Microsoft Tells Yet More Customers Their Emails Have Been Stolen

Microsoft revealed that the Russian hackers who breached its systems earlier this year stole more emails than initially reported. “We are continuing notifications to customers who corresponded with Microsoft corporate email accounts that were exfiltrated by the Midnight Blizzard threat actor, and we are providing the customers the email correspondence that was accessed by this actor,” a Microsoft spokesperson told Bloomberg (paywalled). “This is increased detail for customers who have already been notified and also includes new notifications.” The Register reports: We’ve been aware for some time that the digital Russian break-in at the Windows maker saw Kremlin spies make off with source code, executive emails, and sensitive U.S. government data. Reports last week revealed that the issue was even larger than initially believed and additional customers’ data has been stolen. Along with Russia, Microsoft was also compromised by state actors from China not long ago, and that issue similarly led to the theft of emails and other data belonging to senior U.S. government officials.

Both incidents have led experts to call Microsoft a threat to U.S. national security, and president Brad Smith to issue a less-than-reassuring mea culpa to Congress. All the while, the U.S. government has actually invested more in its Microsoft kit. Bloomberg reported that emails being sent to affected Microsoft customers include a link to a secure environment where customers can visit a site to review messages Microsoft identified as having been compromised. But even that might not have been the most security-conscious way to notify folks: Several thought they were being phished.

Read more of this story at Slashdot.

Caching Is Key, and SIEVE Is Better Than LRU

USENIX, the long-running OS/networking research group, also publishes a magazine called ;login:. Today the magazine’s editor — security consultant Rik Farrow — stopped by Slashdot to share some new research. rikfarrow writes:
Caching means using faster memory to store frequently requested data, and the most commonly used algorithm for determining which items to discard when the cache is full is Least Recently Used [or “LRU”]. These researchers have come up with a more efficient and scalable method that uses just a few lines of code to convert LRU to SIEVE.
Just like a sieve, it sifts through objects (using a pointer called a “hand”) to “filter out unpopular objects and retain the popular ones,” with popularity based on a single bit that tracks whether a cached object has been visited:

As the “hand” moves from the tail (the oldest object) to the head (the newest object), objects that have not been visited are evicted… During the subsequent rounds of sifting, if objects that survived previous rounds remain popular, they will stay in the cache. In such a case, since most old objects are not evicted, the eviction hand quickly moves past the old popular objects to the queue positions close to the head. This allows newly inserted objects to be quickly assessed and evicted, putting greater eviction pressure on unpopular items (such as “one-hit wonders”) than LRU-based eviction algorithms.
It’s an example of “lazy promotion and quick demotion”. Popular objects get retained with minimal effort, with quick demotion “critical because most objects are not reused before eviction.”

After 1559 traces (of 247,017 million requests to 14,852 million objects), they found SIEVE reduces the miss ratio (when needed data isn’t in the cache) by more than 42% on 10% of the traces with a mean of 21%, when compared to FIFO. (And it was also faster and more scalable than LRU.)

“SIEVE not only achieves better efficiency, higher throughput, and better scalability, but it is also very simple.”

Read more of this story at Slashdot.

William Gibson’s ‘Neuromancer’ to Become a Series on Apple TV+

It’s been adapted into a graphic novel, a videogame, a radio play, and an opera, according to Wikipedia — which also describes years of trying to adapt Neuromancer into a movie. “The landmark 1984 cyberpunk novel has been on Hollywood’s wishlist for decades,” writes Gizmodo, “with multiple filmmakers attempting to bring it to the big screen.” (Back in 2010, Slashdot’s CmdrTaco even posted an update with the headline “Neuromancer Movie In Your Future?” with a 2011 story promising the movie deal was “moving forward….”)

But now Deadline reports it’s becoming a 10-episode series on Apple TV+ (co-produced by Apple Studios) starring Callum Turner and Brianna Middleton:
Created for television by Graham Roland and JD Dillard, Neuromancer follows a damaged, top-rung super-hacker named Case (Turner) who is thrust into a web of digital espionage and high stakes crime with his partner Molly (Middleton), a razor-girl assassin with mirrored eyes, aiming to pull a heist on a corporate dynasty with untold secrets.
More from Gizmodo:
“We’re incredibly excited to be bringing this iconic property to Apple TV+,” Roland and Dillard said in a statement. “Since we became friends nearly 10 years ago, we’ve looked for something to team up on, so this collaboration marks a dream come true. Neuromancer has inspired so much of the science fiction that’s come after it and we’re looking forward to bringing television audiences into Gibson’s definitive ‘cyberpunk’ world.”
The novel launched Gibson’s “Sprawl” trilogy of novels (building on the dystopia in his 1982 short story “Burning Chrome”), also resurrecting the “Molly Millions” character from Johnny Mnemonic — an even earlier short story from 1981…

Read more of this story at Slashdot.

Boeing Fraud Violated Fatal MAX Crash Settlement, Says Justice Department, Seeking Guilty Plea on Criminal Charges

America’s Justice Department “is pushing for Boeing to plead guilty to a criminal charge,” reports Reuters, “after finding the planemaker violated a settlement over fatal 737 MAX crashes in 2018 and 2019 that killed 346 people, two people familiar with the matter said on Sunday.”

Boeing previously paid $2.5 billion as part of the deal with prosecutors that granted the company immunity from criminal prosecution over a fraud conspiracy charge related to the 737 MAX’s flawed design. Boeing had to abide by the terms of the deferred prosecution agreement for a three-year period that ended on Jan. 7. Prosecutors would then have been poised to ask a judge to dismiss the fraud conspiracy charge. But in May, the Justice Department found Boeing breached the agreement, exposing the company to prosecution.
A guilty plea could “carry implications for Boeing’s ability to enter into government contracts,” the article points out, “such as those with the U.S. military that make up a significant portion of its revenue…”

The proposal would require Boeing to plead guilty to conspiring to defraud the U.S. Federal Aviation Administration in connection with the fatal crashes, the sources said. The proposed agreement also includes a $487.2 million financial penalty, only half of which Boeing would be required to pay, they added. That is because prosecutors are giving the company credit for a payment it made as part of the previous settlement related to the fatal crashes of the Lion Air and Ethiopian Airlines flights. Boeing could also likely be forced to pay restitution under the proposal’s terms, the amount of which will be at a judge’s discretion, the sources said.

The offer also contemplates subjecting Boeing to three years of probation, the people said. The plea deal would also require Boeing’s board to meet with victims’ relatives and impose an independent monitor to audit the company’s safety and compliance practices for three years, they said.
“Should Boeing refuse to plead guilty, prosecutors plan to take the company to trial, they said…” the article points out.

“Justice Department officials revealed their decision to victims’ family members during a call earlier on Sunday.”

Read more of this story at Slashdot.

Could We Lower The Carbon Footprint of Data Centers By Launching Them Into Space?

The Wall Street Journal reports that a European initiative studying the feasibility data centers in space “has found that the project could be economically viable” — while reducing the data center’s carbon footprint.

And they add that according to coordinator Thales Alenia Space, the project “could also generate a return on investment of several billion euros between now and 2050.”

The study — dubbed Ascend, short for Advanced Space Cloud for European Net zero emission and Data sovereignty — was funded by the European Union and sought to compare the environmental impacts of space-based and Earth-based data centers, the company said. Moving forward, the company plans to consolidate and optimize its results. Space data centers would be powered by solar energy outside the Earth’s atmosphere, aiming to contribute to the European Union’s goal of achieving carbon neutrality by 2050, the project coordinator said… Space data centers wouldn’t require water to cool them, the company said.
The 16-month study came to a “very encouraging” conclusion, project manager Damien Dumestier told CNBC. With some caveats…

The facilities that the study explored launching into space would orbit at an altitude of around 1,400 kilometers (869.9 miles) — about three times the altitude of the International Space Station. Dumestier explained that ASCEND would aim to deploy 13 space data center building blocks with a total capacity of 10 megawatts in 2036, in order to achieve the starting point for cloud service commercialization… The study found that, in order to significantly reduce CO2 emissions, a new type of launcher that is 10 times less emissive would need to be developed. ArianeGroup, one of the 12 companies participating in the study, is working to speed up the development of such reusable and eco-friendly launchers. The target is to have the first eco-launcher ready by 2035 and then to allow for 15 years of deployment in order to have the huge capacity required to make the project feasible, said Dumestier…

Michael Winterson, managing director of the European Data Centre Association, acknowledges that a space data center would benefit from increased efficiency from solar power without the interruption of weather patterns — but the center would require significant amounts of rocket fuel to keep it in orbit. Winterson estimates that even a small 1 megawatt center in low earth orbit would need around 280,000 kilograms of rocket fuel per year at a cost of around $140 million in 2030 — a calculation based on a significant decrease in launch costs, which has yet to take place. “There will be specialist services that will be suited to this idea, but it will in no way be a market replacement,” said Winterson. “Applications that might be well served would be very specific, such as military/surveillance, broadcasting, telecommunications and financial trading services. All other services would not competitively run from space,” he added in emailed comments.

[Merima Dzanic, head of strategy and operations at the Danish Data Center Industry Association] also signaled some skepticism around security risks, noting, “Space is being increasingly politicised and weaponized amongst the different countries. So obviously, there is a security implications on what type of data you send out there.”

Its not the only study looking at the potential of orbital data centers, notes CNBC. “Microsoft, which has previously trialed the use of a subsea data center that was positioned 117 feet deep on the seafloor, is collaborating with companies such as Loft Orbital to explore the challenges in executing AI and computing in space.”

The article also points out that the total global electricity consumption from data centers could exceed 1,000 terawatt-hours in 2026. “That’s roughly equivalent to the electricity consumption of Japan, according to the International Energy Agency.”

Read more of this story at Slashdot.

Threads Expands Fediverse Beta, Letting Users See Replies (and Likes) on Other Fediverse Sites like Mastodon

An anonymous Slashdot reader shared this report from the Verge:

Threads will now let people like and see replies to their Threads posts that appear on other federated social media platforms, the company announced on Tuesday.

Previously, if you made a post on Threads that was syndicated to another platform like Mastodon, you wouldn’t be able to see responses to that post while still inside Threads. That meant you’d have to bounce back and forth between the platforms to stay up-to-date on replies… [I]n a screenshot, Meta notes that you can’t reply to replies “yet,” so it sounds like that feature will arrive in the future.
“Threads is Meta’s first app built to be compatible with the fediverse…” according to a Meta blog post. “Our vision is that people using other fediverse-compatible servers will be able to follow and interact with people on Threads without having a Threads profile, and vice versa, connecting communities…” [If you turn on “sharing”…] “Developers can build new types of features and user experiences that can easily plug into other open social networks, accelerating the pace of innovation and experimentation.”

And this week Instagram/Threads top executive Adam Mosseri posted that Threads is “also expanding the availability of the fediverse beta experience to more than 100 countries, and hope to roll it out everywhere soon.”

Read more of this story at Slashdot.