" the Proletariat Workers Alliance wrote on Twitter at the time. Earlier this week, however, Proletariat leadership shared an update: Instead of voluntarily recognizing the union, it will conduct an anonymous vote through the National Labor Relations Board.

Proletariat owner Activision Blizzard has been accused of employing union-busting tactics in its negotiations with two other subsidiaries that have voted to unionize, Raven Software and Blizzard Albany.

Businesses

Virgin Orbit's Sixth Launch Became a 'Fireball' on Monday (gizmodo.com) 12

It was meant to be the first-ever orbital mission to take off from the United Kingdom — carried by a Virgin Orbit rocket launched from a private jumbo jet Monday over the Atlantic ocean, according to the BBC.

But instead "at an altitude of approximately 180km (111 miles), the upper stage experienced an anomaly which 'prematurely ended' the first burn. The company said this event ended the mission, with the rocket components and payload falling back to Earth within the approved safety corridor.,,,"

At this point the unmanned rocket became "a slow moving fireball in the sky," astrodynamics lecturer Marco Langbroek told Gizmodo in an email. The rocket's hellish descent was captured on video, revealing the unfortunate journey back from space. Ramón López, an observer at the Spanish Meteor Network, caught the rocket reentering Earth's atmosphere from Lanzarote, one of the Canary Islands off the west coast of Africa. He released the footage on YouTube, as well as on Twitter.
Earlier this week Space.com noted that four previous Virgin Orbit missions have all been successful, deploying a total of 33 satellites into orbit.
Security

Leaker Releases Valve Assets From Repository (gamerant.com) 8

An anonymous reader quotes a report from Game Rant: A Discord user has just released various development assets from Valve's repository. It is not an isolated case as Valve is a constant target of hackers and the like. There have been multiple instances wherein concept images or artwork randomly surface on the internet. Valve is a globally recognized company whose games such as Half-Life, Portal, and Team Fortress have grown its large fan base. Its games go through a lengthy development process, which is the reason hundreds to thousands of documents, photos, and such are accumulated during this period. Only a limited number of staff with a Source developer license would have had access to the repository. As such, the files might have been more secure if access was limited.

Twitter user sylvia_braixen stated that one of the biggest Valve data breaches had just occurred. Not long after, they shared screenshots showing the various drops made onto a Discord server. They believe that the files were from the same wave of uploads that users got a taste of as early as 2016. According to the screenshots, the uploads were done by a user named Leakerwanderer, who had access to the Valve repository. Titles such as Half-Life and Team Fortress 2 are no strangers to leaks, and they were among those that had its assets shown this time as well.

Currently, the documents are accessible via a Discord server named Valve Cut Content. However, upon checking, the server is not accepting new members because of the recent flood of users who have tried to check out the files. With the gravity of the leak, people are left wondering if this data breach is a targeted attack, especially since a recent Valve prototype of Left 4 Dead surfaced online just a few days before. It seems that may have served as a precursor to this bigger repository leak.

Facebook

Meta Sues Surveillance Company for Scraping Data With Fake Facebook Accounts (theverge.com) 14

Meta has filed a legal complaint against a company for allegedly creating tens of thousands of fake Facebook accounts to scrape user data and provide surveillance services for clients. From a report: The firm, Voyager Labs, bills itself as "a world leader in advanced AI-based investigation solutions." What this means in practice is analyzing social media posts en masse in order to make claims about individuals. In 2021, for example, The Guardian reported how Voyager Labs sold its services to the Los Angeles Police Department, with the company claiming to predict which individuals were likely to commit crimes in the future.

Meta announced the legal action in a blog post on January 12th, claiming that Voyager Labs violated its terms of service. According to a legal filing issued on November 11th, Meta alleges that Voyager Labs created over 38,000 fake Facebook user accounts and used its surveillance software to gather data from Facebook and Instagram without authorization. Voyager Labs also collected data from sites including Twitter, YouTube, and Telegram.

Security

Vulnerability With 9.8 Severity in Control Web Panel is Under Active Exploit (arstechnica.com) 24

Malicious hackers have begun exploiting a critical vulnerability in unpatched versions of the Control Web Panel, a widely used interface for web hosting. ArsTechnica reports: "This is an unauthenticated RCE," members of the Shadowserver group wrote on Twitter, using the abbreviation for remote code exploit. "Exploitation is trivial and a PoC published." PoC refers to a proof-of-concept code that exploits the vulnerability. The vulnerability is tracked as CVE-2022-44877. It was discovered by Numan Turle of Gais Cyber Security and patched in October in version 0.9.8.1147. Advisories didn't go public until earlier this month, however, making it likely some users still aren't aware of the threat.

Figures provided by Security firm GreyNoise show that attacks began on January 7 and have slowly ticked up since then, with the most recent round continuing through Wednesday. The company said the exploits are coming from four separate IP addresses located in the US, Netherlands, and Thailand. Shadowserver shows that there are roughly 38,000 IP addresses running Control Web Panel, with the highest concentration in Europe, followed by North America, and Asia. The severity rating for CVE-2022-44877 is 9.8 out of a possible 10. "Bash commands can be run because double quotes are used to log incorrect entries to the system," the advisory for the vulnerability stated. As a result, unauthenticated hackers can execute malicious commands during the login process.

Microsoft

Microsoft Investigating Windows Start Menu and Taskbar Shortcuts Disappearing (theverge.com) 36

Microsoft says it's investigating an issue in Windows that is causing application shortcuts in the Start menu or taskbar to disappear. From a report: Multiple IT admins have detailed the problem on Twitter and Reddit this morning, and it appears to be related to a recent update to the Microsoft Defender threat detections. The problem is affecting businesses and organizations using Microsoft 365 and Defender for protection against malware, viruses, and other threats. In a note to customers, Microsoft says it has received reports that a certain attack surface reduction (ASR) rule is causing the problems. IT admins are currently trying to work around the issue by setting the "Block Win32 API calls from Office macro" rule to audit only. Microsoft says it has now "reverted the rule to prevent further impact whilst we investigate further." The software maker hasn't issued a workaround or any guidance on how IT admins might recover the shortcuts on affected machines.
United States

A Corrupt File Led To the FAA Ground Stoppage (cnn.com) 176

According to CNN, the Federal Aviation Administration system outage on Wednesday has been traced to a corrupt file. From the report: In a statement late Wednesday, the FAA said it was continuing to investigate the outage and "take all needed steps to prevent this kind of disruption from happening again." "Our preliminary work has traced the outage to a damaged database file. At this time, there is no evidence of a cyberattack," the FAA said. The FAA is still trying to determine whether any one person or "routine entry" into the database is responsible for the corrupted file, a government official familiar with the investigation into the NOTAM system outage told CNN.

When air traffic control officials realized they had a computer issue late Tuesday, they came up with a plan, the source said, to reboot the system when it would least disrupt air travel, early on Wednesday morning. But ultimately that plan and the outage led to massive flight delays and an unprecedented order to stop all aircraft departures nationwide. The computer system that failed was the central database for all NOTAMs (Notice to Air Missions) nationwide. Those notices advise pilots of issues along their route and at their destination. It has a backup, which officials switched to when problems with the main system emerged, according to the source. FAA officials told reporters early Wednesday that the issues developed in the 3 p.m. ET hour on Tuesday.

Officials ultimately found a corrupt file in the main NOTAM system, the source told CNN. A corrupt file was also found in the backup system. In the overnight hours of Tuesday into Wednesday, FAA officials decided to shut down and reboot the main NOTAM system -- a significant decision, because the reboot can take about 90 minutes, according to the source. They decided to perform the reboot early Wednesday, before air traffic began flying on the East Coast, to minimize disruption to flights. "They thought they'd be ahead of the rush," the source said. During this early morning process, the FAA told reporters that the system was "beginning to come back online," but said it would take time to resolve. The system, according to the source, "did come back up, but it wasn't completely pushing out the pertinent information that it needed for safe flight, and it appeared that it was taking longer to do that." That's when the FAA issued a nationwide ground stop at around 7:30 a.m. ET, halting all domestic departures.
The source said the NOTAM system is an example of aging infrastructure due for an overhaul. "Because of budgetary concerns and flexibility of budget, this tech refresh has been pushed off," the source said. "I assume now they're going to actually find money to do it."
Bitcoin

Crypto.com Will Delist Tether In Canada To Comply With Ontario Regulator (decrypt.co) 5

Cryptocurrency exchange Crypto.com will no longer facilitate transactions involving Tether in Canada and plans to delist the largest stablecoin by market capitalization for customers in the region. Decrypt reports: "Crypto.com has delisted USDT for users in Canada in accordance with instructions from the Ontario Securities Commission (OSC) as part of our pre-registration undertaking for a restricted dealer license," a spokesperson for Crypto.com told Decrypt. Canadian users of the exchange were notified about the company's change in policy on Tuesday via email, as images of the delisting notice began to crop on both Reddit and Twitter.

The notice stated Crypto.com's support of Tether will end on Jan. 31, without specifically stating users in Canada would only be affected, prompting confusion on behalf of some on social media. The exchange warned users that all trading, deposits, and withdrawals will not be facilitated after the deadline. "Please take urgent action to review your USDT balance and take necessary action," the notice stated. Any remaining USDT balances would "automatically" be converted to Circle's USD Coin, another stablecoin that tracks the price of the dollar. The exchange also stated the retrieval of USDT deposits made after the deadline may not be possible or warrant some fees.

Slashdot Top Deals