• Risks Digest 34.32

    From RISKS List Owner@21:1/5 to All on Thu Jun 27 14:26:28 2024
    RISKS-LIST: Risks-Forum Digest Wednesday 26 Jun 2024 Volume 34 : Issue 32

    ACM FORUM ON RISKS TO THE PUBLIC IN COMPUTERS AND RELATED SYSTEMS (comp.risks) Peter G. Neumann, founder and still moderator

    ***** See last item for further information, disclaimers, caveats, etc. ***** This issue is archived at <http://www.risks.org> as
    <http://catless.ncl.ac.uk/Risks/34.32>
    The current issue can also be found at
    <http://www.csl.sri.com/users/risko/risks.txt>

    Contents: [OUT OF ORDER, but this issue was NOT Speculatively Executed]
    Waymo gets green light for expansion into LA and beyond (The Register)
    World's biggest music labels sue over AI copyright (BBC)
    Apple Patches AirPods Bluetooth Vulnerability That Could Allow Eavesdropping
    (The Hacker News)
    In 6-3 ruling based on lack of standing, Supreme Court rules government may
    continue fighting social media misinformation (CNN)
    U.S. Surgeon General declares gun violence a public health crisis (Giffords) Abridged info on RISKS (comp.risks)

    ----------------------------------------------------------------------

    Date: Tue, 25 Jun 2024 06:57:28 -0700
    From: Steve Bacher <sebmb1@verizon.net>
    Subject: Waymo gets green light for expansion into LA and beyond
    (The Register)

    Google's self-driving cars can be tested in way mo' streets now.

    https://www.theregister.com/2024/06/21/waymo_expansion/

    Also see:

    * Waymo issues software fix after driverless taxi hits telephone pole
    <https://www.theregister.com/2024/06/12/waymo_software_recall/>
    * U.S. watchdog chases Waymo robocars to catch violations
    <https://www.theregister.com/2024/05/14/nhtsa_waymo_investigation/>
    * Waymo robotaxi drives down wrong side of street after being alarmed
    by unicyclists
    <https://www.theregister.com/2024/04/23/waymo_selfdriving_car_unicycle/>
    * Uber Eats to rid itself of pesky human drivers with food delivery by
    robo Waymo
    <https://www.theregister.com/2024/04/03/uber_eats_waymo_delivery/>

    [Whammo? PGN]

    ------------------------------

    Date: Tue, 25 Jun 2024 06:56:11 -0700
    From: Steve Bacher <sebmb1@verizon.net>
    Subject: World's biggest music labels sue over AI copyright (BBC)

    The world's biggest record labels are suing two artificial intelligence
    (AI) start-ups over alleged copyright violation in a potentially
    landmark case.

    Firms including Sony Music, Universal Music Group and Warner Records say
    Suno and Udio have committed copyright infringement on an "almost
    unimaginable scale".

    They claim the pair's software steals music to "spit out" similar work
    and ask for compensation of $150,000 (£118,200) per work. [...]

    https://www.bbc.com/news/articles/ckrrr8yelzvo

    ------------------------------

    Date: Wed, 26 Jun 2024 05:39:39 -0700
    From: geoff goodfellow <geoff@iconia.com>
    Subject: Apple Patches AirPods Bluetooth Vulnerability That Could Allow
    Eavesdropping (The Hacker News)

    Apple has released a firmware update for AirPods that could allow a
    malicious actor to gain access to the headphones in an unauthorized manner.

    Tracked as CVE-2024-27867, the authentication issue affects AirPods (2nd generation and later), AirPods Pro (all models), AirPods Max, Powerbeats
    Pro, and Beats Fit Pro.

    "When your headphones are seeking a connection request to one of your previously paired devices, an attacker in Bluetooth range might be able to spoof the intended source device and gain access to your headphones," Apple said in a Tuesday advisory.

    In other words, an adversary in physical proximity could exploit the vulnerability to eavesdrop on private conversations. Apple said the issue
    has been addressed with improved state management. [...]

    https://thehackernews.com/2024/06/apple-patches-airpods-bluetooth.html

    ------------------------------

    Date: Wed, 26 Jun 2024 07:25:49 -0700
    From: Lauren Weinstein <lauren@vortex.com>
    Subject: In 6-3 ruling based on lack of standing, Supreme Court rules
    government may continue fighting social media misinformation (CNN)

    https://www.cnn.com/2024/06/26/politics/social-media-disinformation-supreme-cour
    t-ruling/index.html

    ------------------------------

    Date: Tue, 25 Jun 2024 13:57:46 +0000
    From: "GIFFORDS" <info@e.giffords.org>
    Subject: U.S. Surgeon General declares gun violence a public health crisis
    and calls for federal action

    Surgeon General Vivek Murthy just declared gun violence a public health
    crisis in an official advisory. This is a huge deal. Never before has the nation's top doctor urged gun violence to be treated as what it is: a public health crisis. Gun violence is the number one cause of death for American kids, and GIFFORDS is leading the fight to keep pressure on our lawmakers to act. [...]

    [Please don't ask why this is a risk to the public, when it is
    part of the major causes of deaths in the U.S. PGN]

    -----------------------------

    Date: Sat, 28 Oct 2023 11:11:11 -0800
    From: RISKS-request@csl.sri.com
    Subject: Abridged info on RISKS (comp.risks)

    The ACM RISKS Forum is a MODERATED digest. Its Usenet manifestation is
    comp.risks, the feed for which is donated by panix.com as of June 2011.
    SUBSCRIPTIONS: The mailman Web interface can be used directly to
    subscribe and unsubscribe:
    http://mls.csl.sri.com/mailman/listinfo/risks

    SUBMISSIONS: to risks@CSL.sri.com with meaningful SUBJECT: line that
    includes the string `notsp'. Otherwise your message may not be read.
    *** This attention-string has never changed, but might if spammers use it.
    SPAM challenge-responses will not be honored. Instead, use an alternative
    !< address from which you never send mail where the address becomes public!
    The complete INFO file (submissions, default disclaimers, archive sites,
    copyright policy, etc.) has moved to the ftp.sri.com site:
    <risksinfo.html>.
    *** Contributors are assumed to have read the full info file for guidelines!

    OFFICIAL ARCHIVES: http://www.risks.org takes you to Lindsay Marshall's
    delightfully searchable html archive at newcastle:
    http://catless.ncl.ac.uk/Risks/VL.IS --> VoLume, ISsue.
    Also, ftp://ftp.sri.com/risks for the current volume/previous directories
    or ftp://ftp.sri.com/VL/risks-VL.IS for previous VoLume
    If none of those work for you, the most recent issue is always at
    http://www.csl.sri.com/users/risko/risks.txt, and index at /risks-34.00
    ALTERNATIVE ARCHIVES: http://seclists.org/risks/ (only since mid-2001)
    *** NOTE: If a cited URL fails, we do not try to update them. Try
    browsing on the keywords in the subject line or cited article leads.
    Apologies for what Office365 and SafeLinks may have done to URLs.
    Special Offer to Join ACM for readers of the ACM RISKS Forum:
    <http://www.acm.org/joinacm1>

    ------------------------------

    End of RISKS-FORUM Digest 34.32
    ************************

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)