An anonymous reader quotes a report from the Washington Post: Winning the lottery isn’t what brought Carrie Edwards her 15 minutes of fame. It was giving it all away. Standing alone in her kitchen one day in September, the Virginia woman was thunderstruck to discover she had won $150,000 in a Powerball drawing. As she was absorbing her windfall, she said, “I just heard as loud as you can hear God or whoever you believe in the universe just say, this is — it’s not your money.” Then came a decision: She would donate it all to her three most cherished charities (source paywalled; alternative source). […] Her journey to the lucky prize started when she walked into a 7-Eleven with a friend who wanted to buy two Powerball tickets. The jackpot for the Sept. 6 drawing was topping $1.7 billion, the second-largest amount ever. Edwards, 68, hardly ever played the lottery, but her friend was an active player who gave her two pieces of advice: Always buy a paper ticket, rather than getting them online. And the Powerball multiplier is a scam, don’t do it. She ignored him on both accounts.

She created a Virginia Lottery account on her phone. Then, instead of the typical strategies of using family birthdays and lucky numbers, she went to ChatGPT — which she had only recently started using for research — and asked, “Do you have any winning numbers for me?” “Luck is luck,” replied the chatbot. Then it gave numbers that she plugged in — paying the extra dollar for the Power Play to multiply anything she might win. She initially thought luck wasn’t on her side when she didn’t win the massive jackpot. But what she didn’t realize is that she’d picked the “draw two” option, meaning her numbers were reentered for the next drawing. When she got a notification on her phone that she had won, she said, she thought it was a scam, or maybe she’d won something small, like $10. Just to satisfy her curiosity, she logged into her account and saw that she had matched four of the five numbers plus the Powerball in that second drawing. It would have been a $50,000 payout, but the multiplier tripled her winnings.

Read more of this story at Slashdot.

Google and Disney have finally reached an agreement, a couple of weeks after YouTube TV lost access to Disney channels that include ESPN, FX and ABC stations. In a statement, Google said the deal “preserves the value of [its] service for [its] subscribers and future flexibility in [its] offers.” Subscribers will be able to start watching Disney channels as they return over the course of the day, as well as access any content in their library. “We apologize for the disruption and appreciate our subscribers’ patience as we negotiated on their behalf,” YouTube wrote.

The new deal “recognizes the tremendous value of Disney’s programming and provides YouTube TV subscribers with more flexibility and choice,” Disney Entertainment co-chairpersons Alan Bergman and Dana Walden, as well as ESPN Chairman Jimmy Pitaro said in a statement. “We are pleased that our networks have been restored in time for fans to enjoy the many great programming options this weekend, including college football,” they added.

Disney pulled its channels from YouTube’s subscription service on October 31 after the companies failed to reach a deal for the renewal of their partnership. Google said at the time that Disney “used the threat of a blackout on YouTube TV as a negotiating tactic to force deal terms that would raise prices on [its] customers.” Meanwhile, Disney accused Google of “refusing to pay fair rates for [its] channels” and using its dominance in the market to “eliminate competition and undercut the industry-standard terms” that its other partners had agreed to.

According to The Hollywood Reporter, YouTube TV subscribers will get access to select live and library programming from ESPN Unlimited at no extra cost under the terms of the new agreement. Google will also be able to offer Disney+ and Hulu bundles to YouTube TV customers and will be able to offer genre-based channel packages. Google has sent out emails to YouTube TV subscribers, notifying them about the return of Disney channels. It also clarified that they will still be able to claim the $20 credit, which the company gave out to make up for the missing channels, until December 9.

This article originally appeared on Engadget at https://www.engadget.com/entertainment/youtube/disney-channels-are-back-on-youtube-tv-014930463.html?src=rss

YouTube TV and Disney have ended their two-week carriage standoff, restoring ESPN, ABC, and other Disney networks under a new multiyear deal. Variety reports: Under the new agreement, ESPN’s full lineup of sports — including content from ESPN Unlimited — will be made available on YouTube TV to base-plan subscribers at no additional cost by the end of 2026. In addition, access to a selection of live and on-demand programming from ESPN Unlimited will be available inside YouTube TV.

The deal also lets YouTube include the Disney+ and Hulu bundle as part of “select YouTube offerings.” According to Disney, “select networks” will be included in various genre-specific packages that YouTube TV expects to launch in the future. […] The deal supersedes their prior distribution agreement, inked in December 2021 after a two-day blackout.

Read more of this story at Slashdot.

Apple’s limited-edition “iPhone Pocket” sold out almost instantly worldwide despite its $150-$230 price tag. Appleinsider reports: Longtime Apple users immediately saw the resemblance with the old iPod socks, and everyone saw the price. Apple and Japan’s Issey Miyake fashion house partnered to create a limited edition iPhone Pocket, a stretched sock-like bag or shoulder strap.

There was no denying that an iPhone in this Pocket looked snuggly. There was definitely no denying that the accessory was well designed. There’s also no question that it was about as goofy as the iPod Sock from back the in the day. But there was every denying of the price. The iPhone Pocket came in a short version for $150, and a longer one for $230.

For comparison, the Apple Watch SE starts at $250. As ever, though, if you liked it, if you had a use for it, and if you had the budget, there was no reason left not to buy. But if you have hesitated because of the cost, you are now out of luck. There are none left in the US.

Read more of this story at Slashdot.

“Within the past year, stories have been posted on Slashdot about people helping North Koreans get remote IT jobs at U.S. corporations, companies knowingly assisting them, how not to hire a North Korean for a remote IT job, and how a simple question tripped up a North Korean applying for a remote IT job,” writes longtime Slashdot reader smooth wombat. “The FBI is even warning companies that North Koreans working remotely can steal source code and extort money from the company — money that goes to fund the North Korean government. Now, five more people have plead guilty to knowingly helping North Koreans infiltrate U.S. companies as remote IT workers.” TechCrunch reports: The five people are accused of working as “facilitators” who helped North Koreans get jobs by providing their own real identities, or false and stolen identities of more than a dozen U.S. nationals. The facilitators also hosted company-provided laptops in their homes across the U.S. to make it look like the North Korean workers lived locally, according to the DOJ press release. These actions affected 136 U.S. companies and netted Kim Jong Un’s regime $2.2 million in revenue, said the DOJ. Three of the people — U.S. nationals Audricus Phagnasay, Jason Salazar, and Alexander Paul Travis — each pleaded guilty to one count of wire fraud conspiracy.

Prosecutors accused the three of helping North Koreans posing as legitimate IT workers, whom they knew worked outside of the United States, to use their own identities to obtain employment, helped them remotely access their company-issued laptops set up in their homes, and also helped the North Koreans pass vetting procedures, such as drug tests. The fourth U.S. national who pleaded guilty is Erick Ntekereze Prince, who ran a company called Taggcar, which supplied to U.S. companies allegedly “certified” IT workers but whom he knew worked outside of the country and were using stolen or fake identities. Prince also hosted laptops with remote access software at several residences in Florida, and earned more than $89,000 for his work, the DOJ said.
Another participant in the scheme who pleaded guilty to one count of wire fraud conspiracy and another count of aggravated identity theft is Ukrainian national Oleksandr Didenko, who prosecutors accuse of stealing U.S. citizens’ identities and selling them to North Koreans so they could get jobs at more than 40 U.S. companies. According to the press release, Didenko earned hundreds of thousands of dollars for this service. Didenko agreed to forfeit $1.4 million as part of his guilty plea. The DOJ also announced that it had frozen and seized more than $15 million in cryptocurrency stolen in 2023 by North Korean hackers from several crypto platforms.

Read more of this story at Slashdot.

X has finally revealed its long-promised chat platform, which replaces the service’s basic DM functionality with features more like the messaging capabilities on other mainstream apps. The update adds voice and video calling, file sharing and the ability to edit and delete previously sent messages, as well as privacy-focused features like end-to-end encryption and screenshot notifications. 

The overhauled messaging features, called Chat, are rolling out now on iOS and the web and will be “coming soon” on Android, according to the company. X also said it’s working on a voice memo feature for users to exchange audio messages. 

X has been teasing its new “chat” features for several months. The company rolled out an early version of encrypted messaging earlier this year, but “paused” the feature in May to address unspecified issues. Now, it appears that X’s encryption no longer has some of the limitations it initially did. An article on X’s help center states that “unlike before, group messages and media can now be encrypted,” though it notes that associated metadata (including information about the recipient) is not encrypted. 

X also states that “we do not offer protections against man-in-the-middle attacks,” which could compromise an encrypted chat. “As a result, if someone—a malicious insider or X itself as a result of a compulsory legal process—were to compromise an encrypted conversation, neither the sender or receiver would know,” the company explains. X says it’s working on features that will help users verify the authenticity of encrypted conversations. 

This article originally appeared on Engadget at https://www.engadget.com/social-media/x-is-finally-rolling-out-chat-its-dm-replacement-with-encryption-and-video-calling-233032571.html?src=rss

An anonymous reader quotes a report from The Record: Russian telecom operators have begun cutting mobile internet access for 24 hours for citizens returning to the country from abroad, in what officials say is an effort to prevent Ukrainian drones from using domestic SIM cards for navigation. “When a SIM card enters Russia from abroad, the user has to confirm that it’s being used by a person — not installed in a drone,” the Digital Development Ministry said in a statement earlier this week.

Users can restore access sooner by solving a captcha or calling their operator for identification. Authorities said the temporary blackout is meant to “ensure the safety of Russian citizens” and prevent SIM cards from being embedded in “enemy drones.” The new rule has led to unexpected outages for residents in border regions, whose phones can automatically connect to foreign carriers. Officials advised users to switch to manual network selection to avoid being cut off.

Read more of this story at Slashdot.

The US Department of Justice has announced that five people have pleaded guilty to helping North Koreans defraud US companies by pretending to be US-based remote workers. North Korea has previously used fake identities and the direct manipulation of US cybersecurity workers to circumvent international sanctions and funnel money into the country.

In this case, the people knew they were helping North Koreans, the DOJ says, and “provided their own, false, or stolen identities” to help the remote workers get jobs. They also “hosted U.S. victim company-provided laptops at residences across the United States” to hide the workers’ location. In the case of at least two “facilitators,” they also took company drug tests on the workers’ behalf.

Audricus Phagnasay, Jason Salazar and Alexander Paul Travis each pleaded guilty to one wire fraud conspiracy for their role in the scam. Travis was paid “at least $51,397” for participating, while Phagnasay and Salazar earned “at least $3,450 and $4,500, respectively.” Another facilitator, Erick Ntekereze Prince, used his company to contract certified IT workers to other US companies, fully knowing the workers were using stolen identities. He earned “more than $89,000” for his participation in the scam and pleaded guilty to one count of wire fraud conspiracy.

The final facilitator, Oleksandr Didenko, pleaded guilty for one count of wire fraud conspiracy and one count of aggravated identity theft for participating in an extensive identity theft operation. Didenko helped foreign IT workers fraudulently gain employment at 40 US companies, the DOJ says, and he’s forfeiting $1.4 million as part of his plea.

“These prosecutions make one point clear: the United States will not permit the DPRK to bankroll its weapons programs by preying on American companies and workers,” U.S. Attorney Jason A. Reding Quiñones said in the DOJ announcement. “We will keep working with our partners across the Justice Department to uncover these schemes, recover stolen funds, and pursue every individual who enables North Korea’s operations.”

This article originally appeared on Engadget at https://www.engadget.com/big-tech/five-plead-guilty-to-helping-north-koreans-pretend-to-be-us-based-it-workers-230831417.html?src=rss

BrianFagioli writes: Logitech has confirmed a cybersecurity breach after an intruder exploited a zero-day in a third-party software platform and copied internal data. The company says the incident did not affect its products, manufacturing or business operations, and it does not believe sensitive personal information like national ID numbers or credit card data were stored in the impacted system. The attacker still managed to pull limited information tied to employees, consumers, customers and suppliers, raising fair questions about how long the zero-day existed before being patched.

Logitech brought in outside cybersecurity firms, notified regulators and says the incident will not materially affect its financial results. The company expects its cybersecurity insurance policy to cover investigation costs and any potential legal or regulatory issues. Still, with zero-day attacks increasing across the tech world, even established hardware brands are being forced to acknowledge uncomfortable weaknesses in their internal systems.

Read more of this story at Slashdot.

Holiday shopping season is ripe for scammers, as consumers rush to find and take advantage of some of the best discounts of the year, and potentially overlook red flags that signal fraud. Security researchers are warning of an uptick in scams capitalizing on the Black Friday and Cyber Monday hype. Fraudsters know that they can prey on shoppers’ sense of urgency and excitement for limited-time, exclusive deals—and AI is making these campaigns even more difficult to spot than usual.

New data from McAfee suggest that nearly half of Americans have come across an AI-powered scam while shopping, from deepfakes impersonating celebrities pushing promotions to near-flawless spoofed websites that steal your credit card information.

Here are the scams to watch for this Black Friday.

Black Friday shopping scams

Spoofed websites are a common type of a scam, and fraudsters use holiday shopping season to trap users with fake retail sites and sales pages that look legitimate but are actually just collecting data like your login credentials and payment information. Scammers will use stolen assets like logos and product photos from known and trusted brands, and AI makes it easy to set up a convincing (but fake) small business website with elements like a customer service page and consumer reviews in no time.

Another shopping scam facilitated by AI is the impersonation scam. You think you’re watching a popular influencer or celebrity promoting an exclusive deal or product giveaway on TikTok or another social media platform, but it’s actually a deepfake. If you click through to enter or buy, you’ll land on a counterfeit page (as outlined above) designed to steal from you.

According to Google’s November fraud and scam advisory, scammers can get eyes on their content by hijacking search terms for Black Friday sales, running deceptive ads, or pushing deals on social media. Fake storefronts may appear as sponsored links, which are easy to overlook if you’re in a rush to make a purchase.

Of course, you may encounter other common holiday scams, such as fake shipping notifications that request payment in order to resolve a delivery issue as well as account verification scams that prompt you to confirm personal details. These phishing and smishing campaigns use standard scam tactics like impersonating a legitimate company or service and sending a fraudulent link that collects your bank information or username and password combination.

Black Friday scam red flags

When shopping holiday deals, slow down enough to look for common signs of scams. Fraudsters will use urgency—such as a limited time to secure a deal or a limited number of items left in stock—in hopes you won’t think before you buy. You should also be wary of any deal that is too good to be true, or a promotion with especially low prices that are out of line with other sales on similar items. This includes influencers pushing “exclusive” opportunities. If you are purchasing from a small business you don’t know, google the brand and read third-party reviews to see whether it is legitimate.

Instead of clicking links from emails, texts, and social media posts promoting sales, go directly to the retailer’s website and search for the deal. If you do click through, check the URL carefully to ensure it is legitimate (scammers may use homoglyphs that avoid detection at first glance) and look for website elements that real companies have, such as a privacy policy and address. If you see a promotion on social media, check the creator’s account to see when they joined the platform, what they’ve posted in the past, and whether they are verified.

Beware of any site that requires you to pay with a gift card, cryptocurrency, or bank transfer versus a credit card, which has some protection in the case of fraud. Legitimate retailers will use legitimate payment methods.

Finally, never enter your login credentials unless you’ve confirmed that the site you’re using is trustworthy. This includes delivery services and your Amazon and PayPal accounts, all of which scammers may pressure you to “verify” in order to resolve a billing or delivery issue.

According to CNBC, JPMorgan Chase has secured deals ensuring it will get paid by the fintech firms responsible for nearly all the data requests made by third-party apps connected to customer bank accounts. From the report: The bank has signed updated contracts with the fintech middlemen that make up more than 95% of the data pulls on its systems, including Plaid, Yodlee, Morningstar and Akoya, according to JPMorgan spokesman Drew Pusateri. “We’ve come to agreements that will make the open banking ecosystem safer and more sustainable and allow customers to continue reliably and securely accessing their favorite financial products,” Pusateri said in a statement. “The free market worked.”

The milestone is the latest twist in a long-running dispute between traditional banks and the fintech industry over access to customer accounts. For years, middlemen like Plaid paid nothing to tap bank systems when a customer wanted to use a fintech app like Robinhood to draw funds or check balances. […] After weeks of negotiations between JPMorgan and the middlemen, the bank agreed to lower pricing than it originally proposed, and the fintech middlemen won concessions regarding the servicing of data requests, according to people with knowledge of the talks.

Fintech firms preferred the certainty of locking in data-sharing rates because it is unclear whether the current CFPB, which is in the process of revising the open-banking rule, will favor banks or fintech companies, according to a venture capital investor who asked for anonymity to discuss his portfolio companies. The bank and the fintech firms declined to disclose details about their contracts, including how much the middlemen agreed to pay and how long the deals are in force.

Read more of this story at Slashdot.

This is a clip from the Tianmen National Forest Park in Zhangjiajie, China (previously seen with athletes parkouring down) where a publicity stunt involving a Chery SUV attempting to drive up the 999 stairs leading to ‘Heaven’s Gate’ went horribly wrong. The SUV eventually slips backwards and destroys part of a wall. Some details while I wish I could have been there to point and laugh at the driver before backing my own car into a tree leaving the parking area.

During the attempt, the vehicle’s safety cable detached, wrapping around one of the wheels and causing the SUV to lose balance and crash into a barrier. Thankfully, no injuries were reported.

The company later apologized for the incident, admitting poor risk assessment and promising to repair any damage caused.

Aha — the safety cable was to blame. That’s why I would have gone with no safety cable. *shrug* That’s just how I live my life. It isn’t a great one, just to be clear. Regardless, I’m really not impressed with Chery SUVs from what I’ve seen so far.

If Donald Trump loses his Supreme Court fight over tariffs, the US may be forced to return “tens of billions of dollars to companies that have paid import fees this year, plus interest,” The Atlantic reported. And the longer the verdict is delayed, the higher the refunds could go, possibly even hitting $1 trillion.

For tech companies both large and small, the stakes are particularly high. A Trump defeat would not just mean clawing back any duties paid on imports to the US that companies otherwise can use to invest in their competitiveness. But, more critically in the long term, it would also end tariff shocks that, as economics lecturer Matthew Allen emphasized in a report for The Conversation, risked harming “innovation itself” by destabilizing global partnerships and diverse supply chains in “tech-intensive, IP-led sectors like semiconductors and software.”

Currently, the Supreme Court is weighing two cases that argue that the US president does not have unilateral authority to impose tariffs under the International Emergency Economic Powers Act (IEEPA). Defending his regime of so-called “reciprocal tariffs,” Trump argued these taxes were necessary to correct the “emergency” of enduring trade imbalances that he alleged have unfairly enriched other countries while bringing the US “to the brink of catastrophic decline.”

Read full article

Comments

The first multi-spacecraft science mission to launch to Mars is now on its way, and catching a ride on the twin probes are the first kiwis to fly to the red planet.

NASA’s ESCAPADE (Escape and Plasma Acceleration and Dynamics Explorers) mission lifted off on a 22-month trip to Mars on Thursday aboard a New Glenn rocket. Once there, the identical satellites will enter Martian orbit to study in real time how space weather affects the planet’s hybrid magnetosphere and how the interaction drove Mars to lose its once-dense atmosphere.

Led by the Space Sciences Laboratory at the University of California, Berkeley—the two spacecraft are named “Blue” and “Gold” after the school’s colors—the ESCAPADE probes are the first Mars-bound vehicles to be designed, built, and tested by Rocket Lab, the end-to-end space company headquartered in California but founded in New Zealand.

Read full article

Comments

An anonymous reader quotes a report from Ars Technica: On Thursday evening, OpenAI CEO Sam Altman posted on X that ChatGPT has started following custom instructions to avoid using em dashes. “Small-but-happy win: If you tell ChatGPT not to use em-dashes in your custom instructions, it finally does what it’s supposed to do!” he wrote.

The post, which came two days after the release of OpenAI’s new GPT-5.1 AI model, received mixed reactions from users who have struggled for years with getting the chatbot to follow specific formatting preferences. And this “small win” raises a very big question: If the world’s most valuable AI company has struggled with controlling something as simple as punctuation use after years of trying, perhaps what people call artificial general intelligence (AGI) is farther off than some in the industry claim. “The fact that it’s been 3 years since ChatGPT first launched, and you’ve only just now managed to make it obey this simple requirement, says a lot about how little control you have over it, and your understanding of its inner workings,” wrote one X user in a reply. “Not a good sign for the future.”

Read more of this story at Slashdot.