New 'Godzilla Vs. Kong' Movie Sets a Global Pandemic Box Office Record Slashdotby EditorDavid on movies at January 1, 1970, 1:00 am (cached at March 29, 2021, 12:35 am)

The Los Angeles Times reports: This weekend's international rollout of Warner Bros.' "Godzilla vs. Kong" set a new pandemic record for a Hollywood film, a hopeful sign of an imminent return to moviegoing. The film, which opens in North American theaters and on HBO Max on Wednesday, debuted in 38 overseas markets to an impressive $121.8 million, including $70.3 million in Chinese receipts. That's the biggest debut for a Hollywood film in China since 2019. The monster smackdown also grossed $12.4 million on 891 IMAX screens, also Hollywood's biggest IMAX weekend since December 2019. The "Godzilla vs. Kong" debut outperformed the entire to-date international gross of the studio's December blockbuster release of "Wonder Woman 1984," which currently stands at $120 million overseas (and an additional $45.9 million domestic), according to estimates from measurement firm Comscore. The previous benchmark for a pandemic-era overseas opening was the $53-million launch of the studio's "Tenet" in August 2020. While American theaters are slowly reopening en masse after a roller-coaster year of reopenings and closings, movie houses including Regal and smaller chains (such as L.A.'s ArcLight) have not yet returned. Despite theaters operating at limited capacity, Universal's R-rated action flick "Nobody" debuted this weekend across 2,460 North American screens to $6.7 million. L.A. and New York City, both recently reopened, were the two highest-grossing markets. Long-time Slashdot reader destinyland calls this "Good news for Godzilla fans. But bad news if you think all those movie-goers should still be staying home social distancing!"

Read more of this story at Slashdot.

Amazon Argues With US Senators Elizabeth Warren and Bernie Sanders on Twitter Slashdotby EditorDavid on twitter at January 1, 1970, 1:00 am (cached at March 29, 2021, 12:06 am)

The Hill reports that Amazon engaged in "a heated Twitter exchange" with U.S. Senator Elizabeth Warren "after the lawmaker claimed that it and other large corporations 'exploit loopholes and tax havens to pay close to nothing in taxes.'" The exchange began after Warren (Democrat - Massachusetts) tweeted a clip from Thursday's Senate Finance Committee hearing, in which she accused Amazon and other companies of "manipulating the tax code to avoid paying their fair share." Hours later, the Amazon News Twitter account responded with, "You make the tax laws @SenWarren; we just follow them." "If you don't like the laws you've created, by all means, change them," Amazon tweeted, adding that the tech giant "has paid billions of dollars in corporate taxes over the past few years alone...." The company added that since 2010, it has invested $350 billion in the U.S. economy and in 2020, added 400,000 new jobs across the country... Warren later Thursday evening hit back at Amazon, tweeting, "I didn't write the loopholes you exploit... your armies of lawyers and lobbyists did." "But you bet I'll fight to make you pay your fair share," she continued. "And fight your union-busting. And fight to break up Big Tech so you're not powerful enough to heckle senators with snotty tweets." UPDATE: Bernie Sanders was recently called out on Twitter by the retail chief of Amazon. "I often say we are the Bernie Sanders of employers, but that's not quite right because we actually deliver a progressive workplace." A recent article in Recode suggests the tweets may have been encouraged by Jeff Bezos: Amazon has long been at odds with Senators Bernie Sanders and Elizabeth Warren over their criticisms of the company's labor and business practices. But the discord reached a new height last week when Amazon aggressively went after both on Twitter in an unusual attack for a large corporation. With each new snarky tweet from an Amazon executive or the company's official Twitter account, insiders and observers alike asked a version of the same question: "What the hell is going on?" Turns out that Amazon leaders were following a broad mandate from the very top of the company: Fight back. Recode has learned that Amazon CEO Jeff Bezos expressed dissatisfaction in recent weeks that company officials weren't more aggressive in how they pushed back against criticisms of the company that he and other leaders deem inaccurate or misleading. What followed was a series of snarky and aggressive tweets that ended up fueling their own media cycles. The timing was likely not coincidental. Bezos and other Amazon leaders are on edge as the company is facing the largest union election in its history at its Bessemer, Alabama warehouse.

Read more of this story at Slashdot.

New Online Science Fiction Dictionary Pushes Back Origin of the Word 'Robot' to 1920 Slashdotby EditorDavid on scifi at January 1, 1970, 1:00 am (cached at March 28, 2021, 11:35 pm)

"Fans of science fiction learned last week that the word 'robot' was first used in 1920 — a full three years earlier than originally thought," according to a blog post at Archive.org. They call it "a major SciFi discovery hiding in plain sight": The "massively important yet obvious" change in date was confirmed with a search of the Internet Archive, which has a digitized first edition of the Czech play, R.U.R. Rossum's Universal Robots, published in 1920. There on the title page, hiding in plain sight in an English-language subtitle to the work, is the earliest known use of the word "robot." This important piece of information is one of many little-known facts captured in the Historical Dictionary of Science Fiction. The project was completed this year by historian Jesse Sheidlower, who credits two things that enabled him to publish this project, decades in the making. "One, we had a pandemic so I had a lot of enforced time at home that I could spend on it," explained Sheidlower. "The second was the existence of the Internet Archive. Because it turns out the Internet Archive has the Pulp Magazine collection that holds almost all the science fiction pulps from this core period...." The comprehensive online dictionary includes not only definitions, but also how nearly 1,800 sci-fi terms were first used, and their context over time... The project began nearly twenty years ago at Oxford English Dictionary as the Science Fiction Citations Project.

Read more of this story at Slashdot.

UNIX's Founders Created Another OS at Bell Labs: 'Plan 9' Slashdotby EditorDavid on unix at January 1, 1970, 1:00 am (cached at March 28, 2021, 10:35 pm)

The team behind UNIX also built another operating system at Bell Labs, writes the corporate CTO and president of Nokia Bell Labs: Starting in the late 1980s, a group led by Rob Pike and UNIX co-creators Ken Thompson and Dennis Ritchie developed "Plan 9". Their motivation was two-fold: to build an operating system that would fit an increasingly distributed world, and to do so in a clean and elegant manner. The plan was not to build directly on the Unix foundation but to implement a new design from scratch. The result was named Plan 9 from Bell Labs — the name an inside joke inspired by the cult B-movie "Plan 9 from Outer Space." Plan 9 is built around a radically different model from that of conventional operating systems. The OS is structured as a collection of loosely coupled services, which may be hosted on different machines. Another key concept in its design is that of a per-process name space: services can be mapped on to local names fixed by convention, so that programs using those services need not change if the current services are replaced by others providing the same functionality. Despite the groundbreaking innovations in Plan 9, the operating system did not take off — at least not enough to justify Bell Labs continued investment in Plan 9 development. But Plan 9's innovations found their way into many commercial OSes: the concept of making OS services available via the file system is now pervasive in Linux; Plan 9's minimalist windowing system design has been replicated many times; the UTF-8 character encoding used universally today in browsers was invented for, and first implemented in, Plan 9; and the design of Plan 9 anticipated today's microservice architectures by more than a decade...! Starting this week, Plan 9 will have a new home in the space it helped define: cyberspace. We are transferring the copyright in Plan 9 software to the Plan 9 Foundation for all future development, allowing them to carry on the good work that Bell Labs and many other Plan 9 enthusiasts have undertaken over the past couple of decades. Indeed, there is an active community of people who have been working on Plan 9 and who are interested in the future evolution of this groundbreaking operating system. That community is organizing itself bottom-up into the new Plan 9 Foundation, which is making the OS code publicly available under a suitable open-source software license. We at Nokia and Bell Labs are huge advocates for the power of open-source communities for such pioneering systems that have the potential to benefit the global software development community. Who knows, perhaps Plan 9 will become a part of the emerging distributed cloud infrastructure that will underpin the coming industrial revolution?

Read more of this story at Slashdot.

Attackers Breach 21,000 Microsoft Exchange Servers, Install Malware Implicating Bria Slashdotby EditorDavid on microsoft at January 1, 1970, 1:00 am (cached at March 28, 2021, 9:35 pm)

Security researcher Brian Krebs wants you to know... "New data suggests someone has compromised more than 21,000 Microsoft Exchange Server email systems worldwide and infected them with malware that invokes both KrebsOnSecurity and Yours Truly by name. Let's just get this out of the way right now: It wasn't me." The Shadowserver Foundation, a nonprofit that helps network owners identify and fix security threats, says it has found 21,248 different Exchange servers which appear to be compromised by a backdoor and communicating with [a domain that begins with brian . krebsonsecurity... Not a safe domain.] Shadowserver has been tracking wave after wave of attacks targeting flaws in Exchange that Microsoft addressed earlier this month in an emergency patch release. The group looks for attacks on Exchange systems using a combination of active Internet scans and "honeypots" — systems left vulnerable to attack so that defenders can study what attackers are doing to the devices and how. David Watson, a longtime member and director of the Shadowserver Foundation Europe, says his group has been keeping a close eye on hundreds of unique variants of backdoors (a.k.a. "web shells") that various cybercrime groups worldwide have been using to commandeer any unpatched Exchange servers. These backdoors give an attacker complete, remote control over the Exchange server (including any of the server's emails)... Shadowserver's honeypots saw multiple hosts with the Babydraco backdoor doing the same thing: Running a Microsoft Powershell script that fetches the file "krebsonsecurity.exe"... Oddly, none of the several dozen antivirus tools available to scan the file at Virustotal.com currently detect it as malicious. The Krebsonsecurity file also installs a root certificate, modifies the system registry, and tells Windows Defender not to scan the file. Watson said the Krebsonsecurity file will attempt to open up an encrypted connection between the Exchange server and the above-mentioned IP address, and send a small amount of traffic to it each minute. Shadowserver found more than 21,000 Exchange Server systems that had the Babydraco backdoor installed. But Watson said they don't know how many of those systems also ran the secondary download from the rogue Krebsonsecurity domain. "Despite the abuse, this is potentially a good opportunity to highlight how vulnerable/compromised MS Exchange servers are being exploited in the wild right now, and hopefully help get the message out to victims that they need to sign up our free daily network reports," Watson said.

Read more of this story at Slashdot.

Amazon Argues With US Senator Elizabeth Warren on Twitter Slashdotby EditorDavid on twitter at January 1, 1970, 1:00 am (cached at March 28, 2021, 8:35 pm)

The Hill reports that Amazon engaged in "a heated Twitter exchange" with U.S. Senator Elizabeth Warren "after the lawmaker claimed that it and other large corporations 'exploit loopholes and tax havens to pay close to nothing in taxes.'" The exchange began after Warren (Democrat - Massachusetts) tweeted a clip from Thursday's Senate Finance Committee hearing, in which she accused Amazon and other companies of "manipulating the tax code to avoid paying their fair share." Hours later, the Amazon News Twitter account responded with, "You make the tax laws @SenWarren; we just follow them." "If you don't like the laws you've created, by all means, change them," Amazon tweeted, adding that the tech giant "has paid billions of dollars in corporate taxes over the past few years alone...." The company added that since 2010, it has invested $350 billion in the U.S. economy and in 2020, added 400,000 new jobs across the country... Warren later Thursday evening hit back at Amazon, tweeting, "I didn't write the loopholes you exploit... your armies of lawyers and lobbyists did." "But you bet I'll fight to make you pay your fair share," she continued. "And fight your union-busting. And fight to break up Big Tech so you're not powerful enough to heckle senators with snotty tweets."

Read more of this story at Slashdot.

Scientists Boost an Idea Long Thought Outlandish: Reflecting the Sun's Rays Slashdotby EditorDavid on earth at January 1, 1970, 1:00 am (cached at March 28, 2021, 7:35 pm)

"The idea of artificially cooling the planet to blunt climate change — in effect, blocking sunlight before it can warm the atmosphere — got a boost on Thursday when an influential scientific body urged the U.S. government to spend at least $100 million to research the technology," reports the New York Times: That technology, often called solar geoengineering, entails reflecting more of the sun's energy back into space through techniques that include injecting aerosols into the atmosphere. In a new report, the National Academies of Sciences, Engineering, and Medicine said that governments urgently need to know whether solar geoengineering could work and what the side effects might be. "Solar geoengineering is not a substitute for decarbonizing," said Chris Field, director of the Woods Institute for the Environment at Stanford University and head of the committee that produced the report, referring to the need to emit less carbon dioxide and other greenhouse gases into the atmosphere. Still, he said, technology to reflect sunlight "deserves substantial funding, and it should be researched as rapidly and effectively as possible." The report acknowledged the risks that have made geoengineering one of the most contentious issues in climate policy. Those risks include upsetting regional weather patterns in potentially devastating ways, for example by changing the behavior of the monsoon in South Asia; relaxing public pressure to reduce greenhouse gas emissions; and even creating an "unacceptable risk of catastrophically rapid warming" if governments started reflecting sunlight for a period of time, and then later stopped. But the authors argue that greenhouse gas emissions are not falling quickly enough to avoid dangerous levels of global warming, which means the world must begin to examine other options. Evidence for or against solar geoengineering, they found, "could have profound value" in guiding decisions about whether to deploy it.

Read more of this story at Slashdot.

cURL's 20th Anniversary Celebrated With 3D-Printed 'GitHub Steel' Contribution Graph Slashdotby EditorDavid on internet at January 1, 1970, 1:00 am (cached at March 28, 2021, 6:35 pm)

This week Swedish developer Daniel Stenberg posted a remarkable reflection on the 20th anniversary of his command-line data tool, cURL: curl was adopted in Red Hat Linux in late 1998, became a Debian package in May 1999, shipped in Mac OS X 10.1 in August 2001. Today, it is also shipped by default in Windows 10 and in iOS and Android devices. Not to mention the game consoles, Nintendo Switch, Xbox and Sony PS5. Amusingly, libcurl is used by the two major mobile OSes but not provided as an API by them, so lots of apps, including many extremely large volume apps bundle their own libcurl build: YouTube, Skype, Instagram, Spotify, Google Photos, Netflix etc. Meaning that most smartphone users today have many separate curl installations in their phones. Further, libcurl is used by some of the most played computer games of all times: GTA V, Fortnite, PUBG mobile, Red Dead Redemption 2 etc. libcurl powers media players and set-top boxes such as Roku, Apple TV by maybe half a billion TVs. curl and libcurl ships in virtually every Internet server and is the default transfer engine in PHP, which is found in almost 80% of the world's almost two billion websites. Cars are Internet-connected now. libcurl is used in virtually every modern car these days to transfer data to and from the vehicles. Then add media players, kitchen and medical devices, printers, smart watches and lots of "smart"; IoT things. Practically speaking, just about every Internet-connected device in existence runs curl. I'm convinced I'm not exaggerating when I claim that curl exists in over ten billion installations world-wide... Those 300 lines of code in late 1996 have grown to 172,000 lines in March 2021. Stenberg attributes cURL's success to persistence. "We hold out. We endure and keep polishing. We're here for the long run. It took me two years (counting from the precursors) to reach 300 downloads. It took another ten or so until it was really widely available and used." But he adds that 22 different CPU architectures and 86 different operating systems are now known to have run curl. In a later blog post titled "GitHub Steel," Stenberg also reveals that GitHub gave him a 3D-printed steel version of his 2020 GitHub contribution matrix — accompanied by a friendly note. "Please accept this small gift as a token of appreciation on behalf of all of us here at GitHub, and everyone who benefits from your work."

Read more of this story at Slashdot.

[no title] Scripting News(cached at March 28, 2021, 6:32 pm)

We should dream about what if the tech companies wanted to build a more customizable network, one that works better for users, not advertisers. The answer to every one of these ideas is: They'll never do it. That's what makes it fun.
[no title] Scripting News(cached at March 28, 2021, 6:32 pm)

From the Something-Users-Don't-Understand-But-Could Department. Developing software is a bootstrap. So you're building a bridge. Start by pulling a wire across the river. Use it to pull up another wire. When you have enough wires, bundle them to create a thicker wire, and use it to pull up something bigger. Eventually you have two thick cables going across the body of water. Then you use the cables to pull up a roadway. And then you start building on-ramps and off-ramps and toll booths. But you can't build things out of order, and sometimes things are added earlier for features that won't be added until later in the bootstrap process. People who have evolved products know about this. And you never see it more clearly than when you're building your 15th or 200th bridge. By that point, you figure, if the users really wanted to understand they could, because they're teaching classes about it in universities.
OpenSSL Fixes a High-Severity Flaw That Allowed Crashing of Servers Slashdotby EditorDavid on bug at January 1, 1970, 1:00 am (cached at March 28, 2021, 5:35 pm)

"OpenSSL, the most widely used software library for implementing website and email encryption, has patched a high-severity vulnerability that makes it easy for hackers to completely shut down huge numbers of servers," reports Ars Technica: On Thursday, OpenSSL maintainers disclosed and patched a vulnerability that causes servers to crash when they receive a maliciously crafted request from an unauthenticated end user. CVE-2021-3449, as the denial-of-server vulnerability is tracked, is the result of a null pointer dereference bug. Cryptographic engineer Filippo Valsorda said on Twitter that the flaw could probably have been discovered earlier than now. "Anyway, sounds like you can crash most OpenSSL servers on the Internet today," he added. Hackers can exploit the vulnerability by sending a server a maliciously formed renegotiating request during the initial handshake that establishes a secure connection between an end user and a server... The maintainers have rated the severity high. Researchers reported the vulnerability to OpenSSL on March 17. Nokia developers Peter Kästle and Samuel Sapalski provided the fix. Ars Technica also reports that OpenSSL "fixed a separate vulnerability that, in edge cases, prevented apps from detecting and rejecting TLS certificates that aren't digitally signed by a browser-trusted certificate authority."

Read more of this story at Slashdot.

[no title] Scripting News(cached at March 28, 2021, 5:32 pm)

As I'm developing a Frontier-like product, I'm remembering how much I didn't like some of the developers we attracted. Most of them were fine people, appreciative, kind, wanting to work together. We used to believe in the goodness of everyone, but forgot the humanity, and that as a community grows, eventually you attract people who try to make your life miserable. The pressure of dealing with these people literally made me sick, and I got better as soon as I stepped. We've learned a lot about moderating community systems since then. So I'm going to keep my promise to myself, this project is mainly for me, because I want it, and I love the idea of other people using it, and helping each other, and that includes me, but when they start abusing me, I'm turning them off without a second thought.
[no title] Scripting News(cached at March 28, 2021, 5:32 pm)

Cuomo: Legal cannabis in New York, soon come.
Will Programming by Voice Be the Next Frontier in Software Development? Slashdotby EditorDavid on programming at January 1, 1970, 1:00 am (cached at March 28, 2021, 5:05 pm)

Two software engineers with injuries or chronic pain conditions have both started voice-coding platforms, reports IEEE Spectrum. "Programmers utter commands to manipulate code and create custom commands that cater to and automate their workflows." The voice-coding app Serenade, for instance, has a speech-to-text engine developed specifically for code, unlike Google's speech-to-text API, which is designed for conversational speech. Once a software engineer speaks the code, Serenade's engine feeds that into its natural-language processing layer, whose machine-learning models are trained to identify and translate common programming constructs to syntactically valid code... Talon has several components to it: speech recognition, eye tracking, and noise recognition. Talon's speech-recognition engine is based on Facebook's Wav2letter automatic speech-recognition system, which [founder Ryan] Hileman extended to accommodate commands for voice coding. Meanwhile, Talon's eye tracking and noise-recognition capabilities simulate navigating with a mouse, moving a cursor around the screen based on eye movements and making clicks based on mouth pops. "That sound is easy to make. It's low effort and takes low latency to recognize, so it's a much faster, nonverbal way of clicking the mouse that doesn't cause vocal strain," Hileman says... Open-source voice-coding platforms such as Aenea and Caster are free, but both rely on the Dragon speech-recognition engine, which users will have to purchase themselves. That said, Caster offers support for Kaldi, an open-source speech-recognition tool kit, and Windows Speech Recognition, which comes preinstalled in Windows.

Read more of this story at Slashdot.

'No Evidence' to Support Trump CDC Director's Theory about Coronavirus Origin Slashdotby EditorDavid on medicine at January 1, 1970, 1:00 am (cached at March 28, 2021, 1:35 pm)

While President Trump's former CDC director says he still thinks SARS-Cov-2 somehow originated from a lab in China, "a team of experts from the World Health Organization, Dr. Anthony Fauci, and a number of virology experts have said the evidence to support such a claim just isn't there," reports CBS News: Redfield, a virologist who headed the CDC under President Trump, stressed several times that this is just his opinion, not a proven fact. "I'm allowed to have opinions now," he said... Dr. Anthony Fauci addressed Redfield's comments at Friday's COVID-19 response briefing and suggested that most public health officials disagree.... Kristian G. Andersen, director of the infectious disease genomics, translational research institute at Scripps Research, told CBS News that "none of (Redfield's) comments" on the lab theory are "backed by available evidence." "It is clear that not only was he the most disastrous CDC director in U.S. history where he utterly failed in his sworn mission to keep the country safe, but via his comments, he also shows a complete lack of basic evolutionary virology," Andersen said. Andersen was the lead author of a study published in Nature Medicine last year which found that the virus was a product of natural evolution. Furthermore, through analysis of public genome sequence data, the scientists "found no evidence that the virus was made in a laboratory or otherwise engineered," according to a press release from Scripps. "By comparing the available genome sequence data for known coronavirus strains, we can firmly determine that SARS-CoV-2 originated through natural processes," Andersen said at the time. W. Ian Lipkin, a study co-author with Andersen and the director of the Center for Infection and Immunity at Columbia's Mailman School of Public Health, said that while there's still a lot we don't know about the virus, including exactly how long it's been circulating, there is "no evidence" to suggest that it was created in a lab... Andersen noted that "We know that the first epidemiologically linked cluster of cases came from the Huanan market and we know the virus was found in environmental samples — including animal cages — at the market," he said. "Any 'lab leak' theory would have to account for that scenario — which it simply can't, without invoking a major conspiracy and cover up by Chinese scientists and authorities." His scathing conclusion: "Redfield has no idea what he's talking about — plain and simple. It's no surprise given his disastrous tenure as CDC director."

Read more of this story at Slashdot.