YCLOAK

Wasteless, an Israeli firm seeking to reduce food waste and save consumers money, won $2 million in funding Tuesday, as more businesses seek to cut food losses amid rising global hunger.

The two-year-old firm sells software to supermarkets so that they can manage their stocks and reduce food prices as shelf life dwindles, reducing waste and boosting profits.

“We inspire customers to be better citizens of the world and to take part in the war against food waste, while at the same time enjoying better prices,” Ben Biron, one of the founders of Wasteless, said in a statement.

Food waste is increasingly viewed as unethical, as well as environmentally destructive, dumped in landfills where it rots, releasing greenhouse gases, while fuel, water and energy needed to grow, store and carry it is wasted.

A growing number of impact investors — who aim to bring social or environmental change as well as making a profit — are putting their money into businesses responding to political and consumer pressures to address climate change and waste.

Globally, one third of all food produced — worth $1 trillion — is binned every year, according to the United Nations’ Food and Agriculture Organization, and researchers fear annual food waste could rise by a third to 2.1 billion tons by 2030.

World leaders pledged to halve food waste by then under the sustainable development goals set by the United Nations in 2015.

Wasteless said it will use the investment from Slingshot Ventures, a Dutch venture capital firm, to focus on West European food retailers.

In a trial with a Spanish food retailer earlier this year, Wasteless said its algorithm, which allows customers to choose between older or fresher food at different prices, cut food waste by a third and increased revenue by 6 percent.

Many experts say changing business practices and consumer behavior, rather than giving away excess food, is key to reducing waste.

“There isn’t any more land or any more water. One of the things that has to happen is the food that is grown has to get eaten,” Oliver Wyncoll, a partner at Bridges Fund Management, a U.K.-based impact investor, told Reuters.

“In the next few years, you will see an increasing level of investment in food waste. … The difficulty of the philanthropic charity type model is it’s not scalable unless you have a bottomless pit of donations.”
…

Facebook on Tuesday hosted its first global summit spotlighting a growing Workplace platform launched two years ago as a private social network for businesses.

While Facebook would not disclose exact figures, it said Workplace – a rival to collaboration services like Slack, Salesforce, and Microsoft – has been a hit and that ranks of users have doubled in the past eight to 10 months.

The list of companies using Workplace included Walmart, Starbucks, Spotify, Delta, and Virgin Atlantic.

“It is growing very fast,” Workplace by Facebook vice president Julien Codorniou told AFP.

“We started with big companies, because that is where we found traction. It is a very good niche.”

Workplace is a separate operation from Facebook’s main social network and is intended as a platform to connect everyone in a company, from counter or warehouse workers to chief executives, according to Codorniou.

Workplace claimed that a differentiator from its competitors is that it connects all employees in businesses no matter their roles, even if their only computing device is a smartphone.

“That really resonates with a new generation,” Codorniou said of Workplace’s “democratic” nature.

“Millennials want to know who they work for and understand the culture of the company.”

He cited cases of top company executives using Workplace to get feedback from workers at all levels, bringing a small company feel to big operations.

Workplace is rolled out to everyone in companies, which then pay $3 monthly for each active user.

No ‘Candy Crush’

The software-as-a-service business began as an internal collaboration platform used at Facebook and was launched as its own business in 2016.

Workplace is used by 30,000 companies and has its main office in London, according to Codorniou.

Interaction with the platform plays off how people use Facebook, and Workplace adopts innovations from the leading social network. But, it is billed as a completely separate product.

“This is coming from Facebook Inc., but has nothing to do with Facebook,” he said.

“You cannot play ‘Candy Crush’ on Workplace, but people ask. We just take what makes sense.”

The conference was used to announce new Workplace features including a version of Facebook safety check designed as a way for companies to quickly determine the status and well-being of workers in event of disaster or tragedy.

Workplace also introduced the ability to have group voice or video chats with people routinely worked with outside a company.
…

If you are listening to music, chances are you’re on YouTube.

A music consumer report by the industry’s global body IFPI published Tuesday found that 86 percent of us listen to music through on-demand streaming.

And nearly half that time, 47 percent is spent on YouTube.

Video as a whole accounted for 52 percent of the time we spent streaming music, posing challenges to such subscription services as Spotify and SoundCloud.

But while Spotify’s estimated annual revenue per user was $20 (17.5 euros), YouTube’s was less than a dollar.

The London-based IFPI issued a broader overview in April that found digital sales for the first time making up the majority of global revenues thanks to streaming.

The report published Tuesday looked into where and when we listen to music.

It found that three in four people globally use smartphones, with the rate among 16- to 24-year-olds reaching 94 percent.

The highest levels were recorded in India, where 96 percent of consumers used smartphones for music, including 99 percent of young adults.

But music does not end when we put away our phones, with 86 percent globally also listening to the radio.

Copyright infringement was still a big issue, with unlicensed music accounting for 38 percent of what was consumed around the world.

“This report also shows the challenges the music community continues to face — both in the form of the evolving threat of digital copyright infringement as well as in the failure to achieve fair compensation from some user-upload services,” said IFPI chief Frances Moore.

The report noted that “96% of consumers in China and 96% in India listen to licensed music.”

It did not, however, say how many of those consumers also listened to music that infringed copyrights.

Overall, the average consumer spent 2.5 hours a day listening to music, with the largest share of it consumed while driving, the industry report said.
…

Google is dropping out of the bidding for a huge Pentagon cloud computing contract that could be worth up to $10 billion, saying the deal would be inconsistent with its principles.

The decision by Google, confirmed to AFP in an email Tuesday, leaves a handful of other tech giants including Amazon in the running for the Joint Enterprise Defense Infrastructure (JEDI) contract aimed at modernizing the military’s computing systems.

The move comes following protests by Google employees on the tech giant’s involvement in separate military effort known as Project Maven using artificial intelligence to help interpret video images.

Google decided not to renew its involvement in Maven and this week backed away from the cloud computing contract, citing similar concerns about values.

“While we are working to support the US government with our cloud in many areas, we are not bidding on the JEDI contract because first, we couldn’t be assured that it would align with our AI Principles and second, we determined that there were portions of the contract that were out of scope with our current government certifications,” Google said in a statement.

“We will continue to pursue strategic work to help state, local and federal customers modernize their infrastructure and meet their mission critical requirements.”

In June, Google chief executive Sundar Pichai unveiled a set of principles on the company’s use of artificial intelligence, saying that the company would not participate in “technologies that cause or are likely to cause overall harm” and would stay away from “weapons or other technologies whose principal purpose or implementation is to cause or directly facilitate injury to people.”
…

U.S. cities are being overtaken by the scooter craze young and old riding rented electric-powered scooters everywhere. That has given rise to a new line of work people who go out at night to charge those scooters to earn some money. Michelle Quinn met some “juicers.”
…

You see them everywhere in U.S. cities — young and old riding rented electric-powered scooters. When they are done, they can leave the scooters anywhere. 

Someone has to find and charge the scooters, then return them to designated hot spots where customers can use them the next day. And that has given rise to a new line of work — scooter juicers. 

Shivali Sharma is a stay-at-home mom in San Jose, California, and a Marine staff sergeant on medical leave. She works as a juicer to earn money while her boys sleep. 

“The hunt is fun,” she said.

It’s a new kind of piece work, made possible by GPS and phone apps. 

Sharma and her family noticed the scooters being left on their streets. It intrigued them.

“We were like, ‘What is this scooter doing? Who does it belong to?’” she said.

Then they heard about juicing and signed up. The company sent them charging stations. 

For the past several months, Sharma’s routine is set. Each night, this single mom leaves her twins with her parents and checks her phone app for Lime scooters scattered around the city, sending out GPS locator signals, all needing to be charged. She earns $6 per scooter, more if the scooter is harder to reach.

Charging scooters at home

For the scooter companies, juicers solve two problems — finding the scooters and then using their own electricity to charge them before putting them back on the streets. 

The competition among the juicers is part of the appeal, something Lime, one of the scooter companies, didn’t expect.

“The fact that juicers compare it to Pokemon Go is a happy accident,” said Will Lee, product manager at Lime, a San Francisco-based electric bike and scooter company. “Now that we’ve hit on this motivation, this gamification motivation among the juicers, we have done things to maybe amplify it or try to feed into folks’ natural desire to play the game.”

Gamification of work

To increase juicers’ engagement as the night progresses, Lime raises the dollar amount a juicer can get per scooter. A scooter in the middle of a homeless encampment may go for $10. The company plans to create levels of juicers, like a video game. 

Sharma, who has harvested more than 1,000 scooters, may be considered a super juicer. She can get 29 scooters in her truck. The work can be tiring. Each scooter weighs 15 kilos. Dealing with the competition is part of the gig. 

“There’s been many instances where I’ve been standing right next to a scooter just waiting for my app to kick in so I can collect the scooter,” she said. “Somebody’s come up from behind me just taking it, like, don’t you see me standing here?”

Sharma’s nightly hunt takes a lot of stamina. She works six nights a week, and wakes up at 3:30 a.m. to put all the scooters around the city before 7 a.m. She gets paid by 7:30 a.m. each day. 

As the gig economy grows, and more jobs like juicers are created, people like Sharma, who are willing to hustle, are finding new kinds of work. 

An earlier version of this story misidentified Will Lee’s title. VOA regrets the error.
…

Google exposed the personal data of about 500,000 Google+ users to potential misuse by outside developers for years through a bug, then concealed the error to avoid consequences, according to an investigation published by The Wall Street Journal Monday.

Parent company Alphabet Inc responded by announcing it would shut down Google+, a largely defunct social network launched in 2011 to compete with Facebook. Shares of Alphabet Inc fell by about 1 percent in response to the story.  

“Our Privacy & Data Protection Office reviewed this issue, looking at the type of data involved, whether we could accurately identify the users to inform, whether there was any evidence of misuse, and whether there were any actions a developer or user could take in response,” Google said of the error in a statement to VOA News. “None of these thresholds were met in this instance.”

The report alleges that the bug became active in 2015, only being discovered by Google and shut down in March of this year. Google confirmed that it had discovered the bug in March, but would not say when it became active.

The Wall Street Journal says it reviewed an internal memo circulated among Google’s legal staff and senior executives that warned of “immediate regulatory interest” and public comparisons to Facebook’s user information leak to Cambridge Analytica should the mistake become public.

According to the paper, the memo said that while Google could not find evidence that the exposed data had been misused, it also could not prove that misuse did not happen.

CEO Sundar Pichai was reportedly informed of the decision to not tell users after it had already been made by an internal committee.

The data exposed included full names, email addresses, birth dates, gender, profile pictures, places lived, occupations and relationship status. It did not include phone numbers, the content of emails or messages, or other kinds of communication data.

Google also said it would begin restricting the data it provides to outside developers. Hours after the story broke, “Google+” was a top trending term on Twitter.
…

Twitter will strengthen rules rules to prevent sexual harassment and abuse on its platform, the social media company said Monday in an email to the collection of safety advocates, researchers and academics it uses help set its policies. There will also be harsher penalties for misconduct.

The new guidelines include immediately and permanently suspending the accounts of anyone who posts or is the source of non-consensual nudity. Twitter’s definition of non-consensual nudity will be expanded to include photos that are taken covertly.

Third parties will now be able to report unwanted sexual advances from one user to another. Previously, only those directly involved in the matter could do so.

Twitter also promised to publish new rules adding hate symbols and imagery to its definition of sensitive media.

The changes come on the heels of a series of tweets from CEO Jack Dorsey Friday pledging to limit the number of bullies and harassers using Twitter.

The micro-blogging platform faced intense criticism last year after it temporarily banned actress Rose McGowan last year for a tweeting out contact information for person she said was connected with Harvey Weinstein, who has faced accusations of sexual assault from McGowan and others.
…

Facebook on Monday released a smart speaker designed to ease video calls, but the company’s history of privacy mishaps and the device’s price and limited functionality could slow it from taking on market leaders Amazon.com and Alphabet’s Google.

The device, known as Portal, comes in $199 and $349 versions and its signature feature is a wide-angle camera that automatically keeps users in focus as they move about a room, Facebook hardware executives told Reuters in a meeting last week.

They said Portal is available at Amazon and Best Buy stores in addition to Facebook.com and starts shipping to U.S. customers in early November.

Smart speakers costing under $100 from Amazon and Google have become best sellers in the nascent industry. Users issue voice commands to search, shop and listen to music, turning the speakers into a major funnel into the technology companies’ competing networks.

Portal could help Facebook stop users from flocking to rival chat and video apps on other speakers and give it a new, wholly controlled environment to sell ads.

About 32 percent of U.S. consumers own a smart speaker, but another 16 percent plan to buy one by the end of 2018, according to an Adobe Analytics survey released last month.

Facebook expects to stand apart on the market because of Portal’s touchscreen and the 400 million people who call through its Messenger service each month worldwide. Rival smart speakers with screens lack a video-chatting app that is as popular.

Still, Amazon has shipped 1 million of its Echo speakers with displays over the last year, according to research firm Canalys, which expects 4 million such devices across brands to ship globally next year.

Portal’s camera, which uses a form of artificial intelligence to recognize body shapes, is a major marketing point, offering users the convenience of staying in the frame without having to adjust the device.

“Our goal is to make you feel present in the same space as the person on the other end,” said Rafa Camargo, the Facebook vice president overseeing Portal.

The launch of the product comes at a tricky time for Facebook. Last month, it announced an attacker gained the ability to take over 50 million user accounts because of software flaws.

Scrutiny this year over Facebook’s privacy and content moderation practices have led some people to abandon the service and the company to warn of thinning profits.

Portal locks with a passcode, and its microphones and camera shuts off with the tap of a button. Video and voice calls are encrypted and contents of them are not stored, the company said.

Users can conference with any Messenger user.

Portal integrates Amazon’s Alexa voice assistant to handle search queries, and Facebook collects audio files of requests made to Alexa.

The higher-priced Portal’s screen is 15.6 inches, versus 10 inches. Both display photos and notifications from Facebook and videos from Food Network, but offer few other applications.

Additional features are available during calls, including joint listening on Spotify. A handful of animated e-books such as “Itsy Bitsy Spider” will be included at launch for interactive story time.

Portal runs on the open-source version of Google’s Android mobile operating system, similar to many Amazon devices.

Facebook’s previous hardware, including its Oculus virtual reality headset and a phone developed with HTC, gained little adoption.
…

The massive breach of Facebook and the exposure of the information of an estimated 50 million users last week has highlighted one of the problems with all the data we are putting out into the world. City planners share those concerns, but they’re looking also looking at how “Big Data” may be a big boost in helping their own cities develop. VOA’s Kevin Enochs reports.
…

The U.S. Department of Homeland Security said Saturday it currently had no reason to doubt statements from companies that have denied a Bloomberg report that their supply chains were compromised by malicious computer chips inserted by Chinese intelligence services.

“The Department of Homeland Security is aware of the media reports of a technology supply chain compromise,” DHS said in a statement.

“Like our partners in the UK, the National Cyber Security Centre, at this time we have no reason to doubt the statements from the companies named in the story,” it said.

Bloomberg Businessweek on Thursday cited 17 unidentified intelligence and company sources as saying that Chinese spies had placed computer chips inside equipment used by around 30 companies, as well as multiple U.S. government agencies, which would give Beijing secret access to internal networks.

Apple and Amazon

Britain’s national cyber security agency said Friday it had no reason to doubt the assessments made by Apple Inc and Amazon.com Inc challenging the report.

Apple contested the Bloomberg report Thursday, saying its own internal investigations found no evidence to support the story’s claims and that neither the company, nor its contacts in law enforcement, were aware of any investigation by the FBI on the matter.

Apple’s recently retired general counsel, Bruce Sewell, told Reuters he called the FBI’s then-general counsel, James Baker, last year after being told by Bloomberg of an open investigation of Super Micro Computer Inc, a hardware maker whose products Bloomberg said were implanted with malicious Chinese chips.

“I got on the phone with him personally and said, ‘Do you know anything about this?” Sewell said of his conversation with Baker. “He said, ‘I’ve never heard of this, but give me 24 hours to make sure.’ He called me back 24 hours later and said ‘Nobody here knows what this story is about.” Baker and the FBI declined to comment Friday.
…

The U.S. farm-to-table trend is definitely one of the latest. Americans are hungry for fresh, organic produce in their homes, and in many cases they are willing to pay more for it. But in an urban setting, residents don’t have a farm next door. The company Iron Ox is looking to change that, with the help of robust robotics. VOA’s Kevin Enochs has the story.
…

The Trump administration is moving ahead with plans to revise safety rules that bar fully self-driving cars from the roads without equipment such as steering wheels, pedals and mirrors, according to a document made public on Thursday.

The National Highway Traffic Safety Administration (NHTSA) “intends to reconsider the necessity and appropriateness of its current safety standards” as applied to automated vehicles, the U.S. Department of Transportation said in an 80-page update of its principles dubbed “Automated Vehicles 3.0.”

The department, as reported by Reuters earlier on Thursday, disclosed that the NHTSA wants comment “on proposed changes to particular safety standards to accommodate automated vehicle technologies and the possibility of setting exceptions to certain standards that are relevant only when human drivers are present.”

U.S. Transportation Secretary Elaine Chao released the document at a department event. In the report, Chao said that self-driving cars have the potential to dramatically reduce traffic crashes and road deaths. But she added the “public has legitimate concerns about the safety, security, and privacy of automated technology.”

Automakers must currently meet nearly 75 auto safety standards, many of which were written with the assumption that a licensed driver will be in control of the vehicle.

General Motors Co in January filed a petition seeking an exemption for the current rules to use vehicles without steering wheels and other human controls as part of a ride-sharing fleet it plans to deploy in 2019.

NHTSA has not declared the GM petition complete, a step necessary before it can rule on the merits. NHTSA said it plans to propose modernizing procedures to follow when reviewing exemption petitions.

Alphabet Inc’s Waymo unit plans to launch an autonomous ride-hailing service for the general public with no human driver behind the steering wheel in Arizona later this year. But unlike GM, Waymo’s vehicles will have human controls for the time being.

In March, a self-driving Uber Technologies Inc vehicle struck and killed a pedestrian, while the backup safety driver was watching a video, police said. Uber suspended testing in the aftermath and some safety advocates said the crash showed the system was not safe enough to be tested on public roads.

NHTSA has stepped up its self-driving car focus as legislation in Congress on self-driving cars, which passed the U.S. House of Representatives in 2017, has stalled. It has only a slender chance of being approved in 2018, congressional aides said.

The report said “NHTSA’s current statutory authority to establish motor vehicle safety standards is sufficiently flexible to accommodate the design and performance of different” automated vehicles.

The Center for Auto Safety said NHTSA should require companies to “submit evidence” that their self-driving technology is safe “before involuntarily involving human beings in their testing.”

GM said in a statement on Thursday that “legislation is still urgently needed” to allow “the full deployment of self-driving vehicles.”

Automakers have warned it could take too long for NHTSA to rewrite the rules to allow for the widespread of adoption of self-driving cars without human controls.

The department also said it “no longer recognizes the designations of ten automated vehicle proving grounds” announced in January 2017.

The sites, including a Michigan center that U.S. President Donald Trump visited last year, were named by Congress to be eligible for $60 million in grants “to fund demonstration projects that test the feasibility and safety” of self-driving vehicles.

The Transportation Department also announced it will start studying the workforce impacts of automated vehicles with the Labor, Commerce, and the Health and Human Services departments. 

The report also said the Trump administration will not support calls to end human driving. The department “embraces the freedom of the open road, which includes the freedom for Americans to drive their own vehicles.”
…

The U.S. government warned Wednesday that a hacking group widely known as cloudhopper, which Western cybersecurity firms have linked to the Chinese government, has launched attacks on technology service providers in a campaign to steal data from their clients.

The Department of Homeland issued a technical alert for cloudhopper, which it said was engaged in cyber espionage and theft of intellectual property, after experts with two prominent U.S. cybersecurity companies warned earlier this week that Chinese hacking activity has surged amid the escalating trade war between Washington and Beijing.

Chinese authorities have repeatedly denied claims by Western cybersecurity firms that it supports hacking.

Homeland Security

Homeland Security released the information to support U.S. companies in responding to attacks by the group, which is targeting information technology, energy, health care, communications and manufacturing firms.

“These cyber threat actors are still active and we strongly encourage our partners in government and industry to work together to defend against this threat,” DHS official Christopher Krebs said in a statement.

The reported increase in Chinese hacking follows what cybersecurity firms have described as a lull in such attacks prompted by a 2015 agreement between Chinese President Xi Jinping and former U.S. President Barrack Obama to curb cyber-enabled economic theft.

“I can tell you now unfortunately the Chinese are back,” Dmitri Alperovitch, chief technology officer of U.S. cybersecurity firm CrowdStrike, said Tuesday at a security conference in Washington.

“We’ve seen a huge pickup in activity over the past year and a half. Nowadays they are the most predominant threat actors we see threatening institutions all over this country and Western Europe,” he said.

Analysts with FireEye, another U.S. cybersecurity firm, said that some of the Chinese hacking groups it tracks have become more active in recent months.

Advice to US firms

Wednesday’s alert provided advice on how U.S. firms can prevent, identify and remediate attacks by cloudhopper, which is also known as Red Leaves and APT10.

The hacking group has largely targeted firms known as managed service providers, which supply telecommunications, technology and other services to business around the globe.

Managed service providers, or MSPs, are attractive targets because their networks provide routes for hackers to access sensitive systems of their many clients, said Ben Read, a senior intelligence manager with FireEye.

“We’ve seen this group route malware through an MSP network to other targets,” Read said.
…

North Korea’s nuclear and missile tests have stopped, but its hacking operations to gather intelligence and raise funds for the sanction-strapped government in Pyongyang may be gathering steam.

U.S. security firm FireEye raised the alarm Wednesday over a North Korean group that it says has stolen hundreds of millions of dollars by infiltrating the computer systems of banks around the world since 2014 through highly sophisticated and destructive attacks that have spanned at least 11 countries. It says the group is still operating and poses “an active global threat.”

It is part of a wider pattern of malicious state-backed cyber activity that has led the Trump administration to identify North Korea — along with Russia, Iran and China — as one of the main online threats facing the United States. Last month, the Justice Department charged a North Korean hacker said to have conspired in devastating cyberattacks, including an $81 million heist of Bangladesh’s central bank and the WannaCry virus that crippled parts of Britain’s National Health Service.

DHS offers warning

On Tuesday, the U.S. Department of Homeland Security warned of the use of malware by Hidden Cobra, the U.S. government’s byword for North Korea hackers, in fraudulent ATM cash withdrawals from banks in Asia and Africa. It said that Hidden Cobra was behind the theft of tens of millions of dollars from teller machines in the past two years. In one incident this year, cash had been simultaneously withdrawn from ATMs in 23 different countries, it said.

North Korea, which prohibits access to the world wide web for virtually all of its people, has previously denied involvement in cyberattacks, and attribution for such attacks is rarely made with absolute certainty. It is typically based on technical indicators such as the Internet Protocol, or IP, addresses that identify computers and characteristics of the coding used in malware, which is the software a hacker may use to damage or disable computers.

But other cybersecurity experts tell The Associated Press that they also see continued signs that North Korea’s authoritarian government, which has a long track record of criminality to raise cash, is conducting malign activity online. That activity includes targeting of financial institutions and crypto-currency-related organizations, as well as spying on its adversaries, despite the easing of tensions between Pyongyang and Washington.

“The reality is they are starved for cash and are continuing to try and generate revenue, at least until sanctions are diminished,” said Adam Meyers, vice president of intelligence at CrowdStrike. “At the same time, they won’t abate in intelligence collection operations, as they continue to negotiate and test the international community’s resolve and test what the boundaries are.”

North Korea attacks continue

CrowdStrike says it has detected continuing North Korean cyber intrusions in the past two months, including the use of a known malware against a potentially broad set of targets in South Korea, and a new variant of malware against users of mobile devices that use a Linux-based operating system.

This activity has been taking place against the backdrop of a dramatic diplomatic shift as Kim Jong Un has opened up to the world. He has held summits with South Korean President Moon Jae-in and with President Donald Trump, who hopes to persuade Kim to relinquish the nuclear weapons that pose a potential threat to the U.S. homeland. Tensions on the divided Korean Peninsula have dropped and fears of war with the U.S. have ebbed. Trump this weekend will dispatch his top diplomat, Mike Pompeo, to Pyongyang for the fourth time this year to make progress on denuclearization.

But North Korea has yet to take concrete steps to give up its nuclear arsenal, so there’s been no let-up in sanctions that have been imposed to deprive it of fuel and revenue for its weapons programs, and to block it from bulk cash transfers and accessing to the international banking system.

FireEye says APT38, the name it gives to the hacking group dedicated to bank theft, has emerged and stepped up its operations since February 2014 as the economic vise on North Korea has tightened in response to its nuclear and missile tests. Initial operations targeted financial institutions in Southeast Asia, where North Korea had experience in money laundering, but then expanded into other regions such as Latin America and Africa, and then extended to Europe and North America.

In all, FireEye says APT38 has attempted to steal $1.1 billion, and based on the data it can confirm, has gotten away with hundreds of millions in dollars. It has used malware to insert fraudulent transactions in the Society for Worldwide Interbank Financial Telecommunication or SWIFT system that is used to transfer money between banks. Its biggest heist to date was $81 million stolen from the central bank of Bangladesh in February 2016. The funds were wired to bank accounts established with fake identities in the Philippines. After the funds were withdrawn they were suspected to have been laundered in casinos.

Cyber attacks an alternative 

The Foundation for Defense of Democracies, a Washington think tank, said in a report Wednesday that North Korea’s cyber capabilities provide an alternative means for challenging its adversaries. While Kim’s hereditary regime appears to prioritize currency generation, attacks using the SWIFT system raise concerns that North Korean hackers “may become more proficient at manipulating the data and systems that undergird the global financial system,” it says.

Sandra Joyce, FireEye’s head of global intelligence, said that while APT38 is a criminal operation, it leverages the skills and technology of a state-backed espionage campaign, allowing it to infiltrate multiple banks at once and figure how to extract funds. On average, it dwells in a bank’s computer network for 155 days to learn about its systems before it tries to steal anything. And when it finally pounces, it uses aggressive malware to wreak havoc and cover its tracks.

“We see this as a consistent effort, before, during and after any diplomatic efforts by the United States and the international community,” said Joyce, describing North Korea as being “undeterred” and urging the U.S. government to provide more specific threat information to financial institutions about APT38’s modus operandi. APT stands for Advanced Persistent Threat.

Large Chile bank hacked

The Silicon Valley-based company says it is aware of continuing, suspected APT38 operations against other banks. The most recent attack it is publicly attributing to APT38 was against of Chile’s biggest commercial banks, Banco de Chile, in May this year. The bank has said a hacking operation robbed it of $10 million.

FireEye, which is staffed with a roster of former military and law-enforcement cyberexperts, conducted malware analysis for a criminal indictment by the Justice Department last month against Park Jin Hyok, the first time a hacker said to be from North Korea has faced U.S. criminal charges. He’s accused of conspiring in a number of devastating cyberattacks: the Bangladesh heist and other attempts to steal more than $1 billion from financial institutions around the world; the 2014 breach of Sony Pictures Entertainment; and the WannaCry ransomware virus that in 2017 infected computers in 150 countries. 
…

Brandon Alexander would like to introduce you to Angus, the farmer of the future. He’s heavyset, weighing in at nearly 1,000 pounds, not to mention a bit slow. But he’s strong enough to hoist 800-pound pallets of maturing vegetables and can move them from place to place on his own.

Sure, Angus is a robot. But don’t hold that against him, even if he looks more like a large tanning bed than C-3PO.

To Alexander, Angus and other robots are key to a new wave of local agriculture that aims to raise lettuce, basil and other produce in metropolitan areas while conserving water and sidestepping the high costs of human labor. It’s a big challenge, and some earlier efforts have flopped. Even Google’s “moonshot” laboratory, known as X, couldn’t figure out how to make the economics work.

After raising $6 million and tinkering with autonomous robots for two years, Alexander’s startup Iron Ox says it’s ready to start delivering crops of its robotically grown vegetables to people’s salad bowls. “And they are going to be the best salads you ever tasted,” says the 33-year-old Alexander, a one-time Oklahoma farmboy turned Google engineer turned startup CEO.

Iron Ox planted its first robot farm in an 8,000-square-foot warehouse in San Carlos, California, a suburb located 25 miles south of San Francisco. Although no deals have been struck yet, Alexander says Iron Ox has been talking to San Francisco Bay area restaurants interested in buying its leafy vegetables and expects to begin selling to supermarkets next year.

The San Carlos warehouse is only a proving ground for Iron Ox’s long-term goals. It plans to set up robot farms in greenhouses that will rely mostly on natural sunlight instead of high-powered indoor lighting that sucks up expensive electricity. Initially, though, the company will sell its produce at a loss in order to remain competitive.

During the next few years, Iron Ox wants to open robot farms near metropolitan areas across the U.S. to serve up fresher produce to restaurants and supermarkets. Most of the vegetables and fruit consumed in the U.S. is grown in California, Arizona, Mexico and other nations. That means many people in U.S. cities are eating lettuce that’s nearly a week old by the time it’s delivered.

There are bigger stakes as well. The world’s population is expected to swell to 10 billion by 2050 from about 7.5 billion now, making it important to find ways to feed more people without further environmental impact, according to a report from the World Resources Institute.

Iron Ox, Alexander reasons, can be part of the solution if its system can make the leap from its small, laboratory-like setting to much larger greenhouses.

The startup relies on a hydroponic system that conserves water and automation in place of humans who seem increasingly less interested in U.S. farming jobs that pay an average of $13.32 per hour, according to the U.S. Department of Agriculture. Nearly half of U.S. farmworkers planting and picking crops aren’t in the U.S. legally, based on a survey by the U.S. Department of Labor.

The heavy lifting on Iron Ox’s indoor farm is done by Angus, which rolls about the indoor farm on omnidirectional wheels. Its main job is to shuttle maturing produce to another, as-yet unnamed robot, which transfers plants from smaller growing pods to larger ones, using a mechanical arm whose joints are lubricated with “food-safe” grease.

It’s a tedious process to gently pick up each of the roughly 250 plants on each pallet and transfer them to their bigger pods, but the robot doesn’t seem to mind the work. Iron Ox still relies on people to clip its vegetables when they are ready for harvest, but Alexander says it is working on another robot that will eventually handle that job too.

Alexander formerly worked on robotics at Google X, but worked on drones, not indoor farms. While there, he met Jon Binney, Iron Ox’s co-founder and chief technology offer. The two men became friends and began to brainstorm about ways they might be able to use their engineering skills for the greater good.

“If we can feed people using robots, what could be more impactful than that?” Alexander says.

 

                 
…

Ireland’s data regulator has launched an investigation of Facebook over a recent data breach that allowed hackers access 50 million accounts which could potentially cost Facebook more than $1.6 billion in fines.

The Irish Data Protection Commission said Wednesday that it will look into whether the U.S. social media company complied with European regulations that went into effect earlier this year covering data protection.

It’s the latest headache for Facebook in Europe, where authorities are turning up the heat on dominant tech firms over data protection. Last month, European Union consumer protection chief Vera Jourova said that she was growing impatient with Facebook for being too slow in clarifying the fine print in its terms of service covering what happens to user data and warned that the company could face sanctions.

The commission said in a statement that it would examine whether Facebook put in place “appropriate technical and organizational measures to ensure the security and safeguarding of the personal data it processes.”

The commission said earlier this week the number of EU accounts potentially affected numbered less than 5 million.

Ireland, which is Facebook’s lead privacy regulator for Europe, is moving swiftly to investigate the U.S. tech company since the breach became public on Friday.

Facebook said Friday attackers gained the ability to “seize control” of user accounts by stealing digital keys the company uses to keep users logged in. They could do so by exploiting three distinct bugs in Facebook’s code.

The company said it has fixed the bugs and logged out the 50 million breached users — plus another 40 million who were vulnerable to the attack — in order to reset those digital keys. Facebook said it doesn’t know who was behind the attacks or where they’re based. Neither passwords nor credit card data was stolen. At the time, the company said it alerted the FBI and regulators in the U.S. and Europe.

Facebook on Wednesday didn’t immediately return a request for comment.

Facebook has faced a tumultuous year of security problems and privacy issues . News broke early this year that a data analytics firm once employed by the Trump campaign, Cambridge Analytica, had improperly gained access to personal data from millions of user profiles. Then a congressional investigation found that agents from Russia and other countries have been posting fake political ads since at least 2016. In April, Zuckerberg appeared at a congressional hearing focused on Facebook’s privacy practices.

The European Union implemented stronger data and privacy rules, known as General Data Protection Regulation, in May.

The case could prove to be the first major test of GDPR. Under the new rules, companies could be hit with fines equal to 4 percent of annual global turnover for the most serious violations. In Facebook’s case, that could amount to more than $1.6 billion based on its 2017 revenues.

The new rules also require companies to disclose any breaches within 72 hours. The commission said Facebook informed it that its internal investigation is continuing and that it is taking actions to “mitigate the potential risk to users.”
…

Children’s and public health advocacy groups say Facebook’s kid-centric messaging app violates federal law by collecting kids’ personal information without getting verifiable consent from their parents.

The Campaign for a Commercial-Free Childhood and other groups asked the Federal Trade Commission on Wednesday to investigate Facebook’s Messenger Kids for violating the Children’s Online Privacy Protection Act, or COPPA.

The complaint says the app does not meet COPPA requirements because it doesn’t try to ensure that the person who sets up the kids’ account and gives consent to have their data collected is the actual parent. In fact, the groups say, someone could set up a brand new, fictional account and immediately approve a kid’s account without proving their age or identity.

Facebook said Wednesday it hasn’t yet reviewed the complaint letter. The company has said it doesn’t show ads on Messenger Kids or collect data for marketing purposes, though it does collect some data it says is necessary to run the service.

But the advocacy groups say the privacy policy of Messenger Kids is “incomplete and vague” and allows Facebook to disclose data to third parties and other Facebook services “for broad, undefined business purposes.”

Facebook launched Messenger Kids last December on iOS and has since expanded to Android and Amazon devices and beyond the U.S. to Mexico, Canada and elsewhere. It is aimed at children under 13 who technically cannot have Facebook accounts (although plenty of them do).

Though the company says it has received a lot of input from parents and children’s development experts in creating the app, groups such as the CCFC have been trying to get Messenger Kids shut down since it launched.
…

Finding the motivation to get in shape can be difficult, but a new category of smart mirrors won’t let users off the hook. Tina Trinh reports.
…

U.S. President Donald Trump plans to meet with Google CEO Sundar Pichai and other tech executives this month at a social media summit.

White House economic adviser Larry Kudlow said Tuesday that the administration hoped Facebook and Twitter would send representatives to the meeting. Kudlow added the event would most likely happen in mid-October, though no date has been set.

Prominent conservatives, including the president, have accused Facebook, Google and Twitter of silencing right-leaning voices on their platforms, a suspected practice called “shadow banning.”

Kudlow had a meeting with Pichai last Friday, which he described as “great.”

Pichai drew flack from senators last month after failing to send an executive to a hearing, and he has agreed appear at another.
…

Heated streets will melt ice and snow on contact. Sensors will monitor traffic and protect pedestrians. Driverless shuttles will carry people to their doors.

A unit of Google’s parent company Alphabet is proposing to turn a rundown part of Toronto’s waterfront into what may be the most wired community in history — to “fundamentally refine what urban life can be.”

 

Sidewalk Labs has partnered with a government agency known as Waterfront Toronto with plans to erect mid-rise apartments, offices, shops and a school on a 12-acre (4.9-hectare) site — a first step toward what it hopes will eventually be a 800-acre (325-hectare) development.

 

High-level interest is clear: Prime Minister Justin Trudeau and Alphabet’s then-Executive Chairman Eric Schmidt appeared together to announce the plan in October.

 

But some Canadians are rethinking the privacy implications of giving one of the most data-hungry companies on the planet the means to wire up everything from street lights to pavement. And some want the public to get a cut of the revenue from products developed using Canada’s largest city as an urban laboratory.

 

“The Waterfront Toronto executives and board are too dumb to realize they are getting played,” said former BlackBerry chief executive Jim Balsillie, a smartphone pioneer considered a national hero.

 

Complaints about the proposed development prompted Waterfront Toronto to re-do the agreement to ensure a greater role for the official agency, which represents city, provincial and federal governments.

 

So far the project is still in the embryonic stage. After consultations, the developers plan to present a formal master plan early next year.

 

Dan Doctoroff, the CEO of Sidewalk Labs, envisions features like pavement that lights up to warn pedestrians of approaching streetcars. Flexible heated enclosures — described as “raincoats” for buildings — will be deployed based on weather data during Toronto’s bitter winters. Robotic waste-sorting systems will detect when a garbage bin is full and remove it before raccoons descend.

 

“Those are great uses of data that can improve the quality of life of people,” he said. “That’s what we want to do.”

 

Sidewalk Labs promotional materials promise “a place that’s enhanced by digital technology and data, without giving up the privacy and security that everyone deserves.”

 

Doctoroff said the company isn’t looking to monetize people’s personal information in the way that Google does now with search information. He said the plan is to invent so-far-undefined products and services that Sidewalk Labs can market elsewhere.

 

“People automatically assume because of our relationship to Alphabet and Google that they will be treated one way or another. We have never said anything” about the data issue, he said. “To be honest people should give us some time. Be patient.”

 

But that wasn’t good enough for Julie Di Lorenzo, a prominent Toronto developer who resigned from the Waterfront Toronto board over the project. Di Lorenzo said data and what Google wants to do with it should be front and center in the discussions. She also believes the government agency has given the Google affiliate too much power over how the project develops.

 

“How can [Waterfront Toronto], a corporation established by three levels of democratically elected government, have shared values with a limited, for-profit company whose premise is embedded data collection?” Di Lorenzo asked.

 

Di Lorenzo asks who will own the autonomous vehicles. “Is the municipality maintaining the fleet or forcing you to share your vehicle?” She also asks if people who don’t want their data collected will be allowed to live there.

 

The concerns have intensified following a series of privacy scandals at Facebook and Google. A recent Associated Press investigation found that many Google services on iPhones and Android devices store location-tracking data even if you use privacy settings that are supposed to turn them off.

 

“It gives all of us pause,” Waterfront board chair Helen Burstyn acknowledged.

 

Bianca Wylie, an advocate of open government, said it remains deeply troubling that Sidewalk Labs still hasn’t said who will own data produced by the project or how it will be monetized. Google is here to make money, she said, and Canadians should benefit from any data or products developed from it.

 

“We are not here to be someone’s research and development lab,” she said, “to be a loss leader for products they want to sell globally.”

 

Ottawa patent lawyer Natalie Raffoul said the fact that the current agreement leaves ownership of data issues for later shows that it wasn’t properly drafted and means patents derived from the data will default to Google.

 

“We just can’t be too trusting of corporations,” she said.

 

But Burstyn, the Waterfront Toronto chair, said the upcoming master plan will address data concerns. The agency wants to make Toronto a global hub of a rising new industry, she said.

 

“Everybody gets worried about the digital and technology aspects that might run amok,” she said. “I don’t worry about that as much as I see the opportunities for developing a really interesting, innovative community.”

 

Adam Vaughan, the federal lawmaker whose district includes the development, said debate about big data and urban infrastructure is coming to cities across the world and he would rather have Toronto at the forefront of discussion.

 

“Google is ahead of governments globally and locally. That’s a cause for concern but it’s also an opportunity,” Vaughan said.
…

The EU’s top data privacy enforcer expressed worry Tuesday that Facebook had lost control of data security after a vast privacy breach that she said affected five million Europeans.

“It is a question for the management, if they have things under control,”  EU Justice and Consumer Affairs Commissioner Vera Jourova told AFP in Luxembourg.

“The magnitude of the company … makes it very difficult to manage, but they have to do that because they are harvesting the data and they are making incredible money on using our privacy as the commodity,” she added.

Jourova spoke just days after Facebook admitted that up to 50 million user accounts around the world had been breached by hackers, in yet another scandal for the beleaguered social platform.

“I will know more … in hours or days but according to our knowledge, five million Europeans have been affected out of those 50, which is an incredible number,” she said.

Jourova said Facebook’s quick revelation of the case demonstrated that new European rules on data protection implemented earlier this year are working.

New EU rules – the General Data Protection Regulation (GDPR) – have been billed as the biggest shake-up of privacy regulations since the birth of the web and give European regulators vast new enforcement powers.

The case for GDPR was boosted by another recent scandal over the harvesting of Facebook users’ data by Cambridge Analytica, a US-British political research firm, for the 2016 US presidential election.

Jourova said the worst cases involve a company finding a major breach then failing to warn authorities or their users, which she said doesn’t appear to be the case in the latest Facebook drama.

Under GDPR, companies can be fined up to four percent of annual global turnover if they fail to abide by the rules, including notification of the data breach within 72 hours.

Facebook met this requirement, Jourova pointed out, which “is one of the factors which might result in lower sanctions, but this is only theoretical”.

 
…

Imagine seeing an incredibly detailed map of your home city in three dimensions, with every citizen carrying a cell phone showing up as a dot on that map. Well, you can’t because there are security issues galore when it comes to tracking people online. But you should know it’s possible, at least in Singapore, where city planners are considering how the technology may help improve life. VOA’s Kevin Enochs reports.
…

Adam Mosseri, a veteran 10-year Facebook executive, will become the new head of Instagram, outgoing co-founders Kevin Systrom and Mike Krieger announced Monday.

“We are thrilled to hand over the reins to a product leader with a strong design background and a focus on craft and simplicity,” Systrom and Krieger said in a press release.The pair announced their resignation last week without giving a clear explanation.

Mosseri, 35, has been Instagram’s head of product since May. He began as a designer at Facebook in 2008, and recently ran its News Feed. His appointment comes among fears that with the departure of Instagram’s independent-minded founders, the app will become more like Facebook: Cluttered with features, and invasive of user’s personal data.

Instagram was founded in 2010 and bought by Facebook two years later for $1 billion. While Facebook has struggled to hold onto younger users, Instagram remains popular with teens. It has also remained scandal-free, while Facebook has taken heat for numerous scandals including the spread of fake news, alleged exploitation of user data with third parties, electoral interference, and its use as a platform for radical leaders to spread propaganda in developing countries.
…