Author name: Kris Guyer

ex-bank-ceo-gets-24-years-after-falling-for-crypto-scam,-causing-bank-collapse

Ex-bank CEO gets 24 years after falling for crypto scam, causing bank collapse

Breaking the bank —

Former bank CEO ignored warnings that he was being scammed while tanking bank.

Ex-bank CEO gets 24 years after falling for crypto scam, causing bank collapse

A federal judge sentenced a 53-year-old Kansas man to more than 24 years in prison after the former bank CEO abused his trusted position to embezzle $47 million after falling for a cryptocurrency scam that he believed would make him wildly rich.

In a press release, the US Attorney’s Office said that Shan Hanes was driven by “greed” when directing bank employees to transfer millions in funds to a sketchy crypto wallet managed by still-unknown third parties behind the so-called “pig butchering” scheme.

Hanes was first targeted by scammers in late 2022, apparently when he got a message from an unidentified co-conspirator on WhatsApp, prosecutors said. After blowing through his own funds seeking promised profits, Hanes stole tens of thousands from a local church, then a local investor club, and finally his daughter’s college fund, NBC News reported. Then when all those wells dried up, he started stealing bank funds—all in the false hopes that sending more and more money to the scammers would somehow “unlock the supposed returns” on his crypto investments.

In total, Hanes made 11 wire transfers using bank funds between May 2023 and July 2023. But instead of getting rich quick, Hanes never realized any profits at all, the US Attorney’s Office said.

He pleaded guilty to one count of embezzlement by a bank officer after he singlehandedly caused the collapse of Heartland Tri-State Bank (HTSB) in Elkhart, Kansas, the press release said.

Because the bank was insured by the Federal Deposit Insurance Corporation (FDIC), the FDIC “absorbed the $47.1 million loss” after “Hanes’ fraudulent actions caused HTSB to fail and the bank investors to lose $9 million,” the US Attorney’s Office said. On top of those losses, Hanes’ fraudulent actions caused “catastrophic losses to bank customers who relied on the bank for the safekeeping of their savings,” the press release confirmed.

According to NBC News, Hanes missed at least one opportunity to realize that he was being scammed. After he asked for a $12 million loan from a neighbor, Brian Mitchell, his neighbor detected the scam and refused to lend the money.

“I said, ‘You’re in a scam, walk away,'” Mitchell told NBC News.

But Hanes didn’t walk away. Going the other direction, he directed bank employees to wire millions more to scammers after he got the warning from Mitchell. It wasn’t until Mitchell heard from a bank employee that Hanes had wired money out of the bank that Mitchell insisted on speaking to the bank’s board.

Days later, Hanes was fired, NBC News reported. But even then, Hanes never believed he was being scammed, reportedly telling Mitchell that he was still scheming to find a way to recover his make-believe profits right up to the moment he was arrested.

“He said … ‘If I just had another two months, I could get the money back,'” Mitchell told NBC News.

Law enforcement and government officials have warned that pig-butchering scams are growing increasingly common, urging people to “think twice” to avoid being victimized. Last year, the US Department of the Treasury’s Financial Crimes Enforcement Network issued an alert, which explained in detail how the scams commonly work and laid out red flags to watch out for.

Victims may never fully recover losses, DOJ says

A Kansas FBI agent, Stephen Cyrus, said in the press release that as CEO, Hanes violated “the trust and confidence of the community of Elkhart” by embezzling the funds.

Mitchell described Hanes’ deceptions and manipulations as “pure evil,” while Cyrus said that it was Hanes’ “job” and “the bank’s job” to “protect its customers and identify fraudulent scams—not to participate in them.”

In a court filing at sentencing, Hanes’ lawyer, John Stang, chalked up his client’s misdeeds to “bad choices,” reminding the court that Hanes had been deceived, too, by “an extremely well-run cryptocurrency scam.”

“He was the pig that was butchered,” Stang wrote. “Mr. Hanes’s vulnerability to the Pig Butcher scheme caused him to make some very bad decisions, for which he is truly sorry for causing damage to the bank and loss to the Stockholders.”

Hanes faced a maximum penalty of 30 years. While Judge John Broomes ordered him to serve less time than that, his sentence of more than 24 years is 29 months longer than prosecutors had requested, NBC News reported.

Right now, it’s unclear how or when victims will be repaid for losses. Broomes ordered “that restitution be finalized at a separate hearing within the next 90 days,” the US Attorney’s Office said.

In the community, people are still struggling to recover, Mitchell told NBC News, noting that some people lost up to 80 percent of their retirement savings. For at least one woman, retirement is impossible now, Mitchell said, and for another local woman, it has become difficult to pay for her 93-year-old mother’s nursing home.

US Attorney Kate E. Brubacher said that it’s hard to say when or if victims will be made whole again.

“Hanes is a liar and a master manipulator” who squandered away “tens of millions of dollars in cryptocurrency” while orchestrating “schemes to cover his tracks concerning the losses at the bank,” Brubacher said. “Many victims will never fully recoup losses to their life savings and retirement funds, but at least we at the Department of Justice can see that Hanes is held criminally responsible for his actions.”

Ex-bank CEO gets 24 years after falling for crypto scam, causing bank collapse Read More »

“we-run-a-business”—why-microsoft’s-indiana-jones-will-be-on-ps5

“We run a business”—why Microsoft’s Indiana Jones will be on PS5

PS5 Starfield when? —

Spencer: “There’s going to be more change in how… games are built and distributed.”

So I'm not stuck on Xbox, eh?

Enlarge / So I’m not stuck on Xbox, eh?

Bethesda

Bethesda’s Indiana Jones and The Great Circle is the latest game from a Microsoft subsidiary that will make its way to the PlayStation 5. The game will hit Sony’s console in the spring of 2025, Microsoft announced yesterday, months after a planned December launch on Xbox Series S/X and Windows.

In an interview with YouTube channel Xbox On, Microsoft’s Phil Spencer expanded on that decision, implying that multiplatform releases for Microsoft gaming properties were important to the Xbox division’s bottom line. “We run a business,” he said, “It’s definitely true inside of Microsoft the bar is high for us in terms of the delivery that we have to give back to the company, because we get a level of support from the company that’s just amazing in what we’re able to go do.”

Phil Spencer’s comments come about three minutes into this interview.

Amid massive layoffs that have hit Xbox and other gaming companies in recent months, Spencer noted that there’s “a lot of pressure on the [game] industry” these days. “[The industry] has been growing for a long, long time and now people are looking for ways to grow,” he said. “And I think that us, as fans, as players of games, we just have to anticipate there’s going to be more change in how some of the traditional ways that games were built and distributed [ars] going to change… for all of us.”

“It’s just going to be a strategy that works for us”

Although Microsoft released four former Xbox exclusives on other platforms months ago, Spencer suggested that there hasn’t been any commensurate dip in total Xbox usage. “What I see when I look is our franchises are getting stronger; our Xbox console players are as high this year as they’ve ever been,” he said.

“So I look at it, and I say, ‘Okay, our player numbers are going up for the console platform, our franchises are as strong as they’ve ever been… So I look at this [as] ‘How can we make our games as strong as possible?'” our platform continues to grow both on console on PC and on cloud and I think it’s just going to be a strategy that works for us.”

Indiana Jones.” height=”360″ src=”https://cdn.arstechnica.net/wp-content/uploads/2024/02/xboxmulti-640×360.jpg” width=”640″>

Enlarge / Microsoft’s last four multiplatform game releases were a bit smaller than Indiana Jones.

Microsoft

Microsoft has long prioritized maintaining a healthy number of overall Xbox players over selling more raw consoles than competitors like Sony. Still, the continuing cratering of sales revenue from Xbox hardware likely contributes heavily to Microsoft’s decision to release its games on competing platforms.

A big-budget, big-name Bethesda release like Indiana Jones could act as more of an Xbox system seller than the four older, smaller games that Microsoft recently let go multiplatform. Then again, The Great Circle‘s multiple months of Xbox exclusivity—which include the 2024 holiday buying season—could still provide a bit of a relative advantage for Microsoft’s consoles.

Indiana Jones and The Great Circle‘s PS5 availability may come as a particular surprise to readers who remember Spencer saying in February that neither The Great Circle nor Starfield were a part of the company’s current multiplatform plans. But a careful parsing of Spencer’s words at the time shows that he only promised those titles were not among the four multiplatform titles they were announcing at that time.

Back then, Spencer said that those four multiplatform releases didn’t represent “a change to our fundamental exclusive strategy.” But he added that there was a desire to “use what some of the other platforms have right now to help grow our franchises” to help “the long-term health of Xbox.”

“[I have] a fundamental belief that over the next five or ten years… games that are exclusive to one piece of hardware are going to be a smaller and smaller part of the game industry,” Spencer said in February.

“We run a business”—why Microsoft’s Indiana Jones will be on PS5 Read More »

telco-fined-$1m-for-transmitting-biden-deepfake-without-verifying-caller-id

Telco fined $1M for transmitting Biden deepfake without verifying Caller ID

Biden deepfake robocall —

Lingo Telecom signed calls with A-Level attestations despite not verifying them.

President Biden walking outdoors while holding a cell phone to his ear with one hand and holding another phone in his other hand.

Enlarge / President Joe Biden leaving the White House on August 16, 2024, in Washington, DC.

Getty Images | Anna Moneymaker

A phone company agreed to pay a $1 million fine for transmitting spoofed robocalls in which a deepfake of President Joe Biden’s voice urged New Hampshire residents not to vote. Lingo Telecom, which is based in Texas, agreed to a settlement with the Federal Communications Commission, the agency announced today.

Lingo Telecom “will pay a $1 million civil penalty and implement a historic compliance plan—the first of its kind secured by the FCC—that will require strict adherence to the FCC’s STIR/SHAKEN Caller ID authentication rules,” the FCC said. The settlement includes “requirements that the company abide by ‘Know Your Customer’ (KYC) and ‘Know Your Upstream Provider’ (KYUP) principles” that focus on vetting call traffic to ensure it is trustworthy, and “requirements that the company more thoroughly verify the accuracy of the information provided by its customers and upstream providers.”

The calls made before New Hampshire’s presidential primary in January were orchestrated by Steve Kramer, a Democratic consultant who was working for a candidate running against Biden. Kramer was indicted on charges of voter suppression and impersonation of a candidate, and the FCC proposed a $6 million fine for Kramer. The calls inaccurately displayed a phone number associated with a prominent New Hampshire political operative.

The FCC originally proposed a $2 million fine for Lingo Telecom before settling for the $1 million penalty in a consent decree issued today. The consent decree resolves the FCC investigation into Lingo Telecom’s apparent violations of rules related to the STIR/SHAKEN Caller ID authentication system.

Telco didn’t verify calls

Lingo Telecom completed 3,978 calls to potential New Hampshire voters on January 21, 2024, on behalf of a customer called Life Corporation. Lingo Telecom signed those calls with A-Level attestations, which indicate that the phone company “is responsible for the origination of the call onto the IP-based service provider voice network, has a direct authenticated relationship with the customer and can identify the customer, and has established a verified association with the telephone number used for the call.”

Lingo Telecom did not actually verify the calls, the consent decree said:

Lingo Telecom explained that its policy was to assign A-level attestations to a customer’s traffic when the Company directly assigned Direct Inward Dialing (DID) numbers to a customer like Life Corporation. If one of these customers, like Life Corporation, also purchased Company Session Initiation Protocol (SIP) trunks that permits the customer to use numbers assigned by other carriers, Lingo Telecom allowed them to “receive an A-level attestation for traffic associated with… non-Lingo provisioned telephone numbers if the customer certified that it ‘will identify its customer and has a verified association with the telephone number used for the call.'”

Lingo Telecom told the FCC that it relied on the certification provided by Life Corporation, which had been a customer of Lingo Telecom for 16 years. “Lingo Telecom took no additional steps beyond those recited above to independently ascertain whether the customers of Life Corporation could legitimately use the telephone number that appeared as the calling party for the New Hampshire presidential primary calls,” the FCC said.

The consent decree states that, going forward, “Lingo Telecom may only apply an A-level attestation to a call if Lingo Telecom itself has provided the Caller Identity to the calling party associated with the Call.” The consent decree’s “Know Your Customer” provisions require Lingo Telecom to obtain more detailed information from customers, while the “Know Your Upstream Provider” provisions require it to obtain more detailed information from other telcos that it transmits calls for.

Lingo Telecom is also barred from accepting “payment in the form of cryptocurrency, gift cards, or cash to transmit or originate calls.” The consent decree is scheduled to be in effect for three years but can be extended by 12 months for each instance of noncompliance.

Telco fined $1M for transmitting Biden deepfake without verifying Caller ID Read More »

novel-technique-allows-malicious-apps-to-escape-ios-and-android-guardrails

Novel technique allows malicious apps to escape iOS and Android guardrails

NOW YOU KNOW —

Web-based apps escape iOS “Walled Garden” and Android side-loading protections.

An image illustrating a phone infected with malware

Getty Images

Phishers are using a novel technique to trick iOS and Android users into installing malicious apps that bypass safety guardrails built by both Apple and Google to prevent unauthorized apps.

Both mobile operating systems employ mechanisms designed to help users steer clear of apps that steal their personal information, passwords, or other sensitive data. iOS bars the installation of all apps other than those available in its App Store, an approach widely known as the Walled Garden. Android, meanwhile, is set by default to allow only apps available in Google Play. Sideloading—or the installation of apps from other markets—must be manually allowed, something Google warns against.

When native apps aren’t

Phishing campaigns making the rounds over the past nine months are using previously unseen ways to workaround these protections. The objective is to trick targets into installing a malicious app that masquerades as an official one from the targets’ bank. Once installed, the malicious app steals account credentials and sends them to the attacker in real time over Telegram.

“This technique is noteworthy because it installs a phishing application from a third-party website without the user having to allow third-party app installation,” Jakub Osmani, an analyst with security firm ESET, wrote Tuesday. “For iOS users, such an action might break any ‘walled garden’ assumptions about security. On Android, this could result in the silent installation of a special kind of APK, which on further inspection even appears to be installed from the Google Play store.”

The novel method involves enticing targets to install a special type of app known as a Progressive Web App. These apps rely solely on Web standards to render functionalities that have the feel and behavior of a native app, without the restrictions that come with them. The reliance on Web standards means PWAs, as they’re abbreviated, will in theory work on any platform running a standards-compliant browser, making them work equally well on iOS and Android. Once installed, users can add PWAs to their home screen, giving them a striking similarity to native apps.

While PWAs can apply to both iOS and Android, Osmani’s post uses PWA to apply to iOS apps and WebAPK to Android apps.

Installed phishing PWA (left) and real banking app (right).

Enlarge / Installed phishing PWA (left) and real banking app (right).

ESET

Comparison between an installed phishing WebAPK (left) and real banking app (right).

Enlarge / Comparison between an installed phishing WebAPK (left) and real banking app (right).

ESET

The attack begins with a message sent either by text message, automated call, or through a malicious ad on Facebook or Instagram. When targets click on the link in the scam message, they open a page that looks similar to the App Store or Google Play.

Example of a malicious advertisement used in these campaigns.

Example of a malicious advertisement used in these campaigns.

ESET

Phishing landing page imitating Google Play.

Phishing landing page imitating Google Play.

ESET

ESET’s Osmani continued:

From here victims are asked to install a “new version” of the banking application; an example of this can be seen in Figure 2. Depending on the campaign, clicking on the install/update button launches the installation of a malicious application from the website, directly on the victim’s phone, either in the form of a WebAPK (for Android users only), or as a PWA for iOS and Android users (if the campaign is not WebAPK based). This crucial installation step bypasses traditional browser warnings of “installing unknown apps”: this is the default behavior of Chrome’s WebAPK technology, which is abused by the attackers.

Example copycat installation page.

Example copycat installation page.

ESET

The process is a little different for iOS users, as an animated pop-up instructs victims how to add the phishing PWA to their home screen (see Figure 3). The pop-up copies the look of native iOS prompts. In the end, even iOS users are not warned about adding a potentially harmful app to their phone.

Figure 3 iOS pop-up instructions after clicking

Figure 3 iOS pop-up instructions after clicking “Install” (credit: Michal Bláha)

ESET

After installation, victims are prompted to submit their Internet banking credentials to access their account via the new mobile banking app. All submitted information is sent to the attackers’ C&C servers.

The technique is made all the more effective because application information associated with the WebAPKs will show they were installed from Google Play and have been assigned no system privileges.

WebAPK info menu—notice the

WebAPK info menu—notice the “No Permissions” at the top and “App details in store” section at the bottom.

ESET

So far, ESET is aware of the technique being used against customers of banks mostly in Czechia and less so in Hungary and Georgia. The attacks used two distinct command-and-control infrastructures, an indication that two different threat groups are using the technique.

“We expect more copycat applications to be created and distributed, since after installation it is difficult to separate the legitimate apps from the phishing ones,” Osmani said.

Novel technique allows malicious apps to escape iOS and Android guardrails Read More »

google-can’t-defend-shady-chrome-data-hoarding-as-“browser-agnostic,”-court-says

Google can’t defend shady Chrome data hoarding as “browser agnostic,” court says

Google can’t defend shady Chrome data hoarding as “browser agnostic,” court says

Chrome users who declined to sync their Google accounts with their browsing data secured a big privacy win this week after previously losing a proposed class action claiming that Google secretly collected personal data without consent from over 100 million Chrome users who opted out of syncing.

On Tuesday, the 9th US Circuit Court of Appeals reversed the prior court’s finding that Google had properly gained consent for the contested data collection.

The appeals court said that the US district court had erred in ruling that Google’s general privacy policies secured consent for the data collection. The district court failed to consider conflicts with Google’s Chrome Privacy Notice (CPN), which said that users’ “choice not to sync Chrome with their Google accounts meant that certain personal information would not be collected and used by Google,” the appeals court ruled.

Rather than analyzing the CPN, it appears that the US district court completely bought into Google’s argument that the CPN didn’t apply because the data collection at issue was “browser agnostic” and occurred whether a user was browsing with Chrome or not. But the appeals court—by a 3–0 vote—did not.

In his opinion, Circuit Judge Milan Smith wrote that the “district court should have reviewed the terms of Google’s various disclosures and decided whether a reasonable user reading them would think that he or she was consenting to the data collection.”

“By focusing on ‘browser agnosticism’ instead of conducting the reasonable person inquiry, the district court failed to apply the correct standard,” Smith wrote. “Viewed in the light most favorable to Plaintiffs, browser agnosticism is irrelevant because nothing in Google’s disclosures is tied to what other browsers do.”

Smith seemed to suggest that the US district court wasted time holding a “7.5-hour evidentiary hearing which included expert testimony about ‘whether the data collection at issue'” was “browser-agnostic.”

“Rather than trying to determine how a reasonable user would understand Google’s various privacy policies,” the district court improperly “made the case turn on a technical distinction unfamiliar to most ‘reasonable'” users, Smith wrote.

Now, the case has been remanded to the district court where Google will face a trial over the alleged failure to get consent for the data collection. If the class action is certified, Google risks owing currently unknown damages to any Chrome users who opted out of syncing between 2016 and 2024.

According to Smith, the key focus of the trial will be weighing the CPN terms and determining “what a ‘reasonable user’ of a service would understand they were consenting to, not what a technical expert would.”

The same privacy policy last year triggered a Google settlement with Chrome users whose data was collected despite using “Incognito” mode.

Matthew Wessler, a lawyer for Chrome users suing, told Ars that “we are pleased with the Ninth Circuit’s decision” and “look forward to taking this case on behalf of Chrome users to trial.”

A Google spokesperson, José Castañeda, told Ars that Google disputes the decision.

“We disagree with this ruling and are confident the facts of the case are on our side,” Castañeda told Ars. “Chrome Sync helps people use Chrome seamlessly across their different devices and has clear privacy controls.”

Google can’t defend shady Chrome data hoarding as “browser agnostic,” court says Read More »

ars-technica-content-is-now-available-in-openai-services

Ars Technica content is now available in OpenAI services

Adventures in capitalism —

Condé Nast joins other publishers in allowing OpenAI to access its content.

The OpenAI and Conde Nast logos on a gradient background.

Ars Technica

On Tuesday, OpenAI announced a partnership with Ars Technica parent company Condé Nast to display content from prominent publications within its AI products, including ChatGPT and a new SearchGPT prototype. It also allows OpenAI to use Condé content to train future AI language models. The deal covers well-known Condé brands such as Vogue, The New Yorker, GQ, Wired, Ars Technica, and others. Financial details were not disclosed.

One immediate effect of the deal will be that users of ChatGPT or SearchGPT will now be able to see information from Condé Nast publications pulled from those assistants’ live views of the web. For example, a user could ask ChatGPT, “What’s the latest Ars Technica article about Space?” and ChatGPT can browse the web and pull up the result, attribute it, and summarize it for users while also linking to the site.

In the longer term, the deal also means that OpenAI can openly and officially utilize Condé Nast articles to train future AI language models, which includes successors to GPT-4o. In this case, “training” means feeding content into an AI model’s neural network so the AI model can better process conceptual relationships.

AI training is an expensive and computationally intense process that happens rarely, usually prior to the launch of a major new AI model, although a secondary process called “fine-tuning” can continue over time. Having access to high-quality training data, such as vetted journalism, improves AI language models’ ability to provide accurate answers to user questions.

It’s worth noting that Condé Nast internal policy still forbids its publications from using text created by generative AI, which is consistent with its AI rules before the deal.

Not waiting on fair use

With the deal, Condé Nast joins a growing list of publishers partnering with OpenAI, including Associated Press, Axel Springer, The Atlantic, and others. Some publications, such as The New York Times, have chosen to sue OpenAI over content use, and there’s reason to think they could win.

In an internal email to Condé Nast staff, CEO Roger Lynch framed the multi-year partnership as a strategic move to expand the reach of the company’s content, adapt to changing audience behaviors, and ensure proper compensation and attribution for using the company’s IP. “This partnership recognizes that the exceptional content produced by Condé Nast and our many titles cannot be replaced,” Lynch wrote in the email, “and is a step toward making sure our technology-enabled future is one that is created responsibly.”

The move also brings additional revenue to Condé Nast, Lynch added, at a time when “many technology companies eroded publishers’ ability to monetize content, most recently with traditional search.” The deal will allow Condé to “continue to protect and invest in our journalism and creative endeavors,” Lynch wrote.

OpenAI COO Brad Lightcap said in a statement, “We’re committed to working with Condé Nast and other news publishers to ensure that as AI plays a larger role in news discovery and delivery, it maintains accuracy, integrity, and respect for quality reporting.”

Ars Technica content is now available in OpenAI services Read More »

disney-cancels-the-acolyte-after-one-season

Disney cancels The Acolyte after one season

haters gonna hate —

Star Wars series was admittedly uneven, but didn’t deserve the online hate it received.

Asian man in white robe with one hand extended in front of him

Enlarge / We have doubts that any amount of Force powers will bring the show back.

YouTube/Disney+

In news that will delight some and disappoint others, Disney has canceled Star Wars series The Acolyte after just one season, Deadline Hollywood reports. The eight-episode series got off to a fairly strong start, with mostly positive reviews and solid ratings, albeit lower than prior Star Wars series. But it couldn’t maintain and build upon that early momentum, and given the production costs, it’s not especially surprising that Disney pulled the plug.

The Acolyte arguably wrapped up its major narrative arc pretty neatly in the season finale, but it also took pains to set the stage for a possible sophomore season. In this streaming age, no series is ever guaranteed renewal. Still, it would have been nice to see what showrunner Leslye Headland had planned; when given the chance, many shows hit their stride on those second-season outings.

(Spoilers for the series below. We’ll give you another heads-up when we get to major spoilers.)

As I’ve written previously, The Acolyte is set at the end of the High Republic Era, about a century before the events of The Phantom Menace. In this period, the Jedi aren’t the underdog rebels battling the evil Galactic Empire. They are at the height of their power and represent the dominant mainstream institution—not necessarily a benevolent one, depending on one’s perspective. That’s a significant departure from most Star Wars media and perhaps one reason why the show was so divisive among fans. (The show had its issues, but I dismiss the profoundly unserious lamentations of those who objected to the female-centric storyline and presence of people of color by dubbing it “The Wokelyte” and launching a review-bombing campaign.)

The Acolyte opened on the planet Ueda, where a mysterious masked woman wielding daggers attacked the Jedi Master Indara (Carrie-Anne Moss) and killed her. The assassin was quickly identified as Osha Aniseya (Amandla Stenberg), a former padawan now working as a meknek, making repairs on spaceships. Osha was arrested by her former classmate, Yord Fandar (Charlie Barnett), but claimed she was innocent. Her twin sister, Mae, died in a fire on their home planet of Brendok when they were both young. Osha concluded that Mae was still alive and had killed Indara. Osha’s former Jedi master, Sol (Lee Jung-jae), believed her, and subsequent events proved Osha right.

Mae’s targets were not random. She was out to kill the four Jedi she blamed for the fire on Brendok: Indara, Sol, Torbin (Dean-Charles Chapman), and a Jedi Wookiee named Kelnacca (Joonas Suotamo). The quartet had arrived on Brendok to demand they be allowed to test the twins as potential Jedi.

The twins had been raised by a coven of “Force witches” there, led by Mother Aniseya (Jodie Turner-Smith), who believed the Jedi were misusing the Force. While Mae was keen to follow in their mother’s footsteps, Osha wanted to train with the Jedi. When the fire broke out, both Mae and Osha believed the other twin had been killed along with the rest of the coven. How the fire really started, and the identity of Mae’s mysterious Master who trained her in the dark side of the Force, were the primary mysteries that played out over the course of the season.

(WARNING: Major spoilers below. Stop reading now if you haven’t finished watching the series.)

Lightsabers and wuxia

wuxia-inspired fight scenes.” height=”320″ src=”https://cdn.arstechnica.net/wp-content/uploads/2024/06/acolyte-olega-640×320.jpg” width=”640″>

Enlarge / The camera moved on a single axis for the wuxia-inspired fight scenes.

Lucasfilm/Disney+

From the start, The Acolyte was a bit of a departure from a typical Star Wars series, weaving in elements from wuxia films and detective stories while remaining true to the established Star Wars aesthetic and design. That alone made it an intriguing effort, with fresh characters and new takes on classic Star Wars lore. And the martial arts-inspired fight choreography was clever and fun to watch—especially in the shocking, action-packed fifth episode (“Night”).

But there were some obvious shortcomings as well, most notably the clunky dialogue—although that’s kind of a long-standing attribute of the Star Wars franchise. (Alec Guinness notoriously hated his dialogue as Obi-Wan Kenobi in A New Hope.) The pacing lagged at times, and there was a surprisingly high body count among the central characters.

A high body count: All of these Jedi are dead.

Enlarge / A high body count: All of these Jedi are dead.

Lucasfilm/Disney+

That alone might have made a second season challenging. I mean, they killed off Moss’ Jedi master in the first 10 minutes (although she reappeared in flashbacks), with Torbin and Kelnacca meeting the same fate over the next few episodes. By the time the final credits rolled, almost all the Jedi lead characters were dead. And senior leader Vernestra (Rebecca Henderson) opted to blame the murders on Sol (RIP) rather than Mae’s master, who turned out to be Vernestra’s former apprentice, Qimir (a scene-stealing Manny Jacinto)—now apprentice to Sith lord Darth Plagueis. (This was strongly implied in the finale and subsequently confirmed by Headland.)

Ultimately, however, it all came down to the ratings. Per Deadline, The Acolyte garnered 11.1 million views over its first five days (and 488 million minutes viewed)—not bad, but below Ahsoka‘s 14 million views over the same period. But those numbers declined sharply over the ensuing weeks, with the finale earning the dubious distinction of posting the lowest minutes viewed (335 million) for any Star Wars series finale. That simply didn’t meet Disney’s threshold for renewal, so we won’t get to learn more about the Qimir/Darth Plagueis connection.

Disney cancels The Acolyte after one season Read More »

ceo-of-failing-hospital-chain-got-$250m-amid-patient-deaths,-layoffs,-bankruptcy

CEO of failing hospital chain got $250M amid patient deaths, layoffs, bankruptcy

“Outrageous corporate greed” —

Steward Health Care System, run by CEO Ralph de la Torre, filed for bankruptcy in May.

 Hospital staff and community members held a protest in front of Carney Hospital  in Boston on August 5 as Steward has announced it will close the hospital.

Enlarge / Hospital staff and community members held a protest in front of Carney Hospital in Boston on August 5 as Steward has announced it will close the hospital. “Ralph” refers to Steward’s CEO, Ralph de la Torre, who owns a yacht.

As the more than 30 hospitals in the Steward Health Care System scrounged for cash to cover supplies, shuttered pediatric and neonatal units, closed maternity wards, laid off hundreds of health care workers, and put patients in danger, the system paid out at least $250 million to its CEO and his companies, according to a report by The Wall Street Journal.

The newly revealed financial details bring yet more scrutiny to Steward CEO Ralph de la Torre, a Harvard University-trained cardiac surgeon who, in 2020, took over majority ownership of Steward from the private equity firm Cerberus. De la Torre and his companies were reportedly paid at least $250 million since that takeover. In May, Steward, which has hospitals in eight states, filed for Chapter 11 bankruptcy.

Critics—including members of the Senate Committee on Health, Education, Labor, and Pensions (HELP)—allege that de la Torre and stripped the system’s hospitals of assets, siphoned payments from them, and loaded them with debt, all while reaping huge payouts that made him obscenely wealthy.

Alleged greed

For instance, de la Torre sold the land under the system’s hospitals to a large hospital landlord, Medical Properties Trust, leaving Steward hospitals on the hook for large rent payments. Under de la Torre’s leadership, Steward also paid a management consulting firm $30 million a year to “provide executive oversight and overall strategic directive.” But, de la Torre was the majority owner of the consulting firm, which also employed other Steward executives. As the WSJ put it, Steward “effectively paid its CEO’s firm, which employed Steward executives, for executive- management services for Steward.”

In 2021, while the COVID-19 pandemic strained hospitals, Steward distributed $111 million to shareholders. With de la Torre owning 73 percent of the company at the time, his share would have been around $81 million, the WSJ reported. That year, de la Torre bought a 190-foot yacht for $40 million. He also owns a $15 million custom-made luxury fishing boat called Jaruco. The Senate Help Committee, meanwhile, notes that a Steward affiliate owned two jets, one valued at $62 million and a second “backup” jet valued at $33 million.

In 2022, de la Torre got married in an elaborate wedding on Italy’s Amalfi Coast and bought a 500-acre Texas ranch for at least $7.2 million. His new wife, Nicole Acosta, 29, is a competitive equestrian who trains at a facility near the ranch. She competes on a horse that was sold in 2014 for $3.5 million, though it’s unclear how much the couple paid for it. Besides the ranch, de la Torre, 58, owns an 11,108-square-foot mansion in Dallas valued at $7.2 million, the WSJ reported.

While de la Torre was living a lavish lifestyle, Steward hospitals faced dire situations—as they had been for years. An investigation by the Senate HELP committee noted that Steward had shut down several hospitals in Massachusetts, Ohio, Arizona, and Texas between 2014 and this year, laying off thousands of health care workers and leaving communities in the lurch. It closed several pediatric wards in Massachusetts and Texas; in Florida, it closed neonatal units and eliminated maternity services. In Louisiana, Steward patients faced “immediate jeopardy.”

“Third-world medicine”

In a July hearing, Sen. Bill Cassidy (R-LA), ranking member of the HELP Committee, spoke of the conditions at Glenwood Regional Medical Center in West Monroe, Louisiana, which Steward allegedly mismanaged. “According to a report from the Centers for Medicare and Medicaid Services, a physician at Glenwood told a Louisiana state inspector that the hospital was performing ‘third-world medicine,'” Cassidy said.

Further, “one patient died while waiting for a transfer to another hospital because Glenwood did not have the resources to treat them,” the Senator said.  “Unfortunately, Glenwood is not unique,” he went on. “At a Steward-owned Massachusetts hospital, a woman died after giving birth when doctors realized mid-surgery that the supplies needed to treat her were previously repossessed due to Steward’s financial troubles.” The hospital reportedly owed the supplier $2.5 million in unpaid bills.

Additionally, the WSJ investigation dug up records that showed that a pest control company discovered 3,000 bats living in one of Steward’s Florida hospitals. In Arizona, a Phoenix-area hospital was without air conditioning during scorching temperatures, and its kitchen was closed for health-code violations. The state ordered it to shut down last week.

“Dr. de la Torre and his executive teams’ poor financial decisions and gross mismanagement of its hospitals is shocking,” Cassidy said. “Patients’ lives are at risk. The American people deserve answers.”

Outrage

Senate HELP Committee chair Bernie Sanders (I-VT) went further, saying that the US health care system “is designed not to make patients well, but to make health care executives and stockholders extraordinarily wealthy. … Perhaps more than anyone else in America, Ralph de la Torre, the CEO of Steward Health Care, epitomizes the type of outrageous corporate greed that is permeating throughout our for-profit health care system.”

Sanders lamented how de la Torre’s payouts could have instead benefited patients and communities, asking: “How many of Steward’s hospitals could have been prevented from closing down, how many lives could have been saved, how many health care workers would still have their jobs if Dr. de la Torre spent $150 million on high-quality health care instead of a yacht, two private jets and a luxury fishing boat?”

On July 25, the committee voted 16–4 to subpoena de la Torre so they could ask him such questions in person. To date, de la Torre has refused to voluntarily appear before the committee and declined to comment on the WSJ report. The committee’s vote marks the first time since 1981 that it has issued a subpoena.

Separately, Steward and de la Torre are under investigation by the Department of Justice over allegations of fraud and corruption in a deal to run hospitals in Malta.

CEO of failing hospital chain got $250M amid patient deaths, layoffs, bankruptcy Read More »

how-accurate-are-wearable-fitness-trackers?-less-than-you-might think

How accurate are wearable fitness trackers? Less than you might think

some misleading metrics —

Wide variance underscores need for a standardized approach to validation of devices.

How accurate are wearable fitness trackers? Less than you might think

Corey Gaskin

Back in 2010, Gary Wolf, then the editor of Wired magazine, delivered a TED talk in Cannes called “the quantified self.” It was about what he termed a “new fad” among tech enthusiasts. These early adopters were using gadgets to monitor everything from their physiological data to their mood and even the number of nappies their children used.

Wolf acknowledged that these people were outliers—tech geeks fascinated by data—but their behavior has since permeated mainstream culture.

From the smartwatches that track our steps and heart rate, to the fitness bands that log sleep patterns and calories burned, these gadgets are now ubiquitous. Their popularity is emblematic of a modern obsession with quantification—the idea that if something isn’t logged, it doesn’t count.

At least half the people in any given room are likely wearing a device, such as a fitness tracker, that quantifies some aspect of their lives. Wearables are being adopted at a pace reminiscent of the mobile phone boom of the late 2000s.

However, the quantified self movement still grapples with an important question: Can wearable devices truly measure what they claim to?

Along with my colleagues Maximus Baldwin, Alison Keogh, Brian Caulfield, and Rob Argent, I recently published an umbrella review (a systematic review of systematic reviews) examining the scientific literature on whether consumer wearable devices can accurately measure metrics like heart rate, aerobic capacity, energy expenditure, sleep, and step count.

At a surface level, our results were quite positive. Accepting some error, wearable devices can measure heart rate with an error rate of plus or minus 3 percent, depending on factors like skin tone, exercise intensity, and activity type. They can also accurately measure heart rate variability and show good sensitivity and specificity for detecting arrhythmia, a problem with the rate of a person’s heartbeat.

Additionally, they can accurately estimate what’s known as cardiorespiratory fitness, which is how the circulatory and respiratory systems supply oxygen to the muscles during physical activity. This can be quantified by something called VO2Max, which is a measure of how much oxygen your body uses while exercising.

The ability of wearables to accurately measure this is better when those predictions are generated during exercise (rather than at rest). In the realm of physical activity, wearables generally underestimate step counts by about 9 percent.

Challenging endeavour

However, discrepancies were larger for energy expenditure (the number of calories you burn when exercising) with error margins ranging from minus-21.27 percent to 14.76 percent, depending on the device used and the activity undertaken.

Results weren’t much better for sleep. Wearables tend to overestimate total sleep time and sleep efficiency, typically by more than 10 percent. They also tend to underestimate sleep onset latency (a lag in getting to sleep) and wakefulness after sleep onset. Errors ranged from 12 percent to 180 percent, compared to the gold standard measurements used in sleep studies, known as polysomnography.

The upshot is that, despite the promising capabilities of wearables, we found conducting and synthesizing research in this field to be very challenging. One hurdle we encountered was the inconsistent methodologies employed by different research groups when validating a given device.

This lack of standardization leads to conflicting results and makes it difficult to draw definitive conclusions about a device’s accuracy. A classic example from our research: one study might assess heart rate accuracy during high-intensity interval training, while another focuses on sedentary activities, leading to discrepancies that can’t be easily reconciled.

Other issues include varying sample sizes, participant demographics, and experimental conditions—all of which add layers of complexity to the interpretation of our findings.

What does it mean for me?

Perhaps most importantly, the rapid pace at which new wearable devices are released exacerbates these issues. With most companies following a yearly release cycle, we and other researchers find it challenging to keep up. The timeline for planning a study, obtaining ethical approval, recruiting and testing participants, analyzing results, and publishing can often exceed 12 months.

By the time a study is published, the device under investigation is likely to already be obsolete, replaced by a newer model with potentially different specifications and performance characteristics. This is demonstrated by our finding that less than 5 percent of the consumer wearables that have been released to date have been validated for the range of physiological signals they purport to measure.

What do our results mean for you? As wearable technologies continue to permeate various facets of health and lifestyle, it is important to approach manufacturers’ claims with a healthy dose of skepticism. Gaps in research, inconsistent methodologies, and the rapid pace of new device releases underscore the need for a more formalized and standardized approach to the validation of devices.

The goal here would be to foster collaborative synergies between formal certification bodies, academic research consortia, popular media influencers, and the industry so that we can augment the depth and reach of wearable technology evaluation.

Efforts are already underway to establish a collaborative network that can foster a richer, multifaceted dialogue that resonates with a broad spectrum of stakeholders—ensuring that wearables are not just innovative gadgets but reliable tools for health and wellness.The Conversation

Cailbhe Doherty, assistant professor in the School of Public Health, Physiotherapy and Sports Science, University College Dublin. This article is republished from The Conversation under a Creative Commons license. Read the original article.

How accurate are wearable fitness trackers? Less than you might think Read More »

that-book-is-poison:-even-more-victorian-covers-found-to-contain-toxic-dyes

That book is poison: Even more Victorian covers found to contain toxic dyes

Arsenic and old books —

Old books with toxic dyes may be in universities, public libraries, private collections.

Composite image showing color variation of emerald green bookcloth on book spines, likely a result of air pollution

Enlarge / Composite image showing color variation of emerald green bookcloth on book spines, likely a result of air pollution

In April, the National Library of France removed four 19th century books, all published in Great Britain, from its shelves because the covers were likely laced with arsenic. The books have been placed in quarantine for further analysis to determine exactly how much arsenic is present. It’s part of an ongoing global effort to test cloth-bound books from the 19th and early 20th centuries because of the common practice of using toxic dyes during that period.

Chemists from Lipscomb University in Nashville, Tennessee, have also been studying Victorian books from that university’s library collection in order to identify and quantify levels of poisonous substances in the covers. They reported their initial findings this week at a meeting of the American Chemical Society in Denver. Using a combination of spectroscopic techniques, they found that several books had lead concentrations more than twice the limit imposed by the US Centers for Disease Control (CDC).

The Lipscomb effort was inspired by the University of Delaware’s Poison Book Project, established in 2019 as an interdisciplinary crowdsourced collaboration between university scientists and the Winterthur Museum, Garden, and Library. The initial objective was to analyze all the Victorian-era books in the Winterthur circulating and rare books collection for the presence of an arsenic compound called cooper acetoarsenite, an emerald green pigment that was very popular at the time to dye wallpaper, clothing, and cloth book covers. Book covers dyed with chrome yellow—favored by Vincent van Gogh— aka lead chromate, were also examined, and the project’s scope has since expanded worldwide.

The Poison Book Project is ongoing, but 50 percent of the 19th century cloth-case bindings tested so far contain lead in the cloth across a range of colors, as well as other highly toxic heavy metals: arsenic, chromium, and mercury. The French National Library’s affected books included the two-volume Ballads of Ireland by Edward Hayes (1855), an anthology of translated Romanian poetry (1856), and the Royal Horticultural Society’s book from 1862–1863.

Levels were especially high in those bindings that contain chrome yellow. However, the project researchers also determined that, for the moment at least, the chromium and lead in chrome yellow dyed book covers are still bound to the cloth. The emerald green pigment, on the other hand, is highly “friable,” meaning that the particles break apart under even small amounts of stress or friction, like rubbing or brushing up against the surface—and that pigment dust is hazardous to human health, particularly if inhaled.

Lipscomb University undergraduate Leila Ais cuts a sample from a book cover to test for toxic dyes.

Enlarge / Lipscomb University undergraduate Leila Ais cuts a sample from a book cover to test for toxic dyes.

Kristy Jones

The project lists several recommendations for the safe handling and storage of such books, such as wearing nitrile gloves—prolonged direct contact with arsenical green pigment, for instance, can lead to skin lesions and skin cancer—and not eating, drinking, biting one’s fingernails or touching one’s face during handling, as well as washing hands thoroughly and wiping down surfaces. Arsenical green books should be isolated for storage and removed from circulating collections, if possible. And professional conservators should work under a chemical fume hood to limit their exposure to arsenical pigment dust.

X-ray diffraction marks the spot

In 2022, Libscomb librarians heard about the Poison Book Project and approached the chemistry department about conducting a similar analytical survey of the 19th century books in the Beaman Library. “These old books with toxic dyes may be in universities, public libraries, and private collections,” said Abigail Hoermann, an undergraduate studying chemistry at Lipscomb University who is among those involved in the effort, led by chemistry professor Joseph Weinstein-Webb. “So, we want to find a way to make it easy for everyone to be able to find what their exposure is to these books, and how to safely store them.”

The team relied upon X-ray fluorescence spectroscopy to conduct a broad survey of the collection to determine the presence of arsenic or other heavy metals in the covers, followed by plasma optical emission spectroscopy to measure the concentrations in snipped samples from book covers where such poisons were found. They also took their analysis one step further by using X-ray diffraction to identify the specific pigment molecules within the detected toxic metals.

The results so far: Lead and chromium were present in several books in the Lipscomb collection, with high levels of lead and chromium in some of those samples. The highest lead level measured was more than twice the CDC limit, while the highest chromium concentration was six times the limit.

The Lipscomb library decided to seal any colored 19th century books not yet tested in plastic for storage pending analysis. Those books, now known to have covers colored with dangerous dyes, have been removed from public circulation and also sealed in plastic bags, per Poison Book Project recommendations.

The XRD testing showed that lead(II) chromate was present in a few of those heavy metals as well—a compound of the chrome yellow pigment. In fact, they were surprised to find that the book covers contained far more lead than chromium, given that there are equal amounts of both in lead(II) chromate. Further research is needed, but the working hypothesis is that there may be other lead-based pigments—lead(II) oxide, perhaps, or lead(II) sulfide—in the dyes used on those covers.

That book is poison: Even more Victorian covers found to contain toxic dyes Read More »

texas-judge-who-bought-tesla-stock-won’t-recuse-himself-from-x-v.-media-matters

Texas judge who bought Tesla stock won’t recuse himself from X v. Media Matters

A judge banging a gavel next to a scale, representing justice

Getty Images | SimpleImages

A federal judge who bought more than $15,000 worth of Tesla stock has rejected a motion that could have forced him to recuse himself from a lawsuit that Elon Musk’s X Corp. filed against the nonprofit Media Matters for America.

US District Judge Reed O’Connor of the Northern District of Texas bought Tesla stock valued between $15,001 and $50,000 in 2022, a financial disclosure report shows. He was overseeing two lawsuits filed by X and recused himself from only one of the cases.

Media Matters argued in a July court filing that Tesla should be disclosed by X as an “interested party” in the case because of the public association between Musk and the Tesla brand. O’Connor rejected the Media Matters motion in a ruling issued Friday.

O’Connor wrote that financial interest “means ownership of a legal or equitable interest, however small, or a relationship as director, adviser, or other active participant in the affairs of a party.” His ruling said the standard is not met in this case and accused Media Matters of gamesmanship:

Defendants failed to show facts that X’s alleged connection to Tesla meets this standard. Instead, it appears Defendants seek to force a backdoor recusal through their Motion to Compel. Gamesmanship of this sort is inappropriate and contrary to the rules of the Northern District of Texas.

Judge should exit case, law professor writes

O’Connor made the ruling three days after recusing himself from a similar lawsuit filed by X. In that case, X sued the World Federation of Advertisers (WFA) and several large corporations that it accuses of an illegal boycott. Antitrust law professors have described X’s claims as weak.

O’Connor didn’t explain why he recused himself, but it seems clear that it wasn’t because of his Tesla stock. O’Connor also invested in Unilever, one of the defendants in X’s advertising lawsuit. Since Unilever is directly involved in the case, that’s likely what drove O’Connor’s recusal decision.

Musk’s case against Media Matters is also related to X’s problem with advertisers fleeing the platform formerly named Twitter. Media Matters published research on ads being placed next to pro-Nazi content on X, and the lawsuit blames the group for X’s advertising losses.

The federal code of judges’ conduct says that “a judge shall disqualify himself or herself in a proceeding in which the judge’s impartiality might reasonably be questioned.” This includes cases in which the judge has a direct financial interest, and cases where the judge has “any other interest that could be affected substantially by the outcome of the proceeding.”

Harvard Law School Professor Noah Feldman argued that O’Connor should recuse himself from X v. Media Matters. While X and Tesla are legally separate entities, Feldman wrote in a Bloomberg Opinion piece last week that O’Connor should exit because of that “impartiality might reasonably be questioned” rule.

“The basic idea is that a judge should recuse himself if a reasonable person in possession of the relevant facts would believe that the judge has reason for bias. And there is good reason to think that this rule covers O’Connor,” Feldman wrote. “Because Musk is so closely identified with both X and Tesla, Tesla share prices are arguably affected by the performance of X.”

Texas judge who bought Tesla stock won’t recuse himself from X v. Media Matters Read More »

your-10-year-old-graphics-card-can-run-dragon-age:-the-veilguard

Your 10-year-old graphics card can run Dragon Age: The Veilguard

Still kicking —

2014’s Nvidia GTX 970 is still a “minimum requirements” workhorse.

At this rate, it might be the only graphics card you'll ever need?

Enlarge / At this rate, it might be the only graphics card you’ll ever need?

When Dragon Age: Inquisition came out nearly 10 years ago, PC players could have invested $329 (~$435 in today’s dollars) in a brand-new GTX 970 graphics card to make the game look as good as possible on their high-end gaming rig. Surprisingly enough, that very same 2014 graphics card will still be able to run follow-up Dragon Age: The Veilguard (previously known as Dreadwolf) when it launches on October 31. If you’re using AMD cards, an even older Radeon R9 that you purchased back in 2013 will be able to run the game.

Veilguard‘s minimum specs are just the latest to show the workmanlike endurance of the humble GTX 970, which is currently available used on Newegg for as low as $140. Relatively recent big-budget PC releases like Baldur’s Gate 3 and Call of Duty: Modern Warfare 3 both use the old card (or the less powerful follow-up variant, the GTX 960) as their “minimum requirement” benchmark.

Not every big-budget PC game these days is so forgiving with its minimum specs, though. When Cyberpunk 2077 and Doom: Eternal launched in 2020, they both asked players to be sporting at least a GTX 1060, which had come out around four years prior.

For a bit of context, the GTX 970 was used as the “recommended” baseline spec for the mid-range “Oculus Ready” PCs needed to power the then-new Rift VR headset when it launched in 2016. Today, a $500 Meta Quest 3 headset gives you much better graphical performance in a self-contained portable package, no gaming PC required.

Veilguard players sticking with a GTX 970 shouldn’t expect to get the best graphical experience, of course. EA suggests an RTX 2070 (circa 2018) or a Radeon RX 5700Xt (circa 2019) to run the game at “recommended” specs. And you’ll need at least 16 GB of RAM and 100 GB of storage space.

Since work on Veilguard began in earnest in 2015, the game has suffered a string of high-profile staff departures: Creative Director Mike Laidlaw left in 2017; Executive Producer Mark Darrah and BioWare General Manager Casey Hudson left in late 2020; Senior Creative Director Matt Goldman left in late 2021; replacement Executive Producer Christian Daley left in early 2022; and producer Mac Walters left in early 2023.

The full requirements for Dragon Age: The Veilguard are as follows.

Minimum Requirements

OS: Windows 10/11 64-bit

Processor: Intel Core i5-8400 / AMD Ryzen 3 3300X(see notes)

Memory: 16GB

Graphics: Nvidia GTX 970/1650 / AMD Radeon R9 290X

DirectX: Version 12

Storage: 100GB available space

Additional Notes: SSD preferred, HDD supported; AMD CPUs on Windows 11 require AGESA V2 1.2.0.7

Recommended Requirements

OS: Windows 10/11 64-bit

Processor: Intel Core i9-9900K / AMD Ryzen 7 3700X (see notes)

Memory: 16GB

Graphics: Nvidia RTX 2070 / AMD Radeon RX 5700XT

DirectX: Version 12

Storage: 100GB SSD available space

Additional Notes: SSD required; AMD CPUs on Windows 11 require AGESA V2 1.2.0.7

Your 10-year-old graphics card can run Dragon Age: The Veilguard Read More »