In an op-ed for The Wall Street Journal, President Joe Biden has called on Democrats and Republicans who are sitting in Congress to set aside their differences and work on strong bipartisan legislation to keep major technology companies in check — with…
Russian hackers reportedly targeted three US nuclear research labs
Russian hackers have reportedly targeted three nuclear research laboratories in the US. A group called Cold River carried out a phishing campaign against scientists at the Brookhaven, Argonne and Lawrence Livermore national laboratories last summer in an attempt to obtain passwords, Reuters reports.
The efforts are believed to have taken place in August and September, around the time UN experts visited a nuclear power plant in Russia-controlled Ukrainian territory to help prevent a potential disaster following heavy shelling in the area. Meanwhile, President Vladimir Putin has alluded to a readiness to defend Russia-claimed territory with nuclear weapons.
It’s not clear whether the phishing attempts were successful or why the hackers were trying to gain access to the labs’ systems. However, Adam Meyers, senior vice president of intelligence at cybersecurity firm CrowdStrike, told Reuters that Cold River is “involved in directly supporting Kremlin information operations.”
Last year, the group leaked emails from the former chief of MI6, the UK’s foreign intelligence service. Cold River is also said to have targeted non-government organizations investigating war crimes. It reportedly conducted such a campaign around the time a UN commission said that Russian forces were responsible for war crimes and human rights violations in the early days of the country’s invasion of Ukraine.
Big Tech critic Tim Wu is leaving the White House
After advising President Biden on technology and competition policy for nearly two years, net neutrality advocate Tim Wu is leaving the White House. The Biden administration announced the departure this week, noting Wu’s final day at the National Econo…
The Morning After: New York’s governor signs a weakened right-to-repair bill
New York governor Kathy Hochul has finally signed a right-to-repair bill into law, over half a year since the state legislature was passed. Representatives for Microsoft and Apple pressed Hochul’s office for changes, as well as industry association TechNet, which represents many notable tech companies, including Amazon, Google, Dell and HP. Critics say the amendments will weaken the law’s effectiveness. The bill’s revised language excludes enterprise electronics, like devices used in schools and hospitals. Home appliances, motor vehicles, medical devices and off-road equipment were also previously exempted.
Whatever aims the right-to-repair bill had when first proposed have been weakened. Public Interest Research Groups (PIRG), a collective of consumer rights organizations, said in a statement to Engadget: “Such changes could limit the benefits for school computers and most products currently in use.” It continued: “The bill now excludes certain smartphone circuit boards from parts the manufacturers are required to sell and requires repair shops to post unwieldy warranty language.”
– Mat Smith
The Morning After isn’t just a newsletter – it’s also a daily podcast. Get our daily audio briefings, Monday through Friday, by subscribing right here.
The biggest stories you might have missed
TikTok will be banned on most US federal government devices
Included in a mammoth $1.7 trillion bill that President Biden just signed.
TikTok will be outlawed on almost all devices issued by the federal government after lawmakers passed a $1.7 trillion spending bill. Officials recently added the No TikTok on Government Devices Act (what a name) to the bill, which the Senate unanimously approved last week. The mammoth 4,155-page legislation was fast-tracked to avoid a partial government shutdown. It will fund the government through September. The legislation requires the Biden administration to establish rules to remove TikTok from government devices by mid-February. The bill carved out exceptions for elected officials, congressional staff, law enforcement agents and other officials. However, the House of Representatives separately banned TikTok on devices it owns and manages.
Samsung’s new smart fridge has a massive 32-inch display
Think of it like a smart TV with a fridge attached to it.
Samsung
CES is nearly here, which means we’re once again writing about refrigerators. With its Family Hub Plus, Samsung has boosted the touch display size to 32 inches from 21 inches, although it’s still a vertical screen. Samsung has added support for Google Photos, along with the OneDrive integration seen on past models. There’s also a new SmartThings hub so you can control multiple smart home devices from your… kitchen, including robot vacuums, air conditioning, lighting and more. It also supports Amazon’s Your Essentials service, letting you order groceries and other products directly from the touchscreen. Those groceries go inside.
The EV revolution became an eventuality in 2022
It’s been a busy year for the industry.
It’s been a decade since the first Tesla EV made its commercial debut and the electrification of American automotive society began in earnest. Over the past ten years as battery capacities have grown and range anxieties have shrunk, electric vehicles have become a daily sight in most parts of the country. Now, virtually every notable automaker on the planet has jumped on the electric bandwagon with sizable investments in battery and production technologies and pledges to electrify their lineups within a decade or so.
Not even recent years’ production slowdowns and supply chain disruptions brought on by the COVID pandemic managed to stall the industry’s momentum. The International Energy Agency in January reported that EVs had managed to triple their market share between 2019 and 2021 with 6.6 million units being sold globally last year. And as eventful as 2022 turned out to be, 2023 and beyond could be even bigger for the EV industry. We’re expecting EV debuts including the VW ID.3; the Lucid Gravity, Polestar 3, Jeep (one of four!) and Honda’s Prologue SUVs.
美國正式禁止在聯邦政府裝置上安裝 TikTok
美國在 12 月 22 日終於通過了長達 4,155 頁的綜合法案，包括了禁止美國聯邦政府所有的行動裝置上安裝 TikTok 的議案。
TikTok will be banned on most US federal government devices
TikTok will be outlawed on almost all devices issued by the federal government after lawmakers passed a $1.7 trillion spending bill. Officials crammed the No TikTok on Government Devices Act, which the Senate unanimously approved in mid-December, into the mammoth 4,155-page omnibus bill. The spending package was fast tracked in order to avoid a partial government shutdown. It will fund the government through September.
The Senate voted 68-29 to pass the bill on December 22nd. The House approved it on Friday with a vote of 225-201. On the same day, President Joe Biden signed a stopgap bill that funded the government for another week in order to avert a shutdown until the omnibus bill landed on his desk. Today, President Biden signed the bill into law.
The legislation requires the Biden administration to establish rules to remove TikTok from government devices by mid-February. The bill carved out exceptions for elected officials, congressional staff, law enforcement agents and other officials. However, the House of Representatives separately banned TikTok on devices it owns and manages.
Earlier this month, FBI Director Chris Wray warned that China could use the app (which is owned by Beijing-based company ByteDance) to collect data on users. Some attempts have been made, including in the last few weeks, to prohibit TikTok in the US entirely. Several states have banned TikTok from government devices, including Georgia, South Dakota, Maryland and Texas. Indiana has sued TikTok over alleged security and child safety issues.
TikTok has attempted to soothe US lawmakers’ concerns that the app could be used for spying purposes. Since June, it has been directing all traffic from the country to Oracle servers based domestically. TikTok and ByteDance said they’d delete US user data from their own servers in the US and Singapore. In August, Oracle began a review of TikTok’s algorithms and content moderation systems.
As Congress was voting on the bill, news broke that ByteDance fired four employees (two in the US and two in China) who accessed the TikTok data of US journalists. The workers were allegedly trying to find the sources of leaks to the reporters.
The omnibus bill includes other tech-related provisions, including more funding for federal antitrust officials. In addition, the package incorporates the Computers for Veterans and Students Act. This requires the government to hand over certain surplus computers to nonprofits. The systems will be repaired and/or refurbished, then distributed to schools, homeschooled students, veterans, seniors and others in need.
There’s also another $1.8 billion in new funding to implement the CHIPS and Science Act, which aims to boost domestic production of semiconductors. The omnibus bill earmarks $25.4 billion for NASA — 5.6 percent more than the agency received in fiscal year 2022, but less than the $26 billion the White House asked for. The National Science Foundation will get $9.9 billion, an increase of 12 percent. The National Institute of Standards and Technology and National Oceanic and Atmospheric Administration will receive increases of 32 percent (up to $1.6 billion) and 17.5 percent ($761 million), respectively.
New York’s governor signs watered-down right-to-repair bill
Almost seven months after the state legislature overwhelmingly passed a right-to-repair bill, New York governor Kathy Hochul has signed it into law. But Hochul only greenlit the bill after the legislature agreed to some changes. Hochul wrote in a memo that the legislation, as it was originally drafted, “included technical issues that could put safety and security at risk, as well as heighten the risk of injury from physical repair projects.” The governor said the modifications addressed these issues, but critics say the amendments will weaken the law’s effectiveness.
“This legislation would enhance consumer options in the repair markets by granting them greater access to the parts, tools and documents needed for repairs,” Hochul wrote. “Encouraging consumers to maximize the lifespan of their devices through repairs is a laudable goal to save money and reduce electronic waste.”
New: Gov. Hochul has signed the “right to repair” law — with the Legislature agreeing to a number of changes, as outlined in her approval message. pic.twitter.com/GUBExlj5BD
— Jon Campbell (@JonCampbellNY) December 29, 2022
The changes strip out the bill’s requirement for “original equipment manufacturers [or OEMs] to provide to the public any passwords, security codes or materials to override security features.” OEMs will also be able to bundle “assemblies of parts” instead of just the specific component actually needed for a DIY repair if “the risk of improper installation heightens the risk of injury.”
The rules will only apply to devices that are originally built and used or sold in New York for the first time after July 1st. There’s also an exemption for “digital products that are the subject of business-to-business or business-to-government sales and that otherwise are not offered for sale by retailers.”
As Ars Technica reported earlier this month, representatives for Microsoft and Apple pressed Hochul’s office for changes. So did industry association TechNet, which represents many notable tech companies, including Amazon, Google, Dell, HP and Engadget parent Yahoo.
As a result, the bill’s revised language excludes enterprise electronics, such as those that schools, hospitals, universities and data centers rely on, as iFixit CEO Kyle Wiens wrote in a blog post. Home appliances, motor vehicles, medical devices and off-road equipment were previously exempted.
“Such changes could limit the benefits for school computers and most products currently in use,” Public Interest Research Groups (PIRG), a collective of consumer rights organizations, said in a statement to Engadget. “Even more troubling, the bill now excludes certain smartphone circuit boards from parts the manufacturers are required to sell, and requires repair shops to post unwieldy warranty language.”
“We knew it was going to be difficult to face down the biggest and wealthiest companies in the world,” PIRG right to repair director Nathan Proctor said. “But, though trimmed down, a new Right to Repair law was signed. Now our work remains to strengthen this law and pass others until people have what they need to fix their stuff.”
As The Verge notes, repair technician and right-to-repair advocate Louis Rossmann said the changes have watered down the law to the point where it’s “functionally useless.” Rossmann, who spent seven years trying to get the bill passed, called Hochul’s assertion that the changes were necessary to include protections from physical harm and security risks “bullshit,” citing a Federal Trade Commission report on the issue.
The right-to-repair movement has picked up steam over the last couple of years. Ahead of expected legislation coming into force, companies such as Google, Apple, Samsung and Valve started providing repair manuals and selling parts for some of their products.
Last year, President Joe Biden signed an executive order that aimed at bolstering competition in the US, including in the tech industry. Among other measures, it called on the FTC to ban “anticompetitive restrictions on using independent repair shops or doing DIY repairs of your own devices and equipment.”
US House of Representatives bans TikTok on its devices
TikTok is now banned on any device owned and managed by the US House of Representatives, according to Reuters. The House’s Chief Administrative Officer (CAO) reportedly told all lawmakers and their staff in an email that they must delete the app from t…
Biometric devices sold on eBay reportedly contained sensitive US military data
German researchers who purchased biometric capture devices on eBay found sensitive US military data stored on their memory cards, The New York Times has reported. That included fingerprints, iris scans, photographs, names and descriptions of the indivi…
North Korean hackers targeted nearly 1,000 South Korean foreign policy experts
South Korean authorities believe North Korean hackers, working for the government, have targeted at least 892 foreign policy experts in the country. The efforts focused on members of think tanks and academics, dating back to April. The attacks began with spear phishing emails, often claiming to be from figures in South Koreas political system. These usually included either links to fake sites or viruses as attachments. The ploy, while not particularly sophisticated, was enough to fool at least a handful of victims.
The result was that several prominent experts had their personal data stolen, email lists compromised (exposing more people to the hackers), and 13 companies (primarily online retailers) were victims of ransomware. Although police believe only 49 recipients actually handed credentials over to the fakes sites and only two companies paid the 2.5 million won ($1,980) ransom, it’s difficult to judge the full scale of the fallout.
It’s unclear what non-financial resources the North Korean hackers may have gained from this latest campaign. But it’s certain this will not be the last cyber attack on its souther neighbor. The county has previously targeted security researchers to discover unpatched vulnerabilities, and even used the tragedy on Halloween in Itaewon as a tool to target South Korean citizens.
Cyber warfare has been a major focus of North Korea for years, even as it seeks to deter foreign militaries with more traditional methods, like building nuclear weapons. It has also been a major source of revenue for the country which is in perpetual financial crisis and largely cut off from the world’s markets. It’s estimated that North Korean hackers have stolen $1.72 billion worth of cryptocurrency since 2017. And it doesn’t appear that it’s letting the recent crypto crash scare it off, as the recent ransoms were also paid in BitCoin.
Though the hackers covered their tracks reasonably well, the targets, tactics and IP addresses have led police to believe this is the same group that hacked the Korea Hydro & Nuclear Power in 2014. They also believe that the hackers will not cease their activity just because their efforts have been discovered. Authorities have urged people, especially those who work in sensitive areas like technology and government, to step up their security measures and be extra vigilant against fishing and human engineering attacks.