Month: May 2023
Amazon to pay $30m over Alexa and Ring privacy violations
It will also pay out after allowing employees of its Ring doorbell system access to customer recordings.
It will also pay out after allowing employees of its Ring doorbell system access to customer recordings.
Automatic emergency braking should become mandatory, feds say
The rule would save 360 lives and prevent 24,000 crashes a year, NHTSA says.
Enlarge / Emergency braking systems have been on the road for some years, but now the federal government wants them to be mandatory equipment on all new light trucks and passenger cars. (credit: Volvo)
On Wednesday, the National Highway Traffic Safety Administration issued a notice of proposed rulemaking that would see automatic emergency braking become a standard feature on all new light passenger vehicles. If adopted, NHTSA says it would save 360 lives and prevent 24,000 crashes each year.
“Today, we take an important step forward to save lives and make our roadways safer for all Americans,” Transportation Secretary Pete Buttigieg said. “Just as lifesaving innovations from previous generations like seat belts and airbags have helped improve safety, requiring automatic emergency braking on cars and trucks would keep all of us safer on our roads.”
NHTSA added automatic emergency braking to its list of recommended safety features in 2015. At the time, it started noting the presence or absence of this advanced driver assistance system when determining a car’s rating under the New Car Assessment Program (NCAP), which is aimed at giving consumers safety information about new vehicles.
Ubuntu Core as an immutable Linux Desktop base
motang writes: Canonical, the sponsor of widely popular Ubuntu Linux, plans on shipping the next LTS in two versions. In addition to the traditional version, there will be one immutable desktop OS flavor. From Canonical blog: The technology behind snaps extends beyond the distribution of desktop applications however. With Ubuntu Core this philosophy of security and stability applies equally to the components that make up the entire Ubuntu operating system. Rather than treating the OS as a single immutable ‘blob,’ Ubuntu Core breaks it up into discrete components. The base of Ubuntu Core, for example, is built on four primary snaps:
Gadget: Defines the system’s bootloader, partition layout and default configurations for snaps.
Kernel: Containing the Linux kernel and hardware drivers.
Base: A minimal Ubuntu OS image containing only the necessary services and utilities to support the applications running on top.
Snapd: Manages the lifecycle of all snaps in an Ubuntu Core system.
Additional OS snaps can then be layered onto this image to enable other elements of the operating system such as a desktop environment.
Read more of this story at Slashdot.
motang writes: Canonical, the sponsor of widely popular Ubuntu Linux, plans on shipping the next LTS in two versions. In addition to the traditional version, there will be one immutable desktop OS flavor. From Canonical blog: The technology behind snaps extends beyond the distribution of desktop applications however. With Ubuntu Core this philosophy of security and stability applies equally to the components that make up the entire Ubuntu operating system. Rather than treating the OS as a single immutable ‘blob,’ Ubuntu Core breaks it up into discrete components. The base of Ubuntu Core, for example, is built on four primary snaps:
Gadget: Defines the system’s bootloader, partition layout and default configurations for snaps.
Kernel: Containing the Linux kernel and hardware drivers.
Base: A minimal Ubuntu OS image containing only the necessary services and utilities to support the applications running on top.
Snapd: Manages the lifecycle of all snaps in an Ubuntu Core system.
Additional OS snaps can then be layered onto this image to enable other elements of the operating system such as a desktop environment.
Read more of this story at Slashdot.
Reddit app developer says the site’s new API rules will cost him $20 million a year
Reddit’s recently-announced plan to charge for API access could price out the developer of one of the most popular third-party Reddit apps. The developer of Reddit client Apollo is raising the alarm on the new API pricing, saying the changes would require him to spend millions of dollars to keep his app going in its current form.
Reddit announced sweeping changes to its API rules last month, citing the rise of AI companies using their platform to train large language models. “The Reddit corpus of data is really valuable,” Reddit CEO Steve Huffman told The New York Times. “But we don’t need to give all of that value to some of the largest companies in the world for free.”
But it now seems that independent app makers will also be subject to the pricier new plans, which are set to take effect June 19th. While Reddit hasn’t officially disclosed its API pricing, Christian Selig, Apollo’s sole developer, says he would have to pay $20 million to keep his app going “as-is” under the new policies.
“50 million requests costs $12,000, a figure far more than I ever could have imagined,” he wrote in a post on Reddit, citing multiple conversations he’s had with Reddit representatives about the upcoming API changes. “Apollo made 7 billion requests last month, which would put it at about 1.7 million dollars per month, or 20 million US dollars per year.”
That pricing leaves Selig and Apollo, which has been widely praised for its design details and for providing functionality beyond Reddit’s native app, in a tough position. While the app does offer subscriptions, its current revenue isn’t enough to cover the steep API cost. He says that the average user makes about 344 API calls a day, which would require him to raise subscription prices to at least $2.50 a month (currently, he says, most subscribers pay $0.99 a month). Furthermore, that wouldn’t account for Apollo’s power users, who use the app at much higher rates, or the app’s free users. “Even keeping the existing, subscription only users I would be SUBSTANTIALLY in the red each month,” Selig tells Engadget.
In a statement, a Reddit spokesperson said that Selig was provided “pricing per 1,000 API calls, not a monthly bill,” but declined to share details. “Our pricing is based on usage levels that we measure to be as equitable as possible,” the spokesperson said. “We’ve been, and will continue, to work with third-party apps to help them improve efficiency, which can significantly impact overall cost.”
If all of this sounds oddly familiar, there are striking similarities between Reddit’s new developer rules and the drastic changes Twitter has made to its API policies under Elon Musk. In Twitter’s case, the company decided to ban third-party client apps while simultaneously making its API extraordinarily expensive for the researchers and businesses that previously depended on higher levels of access to Twitter data.
Of note, Reddit hasn’t been as outwardly hostile to developers. Selig notes that he’s had multiple calls with Reddit and that reps he’s spoken to have been “communicative and civil” about the changes. And a Reddit spokesperson suggested the company wants to keep third-party apps around.
“We’re committed to fostering a developer ecosystem around Reddit – developers and third-party apps can make Reddit better,” the spokesperson said. “Our Data API has powered thousands of applications, such as tools to make moderation easier, and utilities that help users stay up to date on their favorite topics, and games. Developers are incredibly valuable to the Reddit ecosystem, so much so that we recently updated our Developer Platform.”
Still, Selig said he’s uncertain about how he will handle the changes. “I hope it goes without saying that I don’t have that kind of money,” he shared on Reddit. “This is going to require some thinking.”This article originally appeared on Engadget at https://www.engadget.com/reddit-app-developer-says-the-sites-new-api-rules-will-cost-him-20-million-a-year-203911487.html?src=rss
Reddit’s recently-announced plan to charge for API access could price out the developer of one of the most popular third-party Reddit apps. The developer of Reddit client Apollo is raising the alarm on the new API pricing, saying the changes would require him to spend millions of dollars to keep his app going in its current form.
Reddit announced sweeping changes to its API rules last month, citing the rise of AI companies using their platform to train large language models. “The Reddit corpus of data is really valuable,” Reddit CEO Steve Huffman told The New York Times. “But we don’t need to give all of that value to some of the largest companies in the world for free.”
But it now seems that independent app makers will also be subject to the pricier new plans, which are set to take effect June 19th. While Reddit hasn’t officially disclosed its API pricing, Christian Selig, Apollo’s sole developer, says he would have to pay $20 million to keep his app going “as-is” under the new policies.
“50 million requests costs $12,000, a figure far more than I ever could have imagined,” he wrote in a post on Reddit, citing multiple conversations he’s had with Reddit representatives about the upcoming API changes. “Apollo made 7 billion requests last month, which would put it at about 1.7 million dollars per month, or 20 million US dollars per year.”
That pricing leaves Selig and Apollo, which has been widely praised for its design details and for providing functionality beyond Reddit’s native app, in a tough position. While the app does offer subscriptions, its current revenue isn’t enough to cover the steep API cost. He says that the average user makes about 344 API calls a day, which would require him to raise subscription prices to at least $2.50 a month (currently, he says, most subscribers pay $0.99 a month). Furthermore, that wouldn’t account for Apollo’s power users, who use the app at much higher rates, or the app’s free users. “Even keeping the existing, subscription only users I would be SUBSTANTIALLY in the red each month,” Selig tells Engadget.
In a statement, a Reddit spokesperson said that Selig was provided “pricing per 1,000 API calls, not a monthly bill,” but declined to share details. “Our pricing is based on usage levels that we measure to be as equitable as possible,” the spokesperson said. “We’ve been, and will continue, to work with third-party apps to help them improve efficiency, which can significantly impact overall cost.”
If all of this sounds oddly familiar, there are striking similarities between Reddit’s new developer rules and the drastic changes Twitter has made to its API policies under Elon Musk. In Twitter’s case, the company decided to ban third-party client apps while simultaneously making its API extraordinarily expensive for the researchers and businesses that previously depended on higher levels of access to Twitter data.
Of note, Reddit hasn’t been as outwardly hostile to developers. Selig notes that he’s had multiple calls with Reddit and that reps he’s spoken to have been “communicative and civil” about the changes. And a Reddit spokesperson suggested the company wants to keep third-party apps around.
“We’re committed to fostering a developer ecosystem around Reddit – developers and third-party apps can make Reddit better,” the spokesperson said. “Our Data API has powered thousands of applications, such as tools to make moderation easier, and utilities that help users stay up to date on their favorite topics, and games. Developers are incredibly valuable to the Reddit ecosystem, so much so that we recently updated our Developer Platform.”
Still, Selig said he’s uncertain about how he will handle the changes. “I hope it goes without saying that I don’t have that kind of money,” he shared on Reddit. “This is going to require some thinking.”
This article originally appeared on Engadget at https://www.engadget.com/reddit-app-developer-says-the-sites-new-api-rules-will-cost-him-20-million-a-year-203911487.html?src=rss
Atlanta Mayor Andre Dickens to speak at TechCrunch Live’s Atlanta event
Since assuming office last year, Dickens has developed a reputation for his robust support of technology.
Atlanta Mayor Andre Dickens to speak at TechCrunch Live’s Atlanta event by Dominic-Madori Davis originally published on TechCrunch
TechCrunch Live is excited to announce a fireside chat with Atlanta Mayor Andre Dickens to kick off our virtual TechCrunch Live: Atlanta event on June 7.
He will sit down with me, Dominic-Madori Davis, at 2:00 p.m. EDT to discuss the burgeoning Atlanta tech scene, touching on everything from creating a talent pipeline with the local Historically Black Colleges and Universities to how it is using the remote work trend to lure in big players from coastal cities.
Since assuming office last year, Dickens has developed a reputation for his robust support of technology and even appointed a Senior Tech Advisor for the city — or, as some call the role, a Tech Czar.
There is much to talk about with Dickens and his plans to grow and sustain the city as a tech hub. He himself attended Georgia Tech, majoring in chemical engineering; before serving as mayor, he was the Chief Development Officer for the nonprofit TechBridge, which sought to tackle poverty; he also co-founded the Technology Career Program to help those from disadvantaged communities find work within the tech sector, and worked as an assistant director of outreach for Georgia Tech’s Office of Institute Diversity.
Meet us online right here at TechCrunch to chat with Dickens about the present and future of Atlanta’s tech ecosystem. This fireside is part of the larger program centered around the Atlanta startup community. Atlanta has long been home to a vibrant ecosystem of entrepreneurs and investors, and we’re excited to shine the spotlight on the area during this three-hour event.
Want to attend the event? Click HERE to register. It’s free.
Want to promote your startup in the pitch-off? Click HERE to apply. It’s also free. The winner gets fast-tracked into the Startup Battlefield 200, where they’ll receive free tickets and exhibition space to TechCrunch Disrupt this September.
See you soon!
Atlanta Mayor Andre Dickens to speak at TechCrunch Live’s Atlanta event by Dominic-Madori Davis originally published on TechCrunch
The solid legal theory behind Nintendo’s new emulator takedown effort
Dolphin’s included decryption key is key to Nintendo’s DMCA arguments.
Enlarge / This Dolphin is not currently under legal threat from Nintendo. (credit: Flickr / Andreas Ahrens)
When it comes to emulation, Nintendo has a long history of going after the websites that distribute copyrighted game ROMs and some of the modders that make piracy-enabling hardware. But Nintendo’s legal takedown efforts have generally stayed away from emulation software itself.
This weekend saw an exception to that rule, though, as Nintendo’s lawyers formally asked Valve to cut off the planned Steam release of Wii and Gamecube emulator Dolphin. In a letter addressed to the Valve Legal Department (a copy of which was provided to Ars by the Dolphin Team), an attorney representing Nintendo of America requests that Valve take down Dolphin’s “coming soon” Steam store page (which originally went up in March) and “ensure the emulator does not release on the Steam store moving forward.” The letter exerts the company’s “rights under the Digital Millennium Copyright Act (DMCA)’s Anti-Circumvention and Anti-Trafficking provisions,” even though it doesn’t take the form of a formal DMCA takedown request.
In fighting a decision like this, an emulator maker would usually be able to point to some robust legal precedents that protect emulation software as a general concept. But legal experts that spoke to Ars said that Nintendo’s argument here might actually get around those precedents and present some legitimate legal problems for the Dolphin Team.
Six tips for getting the most out of your SIEM investment
Buying a SIEM is a massive commitment: You and your organization will need to live with your decision for years to come.
Six tips for getting the most out of your SIEM investment by Walter Thompson originally published on TechCrunch
Security information and event management (SIEM) is one of the most well-established categories of security software, having first been introduced about 20 years ago. Nevertheless, very little has been written about SIEM vendor evaluation and management.
To fill that gap, here are six top-line tips on procuring and implementing a SIEM solution for maximum value.
Evaluating and purchasing a SIEM solution
Size your spend
SIEM software solutions are priced differently: either by the number of employees in the customer organization, by the rate of events per second or based on the log volume ingested. It’s important to figure this out early to get a rough idea of what you will pay over time. You’ll also identify the various data sources meaningful to your security operations center (SOC).
Buying a SIEM is a massive commitment: You and your organization will need to live with your decision for years to come.
If you already have a SIEM in place, give the vendor your current use cases and consumption, and they should be able to replicate it. If you don’t, you’ll need to do a little leg work. A good starting point is assessing the volume of logs you’ll send to the SIEM. Measure actual daily log volume from each source by checking out the locally stored logs for a “normal” day and tallying the results.
If the SIEM vendor charges by your number of employees, be wary. This is usually a way to charge more for the SIEM by counting employees who don’t generate any relevant data.
Evaluate your vendor’s practices
The next step is to conduct a proof-of-concept (POC); this should be a starting point for an eventual implementation, not a standalone, canned exercise. During this process, your vendor should demonstrate a service level that you’ll want to maintain post-sale. Here are some key questions to consider during this process:
Who will staff your account? Ideally, a vendor will commit skilled technical staff to both execute your initial evaluation and conduct an implementation.
Who from your team will take the technical lead on the evaluation, and who’ll ultimately implement it? Ideally this will be the same person or small group of people.
After you buy a SIEM, what’s next on your roadmap? SOAR? CSPM? Make sure your vendor can integrate with a broad range of technologies.
It’s critical to fully understand the vendor’s front- and back-end software architecture. Some vendors calling themselves “true SaaS” or “cloud-native” are not. Don’t lock yourself into a 12-month contract when you don’t know what’s going on under the hood.
Don’t be fooled: Know the total cost of implementation
Six tips for getting the most out of your SIEM investment by Walter Thompson originally published on TechCrunch