Most CEOs Won’t Priorities Return-to-Office Policies, Survey Finds

The pandemic may have proved to employeers that remote and flexible-work arrangements were viable — and changed the way we work forever. Axios writes:

Just 6 out of 158 U.S. CEOs said they’ll prioritize bringing workers back to the office full-time in 2024, according to a new survey released by the Conference Board. Executives are increasingly resigned to a world where employees don’t come in every day, as hybrid work arrangements — mixing work from home and in-office — become the norm for knowledge workers. “Maintain hybrid work,” was cited as a priority by 27% of the U.S. CEOs who responded to the survey, conducted in October and November. A separate survey of chief financial officers by Deloitte, conducted in November, found that 65% of CFOs expect their company to offer a hybrid arrangement this year.

“Remote work appears likely to be the most persistent economic legacy of the pandemic,” write Goldman Sachs economists in a recent note. About 20%-25% of workers in the U.S. work from home at least part of the week, according to data Goldman cites. That’s below a peak of 47% during the pandemic but well above its prior average of around 3%.

“The battle is over,” said Diana Scott, human capital center leader at The Conference Board. “There are so many other issues CEOs are facing.” Headlines about CEOs determined to get butts in seats get attention, but they are the exception, says Brian Elliott, the cofounder of Future Forum, a future of work think tank. “There are a lot more CEOs that are actually quietly becoming more flexible….” Though the labor market has softened, employers still do care about keeping employees satisfied — and they don’t want to fight with them. “It’s not worth the fight,” says Elliott.

Read more of this story at Slashdot.

WSJ: Broadcom’s VMware Overhaul ‘Draws Attention of CIOs’

The Wall Street Journal reports:

Moves by Broadcom to shore up its $69 billion VMware acquisition, completed in November, include a streamlining of product bundles and new billing models — efforts in line with the chip giant’s past acquisitions, but not necessarily welcomed by all of VMware’s customers… Broadcom has also recently laid off at least hundreds of VMware workers, disclosures from the Worker Adjustment and Retraining Notification show….

VMware has approximately 330,000 customers, according to the company. Chief information officers say they are closely monitoring what comes next.

“Any CIO that’s not taking stock of what they have and mentally considering alternatives and monitoring what else is out there is probably not doing their job,” said Jay Ferro, executive vice president and chief information, technology and product officer at clinical research data-management company Clario. All these changes, plus past remarks by Broadcom that its go-to-market strategy is to focus completely on the needs and priorities of its top 600 customers, has left some CIOs rethinking the relationship. Price increases and degrading levels of support are among their biggest concerns. “I’m not one of their top, probably 600 customers, so they’ve been very clear to me where I fit in that pecking order,” said Todd Florence, CIO of trucking company Estes Express Lines. Florence said he’s started looking into alternatives. “It certainly doesn’t make you feel good, like you’re going to get lots of support going forward….”

Goya Foods CIO Suvajit Basu said he is thinking about how to reduce the food company’s reliance on VMware as the sole and longtime dominant provider of virtualization for the data center. “They’re going to increase their prices or change their licensing so the customer pays more,” he said. “And I think this is starting to hit us right now….” Forrester estimates that in 2024, 20% of VMware customers will begin the process of exiting VMware in favor of alternatives.

On the other hand, a group VP at market researcher IDC tells the Journal that on the upside, now VMware and Broadcom will have to engage more actively with customers on the value of new produces included in their bundles…

Read more of this story at Slashdot.

Potential Cancer Vaccine Entering Stage 3 Trials

Slashdot reader quonset writes: After decades of study and testing, a potential vaccine for cancer may be on the horizon. Dr. Thomas Wagner, founder of Orbis Health Solutions, is using the body’s own immune system to fight the disease, with each shot personalized to the patient, according to ABC News.

From the article:

Typically, cancer cells evade a person’s immune system because it is recognized as that person’s cells. Wagner developed a tumor lysate particle only (TLPO) vaccine that uses a person’s tumor cells to identify particular parts that are then presented back in the body using the vaccine in a way that can stimulate their immune system to gain the ability to detect these cancer cells like an infection, allowing the immune system to fight the cancer itself.

“People used to ask me the question, ‘When will there be a cure for cancer?’ And I’ve been doing this for 60 years and I could never answer that question,” Wagner said. “Until recently, until the last three or four or five years.” Wagner believes this type of cancer treatment could be a key to finding the long-awaited cure for cancer, all cancers, if paired with early detection.

Wagner’s TLPO cancer vaccine has been tested in hundreds of patients with advanced forms of melanoma in Phase 2 clinical trials. The most recent data presented at an academic conference showed nearly 95% of people given only the vaccine were still alive three years after starting treatment and 64% were still disease-free. Among the most advanced forms of melanoma, disease-free survival after three years for people with stage III disease was 60% in the vaccine-only group, compared to about 39% in the placebo group. Disease-free survival for those with stage IV disease was about 68% in the vaccine-only group, and zero in the placebo group.

The most common side effects were redness or pain at the injection site, fever and fatigue after the injection – similar to other vaccines that stimulate an immune response.

Based on this data and other studies, the U.S. Food and Drug Administration has greenlit Wagner’s vaccine to start a Phase 3 clinical trial. It will be a three-year endeavor with a goal to enroll 500 people and is planned to launch sometime this year, Riley Polk, president of Orbis Health Solutions, told WLOS, an ABC News affiliate in Asheville, North Carolina.

Polk’s own father was told there were no treatment options left for his lung cancer, according to the article. That was more than 10 years ago, and “His father opted to try Wagner’s cancer vaccine and lived 10 more years before dying from something unrelated to cancer.” Polk gives ABC News this quote.

“You can tell me a lot of things, but you can’t tell me [the vaccine] doesn’t work.”

Read more of this story at Slashdot.

Ultra-Large Structure Discovered In Distant Space Challenges Cosmological Principle

“The discovery of a second ultra-large structure in the remote universe has further challenged some of the basic assumptions about cosmology,” writes SciTechDaily:

The Big Ring on the Sky is 9.2 billion light-years from Earth. It has a diameter of about 1.3 billion light-years, and a circumference of about four billion light-years. If we could step outside and see it directly, the diameter of the Big Ring would need about 15 full Moons to cover it.

It is the second ultra-large structure discovered by University of Central Lancashire (UCLan) PhD student Alexia Lopez who, two years ago, also discovered the Giant Arc on the Sky. Remarkably, the Big Ring and the Giant Arc, which is 3.3 billion light-years across, are in the same cosmological neighborhood — they are seen at the same distance, at the same cosmic time, and are only 12 degrees apart on the sky. Alexia said: “Neither of these two ultra-large structures is easy to explain in our current understanding of the universe. And their ultra-large sizes, distinctive shapes, and cosmological proximity must surely be telling us something important — but what exactly?

“One possibility is that the Big Ring could be related to Baryonic Acoustic Oscillations (BAOs). BAOs arise from oscillations in the early universe and today should appear, statistically at least, as spherical shells in the arrangement of galaxies. However, detailed analysis of the Big Ring revealed it is not really compatible with the BAO explanation: the Big Ring is too large and is not spherical.” Other explanations might be needed, explanations that depart from what is generally considered to be the standard understanding in cosmology…

And if the Big Ring and the Giant Arc together form a still larger structure then the challenge to the Cosmological Principle becomes even more compelling… Alexia said, “From current cosmological theories we didn’t think structures on this scale were possible. ”

Possible explanations include a Conformal Cyclic Cosmology, or the effect of cosmic strings passing through…
Thanks to long-time Slashdot reader schwit1 for sharing the article.

Read more of this story at Slashdot.

NPM Users Download 2.1B Deprecated Packages Weekly, Say Security Researchers

The cybersecurity site SC Media reports that NPM registry users “download deprecated packages an estimated 2.1 billion times weekly, according to a statistical analysis of the top 50,000 most-downloaded packages in the registry.”

Deprecated, archived and “orphaned” NPM packages can contain unpatched and/or unreported vulnerabilities that pose a risk to the projects that depend on them, warned the researchers from Aqua Security’s Team Nautilus, who published their findings in a blog post on Sunday… In conjunction with their research, Aqua Nautilus has released an open-source tool that can help developers identify deprecated dependencies in their projects.

Open-source software may stop receiving updates for a variety of reasons, and it is up to developers/maintainers to communicate this maintenance status to users. As the researchers pointed out, not all developers are transparent about potential risks to users who download or depend on their outdated NPM packages. Aqua Nautilus researchers kicked off their analysis after finding that one open-source software maintainer responded to a report about a vulnerability Nautilus discovered by archiving the vulnerable repository the same day. By archiving the repository without fixing the security flaw or assigning it a CVE, the owner leaves developers of dependent projects in the dark about the risks, the researchers said…

Taking into consideration both deprecated packages and active packages that have a direct dependency on deprecated projects, the researchers found about 4,100 (8.2%) of the top 50,000 most-downloaded NPM packages fell under the category of “official” deprecation. However, adding archived repositories to the definition of “deprecated” increased the number of packages affected by deprecation and deprecated dependencies to 6,400 (12.8%)… Including packages with linked repositories that are shown as unavailable (404 error) on GitHub increases the deprecation rate to 15% (7,500 packages), according to the Nautilus analysis. Encompassing packages without any linked repository brings the final number of deprecated packages to 10,600, or 21.2% of the top 50,000. Team Nautilus estimated that under this broader understanding of package deprecation, about 2.1 billion downloads of deprecated packages are made on the NPM registry weekly.

Read more of this story at Slashdot.

BMW Will Employ Figure’s Humanoid Robot At South Carolina Plant

Figure’s first humanoid robot will be coming to a BMW manufacturing facility in South Carolina. TechCrunch reports: BMW has not disclosed how many Figure 01 models it will deploy initially. Nor do we know precisely what jobs the robot will be tasked with when it starts work. Figure did, however, confirm with TechCrunch that it is beginning with an initial five tasks, which will be rolled out one at a time. While folks in the space have been cavalierly tossing out the term “general purpose” to describe these sorts of systems, it’s important to temper expectations and point out that they will all arrive as single- or multi-purpose systems, growing their skillset over time. Figure CEO Brett Adcock likens the approach to an app store — something that Boston Dynamics currently offers with its Spot robot via SDK.

Likely initial applications include standard manufacturing tasks such as box moving, pick and place and pallet unloading and loading — basically the sort of repetitive tasks for which factory owners claim to have difficulty retaining human workers. Adcock says that Figure expects to ship its first commercial robot within a year, an ambitious timeline even for a company that prides itself on quick turnaround times. The initial batch of applications will be largely determined by Figure’s early partners like BMW. The system will, for instance, likely be working with sheet metal to start. Adcock adds that the company has signed up additional clients, but declined to disclose their names. It seems likely Figure will instead opt to announce each individually to keep the news cycle spinning in the intervening 12 months.

Read more of this story at Slashdot.

Mobile Device Ambient Light Sensors Can Be Used To Spy On Users

“The ambient light sensors present in most mobile devices can be accessed by software without any special permissions, unlike permissions required for accessing the microphone or the cameras,” writes longtime Slashdot reader BishopBerkeley. “When properly interrogated, the data from the light sensor can reveal much about the user.” IEEE Spectrum reports: While that may not seem to provide much detailed information, researchers have already shown these sensors can detect light intensity changes that can be used to infer what kind of TV programs someone is watching, what websites they are browsing or even keypad entries on a touchscreen. Now, [Yang Liu, a PhD student at MIT] and colleagues have shown in a paper in Science Advances that by cross-referencing data from the ambient light sensor on a tablet with specially tailored videos displayed on the tablet’s screen, it’s possible to generate images of a user’s hands as they interact with the tablet. While the images are low-resolution and currently take impractically long to capture, he says this kind of approach could allow a determined attacker to infer how someone is using the touchscreen on their device. […]

“The acquisition time in minutes is too cumbersome to launch simple and general privacy attacks on a mass scale,” says Lukasz Olejnik, an independent security researcher and consultant who has previously highlighted the security risks posed by ambient light sensors. “However, I would not rule out the significance of targeted collections for tailored operations against chosen targets.” But he also points out that, following his earlier research, the World Wide Web Consortium issued a new standard that limited access to the light sensor API, which has already been adopted by browser vendors.

Liu notes, however, that there are still no blanket restrictions for Android apps. In addition, the researchers discovered that some devices directly log data from the light sensor in a system file that is easily accessible, bypassing the need to go through an API. The team also found that lowering the resolution of the images could bring the acquisition times within practical limits while still maintaining enough detail for basic recognition tasks. Nonetheless, Liu agrees that the approach is too complicated for widespread attacks. And one saving grace is that it is unlikely to ever work on a smartphone as the displays are simply too small. But Liu says their results demonstrate how seemingly harmless combinations of components in mobile devices can lead to surprising security risks.

Read more of this story at Slashdot.