An anonymous reader quotes a report from TechCrunch: The U.S. Department of Justice announced on Monday that it had taken several enforcement actions against North Korea's money-making operations, which rely on undercover remote IT workers inside American tech companies to raise funds for the regime's nuclear weapons program, as well as to steal data and cryptocurrency. As part of the DOJ's multi-state effort, the government announced the arrest and indictment of U.S. national Zhenxing "Danny" Wang, who allegedly ran a years-long fraud scheme from New Jersey to sneak remote North Korean IT workers inside U.S. tech companies. According to the indictment, the scheme generated more than $5 million in revenue for the North Korean regime. [...]
From 2021 until 2024, the co-conspirators allegedly impersonated more than 80 U.S. individuals to get remote jobs at more than 100 American companies, causing $3 million in damages due to legal fees, data breach remediation efforts, and more. The group is said to have run laptop farms inside the United States, which the North Korean IT workers could essentially use as proxies to hide their provenance, according to the DOJ. At times, they used hardware devices known as keyboard-video-mouse (KVM) switches, which allow one person to control multiple computers from a single keyboard and mouse. The group allegedly also ran shell companies inside the U.S. to make it seem like the North Korean IT workers were affiliated with legitimate local companies, and to receive money that would then be transferred abroad, the DOJ said.
The fraudulent scheme allegedly also involved the North Korean workers stealing sensitive data, such as source code, from the companies they were working for, such as from an unnamed California-based defense contractor "that develops artificial intelligence-powered equipment and technologies."
Read more of this story at Slashdot.
Security updates have been issued by AlmaLinux (delve, emacs, gimp, gimp:2.8, glibc, idm:DL1, ipa, iputils, kernel, krb5, libarchive, libblockdev, libxml2, mod_proxy_cluster, osbuild-composer, pam, perl-File-Find-Rule, perl-YAML-LibYAML, qt5-qtbase, weldr-client, xorg-x11-server and xorg-x11-server-Xwayland, and xorg-x11-server-Xwayland), Debian (mbedtls and sudo), Oracle (.NET 8.0, delve, delve, golang, firefox, ghostscript, glibc, golang, grafana, iputils, kernel, krb5, libarchive, libblockdev, nodejs22, ruby, thunderbird, tomcat, tomcat9, unbound, and wireshark), Red Hat (glibc and mod_auth_openidc), Slackware (sudo), SUSE (gpg2, ImageMagick, iputils, jakarta-commons-fileupload, kernel, libblockdev, libsoup, open-vm-tools, pam, python-tornado6, screen, sudo, and xwayland), and Ubuntu (linux, linux-aws, linux-gcp, linux-gcp-6.11, linux-hwe-6.11, linux-oracle,
linux-raspi, linux-realtime, linux-gcp, linux-gcp-6.8, linux-hwe-5.4, linux-oem-6.11, and sudo).
alternative_right shares a report from Phys.Org: The unit -- dubbed a BeeHome -- is an industrial upgrade from the standard wooden beehives, all clad in white metal and solar panels. Inside sits a high-tech scanner and robotic arm powered by artificial intelligence. Roughly 300,000 of these units are in use across the U.S., scattered across fields of almond, canola, pistachios and other crops that require pollination to grow. [...] AI and robotics are able to replace "90% of what a beekeeper would do in the field," said Beewise Chief Executive Officer and co-founder Saar Safra. The question is whether beekeepers are willing to switch out what's been tried and true equipment. [...]
While a new hive design alone isn't enough to save bees, Beewise's robotic hives help cut down on losses by providing a near-constant stream of information on colony health in real time -- and give beekeepers the ability to respond to issues. Equipped with a camera and a robotic arm, they're able to regularly snap images of the frames inside the BeeHome, which Safra likened to an MRI. The amount of data they capture is staggering. Each frame contains up to 6,000 cells where bees can, among other things, gestate larvae or store honey and pollen. A hive contains up to 15 frames and a BeeHome can hold up to 10 hives, providing thousands of data points for Beewise's AI to analyze.
While a trained beekeeper can quickly look at a frame and assess its health, AI can do it even faster, as well as take in information on individual bees in the photos. Should AI spot a warning sign, such as a dearth of new larvae or the presence of mites, beekeepers will get an update on an app that a colony requires attention. The company's technology earned it a BloombergNEF Pioneers award earlier this year. "There's other technologies that we've tried that can give us some of those metrics as well, but it's really a look in the rearview mirror," [said Zac Ellis, the senior director of agronomy at OFI, a global food and ingredient seller]. "What really attracted us to Beewise is their ability to not only understand what's happening in that hive, but to actually act on those different metrics."
Read more of this story at Slashdot.
"For-profit companies are pushing the narrative that they can do space inexpensively," writes Slashdot reader RUs1729 in response to an opinion piece from SpaceNews. "Their track record reveals otherwise: cutting corners won't do it for the foreseeable future." Here's an excerpt from the article, written by Robert N. Eberhart: The headlines in the space industry over the past month have delivered a sobering reminder: space is not forgiving, and certainly not friendly to overpromising entrepreneurs. From iSpace's second failed lunar landing attempt (making them 0 for 2) to SpaceX's ongoing Starship test flight setbacks -- amid a backdrop of exploding prototypes and shifting goalposts -- the evidence is mounting that the commercialization of space is not progressing in the triumphant arc that press releases might suggest. This isn't just a series of flukes. It points to a structural, strategic and cultural problem in how we talk about innovation, cost and success in space today.
Let's be blunt: 50 years ago, we did this. We sent humans to the moon, not once but repeatedly, and brought them back. With less computational power than your phone, using analog systems and slide rules, we achieved feats of incredible precision, reliability and coordination. Today's failures, even when dressed up as "learning opportunities," raises the obvious question: Why are we struggling to do now what we once achieved decades ago with far more complexity and far less technology?
Until very recently, the failure rate of private lunar exploration efforts underscored this reality. Over the past two decades, not a single private mission had fully succeeded -- until last March when Firefly Aerospace's Blue Ghost lander touched down on the moon. It marked the first fully successful soft landing by a private company. That mission deserves real credit. But that credit comes with important context: It took two decades of false starts, crashes and incomplete landings -- from Space IL's Beresheet to iSpace's Hakuto-R and Astrobotic's Peregrine -- before even one private firm delivered on the promise of lunar access. The prevailing industry answer -- "we need to innovate for lower cost" -- rings hollow. What's happening now isn't innovation; it's aspiration masquerading as disruption... "This is not a call for a retreat to Cold War models or Apollo-era budgets," writes Eberhart, in closing. "It's a call for seriousness. If we're truly entering a new space age, then it needs to be built on sound engineering, transparent economics and meaningful technical leadership -- not PR strategy. Let's stop pretending that burning money in orbit is a business model."
"The dream of a sustainable, entrepreneurial space ecosystem is still alive. But it won't happen unless we stop celebrating hype and start demanding results. Until then, the real innovation we need is not in spacecraft -- it's in accountability."
Robert N. Eberhart, PhD, is an associate professor of management and the faculty director of the Ahlers Center for International Business at the Knauss School of Business of University of San Diego. He is the author of several academic publications and books. He is also part of Oxford University's Smart Space Initiative and contributed to Berkeley's Space Sciences Laboratory. Before his academic career, Prof. Eberhart founded and ran a successful company in Japan.
Read more of this story at Slashdot.
Thousands of Norwegians briefly believed they had won massive Eurojackpot prizes after a manual coding error by Norsk Tipping mistakenly multiplied winnings by 100 instead of dividing. The Register reports: Eurojackpot, a pan-European lottery launched in 2012, holds two draws per week, and its jackpots start at about $12 million with a rollover cap of $141 million. Norsk Tipping, Norway's Eurojackpot administrator, admitted on Friday that a "manual error" it its conversion process from Eurocents to Norwegian kroner multiplied amounts by 100 instead of dividing them. As a result, "thousands" of players were briefly shown jackpots far higher than their actual winnings before the mistake was caught, but no incorrect payouts were made.
Norsk Tipping didn't disclose how large the false jackpots were, but math suggests the improper amounts were 10,000x times higher. Regardless, it seems like a lot of people thought they were big winners, based on what the company's now-former CEO, Tonje Sagstuen, said on Saturday. "I have received many messages from people who had managed to make plans for holidays, buying an apartment or renovating before they realized that the amount was wrong," Sagstuen said in a statement. "To them I can only say: Sorry!" The incorrect prize amounts were visible on the Norsk Tipping website only briefly on Friday, but the CEO still resigned over the weekend following the incident.
While one of the Norsk Tipping press releases regarding the incident described it as "not a technical error," it still appears someone fat-fingered a bit of data entry. The company said it will nonetheless be investigating how such a mistake could have happened "to prevent something similar from happening again."
Read more of this story at Slashdot.
HP is developing a "PCFax" system similar to CarFax for used cars that securely collects and stores detailed device usage and health data at the firmware level to extend the life of PCs and reduce e-waste. A team of HP experts outlines the system in a recent IEEE Spectrum report: The secure telemetry protocol we've developed at HP works as follows. We gather the critical hardware and sensor data and store it in a designated area of the SSD. This area is write-locked, meaning only authorized firmware components can write to it, preventing accidental modification or tampering. That authorized firmware component we us is the Endpoint Security Controller, a dedicated piece of hardware embedded in business class HP PCs. It plays a critical role in strengthening platform-level security and works independently from the main CPU to provide foundational protection.
The endpoint security controller establishes a secure session by retaining the secret key within the controller itself. This mechanism enables read data protection on the SSD -- where telemetry and sensitive data are stored -- by preventing unauthorized access, even if the operating system is reinstalled or the system environment is otherwise altered. Then, the collected data is recorded in a timestamped file, stored within a dedicated telemetry log on the SSD. Storing these records on the SSD has the benefit of ensuring the data is persistent even if the operating system is reinstalled or some other drastic change in software environment occurs. The telemetry log employs a cyclic buffer design, automatically overwriting older entries when the log reaches full capacity. Then, the telemetry log can be accessed by authorized applications at the operating system level.
The telemetry log serves as the foundation for a comprehensive device history report. Much like a CarFax report for used cars, this report, which we call PCFax, will provide both current users and potential buyers with crucial information. The PCFax report aggregates data from multiple sources beyond just the on-device telemetry logs. It combines the secure firmware-level usage data with information from HP's factory and supply chain records, digital services platforms, customer support service records, diagnostic logs, and more. Additionally, the system can integrate data from external sources including partner sales and service records, refurbishment partner databases, third-party component manufacturers like Intel, and other original equipment manufacturers. This multi-source approach creates a complete picture of the device's entire lifecycle, from manufacturing through all subsequent ownership and service events.
Read more of this story at Slashdot.