×
Businesses

Biden Sets Up Tech Showdown With 'Right-to-Repair' Rules for FTC (yahoo.com) 65

President Joe Biden will direct the U.S. Federal Trade Commission to draft new rules aimed at stopping manufacturers from limiting consumers' ability to repair products at independent shops or on their own, Bloomberg reported Tuesday, citing a person familiar with the plan. From the report: While the agency will ultimately decide the size and scope of the order, the presidential right-to-repair directive is expected to mention mobile phone manufacturers and Department of Defense contractors as possible areas for regulation. Tech companies including Apple and Microsoft have imposed limits on who can repair broken consumer electronics like game consoles and mobile phones, which consumer advocates say increases repair costs. The order is also expected to benefit farmers, who face expensive repair costs from tractor manufacturers who use proprietary repair tools, software, and diagnostics to prevent third-parties from working on the equipment, according to the person, who requested anonymity to discuss the action ahead of its official announcement.
Robotics

Will a Pandemic Wave of Automation Be Bad News for Workers? (msn.com) 226

The New York Times reports: When Kroger customers in Cincinnati shop online these days, their groceries may be picked out not by a worker in their local supermarket but by a robot in a nearby warehouse... And in the drive-through lane at Checkers near Atlanta, requests for Big Buford burgers and Mother Cruncher chicken sandwiches may be fielded not by a cashier in a headset, but by a voice-recognition algorithm. An increase in automation, especially in service industries, may prove to be an economic legacy of the pandemic. Businesses from factories to fast-food outlets to hotels turned to technology last year to keep operations running amid social distancing requirements and contagion fears. Now the outbreak is ebbing in the United States, but the difficulty in hiring workers — at least at the wages that employers are used to paying — is providing new momentum for automation...

[S]ome economists say the latest wave of automation could eliminate jobs and erode bargaining power, particularly for the lowest-paid workers, in a lasting way. "Once a job is automated, it's pretty hard to turn back," said Casey Warman, an economist at Dalhousie University in Nova Scotia who has studied automation in the pandemic... A working paper published by the International Monetary Fund this year predicted that pandemic-induced automation would increase inequality in coming years, not just in the United States but around the world. "Six months ago, all these workers were essential," said Marc Perrone, president of the United Food and Commercial Workers, a union representing grocery workers. "Everyone was calling them heroes. Now, they're trying to figure out how to get rid of them...."

The push toward automation goes far beyond the restaurant sector. Hotels, retailers, manufacturers and other businesses have all accelerated technological investments. In a survey of nearly 300 global companies by the World Economic Forum last year, 43 percent of businesses said they expected to reduce their work forces through new uses of technology... Daron Acemoglu of the Massachusetts Institute of Technology said that many of the technological investments had just replaced human labor without adding much to overall productivity. In a recent working paper, Professor Acemoglu and a colleague concluded that "a significant portion of the rise in U.S. wage inequality over the last four decades has been driven by automation" — and he said that trend had almost certainly accelerated in the pandemic. "If we automated less, we would not actually have generated that much less output but we would have had a very different trajectory for inequality," Professor Acemoglu said.

"We'll look back and say why didn't we do this sooner," fast-food franchisee Shana Gonzales told the Times after implementing an automated voice-recognition system that takes customers' orders. Gonzales added that she'd gladly hire human workers instead, but she just can't find them, and says she's even tried raising their starting pay rate — from $9 an hour to $10.

"Ms. Gonzales acknowledged she could fully staff her restaurants if she offered $14 to $15 an hour to attract workers. But doing so, she said, would force her to raise prices so much that she would lose sales — and automation allows her to take another course."
Power

California Tests Off-the-Grid Solutions to Climate-Related Power Outages (apnews.com) 84

California's energy commission has funded dozens of projects "serving as test beds for policies that might lead to commercialization of microgrids," reports the Associated Press: When a wildfire tore through Briceburg nearly two years ago, the tiny community on the edge of Yosemite National Park lost the only power line connecting it to the electrical grid. Rather than rebuilding poles and wires over increasingly dry hillsides, which could raise the risk of equipment igniting catastrophic fires, the nation's largest utility decided to give Briceburg a self-reliant power system. The stand-alone grid made of solar panels, batteries and a backup generator began operating this month.

It's the first of potentially hundreds of its kind as Pacific Gas & Electric works to prevent another deadly fire like the one that forced it to file for bankruptcy in 2019.

The ramping up of this technology is among a number of strategies to improve energy resilience in California as a cycle of extreme heat, drought and wildfires hammers the U.S. West, triggering massive blackouts and threatening the power supply in the country's most populous state... "I don't think anyone in the world anticipated how quickly the changes brought on by climate change would manifest. We're all scrambling to deal with that," said Peter Lehman, the founding director of the Schatz Energy Research Center, a clean energy institute in Arcata. The response follows widespread blackouts in California in the past two years that exposed the power grid's vulnerability to weather. Fierce windstorms led utilities to deliberately shut off power to large swaths of the state to keep high-voltage transmission lines from sparking fire. Then last summer, an oppressive heat wave triggered the first rolling outages in 20 years. More than 800,000 homes and businesses lost power over two days in August.

During both crises, a Native American reservation on California's far northern coast kept the electricity flowing with the help of two microgrids that can disconnect from the larger electrical grid and switch to using solar energy generated and stored in battery banks near its hotel-casino. As most of rural Humboldt County sat in the dark during a planned shutoff in October 2019, the Blue Lake Rancheria became a lifeline for thousands of its neighbors: The gas station and convenience store provided fuel and supplies, the hotel housed patients who needed a place to plug in medical devices, the local newspaper used the conference room to put out the next day's edition, and a hatchery continued pumping water to keep its fish alive... During a few hours of rolling blackouts last August, the reservation's microgrids went into "island mode" to help ease stress on the state's maxed-out grid...

State facilities are planning to quadruple the amount of battery storage from 500 megawatts to 2,000 megawatts by this August.

But unfortunately, "There are setbacks too: An intensifying drought is weakening the state's hydroelectric facilities..."
GNU is Not Unix

FSF Prioritizes Creation of a Free-Software eBook Reader, Urges Avoiding DRM eBooks (fsf.org) 65

Since most ebook readers run some version of the kernel Linux (with some even run the GNU/Linux operating system), "This puts ebook readers a few steps closer to freedom than other devices," notes a recent call-to-action in the Free Software Foundation Bulletin.

But with e-ink screens and DRM-laden ebooks, "closing the gap will still require a significant amount of work." Accordingly, as we announced at the LibrePlanet 2021 conference, we've decided this year to prioritize facilitating the process for an ebook reader to reach the high standards of our Respects Your Freedom (RYF) hardware certification program, whether this means adapting an existing one from a manufacturer, or even contracting its production ourselves...

The free software community has made some good strides in the area of freeing ebooks. Denis "GNUToo" Carikli has composed a page on the LibrePlanet wiki documenting the components of ebook readers and other single-board computers; this has laid the groundwork for our investigation into releasing an ebook reader, and is one of the wiki's more active projects. Also, earlier in the year, a user on the libreplanet-discuss mailing list documented their project to port Parabola GNU/Linux to the reMarkable tablet, thereby creating a free ebook reader at the same time. It's steps like these that make us feel confident that we can bring an ebook reader that respects its user's freedom to the public, both in terms of hardware and the software that's shipped with the device...

If the FSF is successful in landing RYF certification on an ebook reader, which I fully believe we will be, we can ensure that users will have the ability to read digitally while retaining their freedom.

It's up to all of us to make sure we have the right to read, by avoiding ebook DRM in each and every case, and celebrating free (as in freedom) resources like Wikibooks and the Internet Archive, bridging the divide between the movement for free software and the movement for free culture, empowering both readers and computer users around the globe.

The article also warns that ebook DRM has gotten more restrictive over the years. "It's common for textbooks to now require a constant and uninterrupted Internet connection, and that they load only a discrete number of pages at a time... Even libraries fell victim to 'lending' services like Canopy, putting an artificial lock on digital copies of books, the last place it makes sense for them to be."
Earth

Huge 'Eye of Fire' Burning in Gulf of Mexico Extinguished (reuters.com) 39

"The Gulf of Mexico was on fire," quips a headline at Jalopnik. Long-time Slashdot reader phalse phace explains that "A rupture in an underwater gas pipeline operated by Mexico's state-owned oil company Petroleos Mexicanos (or Pemex) caused a fire to erupt in the ocean west of the Yucatan Peninsula."

Reuters reports: Bright orange flames jumping out of water resembling molten lava was dubbed an "eye of fire" on social media due to the blaze's circular shape. The fire took more than five hours to fully put out, according to Pemex.

The fire began in an underwater pipeline that connects to a platform at Pemex's flagship Ku Maloob Zaap oil development, the company's most important, four sources told Reuters earlier... Pemex said no injuries were reported, and production from the project was not affected after the gas leak ignited around 5:15 a.m. local time... Angel Carrizales, head of Mexico's oil safety regulator ASEA, wrote on Twitter that the incident "did not generate any spill." He did not explain what was burning on the water's surface.

Ku Maloob Zaap is Pemex's biggest crude oil producer, accounting for more than 40% of its nearly 1.7 million barrels of daily output. "The turbomachinery of Ku Maloob Zaap's active production facilities were affected by an electrical storm and heavy rains," according to a Pemex incident report shared by one of Reuters' sources.

Jalopnik supplies some context: Right now, there's no confirmed cause of the leak, but Pemex has said it'll be investigating what happened. The main issue is, this isn't the first time something like this has happened under Pemex's watch. It has caused massive oil spills, deadly explosions, and tanker fires that have been responsible for the deaths of hundreds of people dating back to the late 1970s. The company has also racked up a fairly significant list of alleged human rights violations at its facilities, with a long history of denying unionization and punishing those who attempted to unionize.
Hardware

Qualcomm's New CEO Eyes Dominance in the Laptop Markets (reuters.com) 28

Qualcomm's new chief thinks that by next year his company will have just the chip for laptop makers wondering how they can compete with Apple, which last year introduced laptops using a custom-designed central processor chip that boasts longer battery life. From a report: Longtime processor suppliers Intel and Advanced Micro Devices have no chips as energy efficient as Apple's. Qualcomm Chief Executive Cristiano Amon told Reuters on Thursday he believes his company can have the best chip on the market, with help from a team of chip architects who formerly worked on the Apple chip but now work at Qualcomm. In his first interview since taking the top job at San Diego, California-based Qualcomm, Amon also said the company is also counting on revenue growth from China to power its core smartphone chip business despite political tensions. "We will go big in China," he said, noting that U.S. sanctions on Huawei give Qualcomm an opportunity to generate a lot more revenue.
Data Storage

Another Exploit Hits WD My Book Live Owners (tomshardware.com) 50

While it will come as no comfort to those who had their Western Digital My Book Live NAS drives wiped last week, it seems they were attacked by a combination of two exploits, and possibly caught in the fallout of a rivalry between two different teams of hackers. Tom's Hardware reports: Initially, after the news broke on Friday, it was thought a known exploit from 2018 was to blame, allowing attackers to gain root access to the devices. However, it now seems that a previously unknown exploit was also triggered, allowing hackers to remotely perform a factory reset without a password and to install a malicious binary file. A statement from Western Digital, updated today, reads: "My Book Live and My Book Live Duo devices are under attack by exploitation of multiple vulnerabilities present in the device ... The My Book Live firmware is vulnerable to a remotely exploitable command injection vulnerability when the device has remote access enabled. This vulnerability may be exploited to run arbitrary commands with root privileges. Additionally, the My Book Live is vulnerable to an unauthenticated factory reset operation which allows an attacker to factory reset the device without authentication. The unauthenticated factory reset vulnerability [has] been assigned CVE-2021-35941."

Analysis of WD's firmware suggests code meant to prevent the issue had been commented out, preventing it from running, by WD itself, and an authentication type was not added to component_config.php which results in the drives not asking for authentication before performing the factory reset. The question then arises of why one hacker would use two different exploits, particularly an undocumented authentication bypass when they already had root access through the command injection vulnerability, with venerable tech site Ars Technica speculating that more than one group could be at work here, with one bunch of bad guys trying to take over, or sabotage, another's botnet.
Western Digital advises users to disconnect their device(s) from the internet. They are offering data recovery services beginning in July, and a trade-in program to switch the obsolete My Book Live drives for more modern My Cloud devices.
Data Storage

Intel's New Optane SSD P5800X Is the Fastest SSD Drive Ever Made (hothardware.com) 24

MojoKid writes: Intel recently shifted its storage strategy somewhat and is now catering its flagship Optane SSD P5800X, which was formerly targeted solely at data centers, to workstation users. The Optane SSD P5800X is based on a proprietary PCIe Gen 4x4 native controller and it features Intel's second-generation Intel Optane memory. In terms of performance, in some of the first benchmark numbers to hit the web, the drive is an absolute beast in the workloads that matter most for the vast majority of workstation users and enthusiasts. Random reads and writes are exceptionally good and access times at low queue depths are best-of-class. The Optane SSD P5800X's sequential transfers, while strong, aren't quite on the same level as some of today's fastest NAND-based PCIe 4 solid state drives, but they do exceed 7GB/s, which is still extremely fast. Overall, it's essentially the fastest SSD ever made. Endurance is off the charts too. However, all of that SSD horsepower comes at a price though, at a little over $2.50 per Gig and over $2,000 for an 800GB drive. With capacities of 400GB, 800GB and 1.6TB, the new Intel Optane SSD P5800X is shipping and available now.
Windows

What Windows 11 Means: We'll Be Stuck With Millions of Windows 10 Zombies (zdnet.com) 289

An anonymous reader quotes a report from ZDNet, written by David Gewirtz: Windows 11 won't run on many current Windows machines. We do know (we think) that only certain processors will be supported, only 64-bit machines will be supported, and only machines with a TPM chip will run Windows 11. What does that mean for you and me? It means that many machines will be left behind. They will become the walking dead, unable to upgrade, but still shambling along.

My biggest concern, of course, is security. For those who pay, Windows 7 security updates will be available through January 2023. It's not easy for smaller businesses and individuals to get that support, but it's there. Mainstream support for Windows 8 and 8.1 is over, but extended support is available through January 2023. WIndows 10 support, especially for those abandoned by Windows 11's restrictive update policy, will end in October 2025, but Ed tells me he thinks that will be extended. That's good news because there are roughly 1.3 billion Windows 10 devices out there. How many won't be able to upgrade? That's not a question we know the answer to now, but [ZDNet's guru of all things Windows, Ed Bott] tells me he's working on constructing an estimate, so keep checking back into his column.

Some machines will be left behind despite owners' preferences. Many others will remain behind because their owners either don't know how, don't care, or refuse to upgrade. Others can't upgrade, because they're reliant on legacy software that only runs on older machines. No matter the reason, expect millions of Windows 10 machines to be in the wild for a decade or more -- each an ever-increasing magnet for malware, each an ever-increasing danger to other machines they might encounter and infect. All that brings me back to my machines and yours. Even if you and I are stuck on Windows 10, we still have a good four years of support. That gives us four years to come up with a replacement plan, which is more than enough time. For those of you who will choose "hell no, I won't go," it gives you time to ascertain security risks of running unprotected, and find ways to protect those legacy machines.

Hardware

Quantum-Computing Startup Rigetti To Offer Modular Processors (arstechnica.com) 10

An anonymous reader quotes a report from Ars Technica: A quantum-computing startup announced Tuesday that it will make a significant departure in its designs for future quantum processors. Rather than building a monolithic processor as everyone else has, Rigetti Computing will build smaller collections of qubits on chips that can be physically linked together into a single functional processor. This isn't multiprocessing so much as a modular chip design. The decision has several consequences, both for Rigetti processors and quantum computing more generally. We'll discuss them below.

Rigetti's computers rely on a technology called a "transmon," based on a superconducting wire loop linked to a resonator. That's the same qubit technology used by larger competitors like Google and IBM. Transmons are set up so that the state of one can influence that of its neighbors during calculations, an essential feature of quantum computing. To an extent, the topology of connections among transmon qubits is a key contributor to the machine's computational power. Two other factors that currently hold back performance are the error rate of individual qubits and the qubit count. Scaling up the qubit count can boost the computational power of a processor -- but only if all the added qubits are of sufficiently high quality that the error rate doesn't limit the ability to perform accurate computations. Once qubit counts reach the thousands, error correction becomes possible, which changes the process significantly. At the moment, though, we're stuck with less than 100 qubits. So this is change is still in the indefinite future.

For Rigetti, the ability to merge several smaller processors -- which it has already shown it can produce -- into a single larger one should let it run up its qubit count relatively rapidly. In today's announcement, the company expects that an 80-qubit processor will be available within the next few months. (For context, IBM's roadmap includes plans for a 127-qubit processor sometime this year.) The other advantage of moving away from a monolithic design is that most chips tend to have one or more qubits that are either defective or have an unacceptably high error rate. By going with a modular design, the consequences of that are reduced. Rigetti can manufacture a large collection of modules and assemble chips from those with the fewest defects. Alternately, the company can potentially select for the modules that have qubits with low error rates and build the equivalent of an all-star processor. The reduced error rate could possibly offset the impact of a lower qubit count.

Australia

Australian Regulator Says Apple's AirTag Batteries Are Too Easy For Kids To Access (theverge.com) 94

Australia's Competition and Consumer Commission (ACCC) has warned buyers to keep Apple AirTags away from young children, saying it's too easy to remove a potentially dangerous battery from the tiny location trackers. The Verge: An ACCC statement cautions that AirTags' small lithium button batteries can severely injure children if they leak or become stuck in a child's throat, nose, or ear. It raises particular concerns about Apple's design making those batteries too readily accessible: "The ACCC is concerned that the AirTag's battery compartment could be accessible to young children, and the button battery removed with ease. In addition, the AirTag battery compartment's lid does not always secure fully on closing, and a distinctive sound plays when an AirTag's lid is being closed, suggesting the lid is secure when it may not be."

As 9to5Mac notes, Australian retailer Officeworks removed AirTags from its shelves last month, citing safety concerns. Apple has since added a new warning label to AirTag packaging, and the ACCC quotes Apple as saying that AirTags are "designed to meet international child safety standards." The agency states that it's currently discussing safety issues with Apple. [...] Australia recently introduced new, stricter overall safety rules for devices using button batteries, and Apple isn't the only company in the ACCC's sights. Its statement says that it's "assessing whether there are issues with button battery safety in similar Bluetooth tracking devices," and companies that don't meet the new standards will have until June 2022 to comply.

Intel

Intel To Disable TSX By Default On More CPUs With New Microcode (phoronix.com) 46

Intel is going to be disabling Transactional Synchronization Extensions (TSX) by default for various Skylake through Coffee Lake processors with forthcoming microcode updates. Phoronix reports: Transactional Synchronization Extensions (TSX) have been around since Haswell for hardware transactional memory support and going off Intel's own past numbers can be around 40% faster in specific workloads or as much 4~5 times faster in database transaction benchmarks. TSX issues have been found in the past such as a possible side channel timing attack that could lead to KASLR being defeated and CVE-2019-11135 (TSX Async Abort) for an MDS-style flaw. Now in 2021 Intel is disabling TSX by default across multiple families of Intel CPUs from Skylake through Coffee Lake. [...] The Linux kernel is preparing for this microcode change as seen in the flow of new patches this morning for the 5.14 merge window.

A memory ordering issue is what is reportedly leading Intel to now deprecate TSX on various processors. There is this Intel whitepaper (PDF) updated this month that outlines the problem at length. As noted in the revision history, the memory ordering issue has been known to Intel since at least before October 2018 but only now in June 2021 are they pushing out microcode updates to disable TSX by default. With forthcoming microcode updates will effectively deprecate TSX for all Skylake Xeon CPUs prior to Stepping 5 (including Xeon D and 1st Gen Xeon Scalable), all 6th Gen Xeon E3-1500m v5 / E3-1200 v5 Skylake processors, all 7th/8th Gen Core and Pentium Kaby/Coffee/Whiskey CPUs prior to 0x8 stepping, and all 8th/9th Gen Core/Pentium Coffee Lake CPUs prior to 0xC stepping will be affected. That ultimately spans from various Skylake steppings through Coffee Lake; it was with 10th Gen Comet Lake and Ice Lake where TSX/TSX-NI was subsequently removed.

In addition to disabling TSX by default and force-aborting all RTM transactions by default, a new CPUID bit is being enumerated with the new microcode to indicate that the force aborting of RTM transactions. It's due to that new CPUID bit that the Linux kernel is seeing patches. Previously Linux and other operating systems applied a workaround for the TSX memory ordering issue but now when this feature is disabled, the kernel can drop said workaround. These patches are coming with the Linux 5.14 cycle and will likely be back-ported to stable too.

The Internet

The Internet Eats Up Less Energy Than You Might Think (nytimes.com) 53

New research by two leading scientists says some dire warnings of environmental damage from technology are overstated. From a report: The giant tech companies with their power-hungry, football-field-size data centers are not the environmental villains they are sometimes portrayed to be on social media and elsewhere. Shutting off your Zoom camera or throttling your Netflix service to lower-definition viewing does not yield a big saving in energy use, contrary to what some people have claimed. Even the predicted environmental impact of Bitcoin, which does require lots of computing firepower, has been considerably exaggerated by some researchers.

Those are the conclusions of a new analysis by Jonathan Koomey and Eric Masanet, two leading scientists in the field of technology, energy use and the environment. Both are former researchers at the Lawrence Berkeley National Laboratory. Mr. Koomey is now an independent analyst, and Mr. Masanet is a professor at the University of California, Santa Barbara. (Mr. Masanet receives research funding from Amazon.) They said their analysis, published earlier this month as a commentary article in Joule, a scientific journal, was not necessarily intended to be reassuring. Instead, they said, it is meant to inject a dose of reality into the public discussion of technology's impact on the environment. The surge in digital activity spurred by the Covid-19 pandemic, the scientists said, has fueled the debate and prompted dire warnings of environmental damage. They are concerned that wayward claims, often amplified by social media, could shape behavior and policy.

Robotics

Do Security Robots Reduce Crime? (nbcnews.com) 50

Westland Real Estate Group patrols its 1,000-unit apartment complex in Las Vegas with "a conical, bulky, artificial intelligence-powered robot" standing just over 5 feet tall, according to NBC News. Manufactured by Knightscope, the robot is equipped with four internal cameras capturing a constant 360-degree view, and can also scan and record license plates (as well as the MAC addresses of cellphones). But is it doing any good? As more government agencies and private sector companies resort to robots to help fight crime, the verdict is out about how effective they are in actually reducing it. Knightscope, which experts say is the dominant player in this market, has cited little public evidence that its robots have reduced crime as the company deploys them everywhere from a Georgia shopping mall to an Arizona development to a Nevada casino. Knightscope's clients also don't know how much these security robots help. "Are we seeing dramatic changes since we deployed the robot in January?" Dena Lerner, the Westland spokesperson said. "No. But I do believe it is a great tool to keep a community as large as this, to keep it safer, to keep it controlled."

For its part, Knightscope maintains on its website that the robots "predict and prevent crime," without much evidence that they do so. Experts say this is a bold claim. "It would be difficult to introduce a single thing and it causes crime to go down," said Ryan Calo, a law professor at the University of Washington, comparing the Knightscope robots to a "roving scarecrow." Additionally, the company does not provide specific, detailed examples of crimes that have been thwarted due to the robots.

The robots are expensive — they're rented out at about $70,000-$80,000 a year — but growth has stalled for the two years since 2018, and over four years Knightscope's total clients actually dropped from 30 to just 23. (Expenses have now risen — partly because the company is now doubling its marketing budget.)

There's also a thermal scanning feature, but Andrew Ferguson, a law professor at American University, still called these robots an "expensive version of security theater." And NBC News adds that KnightScope's been involved "in both tragic and comical episodes." In 2016, a K5 roaming around Stanford Shopping Center in Palo Alto, California, hit a 16-month-old toddler, bruising his leg and running over his foot. The company apologized, calling it a "freakish accident," and invited the family to visit the company's nearby headquarters in Mountain View, which the family declined. The following year, another K5 robot slipped on steps adjacent to a fountain at the Washington Harbour development in Washington, D.C., falling into the water. In October 2019, a Huntington Park woman, Cogo Guebara, told NBC News that she tried reporting a fistfight by pressing an emergency alert button on the HP RoboCop itself, but to no avail. She learned later the emergency button was not yet connected to the police department itself... [The northern California city] Hayward dispatched its robot in a city parking garage in 2018. The following year, a man attacked and knocked over the robot. Despite having clear video and photographic evidence of the alleged crime, no one was arrested, according to Adam Kostrzak, the city's chief information officer.
The city didn't renew its contract "due to the financial impact of Covid-19 in early 2020," the city's CIO tells NBC News. But the city had already spent over $137,000 on the robot over two years.
Data Storage

Western Digital Blames Remotely-Installed Trojans for Wiping 'My Book' Storage Devices (westerndigital.com) 103

Some users who bought an external hard drive that's delightfully shaped like a book ended up with "terabytes' worth of data, years of memories and months of hard work vanished in an instant," reports Engadget. (Though according to a new statement from Western Digital, "Some customers have reported that data recovery tools may be able to recover data from affected devices, and we are currently investigating the effectiveness of these tools.")

But why were these deletions from "My Books" happening in the first place? A Slashdot reader shares the first clue from Engadget's report: Several owners looked into the cause of the issue and determined that their devices were wiped after receiving a remote command for a factory reset. The commands starting going out at 3PM on Wednesday and lasted throughout the night. One user posted a copy of their log showing how a script was run to shut down their storage device for a factory restore.
Friday Western Digital's statement offered much more detail: Western Digital has determined that some My Book Live and My Book Live Duo devices are being compromised through exploitation of a remote command execution vulnerability... The log files we have reviewed show that the attackers directly connected to the affected My Book Live devices from a variety of IP addresses in different countries. This indicates that the affected devices were directly accessible from the Internet, either through direct connection or through port forwarding that was enabled either manually or automatically via UPnP.

Additionally, the log files show that on some devices, the attackers installed a trojan with a file named ".nttpd,1-ppc-be-t1-z", which is a Linux ELF binary compiled for the PowerPC architecture used by the My Book Live and Live Duo. A sample of this trojan has been captured for further analysis and it has been uploaded to VirusTotal.

Our investigation of this incident has not uncovered any evidence that Western Digital cloud services, firmware update servers, or customer credentials were compromised. As the My Book Live devices can be directly exposed to the internet through port forwarding, the attackers may be able to discover vulnerable devices through port scanning...

At this time, we recommend you disconnect your My Book Live and My Book Live Duo from the Internet to protect your data on the device by following these instructions on our Knowledge Base. We have heard customer concerns that the current My Cloud OS 5 and My Cloud Home series of devices may be affected. These devices use a newer security architecture and are not affected by the vulnerabilities used in this attack. We recommend that eligible My Cloud OS 3 users upgrade to OS 5 to continue to receive security updates for your device

China

US Bans Import of Solar Panels From Chinese Company Accused of Forced Labor (msn.com) 190

The Washington Post reports that this week the U.S. government "banned the import of solar panels and other goods made with materials produced by a Chinese company that it accused of using forced laborers from China's Xinjiang region, a move likely to complicate the U.S. push toward clean energy." U.S. Customs and Border Protection issued a withhold release order Thursday barring silicon-based products from the company, Hoshine Silicon, which operates from plants in Xinjiang that have been connected to coercive state labor programs targeting Uyghurs and other minorities, as The Post reported on Thursday.

The order could have widespread impact on the solar industry, which is dominated by Chinese suppliers that source materials from Hoshine, the world's largest producer of metallurgical-grade silicon, a key raw material in solar panels. "Almost the complete solar industry is affected by Hoshine," said Johannes Bernreuter, a research analyst in Germany who studies the solar supply chain... By banning only Hoshine imports, CBP stopped short of targeting Xinjiang producers of another key solar ingredient, polysilicon. Those producers have also been connected to coercive labor programs targeting Uyghurs. In a note to investors, Height Securities described the ban "as a substantive but measured first shot across the bow" by the Biden administration, "which needs solar industry support" as it tries to balance rooting out forced labor in U.S. supply chains and an environmental agenda...

[I]ndustry experts said enforcement could be a challenge given the complexity of the solar supply chain and Hoshine's dominance in the industry. Hoshine has produced metallurgical-grade silicon for at least eight of the world's largest polysilicon makers, according to the company's public statements and annual reports. Analysts say that together these firms account for nearly all of the world's supply of solar-grade polysilicon. The move could also undermine U.S. hopes of cooperating with China on climate change, one of few areas of potential collaboration between the two countries increasingly at loggerheads over human rights and investigating the origin of the covid-19 pandemic... Industry experts say it would be safer for U.S. agents to assume all silicon products entering the United States from China contain at least some material sourced from Hoshine, whose metallurgical-grade silicon is used in a wide range of consumer products, including electronics, cars, chemicals and sealants...

The import ban was the most prominent of several measures the Biden administration took Thursday against China's solar-product suppliers. The Commerce Department also added several Chinese polysilicon producers to an export black list, which bars U.S. entities from exporting technology or other goods to the firms without first obtaining a government license.

Windows

Windows Users Surprised by Windows 11's Short List of Supported CPUs (theverge.com) 236

Slashdot reader thegarbz writes: While a lot of focus has been on the TPM requirements for Windows 11, Microsoft has since updated its documentation to provide a complete list of supported processors. At present the list includes only Intel 8th Generation Core processors or newer, and AMD Ryzen Zen+ processors or newer, effectively limiting Windows 11 to PC less than 4-5 years old.

Notably absent from the list is the Intel Core i7-7820HQ, the processor used in Microsoft's current flagship $3500+ Surface Studio 2. This has prompted many threads on Reddit from users angry that their (in some cases very new) Surface PC is failing the Windows 11 upgrade check.

The Verge confirms: Windows 11 will only support 8th Gen and newer Intel Core processors, alongside [Intel's 2016-era] Apollo Lake and newer Pentium and Celeron processors. That immediately rules out millions of existing Windows 10 devices from upgrading to Windows 11... Windows 11 will also only support AMD Ryzen 2000 and newer processors, and 2nd Gen or newer [AMD] EPYC chips. You can find the full list of supported processors on Microsoft's site...

Originally, Microsoft noted that CPU generation requirements are a "soft floor" limit for the Windows 11 installer, which should have allowed some older CPUs to be able to install Windows 11 with a warning, but hours after we published this story, the company updated that page to explicitly require the list of chips above.

Many Windows 10 users have been downloading Microsoft's PC Health App (available here) to see whether Windows 11 works on their systems, only to find it fails the check... This is the first significant shift in Windows hardware requirements since the release of Windows 8 back in 2012, and the CPU changes are understandably catching people by surprise.

Microsoft is also requiring a front-facing camera for all Windows 11 devices except desktop PCs from January 2023 onwards.

"In order to run Windows 11, devices must meet the hardware specifications," explains Microsoft's official compatibility page for Windows 11.

"Devices that do not meet the hardware requirements cannot be upgraded to Windows 11."
Data Storage

Xbox's DirectStorage API Will Speed Up Gaming PCs On Windows 11 Only (pcgamesn.com) 93

An anonymous reader quotes a report from PCGamesN: Microsoft has finally debuted Windows 11, and it's not just packing auto HDR and native Android apps. The long-teased DirectStorage API that's meant to cut down loading times on gaming PCs much in the same way the Xbox Velocity Architecture speeds things up on Microsoft's consoles is on its way, and it won't be coming to Windows 10 like we originally thought. The Windows 11 exclusive feature improves communication between your storage device and graphics card, allowing assets to load quicker without having to pass through the CPU first. Naturally, this means more time spent gaming and less time reading the same hints as you move from area to area.

It'll work best with systems that are dubbed 'DirectStorage Optimized', containing the right hardware and drivers for the job. If you're more of the DIY type that prefers to build the best gaming PC yourself, requirements demand an NVMe SSD with 1TB of storage or more. PCIe 4.0 NVMe SSDs and the latest GPUs from Nvidia and AMD will offer a better experience, but DirectStorage will still work with older standards like the third generation PCIe 3.0 -- you won't have much luck with 2.5-inch SATA drives, though. DirectStorage will only work with games built using DirectX 12, so there's no telling how many titles will support the feature when you upgrade to Windows 11 for free later this year.

Data Storage

WD My Book Users Wake Up To Find Their Data Deleted (arstechnica.com) 3

PuceBaboon writes: Ars Technica is reporting that some owners of Western Digital's My Book network-connected disk drives are experiencing data loss on their devices. The as yet unverified problem appears to be an externally initiated factory-reset, resulting in a loss of all existing data. At this early stage, Western Digital is warning users that they should disconnect their devices from the internet to protect their data. A thread on Western Digital's support forum alerted Ars Technica of the problem. Western Digital representatives write in an email: The incident is under active investigation from Western Digital. We do not have any indications of a breach or compromise of Western Digital cloud services or systems. We have determined that some My Book Live devices have been compromised by a threat actor. In some cases, this compromise has led to a factory reset that appears to erase all data on the device. The My Book Live device received its final firmware update in 2015. At this time, we are recommending that customers disconnect their My Book Live devices from the Internet to protect their data on the device. We have issued the following statement to our customers and will provide updates to this thread when they are available: https://community.wd.com/t/action-required-on-my-book-live-and-my-book-live-duo/268147
UPDATE (6/26): Western Digital wrote Friday that "Some customers have reported that data recovery tools may be able to recover data from affected devices, and we are currently investigating the effectiveness of these tools." After reviewing logs from their affected customers, the company now believes the affected devices were directly accessible from the Internet, allowing attackers to remotely install a malicious Trojan file.

"Our investigation of this incident has not uncovered any evidence that Western Digital cloud services, firmware update servers, or customer credentials were compromised. As the My Book Live devices can be directly exposed to the internet through port forwarding, the attackers may be able to discover vulnerable devices through port scanning."
Graphics

Open Source AMD FidelityFX Super Resolution Impresses In PC Game Tests (hothardware.com) 35

MojoKid writes: AMD's FidelityFX Super Resolution (FSR) PC graphics up-scaling technology is ready for prime-time and the company has allowed members of the press to showcase performance and visuals of the tech in action with a number of game engines. AMD FidelityFX Super Resolution is vendor-agnostic and doesn't require specialized hardware to function like NVIDIA DLSS, which relies on Tensor cores on-board NVIDIA Turing or Ampere GPUs to accelerate neural network models that have been specifically trained on game engines. In contrast, AMD FSR utilizes more traditional spatial upscaling to create a super resolution image from a single input frame, not multiple frames. AMD FSR then employs a library of open-source algorithms that work on sharpening both image edge and texture detail. In game testing at HotHardware, frame rates can jump dramatically with little to no perceptible reduction in image quality, and the technology even works on many NVIDIA GPUs as well. There are currently 19 titles that are available or planned with support for AMD FSR, but with the open nature of the technology and cross-GPU compatibility, game developers theoretically should have significant incentive for adoption to breath new performance into their game titles.

Slashdot Top Deals