Recently a New York Times headlined asked "Is the four-day work week finally within our grasp?" Kickstarter, Shake Shack and Unilever's New Zealand unit are among those that have experimented with the four-day workweek, or have announced plans to. And after an experiment in Iceland supported the idea that the system improves worker well-being without reducing overall output, a majority of the country's workers have now moved to shorter workweeks, or will gain the right to... Roughly 1% of Iceland's working population was involved in its trials of shorter workweeks for equal pay, which ran for several years starting in 2015.

"The trials were successful," concluded a recent research report on the experiment. "Participating workers took on fewer hours and enjoyed greater well-being, improved work-life balance and a better cooperative spirit in the workplace — all while maintaining existing standards of performance and productivity...." And the extra day off means fewer commuting days, which saves time and reduces environmental impact....

Proponents of four-day weeks say the key is to rein in meetings. "You have better discipline around meetings. You're a lot more thoughtful in how you use technology," said Alex Soojung-Kim Pang, author of "Shorter," a book about the four-day workweek. He also said that a shorter week requires workers to set aside time for focused work and refrain from email or other communications during that time.

"To paraphrase William Gibson, the four-day week is already here for most companies," said Pang, an organizational strategy consultant in Menlo Park, California. "It's buried under a whole bunch of rubble of outmoded practices and bad meetings. Once you clear that stuff away, then it turns out the four-day week is well within your grasp."
And now one commentator in Newsweek reports that 83% of U.S. workers favor a shorter work week. But there's also a business case for the change, since a Microsoft experiment with a four-day work week in Japan "led to a 40 percent improvement in productivity, as measured by sales per employee...." The strongest argument for a shorter work week is that it doesn't actually require a sacrifice. Although the average American works 8.8 hours a day, not much of this time is actually spent working. If a worker is in the office but isn't working, what is the purpose of them being there? Minutes spent chatting by the water cooler, checking social media and making snacks compound into hours that could be better spent elsewhere. As noted by the historian C. Northcote Parkinson, famous for "Parkinson's Law," work "expands so as to fill the time available for its completion." I think he's right.

Deadlines focus work, and focused work is better work. It's the quality, and not the quantity, of our work that matters.... As we near the post-COVID juncture, I believe it's time to refocus our sights on the forgotten promise of the industrial revolution — to finally help employees find a better work-life balance and actually increase business' productivity and bottom line at the same time. Four great work days are always better than five average days.
It's happening. "The coronavirus pandemic has sped up a transition into more flexible and diverse working hours around the world, opening up ways of working that were unthinkable just a few years ago," reports Reuters. (The traditional model of how we work has been broken," Meghana Reddy, vice president of video messaging service Loom, told the Reuters Next conference.")

And an article in Forbes reminds us that last month Britain's Atom Bank adopted a four-day week for most of its 430 employees, reducing working hours to 34 hours per week from 37.5 hours without reducing pay. "There's even talk at the congressional level: U.S. Rep. Mark Takano, a Democrat from California, introduced a bill in July to reduce the standard work week from 40 hours to 32. The bill has 13 co-sponsors...." The four-day work week will take hold because it embodies the spirit of our times, because workers demand it, and because businesses that implement it will thrive...

Years from now we will look back on our pre-pandemic work habits and lifestyles and wonder why we worked the way we did. We will cringe to recall how we sacrificed evenings and weekends and friendships and family to work all the time. We will ponder how we allowed ourselves to sink beneath relentless professional demands and digital distractions without even noticing we were drowning.

The four-day work week is just one of the corporate experiments that will define the life-work revolution and ultimately the future of work.

The Verge reports: On Wednesday night, someone drained funds from multiple cryptocurrency wallets connected to the decentralized finance platform BadgerDAO. According to the blockchain security and data analytics Peckshield, which is working with Badger to investigate the heist, the various tokens stolen in the attack are worth about $120 million.

While the investigation is still ongoing, members of the Badger team have told users that they believe the issue came from someone inserting a malicious script in the UI of their website. For any users who interacted with the site when the script was active, it would intercept Web3 transactions and insert a request to transfer the victim's tokens to the attacker's chosen address. Because of the transparent nature of the transactions, we can see what happened once the attackers pounced. PeckShield points out one transfer that yanked 896 Bitcoin into the attacker's coffers, worth more than $50 million.

According to the team, the malicious code appeared as early as November 10th, as the attackers ran it at seemingly random intervals to avoid detection....

One of the things Badger is investigating is how the attacker apparently accessed Cloudflare via an API key that should've been protected by two-factor authentication...

"Security researchers analyzed nine popular WiFi routers and found a total of 226 potential vulnerabilities in them," reports Bleeping Computer, "even when running the latest firmware." Slashdot reader joshuark shared their report: The tested routers are made by Asus, AVM, D-Link, Netgear, Edimax, TP-Link, Synology, and Linksys, and are used by millions of people... Researchers at IoT Inspector carried out the security tests in collaboration with CHIP magazine, focusing on models used mainly by small firms and home users. "For Chip's router evaluation, vendors provided them with current models, which were upgraded to the latest firmware version," Florian Lukavsky, CTO & Founder at IoT Inspector, told BleepingComputer via email. "The firmware versions were automatically analyzed by IoT Inspector and checked for more than 5,000 CVEs and other security issues...."

While not all flaws carried the same risk, the team found some common problems that affected most of the tested models:

- Outdated Linux kernel in the firmware
- Outdated multimedia and VPN functions
- Over-reliance on older versions of BusyBox
- Use of weak default passwords like "admin"
- Presence of hardcoded credentials in plain text form....

All of the affected manufacturers responded to the researchers' findings and released firmware patches.
The researchers demonstrated one exploit they found on one of the routers that extracted the AES key used for the firmware encryption, letting malicious firmware image updates pass verification checks on the device — and thus potentially planting malware on the router.

jd (Slashdot reader #1,658) shares another perspective on the same study from Security Week: Not all of the identified weaknesses are considered real security flaws, and for some bugs it is unclear whether exploitation is even possible. However, many of the identified vulnerabilities (ranging from 2 in AVM devices to nearly a dozen in other routers) were classified as high- and medium-severity.