×
Security

'Vulkan Files' Leak Reveals Putin's Global and Domestic Cyberwarfare Tactics (theguardian.com) 42

"The Gaurdian reports on a document leak from Russian cyber 'security' company Vulkan," writes Slashdot reader Falconhell. From the report: Inside the six-storey building, a new generation is helping Russian military operations. Its weapons are more advanced than those of Peter the Great's era: not pikes and halberds, but hacking and disinformation tools. The software engineers behind these systems are employees of NTC Vulkan. On the surface, it looks like a run-of-the-mill cybersecurity consultancy. However, a leak of secret files from the company has exposed its work bolstering Vladimir Putin's cyberwarfare capabilities.

Thousands of pages of secret documents reveal how Vulkan's engineers have worked for Russian military and intelligence agencies to support hacking operations, train operatives before attacks on national infrastructure, spread disinformation and control sections of the internet. The company's work is linked to the federal security service or FSB, the domestic spy agency; the operational and intelligence divisions of the armed forces, known as the GOU and GRU; and the SVR, Russia's foreign intelligence organization.

One document links a Vulkan cyber-attack tool with the notorious hacking group Sandworm, which the US government said twice caused blackouts in Ukraine, disrupted the Olympics in South Korea and launched NotPetya, the most economically destructive malware in history. Codenamed Scan-V, it scours the internet for vulnerabilities, which are then stored for use in future cyber-attacks. Another system, known as Amezit, amounts to a blueprint for surveilling and controlling the internet in regions under Russia's command, and also enables disinformation via fake social media profiles. A third Vulkan-built system -- Crystal-2V -- is a training program for cyber-operatives in the methods required to bring down rail, air and sea infrastructure. A file explaining the software states: "The level of secrecy of processed and stored information in the product is 'Top Secret'."

Facebook

Meta Wants EU Users To Apply For Permission To Opt Out of Data Collection (arstechnica.com) 27

Meta announced that starting next Wednesday, some Facebook and Instagram users in the European Union will for the first time be able to opt out of sharing first-party data used to serve highly personalized ads, The Wall Street Journal reported. The move marks a big change from Meta's current business model, where every video and piece of content clicked on its platforms provides a data point for its online advertisers. Ars Technica reports: People "familiar with the matter" told the Journal that Facebook and Instagram users will soon be able to access a form that can be submitted to Meta to object to sweeping data collection. If those requests are approved, those users will only allow Meta to target ads based on broader categories of data collection, like age range or general location. This is different from efforts by other major tech companies like Apple and Google, which prompt users to opt in or out of highly personalized ads with the click of a button. Instead, Meta will review objection forms to evaluate reasons provided by individual users to end such data collection before it will approve any opt-outs. It's unclear what cause Meta may have to deny requests.

A Meta spokesperson told Ars that Meta is not sharing the objection form publicly at this time but that it will be available to EU users in its Help Center starting on April 5. That's the deadline Meta was given to comply with an Irish regulator's rulings that it was illegal in the EU for Meta to force Facebook and Instagram users to give consent to data collection when they signed contracts to use the platforms. Meta still plans to appeal those Irish Data Protection Commission (DPC) rulings, believing that its prior contract's legal basis complies with the EU's General Data Protection Regulation (GDPR). In the meantime, though, the company must change the legal basis for data collection. Meta announced in a blog post today that it will now argue that it does not need to directly obtain user consent because it has a "legitimate interest" to collect data to operate its social platforms. "We believe that our previous approach was compliant under GDPR, and our appeal on both the substance of the rulings and the fines continues," Meta's blog said. "However, this change ensures that we comply with the DPC's decision."

China

ByteDance-Owned Instagram Rival Lemon8 Hits the US App Store's Top 10 (techcrunch.com) 11

An anonymous reader quotes a report from TechCrunch: As U.S. lawmakers move forward with their plans for a TikTok ban or forced sale, the app's Chinese parent company ByteDance is driving another of its social platforms into the Top Charts of the U.S. App Store. ByteDance-owned app Lemon8, an Instagram rival that describes itself as a "lifestyle community," jumped into the U.S. App Store's Top Charts on Monday, becoming the No. 10 Overall app, across both apps and games. Today, it's ranked No. 9 on the App Store's Top Apps chart, excluding games. This is a dramatic move for the little-known app and one that points to paid user acquisition efforts powering this surge. Prior to yesterday, the Lemon8 app had never before ranked in the Top 200 Overall Charts in the U.S., according to app store intelligence provided to TechCrunch by data.ai.

The firm confirms that such a fast move from being an unranked app to being No. 9 among the top free apps in the U.S. -- ahead of YouTube, WhatsApp, Gmail and Facebook -- implies a "significant" and "recent" user acquisition push on the app publisher's part. Unfortunately, because the app is so new to the App Store's Top Charts, third-party app analytics firms don't yet have precise data on Lemon8's U.S. installs, or how those installs have recently changed over the past few days. [...] According to app intelligence provider Apptopia's data, Lemon8 debuted on both iOS and Android in March 2020 and has since gained 16 million global downloads, with Japan as its top market, accounting for 38% of its total installs. While the firm also doesn't have a figure for its U.S. installs, it was able to estimate the app currently has 4.25 million monthly active users.
TechCrunch believes ByteDance may be leveraging TikTok to drive app installs of Lemon8. "Over on TikTok, we noticed a number of creators recently began posting about Lemon8, with many new videos appearing in just the past 24 hours," reports TechCrunch. "Concerningly, many of their reviews are extremely positive but are not marked as sponsored content. [...] In fact, some creators even said they're getting the app in case TikTok gets banned."
Businesses

Exxon's Climate Opponents Were Infiltrated by Massive Hacking-for-Hire Operation (wsj.com) 37

An anonymous reader shares a report: In the midst of perpetrating what federal prosecutors say was a massive corporate hacking campaign, Israeli private detective Aviram Azari in 2017 received welcome news. A group of hackers in India wrote him to say they had successfully infiltrated the email and social-media accounts of a group of environmental activists campaigning against Exxon. "On a happy note I would like to report some success below: Project Name Rainbow," the hackers wrote in electronic messages that were viewed by The Wall Street Journal. The messages included evidence of the successful intrusions, including screenshots of compromised email inboxes.

The messages along with court records reveal new details about the hacking campaign, including that thousands of individuals and companies were targeted and at least some of the attacks resulted in the hackers successfully gaining access to the private accounts of the victims and obtaining their passwords. Among the targets was the Rockefeller Family Fund, a charity created by some of the heirs of John D. Rockefeller, who founded Exxon's forebear Standard Oil. The fund has for years been involved in campaigns arguing that Exxon hid from the public the full extent of what it knew internally about climate change and the role fossil fuels played in causing it.

Social Networks

Senator Rand Paul Opposes TikTok Ban Push in Congress (reuters.com) 138

Republican Senator Rand Paul on Wednesday opposed efforts in Congress to ban popular Chinese-owned social media app TikTok, which is used by more than 150 million Americans. From a report: A small but growing number of Democrats and Republicans have raised concerns, citing free speech and other issues and have objected to legislation targeting TikTok as overly broad. Republican Senator Josh Hawley said this week he hoped to get unanimous consent for a TikTok ban bill. "Congressional Republicans have come up with a national strategy to permanently lose elections for a generation: Ban a social media app called TikTok that 94 million, primarily young Americans, use," Paul said in an opinion piece published Wednesday in Louisville, Kentucky's Courier-Journal. "Before banning TikTok, these censors might want to discover that China's government already bans TikTok. Hmmm ... do we really want to emulate China's speech bans?" Paul added: "If you don't like TikTok or Facebook or YouTube, don't use them. But don't think any interpretation of the Constitution gives you the right to ban them."
Japan

Japan Lawmakers Eye Ban on TikTok, Others If Used Improperly (reuters.com) 22

A group of Japan's ruling Liberal Democratic Party (LDP) lawmakers plans to compile a proposal next month urging the government to ban social networking services such as TikTok if they are used for disinformation campaigns, an LDP lawmaker said on Monday. From a report: Many U.S. lawmakers are calling on the Biden administration to ban the popular Chinese-owned social media app, alleging the app could be used for data collection, content censorship and harm to children's mental health. "If it's verified that an app has been intentionally used by a certain party of a certain country for their influence operations with malice ..., promptly halting the service should be considered," Norihiro Nakayama told Reuters in an interview. "Making it clear that operations can be halted will help keep app operators in check as it means TikTok's 17 million users (in Japan), for example, will lose their access. It will also lead to sense of security for users," Nakayama said. Nakayama, a senior member of a ruling party lawmakers' group looking into ways to enhance Japan's economic security, said that proposal will not be targeting at any particular platform.
Government

Instead of Banning TikTok, Should We Regulate It Aggressively? (msnbc.com) 88

"TikTok CEO Shou Zi Chew testified before the House Energy and Commerce Committee Thursday about safety and national security concerns surrounding his social media behemoth," writes MSNBC, adding "He was not well received." Given what we know about how Big Tech abuses data, about how China's authoritarian government systematically embraces surveillance as a tool of social control, and about the increasingly adversarial geopolitical relationship between the U.S. and China, it's not sinophobic to ask questions about how to guard against TikTok's misuse. It's common sense. While a ban is probably too drastic and may fail to solve all the issues at hand, regulating the company is sensible. Fortunately, one of the key ways to address some of the concerns posed by TikTok — restricting all companies' capacity to collect data on Americans — could help us solve problems with online life that extends well beyond this social media platform....

[Evan Greer, the director at Fight for the Future, a digital rights organization], believes members of Congress laser focused on TikTok are "on a sidequest" in the scheme of a bigger crisis of surveillance of online life; Greer points to the American Data Privacy and Protection Act as a potential solution. That law would put in place strong data minimization policies, strictly limiting how and how much data companies can collect on people online. It also would deal a huge blow to the power of the algorithms of TikTok and other social media apps because their content recommendation relies on collecting huge amounts of data about its users. The passage of that act would force any company operating in the U.S., not just TikTok, to collect far less data — and reduce all social media companies' capacities to shape the flow of information through algorithmic amplification.

In addition to privacy legislation, the Federal Trade Commission could play a more aggressive role in creating and enforcing rules around commercial surveillance, Greer pointed out. TikTok raises legitimately tricky questions about national security. But it's not the only social media company that does, and national security concerns aren't the only reason to rethink the freedom we've given to social media companies in our society. Any time a powerful actor has vast control over the flow of information, it should be scrutinized as a possible source of exploitation, censorship and manipulation — and, when appropriate, regulated. TikTok should serve as the springboard for that conversation, not the beginning and ending of it.

CNN points out that TikTok isn't the only Chinese-owned platform finding viral success in America. "Of the top 10 most popular free apps on Apple's U.S. app store, four were developed with Chinese technology." Besides TikTok, there's also shopping app Temu, fast fashion retailer Shein and video editing app CapCut, which is also owned by ByteDance.
Duncan Clark, chairman and founder of investment advisory BDA China, tells CNN that these apps could be next.

But writing in the New York Times, the executive director of the Knight First Amendment Institute at Columbia argues that "it's difficult to see how a ban could survive First Amendment review." The Supreme Court and lower courts have held repeatedly that the mere invocation of national security is insufficient to justify the suppression of First Amendment rights. In court, the government will have to introduce evidence that the threats it is addressing are real, not merely conjectural, and that the proposed ban would address those threats. The evidence assembled so far is not likely to be sufficient. All of this will no doubt be frustrating to some policymakers, including to some who are commendably focused on the very real risks that social media companies' practices pose to Americans' privacy and security. But the legitimacy of our democracy depends on the free trade of information and ideas, including across international borders.
Crime

The Tinder Car Heist and the Plot For Revenge (theverge.com) 30

Slashdot reader DevNull127 writes: Is there a dark side to online dating apps like Tinder? "According to the FTC, reports of fraud losses from romance scams topped $1.3 billion in 2022," reports the Verge. The head of the FBI's Portland field office tells them that "Technology gives you this false sense of trust." But the co-founder of the nonprofit Advocating Against Romance Scammers argues it's more than that — that technology "gives criminals a crucial tool to find new victims, and they are definitely getting more brazen overall."

And then the Verge tells the story of a 32-year-old technology entrepreneur and self-proclaimed multimillionaire who didn't see the red flags when a mysterious date on Tinder asked him what kind of car he owned — and told him that when he paid for their hotel room, bring cash...

Yes, he ends up being carjacked at gunpoint in a Tinder car-theft scheme by a largely transient con artist. But then he posts to his 245,000 followers on Instagram — hiring a marketing company to manage a car-recovery campaign. He hears from fences who offer to sell back his car for $30,000 — along with an alleged police informant. There's good luck and bad luck in this wild tale of car chases, police scanners, a neighborhood they call "Methville," and an attempt to bring accountability to a 21-year-old catfisher and her two 18-year-old acomplices.

But the story ends with the 32-year-old self-proclaimed multimillionaire back on Tinder, looking for another date.

GNU is Not Unix

FSF Honors Emacs Co-Maintainer, 'Replicant' Developer, and Videoconferencing Tool Jami (fsf.org) 6

The Free Software Foundation held their annual LibrePlanet conference last week — and announced that Eli Zaretskii, co-maintainer of GNU Emacs, won their "Advancement of Free Software" award. "He has been a contributor to Emacs for more than thirty years," notes the FSF announcement, "and as co-maintainer, coordinates the work of more than two hundred active contributors. During Zaretskii's tenure as co-maintainer, the Emacs development community has implemented several important new features, including native compilation of the editor's Emacs Lisp backbone into machine code."

Zaretskii was honored with a recorded message from the original author/principal maintainer of GNU Emacs back in 1985, Richard Stallman: "For many years, I was the principal maintainer of GNU Emacs, but then others came along to do the work, and I haven't been heavily involved in Emacs development for many, many years. Nowadays, our principal maintainer of Emacs is extremely diligent and conscientious and has brought about a renaissance in new features and new packages added to Emacs, and the result is very impressive. So I'm happy to give the Free Software Award to Eli Zaretskii, principal maintainer of GNU Emacs. Thank you for your work."

In his recorded acceptance of the award, Zaretskii said, "The truth is my contribution to free software in general and to Emacs development in particular is quite modest, certainly compared to those who won this award before me.... And even my modest achievement as the Emacs developer and lately the co-maintainer would have been impossible without all the other contributors and the Emacs community as a whole. No significant free software project can be developed, maintained, and led forward without participation and support of its members. And Emacs is no exception."

Their award for Outstanding New Free Software Contributor went to Tad (SkewedZeppelin), the chief developer of DivestOS, a fork of Android which removes many proprietary binaries "and which puts freedom, security, and device longevity as its main concerns," according to the FSF's announcement. "Tad has also contributed to the Replicant distribution of Android, a project fiscally sponsored by the FSF."

And their award for Project of Social Benefit went to GNU Jami, a free software videoconferencing tool "that is fully decentralized and encrypted, allowing thousands around the world to communicate in both freedom and security. In contrast to proprietary conferencing programs like Zoom, which are nonfree software, Jami is an official GNU package licensed under the GNU GPLv3+."
Social Networks

TikTok Trackers Embedded in U.S. State-Government Websites, Review Finds (livemint.com) 46

Toronto-based Feroot Security "found that so-called tracking pixels from the TikTok parent company were present in 30 U.S. state-government websites across 27 states," reports the Wall Street Journal, "including some where the app has been banned from state networks and devices." The review was performed in January and February. The presence of that code means that U.S. state governments around the country are inadvertently participating in a data-collection effort for a foreign-owned company, one that senior Biden administration officials and lawmakers of both parties have said could be harmful to U.S. national security and the privacy of Americans.

Administrators who manage government websites use such pixels to help measure the effectiveness of advertising they have purchased on TikTok.... The presence of the TikTok tracking code on government websites underlines the challenge for those who deem the China-owned app a potential data-security threat. Lawmakers in both parties are considering a nationwide ban, but simply uprooting the app from U.S. smartphones wouldn't stop all data-tracking activities....

Feroot found that the average website it studied had more than 13 embedded pixels. Google's were far and away the most common, with 92% of websites examined having some sort of Google tracking pixel embedded. About 50% of the websites the firm examined had Microsoft Corp. or Facebook pixels. TikTok had a presence in less than 10% of sites examined.

Social Networks

France Bans 'Recreational Apps' From Government Staff Phones (apnews.com) 42

France announced Friday it is banning the "recreational" use of TikTok, Twitter, Instagram and other apps on government employees' phones because of concern about insufficient data security measures. Reuters reports: The French Minister for Transformation and Public Administration, Stanislas Guerini, said in a statement that ''recreational" apps aren't secure enough to be used in state administrative services and "could present a risk for the protection of data." The ban will be monitored by France's cybersecurity agency. The statement did not specify which apps are banned but noted that the decision came after other governments took measures targeting TikTok.

Guerini's office said in a message to The Associated Press that the ban also will include Twitter, Instagram, Netflix, gaming apps like Candy Crush and dating apps. Exceptions will be allowed. If an official wants to use a banned app for professional purposes, like public communication, they can request permission to do so. Case in point: Guerini posted the announcement of the ban on Twitter.

Government

Utah Passes Laws Requiring Parental Permission For Teens To Use Social Media (engadget.com) 143

Utah's governor has signed two bills that could upend how teens in the state are able to use social media apps. Engadget reports: Under the new laws, companies like Meta, Snap and TikTok would be required to get parents permission before teens could create accounts on their platforms. The laws also require curfew, parental controls and age verification features. The laws could dramatically change how social platforms handle the accounts of their youngest users. In addition to the parental consent and age verification features, the laws also bar companies "from using a design or feature that causes a minor to have an addiction to the company's social media platform." For now, it's not clear how Utah officials intend to enforce the laws or how they will apply to teenagers' existing social media accounts. Both laws are scheduled to take effect next March.
China

China Reminds US That It Can and Will Kill a Forced TikTok Sale (techcrunch.com) 171

China pushed back against the U.S. government's proposal to force a sale of TikTok on Thursday, rejecting the possible solution to ongoing national security concerns around the app. From a report: TikTok CEO Shou Zi Chew appeared before Congress on Thursday morning, facing questions from U.S. lawmakers that centered around concerns that the Chinese government could leverage the app's data to surveil American citizens or otherwise undermine national interests. In a press conference hours before the hearing began, China's Commerce Ministry spokesperson Shu Jueting weighed in with Beijing's opposition to the Biden administration's proposal. "...Forcing a sale of TikTok will seriously damage the confidence of investors from all over the world, including China, to invest in the United States," she said. "If the news is true, China will firmly oppose it."

The idea to force the company to divest itself of Chinese ownership first surfaced during the Trump administration, culminating in a deal for TikTok to sell its U.S. operations to Oracle in late 2020. At the time, TikTok also rejected an acquisition offer from Microsoft, though ultimately neither company succeeded and the strange arrangement fizzled after a series of successful legal challenges. The deal was shelved indefinitely when the Biden took office the following year, but in recent days the administration has picked up the languishing mission to force a sale. In rejecting the U.S. proposal, which the Committee on Foreign Investment in the U.S. (CFIUS) would spearhead, China is reiterated a point it made during the Trump administration.
Further reading: TikTok CEO says China-based ByteDance employees still have access to some U.S. data.
China

Google Suspends Chinese E-Commerce App Pinduoduo Over Malware Used To Gain Competitive Advantage (krebsonsecurity.com) 12

An anonymous reader quotes a report from KrebsOnSecurity: Google says it has suspended the app for the Chinese e-commerce giant Pinduoduo after malware was found in versions of the app. The move comes just weeks after Chinese security researchers published an analysis suggesting the popular e-commerce app sought to seize total control over affected devices by exploiting multiple security vulnerabilities in a variety of Android-based smartphones. In November 2022, researchers at Google's Project Zero warned about active attacks on Samsung mobile phones which chained together three security vulnerabilities that Samsung patched in March 2021, and which would have allowed an app to add or read any files on the device. Google said it believes the exploit chain for Samsung devices belonged to a "commercial surveillance vendor," without elaborating further. The highly technical writeup also did not name the malicious app in question.

On Feb. 28, 2023, researchers at the Chinese security firm DarkNavy published a blog post purporting to show evidence that a major Chinese ecommerce company's app was using this same three-exploit chain to read user data stored by other apps on the affected device, and to make its app nearly impossible to remove. DarkNavy likewise did not name the app they said was responsible for the attacks. In fact, the researchers took care to redact the name of the app from multiple code screenshots published in their writeup. DarkNavy did not respond to requests for clarification. "At present, a large number of end users have complained on multiple social platforms," reads a translated version of the DarkNavy blog post. "The app has problems such as inexplicable installation, privacy leakage, and inability to uninstall."

On March 3, 2023, a denizen of the now-defunct cybercrime community BreachForums posted a thread which noted that a unique component of the malicious app code highlighted by DarkNavy also was found in the ecommerce application whose name was apparently redacted from the DarkNavy analysis: Pinduoduo. A Mar. 3, 2023 post on BreachForums, comparing the redacted code from the DarkNavy analysis with the same function in the Pinduoduo app available for download at the time. On March 4, 2023, e-commerce expert Liu Huafang posted on the Chinese social media network Weibo that Pinduoduo's app was using security vulnerabilities to gain market share by stealing user data from its competitors. That Weibo post has since been deleted. On March 7, the newly created Github account Davinci1010 published a technical analysis claiming that until recently Pinduoduo's source code included a "backdoor," a hacking term used to describe code that allows an adversary to remotely and secretly connect to a compromised system at will. That analysis includes links to archived versions of Pinduoduo's app released before March 5 (version 6.50 and lower), which is when Davinci1010 says a new version of the app removed the malicious code.
Pinduoduo boasts approximately 900 million monthly active users in China. In August of last year, the Guardian published an article covering the company's plans to expand to the U.S. and take on Amazon.
AI

Researcher Builds 'RightWingGPT' To Highlight Potential Bias In AI Systems (nytimes.com) 224

mspohr shares an excerpt from a New York Times article: When ChatGPT exploded in popularity as a tool using artificial intelligence to draft complex texts, David Rozado decided to test its potential for bias. A data scientist in New Zealand, he subjected the chatbot to a series of quizzes, searching for signs of political orientation. The results, published in a recent paper, were remarkably consistent across more than a dozen tests: "liberal," "progressive," "Democratic." So he tinkered with his own version, training it to answer questions with a decidedly conservative bent. He called his experiment RightWingGPT. As his demonstration showed, artificial intelligence had already become another front in the political and cultural wars convulsing the United States and other countries. Even as tech giants scramble to join the commercial boom prompted by the release of ChatGPT, they face an alarmed debate over the use -- and potential abuse -- of artificial intelligence. [...]

When creating RightWingGPT, Mr. Rozado, an associate professor at the Te Pukenga-New Zealand Institute of Skills and Technology, made his own influence on the model more overt. He used a process called fine-tuning, in which programmers take a model that was already trained and tweak it to create different outputs, almost like layering a personality on top of the language model. Mr. Rozado took reams of right-leaning responses to political questions and asked the model to tailor its responses to match. Fine-tuning is normally used to modify a large model so it can handle more specialized tasks, like training a general language model on the complexities of legal jargon so it can draft court filings. Since the process requires relatively little data -- Mr. Rozado used only about 5,000 data points to turn an existing language model into RightWingGPT -- independent programmers can use the technique as a fast-track method for creating chatbots aligned with their political objectives. This also allowed Mr. Rozado to bypass the steep investment of creating a chatbot from scratch. Instead, it cost him only about $300.

Mr. Rozado warned that customized A.I. chatbots could create "information bubbles on steroids" because people might come to trust them as the "ultimate sources of truth" -- especially when they were reinforcing someone's political point of view. His model echoed political and social conservative talking points with considerable candor. It will, for instance, speak glowingly about free market capitalism or downplay the consequences from climate change. It also, at times, provided incorrect or misleading statements. When prodded for its opinions on sensitive topics or right-wing conspiracy theories, it shared misinformation aligned with right-wing thinking. When asked about race, gender or other sensitive topics, ChatGPT tends to tread carefully, but it will acknowledge that systemic racism and bias are an intractable part of modern life. RightWingGPT appeared much less willing to do so.
"Mr. Rozado never released RightWingGPT publicly, although he allowed The New York Times to test it," adds the report. "He said the experiment was focused on raising alarm bells about potential bias in A.I. systems and demonstrating how political groups and companies could easily shape A.I. to benefit their own agendas."
Social Networks

BBC Advises Staff To Delete TikTok From Work Phones (bbc.com) 54

The BBC has advised staff to delete TikTok from corporate phones because of privacy and security fears. From a report: The BBC seems to be the first UK media organisation to issue the guidance - and only the second in the world after Denmark's public service broadcaster. The BBC said it would continue to use the platform for editorial and marketing purposes for now. [...] The big fear is that data harvested by the platform from corporate phones could be shared with the Chinese government by TikTok's parent company ByteDance, because its headquarters are in Beijing.

In an email to staff on Sunday, it said: "The decision is based on concerns raised by government authorities worldwide regarding data privacy and security. If the device is a BBC corporate device, and you do not need TikTok for business reasons, TikTok should be deleted from the BBC corporate mobile device." Staff with the app on a personal phone that they also use for work have been asked to contact the corporation's Information Security team for further discussions, while it reviews concerns around TikTok.
Dominic Ponsford, editor-in-chief of journalism industry trade publication the Press Gazette, said it would be interesting to see what other media organizations decide to do. He told the BBC: "I suspect everyone's chief technical officer will be looking at this very closely. Until now, news organizations have been very keen to use TikTok, because it's been one of the fastest-growing social media platforms for news publishers over the last year, and it's been a good source of audience and traffic. So most of the talk in the news media has been around encouraging TikTok rather than banning it."
The Internet

Indian Officials Cut Internet For 27 Million People Amid Search For Fugitive (washingtonpost.com) 84

Indian authorities severed mobile internet access and text messaging for a second day Sunday across Punjab, a state of about 27 million people, as officials sought to capture a Sikh separatist and braced for potential unrest. The Washington Post reports: The statewide ban -- which crippled most smartphone services except for voice calls and some SMS text messages -- marked one of the broadest shutdowns in recent years in India, a country that has increasingly deployed the law enforcement tactic, which digital rights activists call draconian and ineffective. The Punjab government, led by the opposition Aam Admi Party, initially announced a 24-hour ban starting midday Saturday as its security forces launched a sprawling operation to arrest the fugitive Amritpal Singh, then extended the ban Sunday for another 24 hours.

Singh, a 30-year-old preacher, has been a popular figure within a separatist movement that seeks to establish a sovereign state in Punjab called Khalistan for followers of the Sikh religion. He rocketed to nationwide notoriety in February after his supporters stormed a police station to free one of his jailed supporters. The Khalistan movement is outlawed in India and considered a top national security threat by officials, but the movement has sympathizers across Punjab state, which is majority Sikh, and among members of the large Sikh diaspora who have settled in countries such as Canada and Britain. In a bid to forestall unrest and curtail what it called "fake news," Punjab authorities blocked mobile internet service beginning at noon Saturday, shortly after they failed to apprehend Singh as he drove through central Punjab with a cavalcade of supporters. Officials were probably also motivated by a desire to deprive Singh's supporters of social media, which they briefly used Saturday to seek help and organize their ranks.

Singh was still on the run as of late Sunday, and the 4G blackout remained in effect. Three Punjab residents who spoke to The Washington Post said life had been disrupted since midday Saturday. Only essential text messages, such as confirmation codes for bank transfers, were trickling through. Wired internet services were not affected. "My entire business is dependent on internet," said Mohammad Ibrahim, who accepts QR code-based payments at his two clothing shops in a village outside of Ludhiana and also sells garments online. "Since yesterday, I've felt crippled."

Businesses

Twitch Says It Will Lay Off 400 Employees (techcrunch.com) 19

Twitch announced plans to lay off 400 employees at the company. It comes just days after longtime Twitch CEO Emmett Shear said that he would step down from the company to spend time with his family. TechCrunch reports: The layoffs will affect 400 employees at the company and were characterized as an effort to improve Twitch's business outlook in the long term. The reduction is part of Twitch parent company Amazon's plans to let go of 9,000 workers across divisions including its AWS cloud and advertising units.

"Like many companies, our business has been impacted by the current macroeconomic environment, and user and revenue growth has not kept pace with our expectations," new Twitch CEO Dan Clancy wrote. "In order to run our business sustainably, we've made the very difficult decision to shrink the size of our workforce." While Twitch is still a platform on the upswing, both in terms of its community and its massive cultural impact, the company likely struggled to match its early pandemic highs -- a familiar story we're seeing play out across the tech industry.
Further reading: What's Different About These Tech Industry Layoffs?
Japan

Teenage Pranks at Japan's Restaurants Lead to AI-Powered Sushi Monitors, Arrests (restofworld.org) 69

Rest of World reports on viral teenage pranks at conveyor-belt sushi chain restaurants across Japan, which snowballed into a societal phenomenon that social media users and the Japanese press have named "sushi terrorism."

It began January 9th when a video showed a customer adding a pile of wasabi onto sushi on a conveyor belt. Another video shows a giggling teenager touching sushi on a conveyor belt at the sushi chain Sushiro after first licking that finger. The stock of the parent company that owns that sushi chain drops nearly 5%. It's not over. At a Nagoya branch of Kura Sushi, a 21-year-old customer grabs sushi from the conveyor belt, cramming it into his mouth and chasing it down with a swig from the communal soy sauce bottle. The incident is filmed by his two younger friends, one of whom posts the clip online. The same day, Sushiro's operating company announces it will limit conveyor belts and move to ordering by touch screen.
Concerns continued at other sushi chains. ("Kura Sushi says it's installing surveillance cameras equipped with AI to monitor customers' behavior and catch sushi terrorists. A day later, Choushimaru announces it will switch entirely to an iPad-based ordering system by April 26.") Sushiro also moves to ordering by touch screen and promises to limit conveyor belts.

The story's dramatic conclusion? Nagoya police arrest the 19-year-old man who allegedly posted the soy-sauce-swigging video from Kura Sushi, along with his two "co-conspirators." Nagoya police declare they are holding all three sushi terrorists on suspicion of "forcible obstruction of business." The crime would carry a maximum penalty of three years in prison, if they're convicted.
Open Source

Elon Musk Says Twitter Will Open Source Its Recommendation Code on March 31 (bgr.com) 69

BGR reports: Elon Musk seems to be close to making good on his promise to open-source Twitter's code. Well, at least part of it.

In a post on the social media platform, the Twitter CEO announced that the company will open-source the code used to recommend tweets on March 31. Musk did not provide any other details about how that will work or specifically when on that date the code will be provided.

Musk has been teasing and promising open-sourcing Twitter's code for a while now, so it'll be interesting to see what the impact is...

Slashdot Top Deals