Slashdot

An anonymous reader quotes a report from The Intercept: Facebook is currently waging a PR campaign purporting to show that Apple is seriously injuring American small businesses through its iOS privacy features. But at the same time, according to allegations in recently unsealed court documents, Facebook has been selling them ad targeting that is unreliable to the point of being fraudulent. The documents feature internal Facebook communications in which managers appear to admit to major flaws in ad targeting capabilities, including that ads reached the intended audience less than half of the time they were shown and that data behind a targeting criterion was "all crap." Facebook says the material is presented out of context. They emerged from a suit currently seeking class-action certification in federal court. The suit was filed by the owner of Investor Village, a small business that operates a message board on financial topics. Investor Village said in court filings that it decided to buy narrowly targeted Facebook ads because it hoped to reach "highly compensated and educated investors" but "had limited resources to spend on advertising." But nearly 40 percent of the people who saw Investor Village's ad either lacked a college degree, did not make $250,000 per year, or both, the company claims. In fact, not a single Facebook user it surveyed met all the targeting criteria it had set for Facebook ads, it says. The complaint features Facebook documents indicating that the company knew its advertising capabilities were overhyped and underperformed. A "February 2016 internal memorandum" sent from an unnamed Facebook manager to Andrew Bosworth, a Zuckerberg confidant and powerful company executive who oversaw ad efforts at the time, reads, "[I]nterest precision in the US is only 41% -- that means that more than half the time we're showing ads to someone other than the advertisers' intended audience. And it is even worse internationally. We don't feel we're meeting advertisers' interest accuracy expectations today." The lawsuit goes on to quote unnamed "employees on Facebook's ad team" discussing their targeting capabilities circa June 2016. "Interest" and "behavior" are two key facets of the data dossiers Facebook compiles on us for advertisers; according to the company, the former includes things you like, "from organic food to action movies," while the latter consists of "behaviors such as prior purchases and device usage." The complaint also cites unspecified internal communications in which "[p]rivately, Facebook managers described important targeting data as 'crap' and admitted accuracy was 'abysmal.'" Facebook has said in its court filings that these quotes are presented out of context.

Read more of this story at Slashdot.

A phishing scam with unclear motive or payoff is targeting authors, agents and editors big and small, baffling the publishing industry. From a report: Earlier this month, the book industry website Publishers Marketplace announced that Little, Brown would be publishing "Re-Entry," a novel by James Hannaham about a transgender woman paroled from a men's prison. The book would be edited by Ben George. Two days later, Mr. Hannaham got an email from Mr. George, asking him to send the latest draft of his manuscript. The email came to an address on Mr. Hannaham's website that he rarely uses, so he opened up his usual account, attached the document, typed in Mr. George's email address and a little note, and hit send. "Then Ben called me," Mr. Hannaham said, "to say, 'That wasn't me.'" Mr. Hannaham was just one of countless targets in a mysterious international phishing scam that has been tricking writers, editors, agents and anyone in their orbit into sharing unpublished book manuscripts. It isn't clear who the thief or thieves are, or even how they might profit from the scheme. High-profile authors like Margaret Atwood and Ian McEwan have been targeted, along with celebrities like Ethan Hawke. But short story collections and works by little-known debut writers have been attacked as well, even though they would have no obvious value on the black market. In fact, the manuscripts do not appear to wind up on the black market at all, or anywhere on the dark web, and no ransoms have been demanded. When copies of the manuscripts get out, they just seem to vanish. So why is this happening? "The real mystery is the endgame," said Daniel Halpern, the founder of Ecco, who has been the recipient of these emails and has also been impersonated in them. "It seems like no one knows anything beyond the fact of it, and that, I guess you could say, is alarming."

Read more of this story at Slashdot.

Warner Bros. ruffled some feathers when it announced it would release all of its new 2021 movies simultaneously on HBO Max, but the company seems to be betting that theaters won't become an apocalyptic wasteland. From a report: Variety reports that the company plans to release Furiosa, the prequel to Max Max: Fury Road, and The Color Purple first in theaters in 2023. Warner's plan to launch next year's films online is a great thing for consumers who would rather stay at home than risk contracting a deadly virus to see, say, Godzilla vs. Kong. But the plan immediately made enemies of some Hollywood veterans. Director Christopher Nolan called HBO Max "the worst streaming service" and accused Warner Bros. of not telling anyone about its plan until just 90 minutes before it was announced.

Read more of this story at Slashdot.

An anonymous reader shares a report (alternative source: "2020 has been a record year for GoDaddy, thanks to you!" the email read. Sent by Happyholiday@Godaddy.com, tucked underneath a glittering banner of a snowflake and stamped with the words "GoDaddy Holiday Party," the Dec. 14 email to hundreds of GoDaddy employees promised some welcome financial relief during an otherwise stressful year. "Though we cannot celebrate together during our annual Holiday Party, we want to show our appreciation and share a $650 one-time Holiday bonus!" the email read. "To ensure that you receive your one-time bonus in time for the Holidays, please select your location and fill in the details by Friday, December 18th." But, two days later, the company sent another email. "You're getting this email because you failed our recent phishing test," the company's chief security officer Demetrius Comes wrote. "You will need to retake the Security Awareness Social Engineering training." The follow-up email from Comes said that roughly 500 GoDaddy employees clicked on the holiday bonus email and failed the test. Scottsdale-based GoDaddy, the world's largest domain registrar and web-hosting company, did not respond to repeated requests for comment about the emails. The emails were forwarded to The Copper Courier by three GoDaddy employees.

Read more of this story at Slashdot.

An anonymous reader shares a report: Earlier this month, more than 1,000 educators and students at City University of New York institutions petitioned their board of trustees to not renew its contract with the anti-plagiarism software company Turnitin. The board ultimately voted unanimously, with the student senate representative abstaining, to renew Turnitin's five-year contract for nearly $2 million. Five months earlier, CUNY had laid off nearly 3,000 adjunct faculty and part-time employees as a result of budget shortfalls. (The college system's chancellor has pushed back against that characterization). The protest against Turnitin is the latest high-profile effort in what has become a nationwide backlash in higher education against educational technology vendors. As schools moved online during the pandemic and confronted slimming budgets, they increasingly turned to a wide array of software companies for solutions. The ed tech industry has boomed, and the school experience has been transformed in ways that are sure to outlive the pandemic -- not necessarily for the better, many experts say.

Read more of this story at Slashdot.

Dozens of people who say they were subjected to death threats, racial slurs, and blackmail after their in-home Ring smart cameras were hacked are suing the company over "horrific" invasions of privacy. From a report: A new class action lawsuit, which combines a number of cases filed in recent years, alleges that lax security measures at Ring, which is owned by Amazon, allowed hackers to take over their devices. Ring provides home security in the form of smart cameras that are often installed on doorbells or inside people's homes. The suit against Ring builds on previous cases, joining together complaints filed by more than 30 people in 15 families who say their devices were hacked and used to harass them. In response to these attacks, Ring "blamed the victims, and offered inadequate responses and spurious explanations," the suit alleges. The plaintiffs also claim the company has also failed to adequately update its security measures in the aftermath of such hacks.

Read more of this story at Slashdot.

Volkswagen AG Chief Executive Officer Herbert Diess said cash-rich technology giants invading the auto industry pose a much bigger challenge for the German manufacturer than traditional rivals like Toyota Motor. From a report: "We look forward to new competitors who will certainly accelerate the change in our industry and bring in new skills," Diess said in a LinkedIn post when asked about reports that Apple is developing a self-driving car. "The unbelievable valuation and the practically unlimited access to resources instill a lot of respect in us." [...] Diess mapped out a plan during an internal meeting last week to pit VW's huge Wolfsburg plant against Tesla's factory that's under construction outside Berlin. The electric-car maker's new site in Gruenheide is bound to stoke competition for engineers, workers and customers on VWâ(TM)s home turf. "I've said it before: the most valuable company in the world will again be a mobility company," Diess said. "It could be Tesla, Apple or Volkswagen." Further reading: Elon Musk Says He Once Considered Selling Tesla To Apple, Tim Cook Didn't Want To Take a Meeting

Read more of this story at Slashdot.

Hackers have stolen the data of a large cosmetic surgery chain and are threatening to publish patients' before and after photos, among other details. From a report: The Hospital Group, which has a long list of celebrity endorsements, has confirmed the ransomware attack. It said it had informed the Information Commissioner of the breach. On its darknet webpage, the hacker group known as REvil said the "intimate photos of customers" were "not a completely pleasant sight." It claimed to have obtained more than 900 gigabytes of patient photographs. The Hospital Group, which is also known as the Transform Hospital Group, claims to be the UK's leading specialist weight loss and cosmetic surgery group. It has 11 clinics specialising in bariatric weight loss surgery, breast enlargements, nipple corrections and nose adjustments. The company has previously promoted itself via celebrity endorsements, although it has not done so for several years. Former Big Brother contestant Aisleyne Horgan-Wallace told Zoo magazine about her breast enhancement surgery with The Hospital Group in 2009. Atomic Kitten singer Kerry Katona, Shameless actress Tina Malone and reality TV star Joey Essex from The Only Way is Essex are also previous patients who have endorsed the clinic.

Read more of this story at Slashdot.

The U.S. cybersecurity agency says that a sprawling cyber espionage campaign made public earlier this month is affecting state and local governments, although it released few additional details. From a report: The hacking campaign, which used U.S. tech company SolarWinds as a springboard to penetrate federal government networks, was "impacting enterprise networks across federal, state, and local governments, as well as critical infrastructure entities and other private sector organizations," the Cybersecurity and Infrastructure Security Agency (CISA) said in a statement posted to its website. The CISA said last week that U.S. government agencies, critical infrastructure entities, and private groups were among those affected, but did not specifically mention state or local bodies. So far only a handful of federal government agencies have officially confirmed having been affected, including the U.S. Treasury Department, the Commerce Department, and the Department of Energy.

Read more of this story at Slashdot.

Voat, an "anti-censorship" alternative social network that's been described as the "alt-right Reddit," is scheduled to shut down on December 25th. From a report: Voat co-founder Justin Chastain announced the pending closure this week, saying the site had run out of money after an investor defaulted on their contract in March. "I personally decided to keep Voat up until after the US election of 2020. I've been paying the costs out of pocket but now I'm out of money," Chastain wrote. Voat was founded in 2014 and hosted Reddit-like forums with minimal moderation. It grew rapidly after Reddit added an anti-harassment policy and banned five subreddits that it said violated the rules, including its infamous r/fatpeoplehate forum.

Read more of this story at Slashdot.

Square, the digital-payment company run by Jack Dorsey, has held talks to acquire the music-streaming service Tidal as part of a push to diversify, according to a person familiar with the situation. From a report: Dorsey has discussed a potential deal with Jay-Z, the rapper and music mogul who acquired Tidal for $56 million in early 2015, said the person, who asked not to be identified because the talks were private. The negotiations may not result in a transaction.

Read more of this story at Slashdot.

BMW has told Motoring Research its targeted billboard warranty adverts -- which are claimed to use number plate registration technology to tailor public adverts to BMW drivers -- do not actually draw upon vehicle warranty status. From a report: Rather, only publically available information is used. "There is no personalisation visible on the advert and no vehicle or customer data is stored or retained." The new initiative was originally claimed to focus on BMW drivers with an expired new or Approved Used warranty. Owners will receive personalised messages on electronic roadside billboards highlighting the fact they no longer have a valid warranty. They will be warned their vehicle is not covered for the cost of repairs, and invited to 'consider purchasing a BMW Insured warranty online.' The electronic billboards use Vehicle Detection Technology to pick out BMW owners with expired warranties.

Read more of this story at Slashdot.

China kicked off an investigation into alleged monopolistic practices at Alibaba Group and summoned affiliate Ant Group to a high-level meeting over financial regulations, escalating scrutiny over the twin pillars of billionaire Jack Ma's internet empire. From a report: The probe announced Thursday marks the formal start of the Communist Party's crackdown on the crown jewel of Ma's sprawling dominion, spanning everything from e-commerce to logistics and social media. The pressure on Ma is central to a broader effort to rein in an increasingly influential internet sphere: Draft anti-monopoly rules released November gave the government wide latitude to restrain entrepreneurs who until recently enjoyed unusual freedom to expand their realms. Once hailed as drivers of economic prosperity and symbols of the country's technological prowess, Alibaba and rivals like Tencent Holdings face increasing pressure from regulators after amassing hundreds of millions of users and gaining influence over almost every aspect of daily life in China. The State Administration for Market Regulation is investigating Alibaba, the top antitrust watchdog said in a statement without further details. Regulators including the central bank and banking watchdog will separately summon affiliate Ant to a meeting intended to drive home increasingly stringent financial regulations, which now pose a threat to the growth of the world's biggest online financial services firm. Ant said in a statement on its official WeChat account it will study and comply with all requirements. Ma, the flamboyant co-founder of Alibaba and Ant, has all but vanished from public view since Ant's initial public offering got derailed last month. As of early December, the man most closely identified with the meteoric rise of China was advised by the government to stay in the country, a person familiar with the matter has said.

Read more of this story at Slashdot.

The California Bar released data last week confirming that during its use of ExamSoft for the October Bar exam, over one-third of the nearly nine-thousand online examinees were flagged by the software. The Electronic Frontier Foundation is concerned that the exam proctoring software is incorrectly flagging students for cheating "due either to the software's technical failures or to its requirements that students have relatively new computers and access to near-broadband speeds." From the report: This is outrageous. It goes without saying that of the 3,190 applicants flagged by the software, the vast majority were not cheating. Far more likely is that, as EFF and others have said before, remote proctoring software is surveillance snake oil -- you simply can't replicate a classroom environment online, and attempting to do so via algorithms and video monitoring only causes harm. In this case, the harm is not only to the students who are rightfully upset about the implications and the lack of proper channels for redress, but to the institution of the Bar itself. While examinees have been searching for help from other examinees as well as hiring legal counsel in their attempt to defend themselves from potentially baseless claims of cheating, the California Committee of Bar Examiners has said "everything is going well" and called these results "a good thing to see" (13:30 into the video of the Committee meeting). That is not how we see it. These flags have triggered concern for hundreds, if not thousands, of test takers, most of whom had no idea that they were flagged until recently. Many only learned about the flag after receiving an official "Chapter 6 Notice" from the Bar, which is sent when an applicant is observed (supposedly) violating exam conduct rules or seen or heard with prohibited items, like a cell phone, during the exam. In a depressingly ironic introduction to the legal system, the Bar has requested that students respond to the notices within 10 days, but it would appear that none of them have been given enough information to do so, as Chapter 6 Notices contain only a short summary of the violation. These summaries are decidedly vague: "Facial view of your eyes was not within view of the camera for a prolonged period of time"; "No audible sound was detected"; "Leaving the view of the webcam outside of scheduled breaks during a remote-proctored exam." Examinees do not currently have access to the flagged videos themselves, and are not expected to receive access to them, or any other evidence against them, before they are required to submit a response. The report goes on to say that some of these flags are technical issues with ExamSoft. For example, Lenovo laptops appear to have been flagged en masse for an issue with the software's inability to access the internal microphone. Other flags are likely due to the inability of the software to correctly recognize the variability of examinees' demeanors and expressions. "We implore the California Bar to rethink its plans for remotely-proctored future exams, and to work carefully to offer clearer paths for examinees who have been flagged by these inadequate surveillance tools," the EFF says in closing. "Until then, the Bar must provide examinees who have been flagged with a fair appeals process, including sharing the videos and any other information necessary for them to defend themselves before requiring a written response."

Read more of this story at Slashdot.

KFC unveiled what they're calling the KFConsole -- a VR-ready high-end gaming PC that comes with a built-in chicken warmer. GamesRadar reports: Back in June, just after the PS5 reveal, KFC released a ridiculous trailer for the KFConsole, but everyone just figured they were joking. Turns out, they were dead serious. KFC, the chicken place, has teamed up with Cooler Master and launched a gaming console capable of 4K and 240FPS. The joint press release doesn't mention a price or release date, but I've reached out for clarification and will update this article if I hear back. The complete specs haven't been revealed, but we know it's got an Intel Nuc 9 CPU, Seagate BarraCuda 1TB SSD, and judging from the prominence of "ray tracing" in the marketing from Cooler Master, an Nvidia GPU. Cooler Master also says the KFConsole has "a first of its kind hot swappable GPU slot" for easy upgrades. But who really cares about all that when it's got a chamber to keep your fried chicken warm?

Read more of this story at Slashdot.

During the Great Conjunction event in which Jupiter and Saturn appeared closer to each other in the sky than they have for hundreds of years, photographer Jason De Freitas captured a photo showing the ISS zipping between the two planets. PetaPixel reports: While planning to photograph the conjunction of Jupiter and Saturn, De Freitas realized that he could also include the ISS in the frame. "I had the incredible luck of figuring out I could see the path of the International Space Station traveling through the Jupiter-Saturn conjunction," De Freitas says. After a great deal of planning, on December 17th, De Freitas drove an hour -- "quite a short distance in the scheme of things," he says -- to a location where everything would be aligned perfectly for his shot. At around 9:54pm from Jellore Lookout in New South Wales, Australia, De Freitas pointed his Pentax 67 and Takumar 600mm f/4 at the planets and captured a 10-second exposure on Fujifilm Provia 100f film. The tracking was done with a Skywatcher NEQ6 equatorial mount. The photo above is what resulted. Here's a closer crop in which you can more clearly see the planets and Jupiter's moons. De Freitas also used a Nikon D750 and Tamron 70-200mm f/2.8 to capture digital video of the event. "Probably the most unique shot I've ever taken," De Freitas says. "[S]omehow everything on the night worked out. Beyond thrilled with this one.

Read more of this story at Slashdot.

An anonymous reader quotes a report from VentureBeat: Hours after announcing that it acquired self-driving truck startup Ike, Nuro revealed it's the first company to receive permission from the California Department of Motor Vehicles (DMV) to charge a fee and receive compensation for its driverless delivery service. Unlike the autonomous testing licenses the California DMV previously granted to Nuro and others, which limited the compensation self-driving vehicle companies could receive, the deployment permit enables Nuro to make its technology commercially available. The California DMV permit allows Nuro to use a fleet of light-duty driverless vehicles for a delivery service on surface streets within designated parts of Santa Clara and San Mateo counties, including the cities of Atherton, East Palo Alto, Los Altos Hills, Los Altos, Menlo Park, Mountain View, Palo Alto, Sunnyvale, and Woodside. The vehicles have a maximum speed of 25 miles per hour and are only approved to operate in fair weather conditions on streets with a speed limit of no more than 35 miles per hour. "This permit will allow our vehicles to operate commercially on California roads in two counties near our [Mountain View, California] headquarters in the Bay Area. Soon we will announce our first deployment in California with an established partner. The service will start with our fleet of Prius vehicles in fully autonomous mode, followed by our custom-designed electric R2 vehicles," Nuro chief legal and policy officer David Estrada wrote in a blog post. "We have extensively tested our self-driving technology and built a track record of safe operations over the past four years, including two successful commercial deployments in other states and driverless testing with R2 in the Bay Area communities where we plan to deploy."

Read more of this story at Slashdot.

In 2021, Amazon.com is poised to face a renewed challenge from groups it has long countered: unions. Reuters reports: Energized by protests at Amazon's U.S. warehouses and a more labor-friendly administration assuming office, unions are campaigning at the world's largest online retailer to see if its warehouse or grocery workers would like to join their ranks. A major test is expected early next year when workers at one warehouse decide whether to unionize. The company has not faced a union election in the United States since 2014, and a "yes" vote would be the first ever for a U.S. Amazon facility. The upcoming vote is for associates in Amazon's fulfillment center in Bessemer, Alabama; they will weigh whether to join the Retail, Wholesale and Department Store Union (RWDSU). The organizing committee has launched a social media campaign, shared union authorization cards and collected enough to hold the election. This week and last, the RWDSU and Amazon negotiated the election terms. By Tuesday they agreed to have seasonal workers in the bargaining unit, as well as process assistants, whose inclusion the union had questioned for their supervisory authority, according to the election hearings presided by a government labor board. That board will set the election date. The larger the bargaining unit's size - now expected to be over 5,700 - the more votes the union needs to win. In a statement, Amazon said, "We don't believe this group represents the majority of our employees' views. Our employees choose to work at Amazon because we offer some of the best jobs available everywhere we hire." Average pay at the Bessemer facility is $15.30 per hour, and jobs come with health and retirement benefits, it said. Precedent shows the RWDSU faces an uphill battle. Union membership has fallen to 10% of the eligible workforce in 2019 from 20% in 1983, the U.S. Bureau of Labor Statistics reported in January.

Read more of this story at Slashdot.

Leaked Nintendo documents have revealed a frightening surveillance operation carried out against a hacker who was researching exploits for the 3DS handheld. TorrentFreak reports: During the past 24 hours, various Twitter accounts (1,2) have been posting snippets from documents that were recently leaked from Nintendo. While there are numerous items of interest, the most shocking revelations involve Neimod, a hacker who several years ago developed exploits for the 3DS handheld console. [T]he scale of the operation, which is revealed in detail in the leaked documents, shows just how far the gaming giant was prepared to go to stop his work. For example, the leak reveals personal profiling that dug deeply into Neimod's education status, listed details of his working life, while offering evidence of physical snooping on his daily lifestyle. What time he could be found at home, who came to see him there, and even when he visited places like banks and restaurants are all included. While this kind of surveillance is creepy in its own right, additional documents reveal a detailed plan to use the gathered intelligence to physically confront Neimod in order to pressurize him into complying with the company's demands. According to Nintendo's planning, the operation would begin around April 15, 2013, with its team meeting at a local hotel to discuss and finalize their plans. Following a review of Neimod's movements of the previous week, the team would then decide where and when contact would be made -- after work or at home, for example. With an undercover investigator monitoring Neimod to discover what time he left work, Neimod was to be approached by a 'contact team,' who were instructed to approach their target "in a friendly, non-threatening, professional, and courteous manner." "Provide a business card," the instructions read. After Neimod had been engaged in conversation, the team was instructed to flatter the hacker by "acknowledging his engineering/programming aptitude." They were also told to reference his stated aim of not "facilitating piracy" with his hacks but point out Nintendo's concerns that a release of his hack could do just that. Whether Neimod complied or resisted, Nintendo prepared for both eventualities. The following slide, posted to Twitter by Eclipse-TT, shows a flow chart that begins with instructions for the "Knock and Talk Team," details a staging area, rules of engagement, and plans for what should happen when things go to plan -- or otherwise. The Nintendo "Final Enforcement Proposal" document describes a "carrot and stick" approach, with the stick being a laundry list of potential offenses committed by Neimod under Belgian law and the carrot representing a number of sweeteners that might be of interest to the hacker. If cooperation was achieved, Nintendo suggested it could refrain from filing a criminal complaint. It may also enter into a "bounty" contract with Neimod with payments made for finding and documenting exploits. Within certain parameters, his discoveries could still be announced to the public, allowing him to retain "bragging rights." This could help Nintendo's image, the company wrote.

Read more of this story at Slashdot.

AmiMoJo shares a report from The Verge: President Biden is going to need some Twitter followers. Twitter plans to wipe out all followers from the @POTUS and @WhiteHouse accounts once Biden is sworn in on January 20th, rather than transferring the accounts' existing followers over to the new administration, according to Rob Flaherty, Biden's digital director. The accounts for @VP, @FLOTUS, @PressSec, @Cabinet, and @LaCasaBlanca will also have their followers wiped, Twitter said. The Wall Street Journal reported earlier today that there was contention between the Biden camp and Twitter over whether followers would transfer over. This is a reversal from what Twitter did in 2017 when the Trump administration took over accounts from the Obama administration. Back then, Twitter essentially duplicated the existing accounts, creating an archive of Obama-era tweets and followers and building a new set of accounts for the incoming administration that retained all of those followers without any of the tweets.

Read more of this story at Slashdot.