Posted by msmash from Slashdot
From the my-firm,-my-rules department: An anonymous reader shares a report: Slack, an instant-messaging service popular with businesses, recently blocked other software firms from searching or storing Slack messages even if their customers permit them to do so, according to a public disclosure from Slack's owner, Salesforce.
The move, which hasn't previously been reported, could hamper fast-growing artificial intelligence startups that have used such access to power their services, such as Glean. Since the Salesforce change, Glean and other applications can no longer index, copy or store the data they access via the Slack application programming interface on a long-term basis, according to the disclosure. Salesforce will continue allowing such firms to temporarily use and store their customers' Slack data, but they must delete the data, the company said.
Posted by BeauHD from Slashdot
From the DIY-FTW department: An anonymous reader quotes a report from The Register: US Navy Secretary John Phelan has told the Senate the service needs the right to repair its own gear, and will rethink how it writes contracts to keep control of intellectual property and ensure sailors can fix hardware, especially in a fight. Speaking to the Senate Armed Services Committee on Tuesday, Phelan cited the case of the USS Gerald R. Ford, America's largest and most expensive nuclear-powered aircraft carrier, which carried a price tag of $13 billion. The ship was struggling to feed its crew of over 4,500 because six of its eight ovens were out of action, and sailors were barred by contract from fixing them themselves.
"I am a huge supporter of right to repair," Phelan told the politicians. "I went on the carrier; they had eight ovens -- this is a ship that serves 15,300 meals a day. Only two were working. Six were out." He pointed out the Navy personnel are capable of fixing their own gear but are blocked by contracts that reserve repairs for vendors, often due to IP restrictions. That drives up costs and slows down basic fixes. According to the Government Accountability Office, about 70 percent [PDF] of a weapon system's life-cycle cost goes to operations and support. A similar issue plagued the USS Gerald Ford's weapons elevators, which move bombs from deep storage to the flight deck. They reportedly took more than four years after delivery to become fully operational, delaying the carrier's first proper deployment. "They have to come out and diagnose the problem, and then they'll fix it," Phelan said. "It is crazy. We should be able to fix this." "Our soldiers are immensely smart and capable and should not need to rely on a third party contractor to maintain their equipment. Oven repair is not rocket science: of course sailors should be able to repair their ovens," Kyle Wiens, CEO of repair specialists iFixit told The Register.
< This article continues on their website >
Posted by BeauHD from Slashdot
From the supply-and-demand department: Meta has struck a new deal with geothermal startup XGS Energy to supply 150 megawatts of carbon-free electricity for its New Mexico data center. "Advances in AI require continued energy to support infrastructure development," Urvi Parekh, global head of energy at Meta, said in a press release. "With next-generation geothermal technologies like XGS ready for scale, geothermal can be a major player in supporting the advancement of technologies like AI as well as domestic data center development." The Verge reports: Geothermal plants generate electricity using Earth's heat; typically drawing up hot fluids or steam from natural reservoirs to turn turbines. That tactic is limited by natural geography, however, and the US gets around half a percent of its electricity from geothermal sources. Startups including XGS are trying to change that by making geothermal energy more accessible. Last year, Meta made a separate 150MW deal with Sage Geosystems to develop new geothermal power plants. Sage is developing technologies to harness energy from hot, dry rock formations by drilling and pumping water underground, essentially creating artificial reservoirs. Google has its own partnership with another startup called Fervo developing similar technology.
XGS Energy is also seeking to exploit geothermal energy from dry rock resources. It tries to set itself apart by reusing water in a closed-loop process designed to prevent water from escaping into cracks in the rock. The water it uses to take advantage of underground heat circulates inside a steel casing. Conserving water is especially crucial in a drought-prone state like New Mexico, where Meta is expanding its Los Lunas data center. Meta declined to say how much it's spending on this deal with XGS Energy. The initiative will roll out in two phases with a goal of being operational by 2030.
Posted by BeauHD from Slashdot
From the first-known-infections department: An anonymous reader quotes a report from TechCrunch: Two European journalists were hacked using government spyware made by Israeli surveillance tech provider Paragon, new research has confirmed. On Thursday, digital rights group The Citizen Lab published a new report detailing the results of a new forensic investigation into the iPhones of Italian journalist Ciro Pellegrino and an unnamed "prominent" European journalist. The researchers said both journalists were hacked by the same Paragon customer, based on evidence found on the two journalists' devices.
Until now, there was no evidence that Pellegrino, who works for online news website Fanpage, had been either targeted or hacked with Paragon spyware. When he was alerted by Apple at the end of April, the notification referred to a mercenary spyware attack, but did not specifically mention Paragon, nor whether his phone had been infected with the spyware. The confirmation of the first-ever known Paragon infections further deepens an ongoing spyware scandal that, for now, appears to be mostly focused on the use of spyware by the Italian government, but could expand to include other countries in Europe.
< This article continues on their website >
Posted by BeauHD from Slashdot
From the passwordless-future department: During this week's Worldwide Developers Conference, Apple unveiled a secure import/export feature for passkeys that addresses one of their biggest limitations: lack of interoperability across platforms and credential managers. The feature, built in collaboration with the FIDO Alliance, enables encrypted, user-initiated passkey transfers between apps and systems. Ars Technica's Dan Goodin says it "provides the strongest indication yet that passkey developers are making meaningful progress in improving usability." From the report: "People own their credentials and should have the flexibility to manage them where they choose," the narrator of the Apple video says. "This gives people more control over their data and the choice of which credential manager they use." The transfer feature, which will also work with passwords and verification codes, provides an industry-standard means for apps and OSes to more securely sync these credentials.
As the video explains: "This new process is fundamentally different and more secure than traditional credential export methods, which often involve exporting an unencrypted CSV or JSON file, then manually importing it into another app. The transfer process is user initiated, occurs directly between participating credential manager apps and is secured by local authentication like Face ID. This transfer uses a data schema that was built in collaboration with the members of the FIDO Alliance. It standardizes the data format for passkeys, passwords, verification codes, and more data types. The system provides a secure mechanism to move the data between apps. No insecure files are created on disk, eliminating the risk of credential leaks from exported files. It's a modern, secure way to move credentials."