From the “Ready, Fire, Aim” school of thought.

https://www.cpomagazine.com/data-privacy/is-tiktok-really-a-national-security-threat-new-report-from-university-of-toronto-says-no/

Is TikTok Really a National Security Threat? New Report From University of Toronto Says No

One of the hottest social media discussion topics of late 2020 was the Trump administration’s proposed ban of popular social media platform TikTok as a national security threat. With 80 million active monthly users in the United States, and a fair share of them making a living from the platform, it was naturally a very contentious idea.

The ban eventually sputtered out without ever really being enforced; the Biden administration has the whole affair on pause pending a broader review of the previous administration’s China policy. Though the Beijing-based app may well still end up being sold to an American company due to Trump’s pressure (the odd tandem of Oracle and Walmart being the frontrunners at present), the framing of TikTok as national security threat was always much more speculative than tied to concrete evidence of spying. While independent reverse engineering of the app raised some questions about its capabilities, the concern was based more on China’s national intelligence laws which compel any private business within its borders to turn over data to the government upon request.

Cybersecurity researchers from the University of Toronto’s Citizen Lab have tackled the question of TikTok’s trustworthiness by comparing its code to Douyin, the version made available in China. The researchers found that Douyin collects a greater amount of personal information and sends it to a variety of servers in China, but TikTok does not share that code. While that does not preclude the possibility of stored data being handed over in other ways, the researchers conclude that TikTok is not a direct or overt national security threat as it is presently constructed.

The research builds on prior work (published in May of 2020) which found that WeChat, China’s most popular messaging app and also named for a ban by the Trump administration, contained a hidden censorship algorithm that scanned non-Chinese accounts to train itself for automated filtering of what Chinese users see on the platform.

Don’t worry, DHS will protect us!

https://www.makeuseof.com/solarwinds-hackers-breached-emails-top-dhs-officials/

SolarWinds Hackers Breached the Email Accounts of Top DHS Officials

The Department for Homeland Security was just one victim of SolarWinds.

… As reported by the Associated Press, the then-acting Department for Homeland Security Secretary Chad Wolf's email account was accessed during the SolarWinds attack. The information accessed in Wolf's account at the time isn't known, nor is the length of time the attackers had access to his account.

However, that the attackers gained access to the email account of an individual sitting at the top of one of the US's most important national departments sends a strong message.

Oh please… Isn’t this why we have allies?

https://www.defenseone.com/technology/2021/03/senators-offer-let-nsa-hunt-cyber-actors-inside-us/172938/

Senators Offer to Let NSA Hunt Cyber Actors Inside the US

… Nakasone told senators that the U.S. was unable to keep up with the threat in large part because laws prevent NSA and Cyber Command from adequately observing adversaries operating on U.S. networks. “They’re no longer just launching their attacks from different parts of the world. They understand that they come into the United States, use our infrastructure, and there’s a blind spot for us not being able to see them.”

Good to know the market for my Ethical Hackers is strong.

https://www.csoonline.com/article/3613171/booming-dark-web-gig-economy-is-a-rising-threat.html#tk.rss_all

Booming dark web gig economy is a rising threat

Experts seen a sharp increase in help-wanted ads for black hat hackers-for-hire. Here's what they are targeting and how to respond to the threat.

AI needs lots and lots of data. Is it possible someone is feeding an AI?

https://www.bespacific.com/billions-of-records-have-been-hacked-already-make-cybersecurity-a-priority-or-risk-disaster-warns-analyst/

Billions of records have been hacked already. Make cybersecurity a priority or risk disaster, warns analyst

ZDNet – “A new report warns against relegating cybersecurity to the bottom of the to-do list. More data records have been compromised in 2020 alone than in the past 15 years combined, in what is described as a mounting “data breach crisis” in the latest study from analysis firm Canalys. Over the past 12 months, 31 billion data records have been compromised, found Canalys. This is up 171% from the previous year, and constitutes well over half of the 55 billion data records that have been compromised in total since 2005. Cases of ransomware – a specific type of attack that encrypts servers and data to block access to a computer system until a sum of money is paid – have been on the rise, with the number of reported incidents up 60% compared to 2019. “Prioritize cybersecurity and invest in broadening protection, detection and response measures or face disaster,” said Canalys chief analyst Matthew Ball. According to Canalys, this unprecedented boom in attacks can be in part attributed to the COVID-19 pandemic, which forced organizations across the world to digitize at pace, without putting enough thought into the new security requirements that come with doing business online…”

Long, detailed and crazy?

https://www.databreaches.net/mobikwik-offers-master-class-in-how-not-to-respond-to-a-breach-researchers-scoff-consumers-rage/

Mobikwik offers master class in how NOT to respond to a breach; researchers scoff, consumers rage

Things have rapidly escalated in the wake of Mobikwik’s repeated denials that the digital wallet and payments network firm had a massive breach. As DataBreaches.net reported on Sunday, more than 8 TB of data from the firm had been listed for sale on a popular forum, data that allegedly included KYC (Know Your Customer ) data on 3.5 million consumers. And to prove the data were real, the seller created a portal where MobiKwik customers could input their information to see what MobiKwik had on file about them.

Despite the samples provided and confirmation by independent researchers that the data were real, MobiKwik gave DataBreaches.net a statement that there had been no breach, repeating a statement it had made on March 4, when it tried to claim that a “media-crazed researcher” had concocted files but that their systems were secure.

… People watching this all unfold should keep in mind that MobiKwik has reportedly been planning for an IPO later this year. The very last thing they need or want right now is a massively expensive and embarrassing data breach that would make investors shy away. Is that what is the explanation — are they denying all this in the hopes that investors will not run away?

Something the FBI will point to...

https://www.theregister.com/2021/03/29/terror_cops_password_law_change_call/

UK terror law reviewer calls for expanded police powers to imprison people who refuse to hand over passwords

Cops should be exempted from regulatory safeguards, says lawyer

The UK's Government Reviewer of Terrorism Laws is again advising the removal of legal safeguards around a controversial law that allows people to be jailed if they refuse police demands for forced decryption of their devices.

In what appears to be a recurring theme, Jonathan Hall QC said police should be able to threaten people arrested under terror laws with five years in prison if they don't hand over passwords on demand.

By recommending the creation of a new crime of failing to co-operate with police under the law, Hall would be calling for cops to operate with fewer controls on their behaviour if they wanted to search a terror suspect's phone.

Nothing on a camera tells you what will or might happen. It may provide some useful evidence after the fact.

https://theconversation.com/ai-driven-cctv-upgrades-are-coming-to-the-worlds-most-watched-streets-will-they-make-britain-safer-157789

AI-driven CCTV upgrades are coming to the ‘world’s most watched’ streets – will they make Britain safer?

Renewed concern about the safety of public streets, especially for women, has prompted the UK government to announce the doubling of a “Safer Streets” fund to £45 million, with planned measures including more CCTV in public places such as parks.

This would be to add to a street surveillance ecosystem that is already extensive in the UK – often referred to as the most surveilled nation on Earth. The first wave of surveillance cameras went in 30 years ago, and by 2013 an estimated 5.9 million units were watching UK streets. That figure is likely far higher today, driven in part by the new availability of compact cameras like dashcams, bodycams and doorbell cameras.

… Enlarging that ecosystem still further may be a seductive policy solution to street safety concerns, but there’s limited evidence of their effectiveness at reducing and deterring crime. And, as women’s groups have recently pointed out, the focus on street surveillance neglects the wider societal change required in order to make women feel safer in public places.

It’s always good to have something to point to when we say, “That’s not how it works.”

https://www.menshealth.com/entertainment/g35960460/movies-about-ai-artificial-intelligence/

18 Movies About Artificial Intelligence Worth Streaming Now

See? I gots kulture!

https://www.bespacific.com/musee-du-louvre-launches-online-collection-database-and-new-website/

Musée du Louvre launches online collection database and new website

“Two new digital tools have just gone live to bring the richness of the Louvre collections to the world’s fingertips: collections.louvre.fr/en, a platform that for the first time ever brings together all of the museum’s artworks in one place; and a new and improved website, https://www.louvre.fr/en that is more user-friendly, attractive and immersive. Designed for both researchers and curious art lovers, the collections.louvre.fr/en database already contains more than 482,000 entries, including works from the Louvre and the Musée National Eugène-Delacroix, sculptures from the Tuileries and Carrousel gardens, and ‘MNR’ works (Musées Nationaux Récupération, or National Museums Recovery) recovered after WWII and entrusted to the Louvre until they can be returned to their legitimate owners. For the first time ever, the entire Louvre collection is available online, whether works are on display in the museum, on long-term loan in other French institutions, or in storage…”

Helping my students leave…

https://www.bespacific.com/bring-your-professional-story-to-life-on-linkedin/

Bring Your Professional Story to Life on LinkedIn

LinkedIn Blog: “…we’re excited to announce that we have re-imagined how you can bring your professional story to life on LinkedIn and are introducing tools to help you create a more expressive and inclusive Profile. This starts with a video Cover Story, a new tool that lets you personalize your first “hello,” so you can engage your audience and reach recruiters. For inspiration on how to bring yours to life, check out the video below, or see mine here. Once you add your Cover Story, an orange ring will appear around your Profile photo, and a preview of your video will auto-play silently within your photo frame (we like to think of it as the “Harry Potter” effect). And, stay tuned for captioning capabilities coming soon. For job seekers, a Cover Story is a great way to introduce yourself to hiring managers by sharing your career goals, providing a peek at your personality and showcasing your communication skills. According to a recent U.S. survey* almost 80% (76%) of hiring managers believe seeing a pre-recorded video of a job seeker would be useful. Also, if you’re searching for a job, check out the announcement from Ryan, LinkedIn’s CEO,  about free LinkedIn Learning courses to sharpen your skills…”

Another research resource.

https://www.bespacific.com/dissemin-fostering-self-archiving-of-research-papers-in-open-repositories/

Dissemin – Fostering self-archiving of research papers in open repositories

“Dissemin detects papers behind paywalls and helps their authors to upload them in one click to an open repository. FAQ – “What is dissem.in? Dissemin is a web platform gathering metadata from many sources and analyzing the full text availability of publications of researchers. It has been designed to foster the use of repositories (rather than preprints posted on personal homepages), for numerous reasons. Is dissem.in a repository? Dissemin is not a repository as it does not store any full text. When the full text of a publication is available, a link to the relevant page is provided. The full texts deposited through Dissemin are stored in third-party repositories such as Zenodo or HAL. Who runs dissem.in? Dissemin is brought to you by the CAPSH association. Can I create a profile on dissem.in? Yes, you can do it, by first registering on ORCID if you do not have an ORCID identifier yet. This only takes a few seconds, and you can then use your ORCID identifier to log into Dissemin…”

• CrossRef.org for traditional academic papers

• BASE (Bielefeld Academic Search Engine) for other papers, including preprints

• SHERPA/RoMEO for publisher policies

• Zotero for metadata associated to DOIs

Sometimes the BoD forgets all those warnings you keep repeating.

https://www.csoonline.com/article/3611771/attracted-to-disaster-secrets-of-crisis-cisos.html?upd=1617023537643

Attracted to disaster: Secrets of crisis CISOs

In the aftermath of a security incident, new CISOs are often appointed to take over and lead through the chaos. Here are the skills and traits experts say these crisis CISOs need—and how to prepare yourself to rise to the occasion.

… Enterprise executives often want new security leadership in the aftermath of a significant incident, believing that their organizations will benefit from the particular skills and the fresh perspective that a new appointee will bring, say Wallenberg and other experts.

And in many cases those executives are right: They do indeed gain something by bringing on new security chiefs.

“You see in history organizations where there was an incident or some significant regulatory action bringing in new CISOs, and some have made a night-and-day difference,” says Neil Daswani, a veteran cyber security leader and co-author of Big Breaches: Cybersecurity Lessons for Everyone.

But Daswani and others don’t discount incumbent CISOs, noting that they, too, can add value in crises. In fact, in a world where security breaches are considered a matter of when, not if, management advisors say all CISOs should be developing the skills and temperament it takes to lead through a crisis to ensure that, one, their organizations can successfully navigate the post-breach challenges and, two, that their own careers can weather the storm.

Closing the barn door before the horses escape? Not leaving the keys in your car? Making common sense part of the law might be a good thing.

https://www.csoonline.com/article/3613176/states-enact-safe-harbor-laws-against-cyberattacks-but-demand-adoption-of-cybersecurity-frameworks.html#tk.rss_all

States enact safe harbor laws against cyberattacks, but demand adoption of cybersecurity frameworks

Connecticut might soon follow Ohio and Utah by enacting a law that offers liability protection against ransomware and other cyberattacks, but only if victims follow security best practices.

While sophisticated ransomware and nation-state threat actors target US critical infrastructure, the only protection most organizations have against these attacks is tight and effective cybersecurity. These attacks have drawn government attention and sparked calls for liability protection against malicious intrusions. If organizations want this protection, however, lawmakers say they need to step up their game to implement better cybersecurity practices.

During a Senate Intelligence Committee hearing last month, Chairman Mark Warner (D-VA) said, "While I am very open to some level of liability protection, I'm not interested in a liability protection that excuses the kind of sloppy behavior, for example, that took place in Equifax, where they didn't even do the basic cyber hygiene."

Apparently still far from the Cyber War threshold.

https://www.databreaches.net/russian-hackers-stole-emails-from-trumps-cybersecurity-team-were-talking-the-crown-jewels/

Russian hackers stole emails from Trump’s cybersecurity team: ‘We’re talking the crown jewels’

Travis Gettys reports:

Suspected Russian hackers stole emails belonging to top officials in the Trump administration’s Department of Homeland Security, including members of its cybersecurity staff.

The Biden administration has tried not to reveal the scope of the breach as it considers retaliatory measures against Russia, but the Associated Press found new details about the hack of the DHS, including then-acting secretary Chad Wolf, and other agencies, including the Energy Department, where the hackers accessed top officials’ private schedules.

Read more on Raw Story.

What will we NOT be able to do without a Covid passport?

https://asia.nikkei.com/Spotlight/Coronavirus/COVID-vaccines/Japan-to-join-EU-and-China-in-issuing-digital-vaccine-passport

Japan to join EU and China in issuing digital vaccine passport

Japan will issue digital health certificates to citizens who have been inoculated against coronavirus, joining China, the European Union and other countries that have embraced vaccine passports aimed at opening up overseas travel, Nikkei has learned.

The certificate can be managed on a mobile app and will be in line with international standards, allowing the carrier to present the proof of vaccination when boarding a plane or checking in to a hotel.

Any number of error could cause some skew in AI results. How large that number must be to make the error obvious is (I think) unknown. Less than obvious error levels is the zone of mistrust for AI.

https://venturebeat.com/2021/03/28/mit-study-finds-systematic-labeling-errors-in-popular-ai-benchmark-datasets/

MIT study finds ‘systematic’ labeling errors in popular AI benchmark datasets

The field of AI and machine learning is arguably built on the shoulders of a few hundred papers, many of which draw conclusions using data from a subset of public datasets. Large, labeled corpora have been critical to the success of AI in domains ranging from image classification to audio classification. That’s because their annotations expose comprehensible patterns to machine learning algorithms, in effect telling machines what to look for in future datasets so they’re able to make predictions.

But while labeled data is usually equated with ground truth, datasets can — and do — contain errors. The processes used to construct corpora often involve some degree of automatic annotation or crowdsourcing techniques that are inherently error-prone. This becomes especially problematic when these errors reach test sets, the subsets of datasets researchers use to compare progress and validate their findings. Labeling errors here could lead scientists to draw incorrect conclusions about which models perform best in the real world, potentially undermining the framework by which the community benchmarks machine learning systems.

A new paper and website published by researchers at MIT instill little confidence that popular test sets in machine learning are immune to labeling errors. In an analysis of 10 test sets from datasets that include ImageNet, an image database used to train countless computer vision algorithms, the coauthors found an average of 3.4% errors across all of the datasets. The quantities ranged from just over 2,900 errors in the ImageNet validation set to over 5 million errors in QuickDraw, a Google-maintained collection of 50 million drawings contributed by players of the game Quick, Draw!

Could be worth a virtual visit.

https://www.govconwire.com/2021/03/potomac-officers-club-rounds-out-speakers-list-for-virtual-ai-event/

Potomac Officers Club Rounds Out Speakers List for Virtual AI Event

The Potomac Officers Club has announced the list of speakers for its third Annual Artificial Intelligence Summit, which will be held on Tuesday and will include discussions on how industry and government can jointly accelerate the pace of AI development.

This virtual event will feature Yll Bajraktari, executive director of the National Security Commission on Artificial Intelligence, as opening keynote speaker; Sue Gordon, former principal deputy director of national intelligence, as midday keynote speaker; and Lt. Gen Michael Groen, director of the Joint Artificial Intelligence Center and a 2021 Wash100 awardee, as closing keynote speaker.

Your papers, Comrade! We keep trying to implement a national identification card.

https://www.usatoday.com/story/news/health/2021/03/26/covid-vaccine-passports-new-york-first-vaccination-proof-system/6976009002/?scrolla=5eb6d68b7fedc32c19ef33b4

New York launches nation's first 'vaccine passports.' Others are working on similar ideas, but many details must be worked out.

Starting Friday, New Yorkers will be able to pull up a code on their cell phone or a printout to prove they've been vaccinated against COVID-19 or recently tested negative for the virus that causes it.

The first-in-the-nation certification, called the Excelsior Pass, will be useful first at large-scale venues like Madison Square Garden, but next week will be accepted at dozens of event, arts and entertainment venues statewide. It already enables people to increase the size of a wedding party, or other catered event.

If compliance is following a series of steps, software can handle compliance.

https://insidebigdata.com/2021/03/27/financial-chief-data-officers-making-advances-in-data-management-and-compliance-but-over-half-of-manual-processes-remain/

Financial Chief Data Officers Making Advances in Data Management and Compliance but Over Half of Manual Processes Remain

Risk data aggregation is the top compliance concern for chief data officers (CDOs) within financial services firms, with 88% of these organizations devoting 40% or more of their total data practice budget to compliance functions, according to new research launched ahead of the leading data management event for financial services, FIMA.

The survey, conducted by WBR Insights among data and information technology executives within the financial services sector and sponsored by InterSystems, highlights that financial organizations are allocating significant portions of their budget to compliance initiatives, and that 54% of those surveyed further revealed that at least half of these functions are still performed manually within their organization.

… Review the full research at HERE.

(Related)

https://venturebeat.com/2021/03/27/what%E2%80%8C-%E2%80%8Cis%E2%80%8C-%E2%80%8Cdataops%E2%80%8C-%E2%80%8Cand%E2%80%8C-%E2%80%8Cwhy%E2%80%8C-%E2%80%8Cits%E2%80%8C-%E2%80%8Ca%E2%80%8C-%E2%80%8Ctop%E2%80%8C-%E2%80%8Ctrend/

What‌ ‌is‌ ‌DataOps,‌ ‌and‌ ‌why‌ ‌it’s‌ ‌a‌ ‌top‌ ‌trend‌

The‌ ‌term‌ ‌DataOps‌ ‌emerged‌ seven‌ ‌years‌ ‌ago‌ to refer to ‌best‌ ‌practices‌ for ‌getting‌ ‌proper‌ ‌analytics,‌ ‌and research firm Gartner calls it a major trend encompassing several steps in the data lifecycle.

Just‌ as‌ ‌the‌ ‌DevOps‌ ‌trend‌ ‌led‌ ‌to‌ ‌a‌ ‌better‌ ‌process‌ ‌for‌ ‌collaboration‌ ‌between‌ ‌‌developers‌ ‌and‌ ‌operations‌ ‌teams,‌ ‌DataOps‌ ‌refers‌ ‌to closer collaboration between various teams handling data and operations teams deploying data into applications.

Not sure I agree, unless it is impossible for a second firm to access the same/similar data.

https://papers.ssrn.com/sol3/papers.cfm?abstract_id=3810366

Machine Learning as Natural Monopoly

Machine learning is transforming the economy, reshaping operations in communications, law enforcement, and medicine, among other sectors. But all is not well: It is now well-established that many machine-learning-based applications harvest vast amounts of personal information and yield results that are systematically biased. In response, policymakers have begun to offer a range of inchoate and often insufficient solutions, overlooking the possibility—suggested intuitively by scholars across disciplines—that these systems are natural monopolies, and thus neglecting the long legal tradition of natural monopoly regulation.

Drawing on the computer science, economics, and legal literatures, I find that machine-learning-based applications can be natural monopolies. Several features of machine learning suggest that this is so, including the fixed costs of developing these applications and the computational methods of optimizing these systems. This conclusion yields concrete policy implications: Where natural monopolies exist, public oversight and regulation is typically superior to market discipline through competition. Hence, where machine-learning-based applications are natural monopolies, this regulatory tradition offers one framework for confronting a range of issues—from privacy to accuracy and bias—that attend to such systems. Just as prior natural monopolies—the railways, electric grids, and telephone networks—faced rate and service regulation to protect against extractive, anticompetitive, and undemocratic behaviors, so too might machine-learning-based applications face similar public regulation to limit intrusive data collection and protect against algorithmic redlining, among other harms.

A syllabus with open source material.

https://digitalcommons.njit.edu/cgi/viewcontent.cgi?article=1336&context=hum-syllabi

PHIL 334-006: Engineering Ethics

What roles can engineers play in confronting the unprecedented challenges brought on by our increasingly technological world? This course examines various forms of engineering through the lens of applied ethics and the philosophy of technology. We will discuss topics such as whistleblowing, the ethics of drones, the politics of clean energy, sustainable design, and the extent to which automation poses a threat to democracy. This course also has a heavy focus on ethical issues pertaining to artificial intelligence, e.g., could robots ever be considered legal persons? We will spend a considerable amount of time discussing engineering approaches to the climate crisis and our responsibilities to future generations.

Helping my students leave…

https://www.makeuseof.com/resume-builder-apps-android/

The 7 Best Resume Builder Apps for Android

Wally’s PowerPoint tips?

https://dilbert.com/strip/2021-03-28

Probably not too unusual. What might the implications be?

https://www.itnews.com.au/news/service-nsw-unable-to-notify-54000-customers-impacted-by-cyber-attack-562675

Service NSW unable to notify 54,000 customers impacted by cyber attack

Service NSW has been unable to reach more than half the 104,000 customers who had their personal information stolen in an email compromise attack against 47 staff members last year.

The data breach, which exposed 736GB of data between March and early April 2020, is also now likely to cost up to $35 million to remediate, more than five times as much as first estimated.

In an update on Friday, the one-stop shop for NSW government services said it had been unable to reach approximately 18,500 customers for whom it had sent a notification via registered mail, but that had not signed for it.

The agency has only used registered mail to notify customers to date in a bid to reduce the prospect of scammers impersonating the agency.

… But the agency has also revealed that a further 36,000 people were never contacted because it was unable to source a current residential mailing address, even after working with Transport for NSW.

Is there such a thing as a “surveillance free zone?” Is it too late to create one? Could we at least require notification/subpoena to use the data for anything other than its original purpose?

https://www.smartcitiesworld.net/news/news/partnership-created-to-expand-use-of-ai-video-analytics-across-the-us-6241

Partnership created to expand use of AI video analytics across the US

MIT-spin-off Derq has teamed with US distributor of traffic signal control and intelligent transportation systems (ITS) equipment, Control Technologies Group (CT Group), for a multi-year distribution agreement in a move to help accelerate road safety and smart infrastructure.

CT Group will be distributing Derq’s artificial intelligence (AI) video analytics solutions for connected roads and vehicles as well as traffic and safety insights across its network in the US.

(Related)

https://www.theguardian.com/business/2021/mar/26/missing-from-desk-ai-webcam-raises-remote-surveillance-concerns

'Missing from desk': AI webcam raises remote surveillance concerns

For anyone concerned that an era of home working could also become one of remote surveillance, the training video for Teleperformance’s in-house webcam security system, called TP Observer, is the stuff of bad dreams.

Explained by “Anna”, a desk-sitting avatar complete with an artificial voice, the video introduces TP Observer as “a risk-mitigation tool that monitors and tracks real time employee behaviour, and detects any violations to pre-set business rules”.

Anna explains that this means home workers will have an AI-enabled webcam added to their computers that recognises their face, tags their location and scans for “breaches” of rules at random points during a shift.

These include an “unknown person” detected at the desk via the facial recognition software, “missing from desk”, “detecting an idle user” and “unauthorised mobile phone usage”.

(Related)

https://www.makeuseof.com/governments-requested-record-data/

Governments Requested Record Amounts of Data in 2020. Should You Be Worried?

… In the six-month period between July 1 and December 31 2020, Amazon received an 800 percent increase in user data requests. The e-commerce giant was contacted by organizations both in the US and abroad.

Overall, 27,664 cases of requested data sharing were processed by the company.

Amazon said in its report that queries related to using data related to shopping searches. They were also associated with the company's Echo, Ring, and Fire services.

In a separate part of the report, the company revealed that 523 data requests had been made in relation to Amazon Web Services, which offers various cloud-based products.

Every ‘feature’ is a potential ‘flaw.’

https://portswigger.net/daily-swig/isnt-it-ironic-exploiting-gdpr-laws-to-gain-access-to-personal-data

Isn’t it ironic: Exploiting GDPR laws to gain access to personal data

… Under the sweeping legislation, individuals can use a Data Subject Access Request (DSAR) to access information that an organization is processing about them.

However, as Hx01 found, many of these organizations are exposed to DSAR vulnerabilities and exploits “ranging from lack of email confirmations to an SSTI affecting multiple organizations”, meaning that an unauthorized attacker could gain access to private data.

… Added to this, companies accepting DSAR requests through email channels would often process the request without vetting it, allowing an attacker to spoof emails on behalf of the victim and send a DSAR request due to a lack of email authentication.

Here we go again.

https://www.law.com/therecorder/2021/03/26/the-case-for-ai-as-named-inventors/

The Case for AI as Named Inventors

On April 6, Ryan Abbott of the University of Surrey School of Law will be arguing an appeal of the USPTO's rejection of a patent application that named only a machine as the inventor. Abbott says if the legal system doesn't allow AI-generated output to be protected, people will not be encouraged to develop innovation using artificial intelligence.

We’ve heard some arguments against the idea of allowing artificially intelligent machines to be named inventors on patents. This week I’m giving equal time to Professor Ryan Abbott of the University of Surrey School of Law and author of The Reasonable Robot: Artificial Invention and the Law. Abbott will be representing Stephen Thaler in the Eastern District of Virginia on April 6. Thaler is appealing the USPTO’s rejection of a patent application that named only Thaler’s inventive machine, DABUS. (Thaler’s motion for summary judgment here, PTO opposition here, Thaler reply here.)

Using the hype for fund raising? If so, smart!

https://www.tampabay.com/opinion/2021/03/27/heres-why-uf-is-going-to-use-artificial-intelligence-across-its-entire-curriculum-column/

Here’s why UF is going to use artificial intelligence across its entire curriculum | Column

… UF will likely be the nation’s first comprehensive research institution to integrate AI across the curriculum and make it a ubiquitous part of its academic enterprise. It will offer certificates and degree programs in AI and data science, with curriculum modules for specific technical and industry-focused domains. The result? Thousands of students per year will graduate with AI skills, growing the AI-trained workforce in Florida and serving as a national model for institutions across the country. Ultimately, UF’s effort will help to address the important national problem of how to train the nation’s 21st-century workforce at scale.

Have we been frying brains for a generation? No one reads the user manual…

https://www.makeuseof.com/right-way-make-calls-using-mobile-phone/

The Right Way to Make Calls Using Your Mobile Phone

… Nearly all cellphone manufacturers advise a distance of at least a quarter of an inch away. In fact, Apple even advises you to keep the cellphone at least ½ inch from their body or brain when in use. Other factors that influence radiation levels when using mobile phones are signal strength, distance, and connection time.

… Start by avoiding taking calls when your phone has a weak signal. When you only have one or two bars, your phone must emit more energy to connect to a tower. Similarly, the moments when you are trying to connect to a call also generate more radiation than the actual call itself.

To minimize exposure, wait for the line to connect before putting the cellphone close to your ear.

Interesting.

https://physicsworld.com/a/alan-turing-50-note-is-unveiled-how-to-get-a-mortgage-on-the-moon/

Alan Turing £50 note is unveiled, how to get a mortgage on the Moon

The Bank of England has unveiled the final design of its new £50 polymer banknote that features the mathematician and wartime codebreaker Alan Turing. The new £50 – the last of the bank’s notes to go from paper to polymer – will come into circulation on 23 June, which is the 109th anniversary of Turing’s birth. “He was a leading mathematician, developmental biologist and a pioneer in the field of computer science,” says Bank of England governor Andrew Bailey. “He was also gay and was treated appallingly as a result. By placing him on our new polymer £50 banknote, we are celebrating his achievements, and the values he symbolizes.”