Posts with «politics & government» label

Trump plans to launch his own social media platform in early 2022

Former President Donald Trump has officially revealed that he's launching his own social media in 2022, a few months after his aide toldFox News about his plans. He's calling it TRUTH Social, and the platform is apparently part of his camp's efforts to fight back against "the Big Tech companies of Silicon Valley, which have used their unilateral power to silence opposing voices in America."

Some of Trump's supporters believe that social networks are biased against conservative voices — in 2018, a group even sued Twitter, Facebook and Google, accusing them of breaking antitrust laws and violating their First Amendment rights by conspiring to suppress conservative viewpoints. The case was tossed out of court a few times. According to a New York University research published earlier this year, there's no evidence of conservative bias on the world's most popular social networks. There was even an Instagram bug in the months leading to the US Presidential Elections that favored Trump content over Biden's.

It is true, however, that Facebook and Twitter banned Trump from their platforms following the January 6th US Capitol riots. Twitter determined that his tweets at that time violated its policies. According to the website, his tweets (which you can view in an archive) "must be read in the context of broader events in the country and the ways in which the President’s statements can be mobilized by different audiences, including to incite violence..."

Earlier this month, Trump sued to get his Twitter account back, arguing that the ban violates his First Amendment rights. Indeed, his ban on the website gets a special mention in TRUTH Social's announcement. He said in a statement: "We live in a world where the Taliban has a huge presence on Twitter, yet your favorite American President has been silenced."

TRUTH Social will have a beta launch in November for invited guests. Trump and his team are expecting to roll it out nationwide in the first quarter of 2022.

Commerce Department limits sale of hacking tools to Russia and China

The US Commerce Department has announced new rules related to the export and resale of cyber intrusion software. Once the limits come into effect in 90 days, companies that want to sell their hacking tools to countries “of national security or weapons of mass destruction concern” will need to obtain a license from the department’s Bureau of Industry and Security (BIS). The policy also covers nations that are under a US arms embargo.

Per The Washington Post, the rule is complicated. There are already many limitations on the export of intrusion software. Similarly, there are opportunities for companies to obtain exceptions. The main point is that the policy would cover the sale of software to countries like China and Russia. It would also limit the sale of programs like NSO’s Pegasus spyware, which some governments have used to target dissidents and journalists.

“The United States Government opposes the misuse of technology to abuse human rights or conduct other malicious cyber activities, and these new rules will help ensure that US companies are not fueling authoritarian practices,” the Commerce Department said.

Among the 42 countries involved in the Wassenaar Arrangement, a pact that sets voluntary export controls on military and dual-use technologies, the US is one of the last to impose limits on the sale of hacking software. Part of the reason for that is that the country has spent years working on the rules to ensure they don’t prevent cybersecurity researchers across the globe from working together to discover new flaws.

FDA proposes rule for over-the-counter hearing aids

The Food and Drug Administration is moving closer to making more affordable over-the-counter (OTC) hearing aids a reality for millions of Americans with mild or moderate hearing loss. The agency issued a proposal to create a category of approved devices that people would be able to buy without a prescription, hearing exam or having to arrange a fitting with an audiologist.

"The proposed rule is designed to help increase competition in the market while also ensuring the safety and effectiveness of OTC and prescription hearing aids," the FDA said. Around 15 percent of adult Americans (some 37.5 million) have hearing difficulties, according to the agency.

The FDA's goal is to make it easier for those who could benefit from hearing aids to actually get one — it says only a fifth of people who fall into that category use such a device. The agency is hoping to tackle some of the barriers people might encounter, including cost, ease of access, social stigma and state and federal regulations.

In 2017, the federal government passed the Over-the-Counter Hearing Aid Act with the aim of improving access to more affordable hearing aids. Hearing aids have only available with a prescription as the FDA classed them as Class I or II medical devices. President Joe Biden signed an executive order in July that, in part, instructed the Secretary of Health and Human Services to publish a proposed rule for OTC hearing aids within 120 days.

The proposal is now open to a 90-day public comment period. If and when the rule is finalized, it will come into effect 60 days after it's published in the federal register.

Several companies have already made moves to gain a foothold in the OTC hearing aid market. Earlier this year, Bose started selling its SoundControl hearing aids after gaining approval from the FDA, while Jabra unveiled its Enhance Plus earbuds a couple of months ago. Other companies are blending hardware and tech in hearing aids, including Bragi and Olive Union.

Apple, meanwhile, recently updated AirPods Pro with a feature that amplifies the volume of other people's voices in conversation while reducing ambient noise. The company is also said to be looking into ways of using AirPods as health devices.

Donald Trump's campaign website was defaced by a hacker

A part of Donald Trump's campaign website looked different than usual until Monday morning. Its "action" subdomain, which usually houses his calls to action, contained a Turkish message instead. "Do not be like those who forgot Allah, so Ally made them forget themselves. Here they really went astray," the message in Turkish said, according to Newsweek. The page also contained a video embed of Turkish President Recep Tayyip Erdoğan, as well as a link to the hacker's Instagram and Facebook pages.

A hacker calling themselves RootAyyildiz has claimed responsibility for the defacement — and for many others in the past. The National Intelligence Council released a report earlier this year linking them to the defacement of Biden-Harris' presidential campaign website, as well. Back then, Biden's website showed a message in Turkish, the country's flag and a photo of the 34th Sultan of the Ottoman Empire, Abdul Hamid II. 

RootAyyildiz told Motherboard that they used a technique called Server Side Template Injection (SSTI) to inject their own code into the site's template and that they had control of the site for three months. According to Forbes, references to RootAyyildiz first appeared on the website on October 9th, at the latest. The hacker added in a statement to Motherboard: "There are many areas of hacking attacks, for example, hacking social media accounts or websites, I am a hacktivist and I have been working on websites for a long time and I choose this management to have my voice heard." 

Before the US Presidential Elections last year, hackers were also able to gain control of Trump's website. They replaced its About page with a message threatening to discredit the then-POTUS by sharing incriminating data. 

EPA announces plans to regulate cancer-causing 'forever chemicals'

Showing up in everything from cosmetics and dental floss to product packaging and cleaning supplies. polyfluoroalkyl and perfluoroalkyl substances, or PFAS, are ubiquitous to the modern world. They're also known as "forever chemicals" as they do not break down in nature. What's more, they've been linked to a host of human diseases, from thyroid conditions to certain cancers, which is why, in 2016, the Obama administration enacted a unenforceable recommendation limiting the amount of PFAS in a given product should not exceed 70 parts per trillion. On Monday, the Biden administration announced that it will give Obama's recommendation some teeth.

Today, @EPAMichaelRegan announced EPA’s Strategic Roadmap to confront #PFAS. This roadmap delivers on the agency’s mission to protect public health & the environment and answers the call for action on these persistent & dangerous chemicals. Read more here: https://t.co/2GyHIfEVajpic.twitter.com/kDHbwYgEJm

— U.S. EPA (@EPA) October 18, 2021

“This is a really bold set of actions for a big problem,” EPA administrator Michael Regan told The Washington Post. “This strategy really lays out a series of concrete and ambitious actions to protect people. There are concrete steps that we are taking that move this issue forward in a very aggressive way.”

The EPA unveiled its 3-year roadmap towards regulating the class of chemicals on Monday centers on a trio of approaches: "increase investments in research, leverage authorities to take action now to restrict PFAS chemicals from being released into the environment, and accelerate the cleanup of PFAS contamination," according to the EPA. To that end, the administration plans to set enforceable drinking water limits under the Safe Drinking Water Act, designate PFAS as a hazardous substance under CERCLA (which would hold manufacturers financially liable for incinerating the chemical or releasing it into waterways), set timelines for establishing effluent guideline limitations under the Clean Water Act, review rules and guidance under the Toxic Substances Control Act, and expand monitoring, data collection and research of the chemicals. Additionally, the agency announced a new national testing strategy that will require PFAS manufacturers to provide toxicity data on the chemicals they create. 

“Communities contaminated by these toxic forever chemicals have waited decades for action,” Ken Cook, President of the Environmental Working Group, said in a press statement. “So, it’s good news that Administrator Regan will fulfill President Biden’s pledge to take quick action to reduce PFOA and PFOS in tap water, to restrict industrial releases of PFAS into the air and water, and to designate PFOA and PFOS as hazardous substances to hold polluters accountable. It’s been more than 20 years since EPA and EWG first learned that these toxic forever chemicals were building up in our blood and increasing our likelihood of cancer and other health harms. It’s time for action, not more plans, and that’s what this Administrator will deliver."

A handful of states including New Jersey, Vermont, Michigan, and New York, have already moved to regulate the chemicals on their own — California banned their use in baby and toddler products earlier this year — while the EU has banned many of the chemicals outright. The US Navy has announced that it will ban PFAS from its firefighting foam by October, 2023, as directed by Congress.

Moscow metro launches facial recognition payment system despite privacy concerns

More than 240 metro stations across Moscow now allow passengers to pay for a ride by looking at a camera. The Moscow metro has launched what authorities say is the first mass-scale deployment of a facial recognition payment system. According to The Guardian, passengers can access the payment option called FacePay by linking their photo, bank card and metro card to the system via the Mosmetro app. "Now all passengers will be able to pay for travel without taking out their phone, Troika or bank card," Moscow mayor Sergey Sobyanin tweeted.

Теперь все пассажиры #мосметро смогут платить за проезд, не доставая телефон, "Тройку" или банковскую карту. Система Face Pay завтра заработает на более чем 240 станциях. pic.twitter.com/8x4xeFkbqW

— Сергей Собянин (@MosSobyanin) October 14, 2021

In the official Moscow website's announcement, the country's Department of Transport said all Face Pay information will be encrypted. The cameras at the designated turnstyles will read a passenger's biometric key only, and authorities said information collected for the system will be stored in data centers that can only be accessed by interior ministry staff. Moscow's Department of Information Technology has also assured users that photographs submitted to the system won't be handed over to the cops.

Still, privacy advocates are concerned over the growing use of facial recognition in the city. Back in 2017, officials added facial recognition tech to the city's 170,000 security cameras as part of its efforts to ID criminals on the street. Activists filed a case against Moscow's Department of Technology a few years later in hopes of convincing the courts to ban the use of the technology. However, a court in Moscow sided with the city, deciding that its use of facial recognition does not violate the privacy of citizens. Reuters reported earlier this year, though, that those cameras were also used to identify protesters who attended rallies.

Stanislav Shakirov, the founder of Roskomsvoboda, a group that aims to protect Russians' digital rights, said in a statement:

"We are moving closer to authoritarian countries like China that have mastered facial technology. The Moscow metro is a government institution and all the data can end up in the hands of the security services."

Meanwhile, the European Parliament called on lawmakers in the EU earlier this month to ban automated facial recognition in public spaces. It cited evidence that facial recognition AI can still misidentify PoCs, members of the LGBTI+ community, seniors and women at higher rates. In the US, local governments are banning the use of the technology inpublic spaces, including statewide bans by Massachusetts and Maine. Four Democratic lawmakers also proposed a bill to ban the federal government from using facial recognition. 

Judge bars county clerk after voting machine passwords leaked to QAnon

In August, QAnon conspiracy theorist Ron Watkins shared a video he claimed showed ballot machines from Dominion Voting Systems could be remotely accessed to tamper with the results of a vote. At the time, he said the information came to him from a “whistleblower.”

This week, a Colorado judge barred Mesa County Clerk Tina Peters from overseeing the county’s upcoming November election in relation to a leak of voting machine BIOS passwords. Peters, who tweeted in support of former President Donald Trump’s election conspiracy theories, invited a man named Gerald Wood to a meeting involving a “trusted build” software update that was meant to ensure the security of the county’s voting machines. Peters claimed Wood was an “administrative assistant” transitioning to her office, but then later described him as a “consultant” she hired to copy information from the computers.

Ahead of the meeting, Belinda Knisley, Peters’ deputy, sent an email to staff asking that they turn off the security cameras in the Election Department and not turn them back on until after August 1st. Knisley didn’t explain the reason for her request, but it was carried out either way. On the day of the meeting, Wood photographed a spreadsheet that contained the passwords to the machines and copied over their hard drives. Following the meeting, the passwords were publicly posted to an “online social media site.”

“Peters directed the creation of the images of the hard drive, which was not authorized by law and which directly led to the decommissioning of Mesa County’s voting systems, facilitating the leak of sensitive data and exposed the county’s voting system to compromise,” Judge Valerie Robinson wrote in a decision spotted by Ars Technica.

In a statement, Peters said she plans to appeal the “decision to remove a duly elected clerk and recorded from her election duties.” She went on to described herself as a whistleblower and called the case against her a “power grab” by Colorado Secretary of State Jena Griswold.

“Clerk Peters seriously compromised the security of Mesa County’s voting system,” Griswold said in a statement. “The Court’s decision today bars Peters from further threatening the integrity of Mesa’s elections and ensures Mesa County residents have the secure and accessible election they deserve.” The FBI and Mesa County district attorney are investigating Peters, but no criminal charges have been filed yet.

Missouri governor threatens to prosecute journalist for sharing web security flaw

Missouri Governor Mike Parson might want to read up on the differences between disclosing and exploiting security flaws. According to The Missouri Independent, Parson accused a St. Louis Post-Dispatch reporter of being a "hacker" for having the audacity to... report security holes. The journalist disclosed a Department of Elementary and Secondary Education web app flaw that let anyone see over 100,000 teachers' Social Security numbers in site source code, and Parson interpreted this as a "political game" meant to "embarrass the state" — that is, a malicious hack.

The governor has already referred the case to the Cole County Prosecutor, and even has the Missouri Highway State Patrol investigating. An attorney for The Post-Dispatch maintained that the reporter "did the responsible thing" by sharing the flaw with the government to get it fixed. The lawyer also helpfully refreshed Parson on his internet lingo. A hacker is someone who "subverts" security with sinister intent, not a reporter trying to bolster security by sharing publicly available information.

This flaw wasn't recent, either. University of Missouri-St. Louis professor Shaji Khan told The Post-Dispatch that this kind of vulnerability had been known for "at least" 10 years, and that it was "mind boggling" the Department would let these problems linger. Audits in 2015 and 2016 had highlighted data collection issues at both the Department and school districts.

No, prosecutors probably won't file charges. It's a bit difficult to convict someone whose 'hack' effectively amounted to clicking "view page source" in their browser. However, this highlights an all-too-familiar problem with politicians that don't understand tech. It doesn't just lead to embarrassments, such as letters to long-gone CEOs — it can discourage responsible security disclosures and put thousands of people at risk.

House bill would limit Section 230 protections for 'malicious' algorithms

Congress is once again hoping to limit Section 230 safeguards under certain circumstances. Rep. Frank Pallone and other House Democrats are introducing a bill, the Justice Against Malicious Algorithms Act (JAMA), that would make internet platforms liable when they "knowingly or recklessly" use algorithms to recommend content that leads to physical or "severe emotional" harm. They're concerned online giants like Facebook are knowingly amplifying harmful material, and that companies should be held responsible for this damage.

The key sponsors, including Reps. Mike Doyle, Jan Schakowsky and Anna Eshoo, pointed to whistleblower Frances Haugen's Senate testimony as supposed evidence of Facebook's algorithm abuse. Her statements were proof Facebook was abusing the Communications Decency Act's Section 230 "well beyond congressional intent," according to Eshoo. Haugen alleged that Facebook knew its social networks were harmful to children and spread "divisive and extreme" content.

The bill only applies to services with over 5 million monthly users, and won't cover basic online infrastructure (such as web hosting) or user-specified searches. JAMA will go before the House on October 15th.

As with past proposed reforms, there are no guarantees JAMA will become law. Provided it passes the House, an equivalent measure still has to clear a Senate that has been hostile to some Democrat bills. The parties have historically disagreed on how to change Section 230 — Democrats believe it doesn't require enough moderation for hate and misinformation, while Republicans have claimed it enables censorship of conservative viewpoints. The bill's vaguer concepts, such as 'reckless' algorithm use and emotional damage, might raise fears of over-broad interpretations.

The bill could still send a message even if it dies, though. Pallone and the other JAMA backers argue the "time for self-regulation is over" — they're no longer convinced social media heavyweights like Facebook can apologize, implement a few changes and carry on. This won't necessarily lead to a more strictly regulated social media space, but it could put more pressure on social networks to implement far-reaching policy changes.

California could ban gas-powered generators and mowers by 2024

California could ban sales of some gas-powered devices, including lawn equipment, generators and pressure washers. Governor Gavin Newsom signed a law over the weekend that orders regulators to prohibit the sale of small off-road engines.

The California Air Resources Board was already working on rules to that effect, but Newsom has given the agency deadlines for adopting and applying the regulations. The agency has until July 1st to adopt the rules. The regulations will apply to engines made on or after January 1st, 2024, or whenever is feasible in the state board's opinion — whichever is later. The law also stipulates that regulators will need to offer rebates to lower the cost of switching equipment. The latest state budget set aside $30 million to cover the costs.

The aim of the law is to reduce emissions. As the Associated Press notes, California brought in emission standards for those engines in 1990. Although emissions from cars have generally decreased over the last few decades, that hasn't necessarily been the case for small off-road engines.

State officials have said that a gas-powered leaf blower that's used for one hour emits the same level of pollution as a 2017 Toyota Camry that travels for around 1,100 miles. There are currently more than 16.7 million devices with small off-road engines in California — three million or so more than the number of passenger cars in the state.

California is tackling emissions from gas-powered engines on other fronts. Last year, the California Air Resources Board said all truck and van manufacturers will have to switch to electric versions by 2045. The state will also ban sales of new combustion engine cars and trucks by 2035. Many auto manufacturers are aiming to switch entirely to EVs by that time. Another zero-emissions rule for light-duty autonomous vehicles will come into effect starting in 2030.

There are already some electric pressure washers and lawn mowers on the market. Zero-emission generators might be harder to come by, though some companies have also attempted to make hydrogen-powered models.