Vue normale

Il y a de nouveaux articles disponibles, cliquez pour rafraîchir la page.
Aujourd’hui — 30 avril 2024Actualités numériques

Bruce Perens Emits Draft Post-Open Zero Cost License

Par : BeauHD
30 avril 2024 à 21:40
After convincing the world to buy open source and give up the Morse Code test for ham radio licenses, Bruce Perens has a new gambit: develop a license that ensures software developers receive compensation from large corporations using their work. The new Post-Open Zero Cost License seeks to address the financial disparities in open source software use and includes provisions against using content to train AI models, aligning its enforcement with non-profit performing rights organizations like ASCAP. Here's an excerpt from an interview The Register conducted with Perens: The license is one component among several -- the paid license needs to be hammered out -- that he hopes will support his proposed Post-Open paradigm to help software developers get paid when their work gets used by large corporations. "There are two paradigms that you can use for this," he explains in an interview. "One is Spotify and the other is ASCAP, BMI, and SESAC. The difference is that Spotify is a for-profit corporation. And they have to distribute profits to their stockholders before they pay the musicians. And as a result, the musicians complain that they're not getting very much at all." "There are two paradigms that you can use for this," he explains in an interview. "One is Spotify and the other is ASCAP, BMI, and SESAC. The difference is that Spotify is a for-profit corporation. And they have to distribute profits to their stockholders before they pay the musicians. And as a result, the musicians complain that they're not getting very much at all." Perens wants his new license -- intended to complement open source licensing rather than replace it -- to be administered by a 501(c)(6) non-profit. This entity would handle payments to developers. He points to the music performing rights organizations as a template, although among ASCAP, BMI, SECAC, and GMR, only ASCAP remains non-profit. [...] The basic idea is companies making more than $5 million annually by using Post-Open software in a paid-for product would be required to pay 1 percent of their revenue back to this administrative organization, which would distribute the funds to the maintainers of the participating open source project(s). That would cover all Post-Open software used by the organization. "The license that I have written is long -- about as long as the Affero GPL 3, which is now 17 years old, and had to deal with a lot more problems than the early licenses," Perens explains. "So, at least my license isn't excessively long. It handles all of the abuses of developers that I'm conscious of, including things I was involved in directly like Open Source Security v. Perens, and Jacobsen v. Katzer." "It also makes compliance easier for companies than it is today, and probably cheaper even if they do have to pay. It creates an entity that can sue infringers on behalf of any developer and gets the funding to do it, but I'm planning the infringement process to forgive companies that admit the problem and cure the infringement, so most won't ever go to court. It requires more infrastructure than open source developers are used to. There's a central organization for Post-Open (or it could be three organizations if we divided all of the purposes: apportioning money to developers, running licensing, and enforcing compliance), and an outside CPA firm, and all of that has to be structured so that developers can trust it." You can read the full interview here.

Read more of this story at Slashdot.

Change Healthcare Hackers Broke In Using Stolen Credentials, No MFA

Par : BeauHD
30 avril 2024 à 21:00
An anonymous reader quotes a report from TechCrunch: The ransomware gang that hacked into U.S. health tech giant Change Healthcare used a set of stolen credentials to remotely access the company's systems that weren't protected by multifactor authentication (MFA), according to the chief executive of its parent company, UnitedHealth Group (UHG). UnitedHealth CEO Andrew Witty provided the written testimony ahead of a House subcommittee hearing on Wednesday into the February ransomware attack that caused months of disruption across the U.S. healthcare system. This is the first time the health insurance giant has given an assessment of how hackers broke into Change Healthcare's systems, during which massive amounts of health data were exfiltrated from its systems. UnitedHealth said last week that the hackers stole health data on a "substantial proportion of people in America." According to Witty's testimony, the criminal hackers "used compromised credentials to remotely access a Change Healthcare Citrix portal." Organizations like Change use Citrix software to let employees access their work computers remotely on their internal networks. Witty did not elaborate on how the credentials were stolen. However, Witty did say the portal "did not have multifactor authentication," which is a basic security feature that prevents the misuse of stolen passwords by requiring a second code sent to an employee's trusted device, such as their phone. It's not known why Change did not set up multifactor authentication on this system, but this will likely become a focus for investigators trying to understand potential deficiencies in the insurer's systems. "Once the threat actor gained access, they moved laterally within the systems in more sophisticated ways and exfiltrated data," said Witty. Witty said the hackers deployed ransomware nine days later on February 21, prompting the health giant to shut down its network to contain the breach. Last week, the medical firm admitted that it paid the ransomware hackers roughly $22 million via bitcoin. Meanwhile, UnitedHealth said the total costs associated with the ransomware attack amounted to $872 million. "The remediation efforts spent on the attack are ongoing, so the total costs related to business disruption and repairs are likely to exceed $1 billion over time, potentially including the reported $22 million payment made [to the hackers]," notes The Register.

Read more of this story at Slashdot.

Extreme Heat Continues To Scorch Large Parts of Asia

Par : msmash
30 avril 2024 à 20:20
Large swathes of Asia are sweltering through a heatwave that has topped temperature records from Myanmar to the Philippines and forced millions of children to stay home from school. From a report: In India, record temperatures have triggered a deadly heatwave and concerns about voter turnout in the nation's marathon election. Extreme heat has also forced Bangladesh to close all schools across the country. Extreme temperatures have also been recorded in Myanmar and Thailand, while huge areas of the Philippines are suffering from a drought. Experts say climate change has made heatwaves more frequent, longer and more intense, while the El Nino weather phenomenon is also driving this year's exceptionally warm weather. Approximate voter turnout data after polls closed on April 26 in India -- when stage two of the nation's seven-stage general election took place -- put voter turnout at 61 per cent. This was lower than the 65 per cent in the first phase, and 68 per cent in the second phase five years ago. Among the states that headed to the polls last week was Kerala in the south, where media reports on April 29 said that at least two people -- a 90-year-old woman and a 53-year-old man -- were suspected to have died of heatstroke. Temperatures in Kerala soared to 41.9 deg C, nearly 5.5 deg C above normal temperatures. At least two people have also died in India's eastern state of Odisha, where temperatures hit 44.9 deg C on April 28 -- the highest recorded in April. In neighbouring Bangladesh, students will continue to stay home this week, after schools across the country were ordered shut on April 29. A two-judge bench of the country's High Court passed an order directing all primary and secondary schools and madrasahs (Islamic schools) nationwide to remain closed till May 5, affecting an estimated 32 million students.

Read more of this story at Slashdot.

Supreme Court Declines To Block Texas Porn Restriction

Par : msmash
30 avril 2024 à 19:40
The Supreme Court on Tuesday refused to block on free speech grounds a provision of Texas law aimed at preventing minors from accessing pornographic content online. From a report: The justices turned away a request made by the Free Speech Coalition, a pornography industry trade group, as well as several companies. The challengers said the 2023 law violates the Constitution's First Amendment by requiring anyone using the platforms in question, including adults, to submit personal information. One provision of the law, known as H.B. 1181, mandates that platforms verify users' ages by requiring them to submit information about their identities. Although the law is aimed at limiting children's access to sexually explicit content, the lawsuit focuses on how those measures also affect adults. "Specifically, the act requires adults to comply with intrusive age verification measures that mandate the submission of personally identifying information over the internet in order to access websites containing sensitive and intimate content," the challengers wrote in court papers.

Read more of this story at Slashdot.

How an Empty S3 Bucket Can Make Your AWS Bill Explode

Par : msmash
30 avril 2024 à 19:10
Maciej Pocwierz, a senior software engineer Semantive, writing on Medium: A few weeks ago, I began working on the PoC of a document indexing system for my client. I created a single S3 bucket in the eu-west-1 region and uploaded some files there for testing. Two days later, I checked my AWS billing page, primarily to make sure that what I was doing was well within the free-tier limits. Apparently, it wasn't. My bill was over $1,300, with the billing console showing nearly 100,000,000 S3 PUT requests executed within just one day! By default, AWS doesn't log requests executed against your S3 buckets. However, such logs can be enabled using AWS CloudTrail or S3 Server Access Logging. After enabling CloudTrail logs, I immediately observed thousands of write requests originating from multiple accounts or entirely outside of AWS. Was it some kind of DDoS-like attack against my account? Against AWS? As it turns out, one of the popular open-source tools had a default configuration to store their backups in S3. And, as a placeholder for a bucket name, they used... the same name that I used for my bucket. This meant that every deployment of this tool with default configuration values attempted to store its backups in my S3 bucket! So, a horde of misconfigured systems is attempting to store their data in my private S3 bucket. But why should I be the one paying for this mistake? Here's why: S3 charges you for unauthorized incoming requests. This was confirmed in my exchange with AWS support. As they wrote: "Yes, S3 charges for unauthorized requests (4xx) as well[1]. That's expected behavior." So, if I were to open my terminal now and type: aws s3 cp ./file.txt s3://your-bucket-name/random_key. I would receive an AccessDenied error, but you would be the one to pay for that request. And I don't even need an AWS account to do so. Another question was bugging me: why was over half of my bill coming from the us-east-1 region? I didn't have a single bucket there! The answer to that is that the S3 requests without a specified region default to us-east-1 and are redirected as needed. And the bucket's owner pays extra for that redirected request. The security aspect: We now understand why my S3 bucket was bombarded with millions of requests and why I ended up with a huge S3 bill. At that point, I had one more idea I wanted to explore. If all those misconfigured systems were attempting to back up their data into my S3 bucket, why not just let them do so? I opened my bucket for public writes and collected over 10GB of data within less than 30 seconds. Of course, I can't disclose whose data it was. But it left me amazed at how an innocent configuration oversight could lead to a dangerous data leak! Lesson 1: Anyone who knows the name of any of your S3 buckets can ramp up your AWS bill as they like. Other than deleting the bucket, there's nothing you can do to prevent it. You can't protect your bucket with services like CloudFront or WAF when it's being accessed directly through the S3 API. Standard S3 PUT requests are priced at just $0.005 per 1,000 requests, but a single machine can easily execute thousands of such requests per second.

Read more of this story at Slashdot.

Biden Administration Moves To Speed Up Permits for Clean Energy

Par : msmash
30 avril 2024 à 18:25
The Biden administration on Tuesday released rules designed to speed up permits for clean energy while requiring federal agencies to more heavily weigh damaging effects on the climate and on low-income communities before approving projects like highways and oil wells. From a report: As part of a deal to raise the country's debt limit last year, Congress required changes to the National Environmental Policy Act, a 54-year-old bedrock law that requires the government to consider environmental effects and to seek public input before approving any project that necessitates federal permits. That bipartisan debt ceiling legislation included reforms to the environmental law designed to streamline the approval process for major construction projects, such as oil pipelines, highways and power lines for wind- and solar-generated electricity. The rules released Tuesday, by the White House Council on Environmental Quality, are intended to guide federal agencies in putting the reforms in place. But they also lay out additional requirements created to prioritize projects with strong environmental benefits, while adding layers of review for projects that could harm the climate or their surrounding communities. "These reforms will deliver smarter decisions, quicker permitting, and projects that are built better and faster," said Brenda Mallory, chair of the council. "As we accelerate our clean energy future, we are also protecting communities from pollution and environmental harms that can result from poor planning and decision making while making sure we build projects in the right places."

Read more of this story at Slashdot.

Découvrez NZXT à l'occasion des 20 ans de Cowcotland

30 avril 2024 à 16:17

Retour sur le dernier déplacement de l'équipe à Taiwan avec la première visite : NZXT. Après les Etats-Unis il y a quelques années, nous voilà de retour dans la marque au logo sur fond violet dans ses bureaux asiatiques. Une visite rapide en attendant de découvrir, une nouvelle fois, la marque aux Etats-Unis, mais c'est une autre histoire. Des boitiers aux périphériques, on fait le point et on se replonge dans notre histoire commune avec quelques retours en arrière sur les boitiers passés entre nos mains. Et certains ne sont pas communs ! Ca se passe ici : Cowcotland x NZXT ou sur la source. […]

Lire la suite

Even Walmart Thinks American Healthcare Is Too Expensive

Par : msmash
30 avril 2024 à 17:20
Walmart isn't making enough money off its new health centers, so it decided to close up shop. From a report: The retail giant announced today that it'll shutter all 51 health centers it opened up across five states since 2019. Walmart is also getting rid of its virtual care program after acquiring telehealth provider MeMD in 2021. "We determined there is not a sustainable business model for us to continue," Walmart said in an announcement today. "This is a difficult decision, and like others, the challenging reimbursement environment and escalating operating costs create a lack of profitability that make the care business unsustainable for us at this time," Walmart said today. It's an about-face from last year when Walmart said it planned to double its number of health clinics and expand into two new states in 2024.

Read more of this story at Slashdot.

Découvrez NZXT à l'occasion des 20 ans de Cowcotland

30 avril 2024 à 16:00
La Ferme du Hardware est de retour à Taiwan à quelques semaines du COMPUTEX ! Toujours dans nos 20 ans, nous allons aujourd'hui en découvrir un peu plus à propos de NZXT, marque désormais bien célèbre pour ses produits épurés. Ce qui n'a pas toujours été le cas, comme nous le verrons une nouvelle fois un peu plus tard cette année lors d'un déplacement aux Etats-Unis. Car oui, NZXT a des bureaux dans les deux pays !

Cyber Criminal Jailed For Blackmailing Therapy Patients

Par : msmash
30 avril 2024 à 16:41
One of Europe's most wanted cyber criminals has been jailed for attempting to blackmail 33,000 people whose confidential therapy notes he stole. From a report: Julius Kivimaki obtained them after breaking into the databases of Finland's largest psychotherapy company, Vastaamo. After his attempt to extort the company failed, he emailed patients directly, threatening to reveal what they had told their therapists. At least one suicide has been linked to the case, which has shocked the country. Kivimaki has been sentenced to six years and three months in prison. In terms of the number of victims, his trial was the biggest criminal case in Finnish history. One of them gave their reaction to the BBC. "The main thing is that this absolutely empathy-lacking, ruthless criminal gets a prison sentence," said Tiina Parrika. "After this there rise thoughts about how short the conviction is, when reflected against the number of victims," she added. "But, that's the Finnish law and I must accept that."

Read more of this story at Slashdot.

Linux Mint Looks To Fork More GNOME Software, Make XApp More Independent

30 avril 2024 à 16:13
Linux Mint published their monthly status update for April 2024 where they talk about ongoing testing for faster and more reliable repository access via the Fastly CDN to other more interesting software happenings like the likelihood that they will fork more GNOME applications as well as looking to make their XApp applications more distribution agnostic...

Bill Gates Is Still Pulling the Strings At Microsoft

Par : msmash
30 avril 2024 à 16:00
theodp writes: Reports of the death of Bill Gates' influence at Microsoft have been greatly exaggerated: "Publicly, [Bill] Gates has been almost entirely out of the picture at Microsoft since 2021, following allegations that he had behaved inappropriately toward female employees. In fact, Business Insider has learned, Gates has been quietly orchestrating much of Microsoft's AI revolution from behind the scenes. Current and former executives say Gates remains intimately involved in the company's operations -- advising on strategy, reviewing products, recruiting high-level executives, and nurturing Microsoft's crucial relationship with Sam Altman, the cofounder and CEO of OpenAI. In early 2023, when Microsoft debuted a version of its search engine Bing turbocharged by the same technology as ChatGPT, throwing down the gauntlet against competitors like Google, Gates, executives said, was pivotal in setting the plan in motion. While Nadella might be the public face of the company's AI success [...] Gates has been the man behind the curtain."[...] "Today, Gates remains close with Altman, who visits his home a few times a year, and OpenAI seeks his counsel on developments. There's a 'tight coupling' between Gates and OpenAI, a person familiar with the relationship said. 'Sam and Bill are good friends. OpenAI takes his opinion and consult overall seriously.' OpenAI spokesperson Kayla Wood confirmed OpenAI continues to meet with Gates."

Read more of this story at Slashdot.

Major US Newspapers Sue OpenAI, Microsoft For Copyright Infringement

Par : msmash
30 avril 2024 à 15:20
Eight prominent U.S. newspapers owned by investment giant Alden Global Capital are suing OpenAI and Microsoft for copyright infringement, in a complaint filed Tuesday in the Southern District of New York. From a report: Until now, the Times was the only major newspaper to take legal action against AI firms for copyright infringement. Many other news publishers, including the Financial Times, the Associated Press and Axel Springer, have instead opted to strike paid deals with AI companies for millions of dollars annually, undermining the Times' argument that it should be compensated billions of dollars in damages. The lawsuit is being filed on behalf of some of the most prominent regional daily newspapers in the Alden portfolio, including the New York Daily News, Chicago Tribune, Orlando Sentinel, South Florida Sun Sentinel, San Jose Mercury News, Denver Post, Orange County Register and St. Paul Pioneer Press.

Read more of this story at Slashdot.

La consultation par la justice de factures détaillées ne doit concerner que des infractions graves

30 avril 2024 à 14:31
Proportionnalité
Deux mains tiennent un téléphone où s'affichent des notifications push.

La Cour de justice de l’Union européenne (CJUE) remet les points sur les i concernant l’accès aux factures détaillées dans le cadre d’enquêtes. Cette « ingérence grave dans les droits fondamentaux au respect de la vie privée et à la protection des données à caractère personnel » ne peut être autorisée que lorsqu’il y a des soupçons d’ « infractions graves ».

La CJUE vient de décider que l’accès aux relevés téléphoniques, par la justice, ne pouvait se faire que dans le cadre d’une enquête et seulement si elle concerne « des personnes soupçonnées d’être impliquées dans une infraction grave ».

Ces relevés, ce sont les fameuses factures détaillées (ou fadettes) utilisées par la police judiciaire. En France, on en a notamment parlé lorsque l’ancien procureur de Nanterre, Philippe Courroye, a réclamé les fadettes de deux journalistes du Monde, dans l’une des procédures liées à l’affaire Bettencourt. Plus récemment, le parquet national financier (PNF) a exploité les fadettes d’avocats dans l’affaire Sarkozy-Bismuth.

Mais c’est pour un tout autre genre d’affaires que la Cour de justice de l’Union européenne a été consultée. En effet, le juge des enquêtes préliminaires du tribunal de Bolzano, en Italie, a été saisi par le parquet de la même ville italienne pour l’autoriser à accéder aux fadettes des auteurs de deux vols de téléphones mobiles commis en octobre et novembre 2021.

Demandes incluant IMEI des personnes en contacts, sites visités, SMS…


Vous devez être abonné•e pour lire la suite de cet article.
Déjà abonné•e ? Générez une clé RSS dans votre profil.

Envie de changer de machine ? Le supercalculateur américain Cheyenne est à vendre !

Votre machine est trop lente ? Vous avez besoin d’un peu plus de puissance pour faire tourner Doom ou Crysis ? Vous voilà chanceux, le supercalculateur Cheyenne est en vente ! Au menu, quelques 5,34 PFLOPS de puissance de calcul réparti sur 145 152 cœurs, des Xeon Broadwell E502697v4 (18-coeurs chac...

NVIDIA GeForce RTX : NVIDIA met en lumière ses jeux préférés avec la mise à jour RTX Remix et de nouveaux jeux accedent au DLSS

30 avril 2024 à 14:10

Cette semaine est consacrée à l'amélioration des jeux que vous connaissez et aimez grâce à la puissance du NVIDIA DLSS, de NVIDIA Reflex et des effets raytracés avancés. Que ce soit grâce à la puissance des nouvelles mises à jour de NVIDIA RTX Remix ou en donnant aux jeux comme EVERSPACE 2 un coup de pouce encore plus important grâce au DLSS 3, voici tous les derniers développements. NVIDIA RTX Remix Open Beta passe au DLSS 3.5 avec Ray Reconstruction Avez-vous déjà eu envie de démarrer un vieux jeu favori et d'en faire l'expérience sous un jour totalement nouveau ? Désormais, grâce aux mises à jour de la boîte à outils de modding NVIDIA RTX Remix, l'accès au DLSS 3.5 avec Ray Reconstruction peut faire de ce rêve une réalité. Construit sur NVIDIA Omniverse™, RTX Remix permet aux moddeurs de remasteriser les classiques avec un ray tracing complet, du NVIDIA DLSS, du NVIDIA Reflex, des ressources de rendu modernes basées sur la physique et des outils de texture IA génératifs. Après le lancement de la bêta ouverte de RTX Remix en janvier, nous présentons aujourd'hui de nouvelles fonctionnalités et optimisations, avec en tête l'ajout du NVIDIA DLSS 3.5 avec Ray Reconstruction, qui améliorera la qualité de l'image dans tous les mods. Ce rendu neuronal avancé alimenté par l'IA améliore les techniques de rendu précédemment disponibles pour augmenter la fidélité, la réactivité et la qualité des effets raytracés comme dans Portal avec RTX. La communauté des moddeurs a déjà réagi avec des projets RTX Remix utilisant le DLSS 3.5 dans Half-Life 2, Dark Messiah of Might and Magic et Deus Ex. […]

Lire la suite

Le GeForce RTX 4070 Ti disponible à partir de 699 euros !!!

30 avril 2024 à 13:20

A 699 euros, au lieu de 899 euros, on est en droit de s'interroger sur la RTX 4070 Ti avec ses 12 Go de GDDR6X. Carte qui propose aussi 7680 Cuda Cores, 240 Tensor Cores et 60 RT Cores. Alors oui, nous avons maintenant la version Super, mais la version Super est tout de même 200 euros plus chère... Avec ce modèle, 1440p les doigts dans le nez et même le 2160p en usant des technologies des verts. Après, nous le disons très clairement, à ce prix, c'est le modèle MSI GeForce RTX 4070 Ti Ventus 2X 12G OC , donc une référence assez basique en Dual Fan, avec une backplate en plastique et un connecteur en 12VHPWR. […]

Lire la suite
❌
❌