• Risks Digest 33.61 (1/2)

    From RISKS List Owner@21:1/5 to All on Sun Feb 5 22:46:07 2023
    RISKS-LIST: Risks-Forum Digest Sunday 5 February 2023 Volume 33 : Issue 61

    ACM FORUM ON RISKS TO THE PUBLIC IN COMPUTERS AND RELATED SYSTEMS (comp.risks) Peter G. Neumann, founder and still moderator

    ***** See last item for further information, disclaimers, caveats, etc. ***** This issue is archived at <http://www.risks.org> as
    <http://catless.ncl.ac.uk/Risks/33.61>
    The current issue can also be found at
    <http://www.csl.sri.com/users/risko/risks.txt>

    Contents: Working on huge backlog
    Historic Arctic outbreak crushes records in New England (WashPost)
    'It had just vanished' -- the shock when tech fails (BBC News)
    Welcome to the Era of Internet Blackouts (WiReD)
    Ford recalls 462,000 SUVs over rearview camera issue (Engadget)
    The lights have been on at a Massachusetts school for over a year because
    no one can turn them off (Corky Siemaszko)
    FAA says unintentionally deleted files are to blame for nationwide
    ground stop (CNN)
    Wi-Fi Routers Can Detect Human Locations, Poses Within a Room (Mark Tyson) Hackers Can Make Computers Destroy Their Own Chips with Electricity
    (Matthew Sparkes)
    Decoding Brainwaves to Identify What Music Is Being Listened To (U.Essex) Remember Zoom-bombing? This is how Zoom tamed meeting intrusions. (WashPost) Google Fi warns customers that their data has been compromised (Engadget) Options trading desks 'flying blind' after derivatives platform hit by
    ransomware attack (MarketWatch)
    Mathematical Trick Lets Hackers Shame People into Fixing Software Bugs
    (Matthew Sparkes)
    Can You Trust Your Quantum Simulator? (Jennifer Chu)
    Widespread Logic Controller Flaw Raises the Specter of Stuxnet
    (Lily Hay Newman)
    Man Paid $20,000 in Bitcoin in Failed Attempt to Have 14-Year-Old Killed,
    U.S. Says (NYTimes)
    Developer pleads guilty to hacking his own company after pretending to
    to investigate himself (The Verge)
    to Know. (NYTimes)
    investigate himself (The Verge)
    Retirees Are Losing Their Life Savings to Romance Scams. Here's What to
    Know. (NYTimes)
    Cryptocurrency Founder Gamed Markets, FTX Rivals Say (NYTimes)
    How Charlie Javice Got JPMorgan to Pay $175 Million for What Exactly?
    (NYTimes)
    Massive nursing degree scheme leads to hunt for 2,800 fraudulent nurses
    (Ars Technica)
    Based on a True Story -- Except the Parts That Aren't (NYTimes)
    Citing Accessibility, State Department Ditches Times New Roman for Calibri
    (NYTimes via Jan Wolitzky)
    DNS Attack enabled by well-know passwords; An issue that should be
    long-resolved (Ars Technica and precursor note)
    U.S. No-Fly List Leaks After Being Left in an Unsecured Airline Server
    (Vice)
    Yet *another* T-Mobile data breach affects 37M accounts (CNET)
    Coming soon, Congress screws with the clock with permanent DST?
    (Lauren Weinstein)
    NET pushed reporters to be more favorable to advertisers, staffers say
    (The Verge)
    Twitter employees status -- and Musk on trial (Lauren Weinstein)
    Musk oversaw staged Tesla self-driving video, emails show (Ars Technica)
    How Smart Are the Robots Getting? (Cade Metz)
    Robot Cars Are Causing 911 False Alarms in San Francisco (WiReD)
    A news site used AI to write articles, and it was a journalistic disaster
    (WashPost)
    CNET Is Reviewing the Accuracy of All Its AI-Written Articles After Multiple
    Major Corrections (gizmodo)
    My Printer Is Extorting Me (The Atlantic via Steve Bacher)
    ChatGPT on a blog: huMansplaining on parade (Rob Lemos)
    ChatGPT Accuracy in the Movies! (Lauren Weinstein)
    Google and the rest of "Big Tech" need to step up and speak to the public,
    *now*! (Lauren Weinstein)
    Google laying off 12K workers (Google)
    Jan 6 committee suppressed information about how social media firms --
    especially Twitter -- enabled the violent insurrection (WashPost)
    Meta, Twitter, Microsoft and others urge Supreme Court not to allow lawsuits
    against tech algorithms (CNN)
    Twitter's utter violation of Trust & Safety (Lauren Weinstein)
    Elon's Sick Twitter officially bans third-party clients, a foundational
    aspect of Twitter for many years (TechCrunch)
    Why the TikTok ban needs university exemptions (Statesman)
    Twitter admits it's breaking third-party apps, cites 'long-standing API
    rules' (Engadget)
    Tesla engineer testifies that 2016 video promoting self-driving was faked
    (TechCrunch)
    U.S. states blocking overseas taxpayer traffic (Dan Jacobson)
    As Deepfakes Flourish, Countries Struggle with Response (Tiffany Hsu)
    In the age of AI, major in being human (David Brooks)
    Race is on as Microsoft puts billions into OpenAI (Metz/Weise)
    Google is freaking out about ChatGPT (The Verge)
    ChatGPT user acquisition rate (Dan Geer)
    Artificial Intelligence and National Security (Reza Montasari book
    reviewed by Sven Dietrich)
    Cybersecurity Myths and Misperceptions: Avoiding the Hazards and Pitfalls
    that Derail Us (Gene Spafford)
    Re: Remote Vulnerabilities in Automobiles (Bernie Cosell)
    Re: Cats disrupt satellite Internet service (John Levine, Wol)
    Abridged info on RISKS (comp.risks)

    ----------------------------------------------------------------------

    Date: Sat, 4 Feb 2023 12:39:19 -0500
    From: Monty Solomon <monty@roscom.com>
    Subject: Historic Arctic outbreak crushes records in New England WashPost)

    The Weather Service office serving the area tweeted the wind chill was so
    low that its software for logging such data ``refuses to include it!''

    https://www.washingtonpost.com/weather/2023/02/04/northeast-record-cold-boston-arctic/

    [With the record colds all over the U.S. -- including Texas -- this item
    seems worthy of the lead story. PGN]

    ------------------------------

    Date: Tue, 17 Jan 2023 09:39:56 +0000
    From: "Chris Leeson" <risks@inishail.org>
    Subject: 'It had just vanished' -- the shock when tech fails (BBC News)

    https://www.bbc.co.uk/news/business-64051121

    Cloud has many advantages, but if the cloud provider disappears, then so
    does your infrastructure. This article looks at a couple of businesses that have been hit by outages and disappearance of provider.

    ``Using cloud services, by definition, makes a business reliant on a third party,'' says Vili Lehdonvirta of the Oxford Internet Institute and author
    of Cloud Empires. ``What is the cloud? Well, the cloud is somebody else's computer.''

    It is complex, setting up highly available systems is even more complex
    (I'm sure, not news to anyone here...). Cloud is not a panacea, especially
    for small businesses. At least we are starting to get mainstream articles
    that acknowledge this, rather than pushing cloud as the solution for all
    ills.

    ------------------------------

    Date: Fri, 20 Jan 2023 19:34:41 -0500
    From: Gabe Goldberg <gabe@gabegold.com>
    Subject: Welcome to the Era of Internet Blackouts (WiReD)

    New research from Cloudflare shows that connectivity disruptions are a
    problem around the globe, pointing toward a troubling new normal.

    https://www.wired.com/story/cloudflare-internet-blackouts-report

    ------------------------------

    Date: Tue, 31 Jan 2023 01:33:01 -0500
    From: Monty Solomon <monty@roscom.com>
    Subject: Ford recalls 462,000 SUVs over rearview camera issue (Engadget)

    https://www.engadget.com/ford-recalls-462000-suv-rearview-camera-issue-160153194.html

    ------------------------------

    Date: Thu, 19 Jan 2023 07:25:34 -0800
    From: Steve Bacher <sebmb1@verizon.net>
    Subject: The lights have been on at a Massachusetts school for over a year
    because no one can turn them off (Corky Siemaszko)

    (NBC News)

    https://www.nbcnews.com/news/us-news/lights-massachusetts-school-year-no-one-can-turn-rcna65611

    Wilbraham Massachusetts: For nearly a year and a half, the roughly 7,000
    lights in a sprawling Massachusetts high school have been on continuously, because the district canât turn them off. While district leaders blame the pandemic and supply chain issues for being unable to fix the failed lighting system, taxpayers have been stuck paying for the costly energy bills.

    The lights have been on at a Massachusetts school for over a year because no one can turn them off the roughly 7,000 lights in the sprawling building.

    The lighting system was installed at Minnechaug Regional High School when
    it was built over a decade ago and was intended to save money and energy.
    But ever since the software that runs it failed on Aug. 24, 2021, the
    lights in the Springfield suburbs school have been on continuously, costing taxpayers a small fortune....

    The system was designed to save energy -- and thus save money by
    automatically adjusting the lights as needed.

    [Also noted by Mike Smith and Victor Miller. PGN]

    ------------------------------

    Date: Thu, 19 Jan 2023 20:02:18 -0800
    From: Lauren Weinstein <lauren@vortex.com>
    Subject: FAA says unintentionally deleted files are to blame for nationwide
    ground stop (CNN)

    [ rm -rf * .tmp ] -L

    https://www.cnn.com/2023/01/19/business/faa-notam-outage/index.html

    ------------------------------

    Date: Mon, 23 Jan 2023 11:37:44 -0500 (EST)
    From: ACM TechNews <technews-editor@acm.org>
    Subject: Wi-Fi Routers Can Detect Human Locations, Poses Within a Room
    (Mark Tyson)

    Mark Tyson, Tom's Hardware, 18 Jan 2023

    Carnegie Mellon University scientists have been testing a system that uses Wi-Fi signals to detect the positions and poses of people in a room. The researchers positioned TP-Link Archer A7 AC1750 Wi-Fi routers at either end
    of the room, while algorithms generated wireframe models of people in the
    room by analyzing the signal interference the people caused. The researchers based the perception system on Wi-Fi signal channel-state-information, or
    the ratio between transmitted and received signal waves. A computer vision-capable neural network architecture processes this data to execute
    dense pose estimation; the researchers deconstructed the human form into 24 segments to accelerate wireframe representation. They claim the wireframes' position and pose estimates are as good as those generated by certain "image-based approaches."

    ------------------------------

    Date: Mon, 23 Jan 2023 11:37:44 -0500 (EST)
    From: ACM TechNews <technews-editor@acm.org>
    Subject: Hackers Can Make Computers Destroy Their Own Chips with
    Electricity (Matthew Sparkes)

    Matthew Sparkes, *New Scientist*, 19 Jan 2023,
    via ACM TechNews, 23 Jan 2023

    Zitai Chen and David Oswald at the U.K.'s University of Birmingham uncovered
    a bug in the control systems of server motherboards that could be exploited
    to compromise sensitive information or to destroy their central processing units (CPUs). The researchers found a feature in the Supermicro X11SSL-CF motherboard often used in servers that they could tap to upload their own control software. Chen and Oswald discovered a flash memory chip in the motherboard's baseboard management controller that they could remotely
    command to send excessive electrical current through the CPU, destroying it
    in seconds. After the researchers disclosed the flaw to Supermicro, the
    company said it has rated its severity as "high" and has patched the bug in
    its existing motherboards.

    ------------------------------

    Date: Mon, 23 Jan 2023 11:37:44 -0500 (EST)
    From: ACM TechNews <technews-editor@acm.org>
    Subject: Decoding Brainwaves to Identify What Music Is Being Listened To
    (U.Essex)

    University of Essex (UK), 19 Jan 2023, via ACM TechNews, 23 Jan 2023

    A brainwave-monitoring technique created by researchers at the U.K.'s University of Essex can identify to which specific piece of music people are listening. The researchers combined functional magnetic resonance imaging (fMRI) with electroencephalogram monitoring to measure a person's brain activity while listening to music. They used a deep learning neural network model to translate this data in order to reconstruct and accurately identify the piece of music with 71.8% accuracy. Essex's Ian Daly said, "We have
    shown we can decode music, which suggests that we may, one day, be able to decode language from the brain."

    ------------------------------

    Date: Mon, 30 Jan 2023 15:17:20 -0500
    From: Monty Solomon <monty@roscom.com>
    Subject: Remember Zoom-bombing? This is how Zoom tamed meeting intrusions.

    The success of reducing Zoom-bombing shows how making technology less easy
    to use can make you safer.

    https://www.washingtonpost.com/technology/2023/01/24/zoom-bombing-prevention-tips/

    ------------------------------

    Date: Wed, 1 Feb 2023 18:46:24 -0500
    From: Monty Solomon <monty@roscom.com>
    Subject: Google Fi warns customers that their data has been compromised
    (Engadget)

    Google has notified customers of its Fi mobile virtual network operator
    (MVNO) service that hackers were able to access some of their information, according to TechCrunch. The tech giant said the bad actors infiltrated a third-party system used for customer support at Fi's primary network
    provider. While Google didn't name the provider outright, Fi relies on US Cellular and T-Mobile for connectivity. If you'll recall, the latter
    admitted in mid-January that hackers had been taking data from its systems since November last year. [...]

    https://www.engadget.com/google-fi-customer-data-compromised-065740701.html?src=rss

    Also: Google Fi hack victim had Coinbase, 2FA app hijacked by hackers
    (TechCrunch)

    https://techcrunch.com/2023/02/01/google-fi-hack-victim-had-coinbase-2fa-app-hijacked-by-hackers/

    ------------------------------

    Date: Wed, 1 Feb 2023 13:55:03 -0500
    From: Monty Solomon <monty@roscom.com>
    Subject: Options trading desks 'flying blind' after derivatives platform hit
    by ransomware attack (MarketWatch) https://www.marketwatch.com/story/trading-desks-flying-blind-after-derivatives-platform-hit-by-ransomware-attack-11675270815

    ------------------------------

    Date: Fri, 20 Jan 2023 11:45:23 -0500 (EST)
    From: ACM TechNews <technews-editor@acm.org>
    Subject: Mathematical Trick Lets Hackers Shame People into Fixing
    Software Bugs (Matthew Sparkes)

    Matthew Sparkes, *New Scientist*, 17 2023 vai ACM TechNews

    Researchers at the Galois software company have developed a zero-knowledge proof (ZKP) method of using math to verify vulnerabilities in a particular software program, without releasing details of how an exploit works. The
    idea is to generate public pressure to force a company to release a fix
    while preventing hackers from exploiting the flaw. Said Galois' Santiago Cu=C8llar, "There are a lot of frustrated people trying to disclose vulnerabilities, or saying 'I found this vulnerability, I'm talking to this company and they're doing nothing'." However, bug-bounty hunter Rotem Bar is concerned that ZKPs could generate a "ransom effect" that gives power to the attacker.

    ------------------------------

    Date: Fri, 20 Jan 2023 11:45:23 -0500 (EST)
    From: ACM TechNews <technews-editor@acm.org>
    Subject: Can You Trust Your Quantum Simulator? (Jennifer Chu)

    Jennifer Chu, *MIT News*, 18 Jan 2023 via ACM TechNews

    Physicists at the Massachusetts Institute of Technology (MIT) and the California Institute of Technology have identified a randomness in the
    quantum fluctuations of atoms that follows a predictable pattern and
    developed a benchmarking protocol to assess the fidelity of existing quantum analog simulators based on their quantum fluctuation patterns. The
    researchers tested this on a quantum analog simulator containing 25 atoms by exciting the atoms with a laser, letting the qubits interact and evolve naturally, and collecting 10,000 measurements on the state of each qubit
    during multiple runs. They developed a model to predict the random
    fluctuations and compared the predicted outcomes with experimental measurements, which yielded a close match. MIT's Soonwon Choi said, "With
    our tool, people can know whether they are working with a trustable system."

    ------------------------------

    Date: Wed, 18 Jan 2023 11:35:17 -0500 (EST)
    From: ACM TechNews <technews-editor@acm.org>
    Subject: Widespread Logic Controller Flaw Raises the Specter of Stuxnet
    (Lily Hay Newman)

    Lily Hay Newman, *Ars Technica*, 11 Jan 2023, via ACM TechNews

    Siemens has disclosed that a vulnerability in its SIMATIC S7-1500 series of programmable logic controllers could allow attackers to install malicious firmware and assume full control of the devices. Red Balloon Security researchers discovered the vulnerability, which is the result of a basic
    error in the cryptography's implementation. However, because the scheme is physically burned onto a dedicated ATECC CryptoAuthentication chip, a
    software patch cannot fix the vulnerability. Siemens recommended customers assess "the risk of physical access to the device in the target deployment"
    and implement "measures to make sure that only trusted personnel have access
    to the physical hardware."

    ------------------------------

    Date: Sat, 4 Feb 2023 17:54:09 -0500
    From: Monty Solomon <monty@roscom.com>
    Subject: Man Paid $20,000 in Bitcoin in Failed Attempt to Have 14-Year-Old
    Killed, U.S. Says (NYTimes)

    https://www.nytimes.com/2023/02/02/us/hitman-murder-bitcoin-new-jersey.html

    ------------------------------

    Date: Sat, 4 Feb 2023 10:13:02 -0500
    From: Monty Solomon <monty@roscom.com>
    Subject: Developer pleads guilty to hacking his own company after pretending
    to investigate himself (The Verge)

    https://www.theverge.com/2023/2/3/23584414/ubiquiti-developer-guilty-extortion-hack-security-breach-bitcoin-ransom

    ------------------------------

    Date: Sat, 4 Feb 2023 15:10:12 -0500
    From: Monty Solomon <monty@roscom.com>
    Subject: Retirees Are Losing Their Life Savings to Romance Scams. Here's
    What to Know. (NYTimes)

    Con artists are using dating sites to prey on lonely people, particularly
    older ones, in a pattern that accelerated during the isolation of the
    pandemic, federal data show.

    https://www.nytimes.com/2023/02/03/business/retiree-romance-scams.html

    ------------------------------

    Date: Thu, 19 Jan 2023 13:21:30 PST
    From: Peter Neumann <neumann@csl.sri.com>
    Subject: Cryptocurrency Founder Gamed Markets, FTX Rivals Say (NYTimes)

    Emily Flitter and David Yafee-Bellany,
    *The New York Times*, 19 Jan 2023, Business Section front page

    Bankman-Fried found ways to inflate the prices of digital coins to
    benefit his companies, according to investors

    ------------------------------

    Date: Sat, 21 Jan 2023 14:48:56 -0500
    From: Monty Solomon <monty@roscom.com>
    Subject: How Charlie Javice Got JPMorgan to Pay $175 Million for What
    Exactly? (NYTimes)

    A young founder promised to simplify the college financial aid process. It
    was a compelling pitch. Especially, as now seems likely, to those with
    little firsthand knowledge of financial aid.

    https://www.nytimes.com/2023/01/21/business/jpmorgan-chase-charlie-javice-fraud.html

    ------------------------------

    Date: Thu, 2 Feb 2023 18:26:42 -0500
    From: Monty Solomon <monty@roscom.com>
    Subject: Massive nursing degree scheme leads to hunt for 2,800 fraudulent
    nurses (Ars Technica)

    https://arstechnica.com/?p=1914332

    ------------------------------

    Date: Sat, 21 Jan 2023 15:23:50 -0500
    From: Monty Solomon <monty@roscom.com>
    Subject: Based on a True Story -- Except the Parts That Aren't (NYTimes)

    The entertainment genre of historical drama is flourishing -- and riddled
    with inaccuracies. The untrue parts are leading to more public spats and lawsuits.

    https://www.nytimes.com/2023/01/14/business/media/tv-historical-dramas-fictional.html

    ------------------------------

    Date: Fri, 20 Jan 2023 09:32:34 -0500
    From: Jan Wolitzky <jan.wolitzky@gmail.com>
    Subject: Citing Accessibility, State Department Ditches Times New Roman
    for Calibri (NYTimes)

    There's more to font choices than what looks nice, and some experts said it would make for easier reading.

    https://www.nytimes.com/2023/01/19/us/politics/state-department-times-new-roman-calibri.html

    (No mention of the Braille Institute's Atkinson Hyperlegible font
    https://brailleinstitute.org/freefont>, designed specifically for
    readability.)

    ------------------------------

    Date: Fri, 20 Jan 2023 06:53:58 -0500
    From: Bob Gezelter <gezelter@rlgsc.com>
    Subject: DNS Attack enabled by well-know passwords; An issue that should be
    long-resolved (Ars Technica and precursor note)

    Well-known passwords have been a well-known security hazard since the early 1990s. As I wrote in "Networks Placed at Risk, By Their Service Providers"
    (7 Dec 2009, it took many years for major ISPs to not use well-known
    passwords on router/firewalls provided to subscribers). http://www.rlgsc.com/blog/ruminations/networks-placed-at-risk.html)

    Over a decade later, this issue should be long-since banished to history. However, as reported by ArsTechnica, this appears to be depressingly not the case.

    ArsTechnica reports that:

    Researchers have uncovered a malicious Android app that can tamper with
    the wireless router the infected phone is connected to and force the
    router to send all network devices to malicious sites.

    The malicious app, found by Kaspersky, uses a technique known as DNS
    (Domain Name System) hijacking. Once the app is installed, it connects to
    the router and attempts to log in to its administrative account by using
    default or commonly used credentials, such as admin:admin. When
    successful, the app then changes the DNS server to a malicious one
    controlled by the attackers. From then on, devices on the network can be
    directed to imposter sites that mimic legitimate ones but spread malware
    or log user credentials or other sensitive information."

    The ArsTechnica article does not indicate whether the compromised hot-spots used vendor or customer purchased equipment. It does increase the importance
    of setting management passwords on firewalls to safe values.

    Similarly, other precautions, e.g., segregated guest WiFi, should be
    followed.

    [Also noted by Monty Solomon]

    ------------------------------

    Date: Fri, 20 Jan 2023 16:38:31 -0500
    From: Monty Solomon <monty@roscom.com>
    Subject: U.S. No-Fly List Leaks After Being Left in an Unsecured Airline
    Server (Vice)

    The list, which was discovered by a Swiss hacker, contains names and birth dates and over 1 million entries.

    https://www.vice.com/en/article/93a4p5/us-no-fly-list-leaks-after-being-left-in-an-unsecured-airline-server

    ------------------------------

    Date: Thu, 19 Jan 2023 16:33:29 -0800
    From: Lauren Weinstein <lauren@vortex.com>
    Subject: Yet *another* T-Mobile data breach affects 37M accounts (CNET)

    https://www.cnet.com/tech/mobile/another-data-breach-has-hit-t-mobile-impacting-37-million-accounts/

    [Monty Solomon noted
    New T-Mobile Breach Affects 37 Million Accounts
    https://krebsonsecurity.com/2023/01/new-t-mobile-breach-affects-37-million-accounts/
    PGN]

    ------------------------------

    Date: Fri, 3 Feb 2023 17:35:54 -0800
    From: Lauren Weinstein <lauren@vortex.com>
    Subject: Coming soon, Congress screws with the clock with permanent DST?

    By the way, I predict a significant probability that within the next month
    the GOP and Democrats will push to make Daylight Savings Time permanent,
    which is exactly what virtually every expert says is the worst possible decision if you're going to change the current situation. Rather, if there's going to be a change, it should be to permanent Standard Time. The U.S. did
    try all-year Daylight Savings Time many years ago. I remember. It did not go well and was revoked quickly. -L

    ------------------------------

    Date: Thu, 2 Feb 2023 18:23:01 -0500
    From: Monty Solomon <monty@roscom.com>
    Subject: CNET pushed reporters to be more favorable to advertisers, staffers
    say (The Verge)

    https://www.theverge.com/2023/2/2/23582046/cnet-red-ventures-ai-seo-advertisers-changed-reviews-editorial-independence-affiliate-marketing

    ------------------------------

    Date: Fri, 20 Jan 2023 17:21:06 -0800
    From: Lauren Weinstein <lauren@vortex.com>
    Subject: Twitter employees status -- and Musk on trial

    It is now reported that of the ~7500 full-time employees at Twitter before
    Musk took over, there are only ~1300 full-time employees left and less than
    550 full-time engineers. Their Trust & Safety team is reported to be down to less than 20 full-time employees.

    Also, while testifying at the trial today regarding his tweets, he
    repeatedly said that tweets were limited to 240 characters (not the correct 280). -L

    ------------------------------

    Date: Fri, 20 Jan 2023 08:48:24 -0800
    From: Lauren Weinstein <lauren@vortex.com>
    Subject: Musk oversaw staged Tesla self-driving video, emails show
    (Ars Technica)

    https://arstechnica.com/cars/2023/01/musk-oversaw-staged-tesla-self-driving-video-emails-show/

    [Monty Solomon noted an item on this story:
    https://gizmodo.com/tesla-autopilot-self-driving-autonomous-1849996806
    PGN]

    ------------------------------

    Date: Sat, 21 Jan 2023 01:24:35 -0500
    From: Gabe Goldberg <gabe@gabegold.com>
    Subject: How Smart Are the Robots Getting? (Cade Metz)

    Cade Metz, *The New York Times*, 20 Jan 2023

    The Turing test used to be the gold standard for proving machine
    intelligence. This generation of bots is racing past it.

    "These systems can do a lot of useful things," said Ilya Sutskever, chief scientist at OpenAI and one of the most important A.I. researchers of the
    past decade, referring to the new wave of chatbots. "On the other hand, they are not there yet. People think they can do things they cannot."

    As the latest technologies emerge from research labs, it is now obvious --
    if it was not obvious before if it was not obvious before -- that scientists must rethink and reshape how they track the progress of artificial intelligence. The Turing test is not up to the task.

    https://www.nytimes.com/2023/01/20/technology/chatbots-turing-test.html

    PGN adds, from the ACM News Digest on the same item:

    New-generation online chatbots display a semblance of intelligence that
    appears to pass the Turing test, in which humans can no longer be certain
    whether they are conversing with a human or a machine. Bots like OpenAI's
    ChatGPT and GPT-4 systems appear intelligent without being sentient or
    conscious; consequently, OpenAI's Ilya Sutskever says, "People think they
    can do things they cannot." Modern neural networks have learned to produce
    text by analyzing vast volumes of digital text and extrapolating patterns
    in how people link words, letters, and symbols. However, the chatbots'
    language skills belie their lack of reason or common sense.

    [Also noted by Matthew Kruk. PGN]

    [The Turing Test is no longer adequate as originally stated. Joe
    Weizenbaum's Eliza could fool some people for a while. GPT systems can
    fool anyone who doesn't understand the fundamental blind spots inherent
    in the information used to train the AI, and the consequential inherent
    incompleteness of the responses. The grammatical and linguistic polish
    is misleading. See RISKS-33.58-60. PGN]

    ------------------------------

    Date: Fri, 27 Jan 2023 16:28:14 -0500
    From: Gabe Goldberg <gabe@gabegold.com>
    Subject: Robot Cars Are Causing 911 False Alarms in San Francisco (WiReD)

    City agencies say the incidents and other disruptions show the need for more transparency about the vehicles and a pause on expanding service.

    Each time, police and firefighters rushed to the scene but found the same thing: a passenger who had fallen asleep in their robot ride. [...}

    The San Francisco agencies cite a number of unsettling and previously unreported incidents, including the false alarms over snoozing riders and
    two incidents in which self-driving vehicles from Cruise appear to have
    impeded firefighters from doing their jobs.

    One incident occurred in June of last year, a few days after the state gave Cruise permission to pick up paying passengers in the city. One of the company's robot taxis ran over a fire hose in use at an active fire scene,
    the agencies' letter says, an action that ``can seriously injure firefighters.''

    In the second incident, just last week, the city says firefighters attending
    a major fire in the Western Addition neighborhood saw a driverless Cruise vehicle approaching. They âmade efforts to prevent the Cruise AV from
    driving over their hoses and were not able to do so until they shattered a front window of the Cruise AV,â the San Francisco agencies wrote in their letter. [...]

    Last summer, WIRED reported that two fleetwide outages had caused Cruise vehicles to freeze on public roads and that a Cruise employee had
    anonymously sent a letter to the Public Utilities Commission alleging that
    the company's vehicles werenât prepared to operate on public roads. In December, the National Highway Traffic Safety Administration said it had
    opened a probe into incidents of Cruise vehicles blocking traffic and
    reports of the cars *inappropriately hard braking. Cruise has said that for its vehicles, stopping and turning on hazard lights is sometimes the safest
    way to react to unexpected street conditions.

    https://www.wired.com/story/robot-cars-are-causing-911-false-alarms-in-san-francisco

    ------------------------------

    Date: Thu, 19 Jan 2023 09:10:31 +0000
    From: Richard Marlon Stein <rmstein@protonmail.com>
    Subject: A news site used AI to write articles, and it was a journalistic
    disaster (WashPost)

    https://www.washingtonpost.com/media/2023/01/17/cnet-ai-articles-journalism-corrections/

    "The tech site CNET sent a chill through the media world when it tapped artificial intelligence to produce surprisingly lucid news stories. But now
    its human staff is writing a lot of corrections."

    Imagine an automated editorial review of the AI-crafted content certify correctness and publication fitness.

    History and events could be re-written without any concern for fact or
    context. Libel laws would need revision to accommodate automated authoring
    and publication of news content. The content would get a free-pass if it contained the disclaimer: "Authored by Hemingwaybot.com."

    "Who you gonna believe, me or your own eyes?"

    ------------------------------

    Date: Tue, 17 Jan 2023 14:31:52 -0800
    From: Lauren Weinstein <lauren@vortex.com>
    Subject: CNET Is Reviewing the Accuracy of All Its AI-Written Articles After
    Multiple Major Corrections (gizmodo)

    https://gizmodo.com/cnet-ai-chatgpt-news-robot-1849996151

    ------------------------------

    Date: Sat, 4 Feb 2023 18:32:17 -0800
    From: Steve Bacher <sebmb1@verizon.net>
    Subject: My Printer Is Extorting Me

    Subscriptions such as HP's Instant Ink challenge what it means to own our devices:

    https://www.theatlantic.com/technology/archive/2023/02/home-printer-digital-rig hts-management-hp-instant-ink-subscription/672913/

    Excerpts:

    Here was a piece of technology that I had paid more than $200 for, stocked
    with full ink cartridges. My printer, gently used, was sitting on my desk
    in perfect working order but rendered useless by Hewlett-Packard, a tech
    corporation with a $28 billion market cap because I had failed to make a
    monthly payment for a service intended to deliver new printer cartridges
    that I did not yet need. [...]
    <https://www.forbes.com/companies/hewlett-packard/> at the time of
    writing,

    Even if you aren't trapped in Ink Hell, the template of this story ought to feel unsettlingly familiar. Most everyone is subject to the walled gardens
    and restrictions imposed by digital-rights-management practices. If you've ever struggled to access a purchased movie, book, or song from Apple or frustrated over single-player games that require the Internet to play. The problem isn't merely that people are nostalgic for the days of CDs and DVDs
    and static updates -- it's that much of the convenience promised by our Internet-connected tools has the secondary effect of stripping away small pieces of our agency and leaving us more beholden to companies seeking
    bigger margins.

    ------------------------------

    Date: Thu, 26 Jan 2023 15:55:10 -0500
    From: Rob Lemos <mail@robertlemos.com>
    Subject: ChatGPT on a blog: huMansplaining on parade

    dan@geer.org:
    we can oh so easily return to a world of sorcerers, alchemy, and
    faith in powers in proportion to their mystery.

    With post-truth and conspiracy theories I think

    [continued in next message]

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)