Open Source Developer Intentionally Corrupts His Own Widely-Used Libraries

“Users of popular open-source libraries ‘colors’ and ‘faker’ were left stunned after they saw their applications, using these libraries, printing gibberish data and breaking..” reports BleepingComputer.
“The developer of these libraries intentionally introduced an infinite loop that bricked thousands of projects that depend on ‘colors and ‘faker’.”

The colors library receives over 20 million weekly downloads on npm alone, and has almost 19,000 projects depending on it. Whereas, faker receives over 2.8 million weekly downloads on npm, and has over 2,500 dependents….

Yesterday, users of popular open-source projects, such as Amazon’s Cloud Development Kit were left stunned on seeing their applications print gibberish messages on their console. These messages included the text ‘LIBERTY LIBERTY LIBERTY’ followed by a sequence of non-ASCII characters… The developer, named Marak Squires added a “new American flag module” to colors.js library yesterday in version v1.4.44-liberty-2 that he then pushed to GitHub and npm. The infinite loop introduced in the code will keep running indefinitely; printing the gibberish non-ASCII character sequence endlessly on the console for any applications that use ‘colors.’ Likewise, a sabotaged version ‘6.6.6’ of faker was published to GitHub and npm….

The reason behind this mischief on the developer’s part appears to be retaliation — against mega-corporations and commercial consumers of open-source projects who extensively rely on cost-free and community-powered software but do not, according to the developer, give back to the community. In November 2020, Marak had warned that he will no longer be supporting the big corporations with his “free work” and that commercial entities should consider either forking the projects or compensating the dev with a yearly “six figure” salary….

Some dubbed this an instance of “yet another OSS developer going rogue,” whereas InfoSec expert VessOnSecurity called the action “irresponsible,” stating: “If you have problems with business using your free code for free, don’t publish free code. By sabotaging your own widely used stuff, you hurt not only big business but anyone using it. This trains people not to update, ‘coz stuff might break.”

GitHub has reportedly suspended the developer’s account. And, that too, has caused mixed reactions… “Removing your own code from [GitHub] is a violation of their Terms of Service? WTF? This is a kidnapping. We need to start decentralizing the hosting of free software source code,” responded software engineer Sergio Gómez.

“While it looks like color.js has been updated to a working version, faker.js still appears to be affected, but the issue can be worked around by downgrading to a previous version (5.5.3),” reports the Verge:

Even more curiously, the faker.js Readme file has also been changed to “What really happened with Aaron Swartz…?”

Squires’ bold move draws attention to the moral — and financial — dilemma of open-source development, which was likely the goal of his actions.

Read more of this story at Slashdot.

Amazon Joins Lockheed Martin and Cisco to Send Alexa to Space, Offers NASA Tours for SchoolKids

“Alexa, when are we arriving at the moon?” quips GeekWire.

Long-time Slashdot reader theodp writes:

This week brought news that Amazon is teaming up with Lockheed Martin and Cisco to put its Alexa voice assistant on NASA’s Orion spacecraft for the (uncrewed) Artemis 1 round-the-moon mission….

On the heels of that announcement came news that Amazon Future Engineer (AFE) has partnered with Mobile CSP and the National Science Teaching Association (NSTA) on the Alexa for Astronauts program, which will provide students in grades 4-and-up with live WebEx by Cisco tours from NASA’s Johnson Space Center. This program will also provide curriculum — NSTA’s Using AI to Monitor Health and Mobile CSP’s Alexa in Space — aimed at teaching high school Science and AP Computer Science Principles students “how to program their own Alexa skills that could help astronauts [and ‘inexperienced space travelers, such as tourists’] solve problems in space and communities at home” using MIT’s App Inventor.

App Inventor, some may recall, was developed at Google to bring programming to the masses only to be suddenly abandoned. App Inventor was later picked up by MIT and — with support from Google and millions in NSF funding — eventually found its way into curriculum developed for the new AP CSP course aimed at mainstreaming AP Computer Science.

Read more of this story at Slashdot.

Blood Test Could Help Detect Cancer Earlier In People With Nonspecific Symptoms

Slashdot reader eastlight_jim writes:

Scientists from the University of Oxford have today published a study in Clinical Cancer Research which shows that they can use a technique called NMR (nuclear magnetic resonance) metabolomics analysis to identify patients with cancer. Specifically, they identify patients with cancer from within a population of generally unwell patients with non-specific symptoms like fatigue and weigh-loss — a traditionally hard-to-diagnose cohort.

The technique works because the NMR identifies small molecules called metabolites in the blood of patients and this information can then be used by machine learning to recognise patterns of metabolites specific to cancer, as well as identifying patients whose cancer has already spread.

The Guardian reports:
If validated, the test could enable cancer patients to be identified earlier, when they are more likely to respond to treatment, and help flag up who could benefit from early access to drugs designed to tackle metastatic cancer.

The test can also tell if the disease has spread.

There is currently no clear route through which someone with nonspecific symptoms that could be cancer is referred for further investigation…. “The problem we’ve had in the past is that if they do have cancer, that cancer is growing all the time, and when they come back the cancers are often quite advanced,” said Dr James Larkin, of the University of Oxford, who was involved in the research. Although it is difficult to know precisely how many individuals fall into this category, “it is likely to be tens of thousands of patients across the UK,” Larkin said.

Read more of this story at Slashdot.

New NFT Series Announced – By Cheech and Chong

Long-time Slashdot reader destinyland writes: Yes, it’s true. 83-year-old Tommy Chong and and 75-year-old Cheech Marin have reunited to create NFTs — a whole series of ’em — “bringing to life new characters and storylines,” according to an official announcement, “while simultaneously celebrating Cheech & Chong’s 50-plus year career of commercial and cultural success.”

The NFT series will be called “Homies in Dreamland.”

“As many know, I am deeply involved in the art community,” Cheech says in the announcement. “As an early believer, I am glad we are introducing an NFT project now, ushering in a new era of branding for the duo and the art community.”

And Tommy Chong calls NFTs “a new way for people to express themselves and reach out to others.

“Art is connecting with others and reaching the deeper parts of self. This can bring people from the NFT world into the world of Cheech and Chong, and together in the world of NFTs.”
Last month Cheech and Chong even announced an official Discord channel for their NFT series — where they’re also hosting movie and trivia nights. But “the holders of the NFT art collectible will gain access to a variety of utility, including future airdrops and special access/utility tokens randomly inserted throughout the collection.”

The NFT series will release sometime this month, according to the announcement, with artwork by Jermaine Rogers, known for his poster art for musical acts including David Bowie, Childish Gambino, Tool, Foo Fighters, Radiohead, and Run The Jewels…

Read more of this story at Slashdot.

Salesforce To Require MFA For All Users Starting Next Month

An anonymous reader writes: Salesforce, the world’s largest customer relationship management platform, said that customers must have a form of multi-factor authentication (MFA) turned on starting next month, or they won’t be able to access their accounts. “Beginning February 1, 2022, Salesforce will require customers to use MFA in order to access Salesforce products,” the company said last month. Salesforce said that users will be able to choose from using security keys, an authenticator app, or an OS biometrics systems to secure accounts. MFA solutions that rely on sending one-time passcodes via email, phone, or SMS messages won’t be allowed “because these methods are inherently vulnerable to interception, spoofing, and other attacks,” Salesforce explained.

“We encourage users to register multiple verification methods so they have a backup in case they forget or lose their primary method,” the company added.

Read more of this story at Slashdot.

Google Found To Have Violated Sonos Patents, Blocking Import of Google Devices

An anonymous reader quotes a report from XDA Developers: In January of 2020, Sonos filed two lawsuits against Google, claiming that the latter stole its multiroom speaker technology and infringed on 100 patents. In September, Sonos then sued Google alleging that the company’s entire line of Chromecast and Nest products violated five of Sonos’ wireless audio patents. A judge (preliminarily) ruled in favor of Sonos. Now it’s gone from bad to worse for Google, as the preliminary findings have been finalized by the U.S. International Trade Commission. As a result, Google is not allowed to import any products that violate patents owned by Sonos, which Sonos argues includes Google Pixel phones and computers, Chromecasts, and Google Home/Nest speakers.

These products produced by Google are often made outside of the United States and imported, hence why this is a big deal for Google. In the ruling (PDF) (via The New York Times), Google was also served a cease & desist in order to stop violating Sonos’ patents. It has been theorized that as a result of the lawsuit, Google had removed Cast volume controls in Android 12, though it was recently added back with the January 2022 security patch. Sonos has previously said that it had proposed a licensing deal to Google for patents the company was making use of, but that neither company was able to reach an agreement. […] There are still two more lawsuits pending against Google filed by Sonos, meaning that it’s unlikely this is the last we’ve heard of this spat.

Read more of this story at Slashdot.

E3 Shifts To Online-Only Event Because of Omicron Concerns

The Entertainment Software Association is shifting the Electronic Entertainment Expo to an online-only event out of concerns around the pandemic. VentureBeat reports: “Due to the ongoing health risks surrounding COVID-19 and its potential impact on the safety of exhibitors and attendees, E3 will not be held in person in 2022,” the ESA said in a statement to GamesBeat. “We remain incredibly excited about the future of E3 and look forward to announcing more details soon.” That means the show will likely take place online this summer for the second year in a row, as COVID-19 concerns pushed the June 2021 show into an online-only event and scuttled the 2020 event entirely. Asked to clarify if there will be an online event, the ESA said it is “excited about the possibilities of an online event.”

Read more of this story at Slashdot.

Snap Suing To Trademark the Word ‘Spectacles’ For Its Smart Glasses

Snap is suing the US Patent and Trademark Office (USPTO) for rejecting its application to trademark the word “spectacles” for its digital eyewear camera device. But the USPTO has maintained that “spectacles” is a generic term for smart glasses and that Snap’s version “has not acquired distinctiveness,” as required for a trademark. The Verge reports: In its complaint filed Wednesday in US District Court in California, Snap claims that the Spectacles name “evokes an incongruity between an 18th century term for corrective eyewear and Snap’s high-tech 21st century smart glasses. SPECTACLES also is suggestive of the camera’s purpose, to capture and share unusual, notable, or entertaining scenes (i.e., “spectacles”) and while also encouraging users to make ‘spectacles’ of themselves.” Snap first introduced its camera-equipped Spectacles in 2016 (“a wearable digital video camera housed in a pair of fashionable sunglasses,” according to its complaint), which can take photos and videos while the user wears them and connects with the Snap smartphone app. […]

Snap’s new complaint posits that there’s been enough media coverage of Spectacles, bolstered by some industry awards and its own marketing including social media, to support its claim that consumers associate the word “spectacles” with the Snap brand. Snap first filed a trademark application for Spectacles in September 2016, “for use in connection with wearable computer hardware” and other related uses “among consumer electronics devices and displays.” During several rounds of back-and-forth with the company since then, the USPTO has maintained that the word “spectacles” appeared to be “generic in connection with the identified goods,” i.e. the camera glasses. Snap continued to appeal the agency’s decision. In a November 2021 opinion, the USPTO’s Trademark Trial and Appeal Board (pdf) upheld the decision, reiterating that the word “spectacles” was a generic term that applied to all smart glasses, not just Snap’s version. Despite the publicity Snap claimed its Spectacles had received from its marketing and social media, the board noted in its opinion that Spectacles’ “social media accounts have an underwhelming number of followers, and the number of followers is surprisingly small,” which didn’t support the company’s argument that there had been a high enough level of consumer exposure to Snap’s Spectacles to claim that consumers associated the word with Snap’s brand.

In its Tuesday complaint, Snap’s attorneys argued that “spectacles is an old-fashioned term popular in the 18th century,” and that it “is not often used today in the United States,” especially by Snapchat’s young audience. “This indicates that modern-day usage of “spectacles” in the United States — especially among a younger demographic of consumers who are the relevant consumers of Snap’s SPECTACLES camera product — is not commonly understood to mean eyeglasses, and certainly not a wireless-enabled video camera product.” But the USPTO appeal board said in November that the evidence didn’t support that argument, and that the word “spectacles” still retains its generic meaning and therefore can’t be trademarked. The board noted that in its own marketing, Snap had demonstrated that its Spectacles “eyeglasses form is a feature, function and characteristic of the camera, not only functionally but aesthetically.” Snap’s lawsuit, which names acting USPTO director Drew Hirshfeld, seeks to have the appeal board’s November decision reversed.

Read more of this story at Slashdot.

Sony Will Explore Building Electric Cars

At CES in Las Vegas this evening, Sony’s Chairman, President and CEO Kenichiro Yoshida showed off a brand new prototype of its Vision S concept electric car, and announced that the Sony Group is starting a new division — the Sony Mobility Inc — which will start commercializing its electric vehicles. TechCrunch reports: On the CES stage during the Sony press conference, the company showed off its existing Sony Vision-S sedan, which was revealed at CES last year. This year, it also flexed a new model in the lineup, the Sony Vision-S SUV prototype. “The excitement we received after we showed off the Vision-S really encouraged us to further consider how we can bring creativity and technology to change the experience of moving from one place to another,” said Yoshida, before revealing the new Vision-S SUV prototype. “This is our new Vision-S SUV. Vision-S has been developed on a foundation of safety, adaptability and entertainment. Safety has been our No. 1 priority in creating a comfortable mobility experience. That has not changed when building this SUV. A total of 40 sensors are installed inside and outside of the vehicle to monitor safety.

“In terms of adaptability, we have connectivity that enables us to build a vehicle that continuously evolves. It also makes it possible to personalize the cabin for each user. With 5G, it enables high speed, high capacity and low-latency connectivity between the in-vehicle system and the cloud. The Vision-S also evolves mobility as an entertainment space,” said Yoshida. “The Vision-S also evolves mobility as an entertainment space, including gaming experience and audio. We have learned more about mobility through our exploration of Vision-S and through our partners who have supported this effort.” There’s been a lot of EV announcements today. Not only did GM reveal an electric version of the Chevy Silverado, but Chrysler announced plans to go all-electric by 2028, starting with the Airflow, “a concept crossover that appears to be close to ready for production,” reports Ars Technica.

BMW also unveiled color-changing paint for its vehicles that relies on the E-ink electronic paper technology found in e-readers like the Kindle.

Read more of this story at Slashdot.