Author name: Tim Belzer

spacex-prevails-over-ula,-wins-military-launch-contracts-worth-$733-million

SpaceX prevails over ULA, wins military launch contracts worth $733 million

These missions require medium-lift rockets, or smaller rockets capable of a high-rate launch cadence to match the capability of a larger launch vehicle. In June, the Space Force selected SpaceX, ULA, and Blue Origin, Jeff Bezos’s space company, to compete for Lane 1 launch task orders.

Military officials will add more companies to the pool of available Lane 1 launch providers as they mature their rockets. These companies may include Rocket Lab, Firefly Aerospace, Relativity Space, Stoke Space, and others.

While Blue Origin is on the Space Force’s list of available launch providers, the company’s New Glenn rocket was not eligible for the contracts announced Friday. That’s because military officials require a rocket to complete at least one successful orbital launch to become qualified for a Lane 1 task order. New Glenn’s first test flight is scheduled some time later this year.

This rule left SpaceX’s Falcon 9 and ULA’s Vulcan rockets as the only launch vehicles eligible for the task orders, setting up a head-to-head competition between the rival rocket companies. SpaceX prevailed, winning all nine Lane 1 missions up for competition this year.

Lane 2 of the Space Force’s National Security Space Launch program covers more challenging military missions, typically larger, more expensive payloads destined for higher orbits. The Space Force is expected to soon select launch providers for Lane 2 missions. These launches will require the Space Force to certify the rockets, whereas the military is comfortable accepting a little more risk for the Lane 1 missions.

SpaceX’s Falcon 9 and Falcon Heavy are currently certified for national security launches, and the Space Force is in the process of certifying ULA’s Vulcan launcher after two successful test flights. The Space Force and Blue Origin also have a certification plan for the New Glenn rocket, but it must first complete multiple successful test flights.

Updated October 19 with additional information about the launch task orders.

SpaceX prevails over ULA, wins military launch contracts worth $733 million Read More »

finally-upgrading-from-isc-dhcp-server-to-isc-kea-for-my-homelab

Finally upgrading from isc-dhcp-server to isc-kea for my homelab

Broken down that way, the migration didn’t look terribly scary—and it’s made easier by the fact that the Kea default config files come filled with descriptive comments and configuration examples to crib from. (And, again, ISC has done an outstanding job with the docs for Kea. All versions, from deprecated to bleeding-edge, have thorough and extensive online documentation if you’re curious about what a given option does or where to apply it—and, as noted above, there are also the supplied sample config files to tear apart if you want more detailed examples.)

Configuration time for DHCP

We have two Kea applications to configure, so we’ll do DHCP first and then get to the DDNS side. (Though the DHCP config file also contains a bunch of DDNS stuff, so I guess if we’re being pedantic, we’re setting both up at once.)

The first file to edit, if you installed Kea via package manager, is /etc/kea/kea-dhcp4.conf. The file should already have some reasonably sane defaults in it, and it’s worth taking a moment to look through the comments and see what those defaults are and what they mean.

Here’s a lightly sanitized version of my working kea-dhcp4.conf file:

    "Dhcp4":       "control-socket":         "socket-type": "unix",        "socket-name": "https://arstechnica.com/tmp/kea4-ctrl-socket"      ,      "interfaces-config":         "interfaces": ["eth0"],        "dhcp-socket-type": "raw"      ,      "dhcp-ddns":         "enable-updates": true      ,      "ddns-conflict-resolution-mode": "no-check-with-dhcid",      "ddns-override-client-update": true,      "ddns-override-no-update": true,      "ddns-qualifying-suffix": "bigdinosaur.lan",      "authoritative": true,      "valid-lifetime": 86400,      "renew-timer": 43200,      "expired-leases-processing":         "reclaim-timer-wait-time": 3600,        "hold-reclaimed-time": 3600,        "max-reclaim-leases": 0,        "max-reclaim-time": 0      ,      "loggers": [      {        "name": "kea-dhcp4",        "output_options": [          {            "output": "syslog",            "pattern": "%-5p %mn",            "maxsize": 1048576,            "maxver": 8          }        ],        "severity": "INFO",        "debuglevel": 0              ],      "reservations-global": false,      "reservations-in-subnet": true,      "reservations-out-of-pool": true,      "host-reservation-identifiers": [        "hw-address"      ],      "subnet4": [        {          "id": 1,          "subnet": "10.10.10.0/24",          "pools": [            {              "pool": "10.10.10.170 - 10.10.10.254"            }          ],          "option-data": [            {              "name": "subnet-mask",              "data": "255.255.255.0"            },            {              "name": "routers",              "data": "10.10.10.1"            },            {              "name": "broadcast-address",              "data": "10.10.10.255"            },            {              "name": "domain-name-servers",              "data": "10.10.10.53"            },            {              "name": "domain-name",              "data": "bigdinosaur.lan"            }          ],          "reservations": [            {              "hostname": "host1.bigdinosaur.lan",              "hw-address": "aa:bb:cc:dd:ee:ff",              "ip-address": "10.10.10.100"            },            {              "hostname": "host2.bigdinosaur.lan",              "hw-address": "ff:ee:dd:cc:bb:aa",              "ip-address": "10.10.10.101"            }          ]              ]    }  }

The first stanzas set up the control socket on which the DHCP process listens for management API commands (we’re not going to set up the management tool, which is overkill for a homelab, but this will ensure the socket exists if you ever decide to go in that direction). They also set up the interface on which Kea listens for DHCP requests, and they tell Kea to listen for those requests in raw socket mode. You almost certainly want raw as your DHCP socket type (see here for why), but this can also be set to udp if needed.

Finally upgrading from isc-dhcp-server to isc-kea for my homelab Read More »

biden-administration-curtails-controls-on-some-space-related-exports

Biden administration curtails controls on some space-related exports

The US Commerce Department announced Thursday it is easing restrictions on exports of space-related technology, answering a yearslong call from space companies to reform regulations governing international trade.

This is the most significant update to space-related export regulations in a decade and opens more opportunities for US companies to sell their satellite hardware abroad.

“We are very excited about this rollout,” a senior Commerce official said during a background call with reporters. “It’s been a long time coming, and I think it’s going to be very meaningful for our national security and foreign policy interests and certainly facilitate secure trade with our partners.”

Overdue reform

One of the changes will allow US companies to export more products related to electro-optical and radar remote sensing, as well as space-based logistics, assembly, or servicing spacecraft destined for Australia, Canada, and the United Kingdom.

“They’re easing restrictions on some of the less sensitive space-related technologies and on spacecraft-related items going to our closest allies, like Australia, Canada, and the UK,” the senior Commerce official said. “These changes will offer relief to US companies and they’ll increase innovation without comprising the critical technologies that keep our nation safe.”

Another update to the Commerce Department’s regulations will remove license requirements for exports of “certain spacecraft components” to more than 40 allied nations, including NATO and European Union member states, Argentina, Australia, Canada, India, Israel, Japan, Mexico, New Zealand, Singapore, South Africa, South Korea, and Taiwan. This will also create more license exceptions to support NASA’s cooperative programs with other nations, officials said.

A third change, which hasn’t been finalized and must go through a public comment period, proposes to transfer some space-related item—spacecraft capable of in-space docking, grappling, and refueling, autonomous collision avoidance, and autonomous detection of ground vehicles and aircraft—from the highly restrictive State Department’s US Munitions List to the more flexible Commerce Control List.

Biden administration curtails controls on some space-related exports Read More »

mechwarrior-5:-clans-is-supposed-to-be-newbie-friendly,-and-i-put-it-to-the-test

MechWarrior 5: Clans is supposed to be newbie-friendly, and I put it to the test

There are multiple layers to a Clans battle. There is your actual movement, which can take getting used to, with your legs moving on their own trajectory while you swivel your torso. There is your squad and how they’re deployed, which takes up many of your background thought cycles. And there is your mech, its heating levels, its armor condition, its speed, and everything else you set yourself up for during customization.

Your enemies and your copilots are, well, pretty dumb. There’s good variety in what you face and what you must do, but nobody besides you on the field seems to have a great sense of how verticality works or what the most important thing on the field is at that moment. Once you accept that your squad mates are powerful dummies, you’ll learn to let go of your own mech a bit and spend more time nudging them around or jumping into their cockpits and taking over for a spell.

The nature of mech combat in these games did not, after a half-dozen missions, click with me. On some level, it’s interesting juggling various weapons, positioning yourself with limited movement, and directing teammates. I’m going slow, and it feels like a slog, but I could go faster if I had made a different choice during loadout. I’d just have to make somebody else the heavy.

But it’s also a crunchy simulation game, simulating machinery that does not actually exist. Everything that stands between you and your sense of capable combat is a choice made by the developers.

Mecha culpa

Based on my conversations with longtime MechWarrior fans and reading lots of positive reviews to figure out if there’s something wrong with me, I think MechWarrior 5: Clans is a very juicy offering for mech fans who have been hungry for something new (and especially something set in this Clans-coming-back period) for quite some time. I’m just not entranced as a newcomer, and I’m now thinking something like Armored Core VI would be more my speed if I’m looking for rocking or possibly socking robots. I also didn’t engage with multiplayer at all, so my standard dismissal of combatant AI would only half-apply there.

By all means, though, tell me and each other how this game looks or plays to you. I was not bio-engineered for MechWarrior (I mean, just look at how many contractions I use), but I can still appreciate that it looks pretty good for those who fit better into the chassis.

MechWarrior 5: Clans is supposed to be newbie-friendly, and I put it to the test Read More »

amazon-exec-tells-employees-to-work-elsewhere-if-they-dislike-rto-policy

Amazon exec tells employees to work elsewhere if they dislike RTO policy

Amazon workers are being reminded that they can find work elsewhere if they’re unhappy with Amazon’s return-to-office (RTO) mandate.

In September, Amazon told staff that they’ll have to RTO five days a week starting in 2025. Amazon employees are currently allowed to work remotely twice a week. A memo from CEO Andy Jassy announcing the policy change said that “it’s easier for our teammates to learn, model, practice, and strengthen our culture” when working at the office.

On Thursday, at what Reuters described as an “all-hands meeting” for Amazon Web Services (AWS), AWS CEO Matt Garman reportedly told workers:

If there are people who just don’t work well in that environment and don’t want to, that’s okay, there are other companies around.

Garman said that he didn’t “mean that in a bad way,” however, adding: “We want to be in an environment where we’re working together. When we want to really, really innovate on interesting products, I have not seen an ability for us to do that when we’re not in-person.”

Interestingly, Garman’s comments about dissatisfaction with the RTO policy coincided with him claiming that 9 out of 10 Amazon employees that he spoke to are in support of the RTO mandate, Reuters reported.

Some suspect RTO mandates are attempts to make workers quit

Amazon has faced resistance to RTO since pandemic restrictions were lifted. Like workers at other companies, some Amazon employees have publicly wondered if strict in-office policies are being enacted as attempts to reduce headcount without layoffs.

In July 2023, Amazon started requiring employees to work in their team’s central hub location (as opposed to remotely or in an office that may be closer to where they reside). Amazon reportedly told workers that if they didn’t comply or find a new job internally, they’d be considered a “voluntary resignation,” per a Slack message that Business Insider reportedly viewed. And many Amazon employees have already reported considering looking for a new job due to the impending RTO requirements.

However, employers like Amazon “can face an array of legal consequences for encouraging workers to quit via their RTO policies,” Helen D. (Heidi) Reavis, managing partner at Reavis Page Jump LLP, an employment, dispute resolution, and media law firm, told Ars Technica:

Amazon exec tells employees to work elsewhere if they dislike RTO policy Read More »

qualcomm-cancels-windows-dev-kit-pc-for-“comprehensively”-failing-to-meet-standards

Qualcomm cancels Windows dev kit PC for “comprehensively” failing to meet standards

It’s been a big year for Windows running on Arm chips, something that Microsoft and Arm chipmakers have been trying to get off the ground for well over a decade. Qualcomm’s Snapdragon X Elite and X Plus are at the heart of dozens of Copilot+ Windows PCs, which promise unique AI features and good battery life without as many of the app and hardware compatibility problems that have plagued Windows-on-Arm in the past.

Part of the initial wave of Copilot+ PCs was a single desktop, an $899 developer kit from Qualcomm itself that would give developers and testers a slightly cheaper way to buy into the Copilot+ ecosystem. Microsoft put out a similar Arm-powered dev kit two years ago.

But Qualcomm has unceremoniously canceled the dev kit and is sending out refunds to those who ordered them. That’s according to a note received by developer and YouTuber Jeff Geerling, who had already received the Snapdragon Dev Kit and given it a middling review a couple of weeks ago.

“The launch of 30+ Snapdragon X-series powered PCs is a testament to our ability to deliver leading technology and the PC industry’s desire to move to our next-generation technology,” reads Qualcomm’s statement. “However, the Developer Kit product comprehensively has not met our usual standards of excellence and so we are reaching out to let you know that unfortunately we have made the decision to pause this product and the support of it, indefinitely.”

Qualcomm’s statement also says that “any material, if received” will not have to be returned—those lucky enough to have gotten one of the Dev Kits up until now may be able to keep it and get their money back, though the PC is no longer officially being supported by Qualcomm.

Qualcomm cancels Windows dev kit PC for “comprehensively” failing to meet standards Read More »

redbox-easily-reverse-engineered-to-reveal-customers’-names,-zip-codes,-rentals

Redbox easily reverse-engineered to reveal customers’ names, zip codes, rentals

Thousands of Redboxes getting dumped

It’s worth noting that the amount of data expected to be stored on Redboxes is small compared to Redbox’s overall business. Since Redbox once rented out millions of DVDs weekly, the data retrieved only represents a small portion of Redbox’s overall business and, likely, of business conducted on that specific kiosk.  That might not be much comfort to those whose data is left vulnerable, though.

The problem is more alarming when considering how many Redboxes are still out in the wild with uncertain futures. High demand for Redbox removals has resulted in all sorts of people, like Turing, gaining access to kiosk hardware and/or data. For example, The Wall Street Journal reported last week about a “former Redbox employee who convinced a 7-Eleven franchisee” to give him a Redbox, a 19-year-old who persuaded a contractor hauling a kiosk away from a drugstore to give it to him instead, as well as a Redbox landing in an Illinois dumpster.

Consumer privacy concerns

Chicken Soup’s actions may violate consumer privacy regulations, including the Video Privacy Protection Act outlawing “wrongful disclosure of video tape rental or sale records.” However, Chicken Soup’s bankruptcy (most of its assets are in a holding pattern, Lowpass reported) makes customer remediation more complicated and less likely.

Mario Trujillo, staff attorney for the Electronic Frontier Foundation, told Ars that this incident “highlights the importance of security research in uncovering flaws that can leave customers unprotected.”

“While it may be hard to hold a bankrupt company accountable, uncovering the flaw is the first step,” he added.

Turing, which reverses engineers a lot of tech, said that the privacy problems she encountered with Redbox storage “isn’t terribly uncommon.”

Overall, the situation underscores the need for stricter controls around consumer data, whether it comes internally from companies or, as some would argue, through government regulation.

“This security flaw is a reminder that all companies should be obligated to minimize the amount of data they collect and retain in the first place,” Trujillo said. “We need strong data privacy laws to do that.”

Redbox easily reverse-engineered to reveal customers’ names, zip codes, rentals Read More »

it’s-increasingly-unlikely-that-humans-will-fly-around-the-moon-next-year

It’s increasingly unlikely that humans will fly around the Moon next year

Don’t book your tickets for the launch of NASA’s Artemis II mission next year just yet.

We have had reason to doubt the official September 2025 launch date for the mission, the first crewed flight into deep space in more than five decades, for a while now. This is principally because NASA is continuing to mull the implications of damage to the Orion spacecraft’s heat shield from the Artemis I mission nearly two years ago.

However, it turns out that there are now other problems with holding to this date as well.

No schedule margin

A new report from the US Government Accountability Office found that NASA’s Exploration Ground Systems program—this is, essentially, the office at Kennedy Space Center in Florida responsible for building ground infrastructure to support the Space Launch System rocket and Orion—is in danger of missing its schedule for Artemis II.

During this flight a crew of four astronauts, commanded by NASA’s Reid Wiseman, will launch inside Orion on a 10-day mission out to the Moon and back. The spacecraft will follow a free-return trajectory, which is important, because if there is a significant problem with Orion spacecraft’s propulsion system, the trajectory of the vehicle will still carry it back to Earth. At their closest approach, the crew will come within about 6,500 miles (10,400 km) of the surface of the far side of the Moon.

The new report, published Thursday, finds that the Exploration Ground Systems program had several months of schedule margin in its work toward a September 2025 launch date at the beginning of the year. But now, the program has allocated all of that margin to technical issues experienced during work on the rocket’s mobile launcher and pad testing.

“Earlier in 2024, the program was reserving that time for technical issues that may arise during testing of the integrated SLS and Orion vehicle or if weather interferes with planned activities, among other things,” the report states. “Officials said it is likely that issues will arise because this is the first time testing many of these systems. Given the lack of margin, if further issues arise during testing or integration, there will likely be delays to the September 2025 Artemis II launch date.”

It’s increasingly unlikely that humans will fly around the Moon next year Read More »

eu-considers-calculating-x-fines-by-including-revenue-from-musk’s-other-firms

EU considers calculating X fines by including revenue from Musk’s other firms

“After Breton resigned in September, he bequeathed his fining powers to competition and digital boss Margrethe Vestager. Decisions on the penalties and how they are calculated would ultimately lie with Vestager,” Bloomberg wrote. The European Commission would have the final say.

“The commission hasn’t yet decided whether to penalize X, and the size of any potential fine is still under discussion,” Bloomberg wrote, citing its anonymous sources. “Penalties may be avoided if X finds ways to satisfy the watchdog’s concerns.”

X says SpaceX revenue should be off-limits

Although X faces potential DSA fines, it will avoid penalties under the EU’s Digital Markets Act (DMA). The European Commission announced yesterday that X does not “qualify as a gatekeeper in relation to its online social networking service, given that the investigation revealed that X is not an important gateway for business users to reach end users.”

But documents related to the DMA probe of X raise the possibility of treating multiple Musk-led companies as a single entity called the “Musk Group” for compliance purposes. In a March 2024 letter to Musk and X Holdings Corp., “the Commission set out its preliminary views on the possible designation of Mr. Elon Musk and the companies that he controls (‘the Musk Group’) as a gatekeeper,” according to a document signed by Breton.

X has argued that it wouldn’t make sense to include Musk’s other companies in revenue calculations when issuing penalties. “X Holdings Corp. submits that the combined market value of the Musk Group does not accurately reflect X’s monetization potential in the Union or its financial capacity,” the document said. “In particular, it argues that X and SpaceX provide entirely different services to entirely different users, so that there is no gateway effect, and that the undertakings controlled by Mr. Elon Musk ‘do not form one financial front, as the DMA presumes.'”

We contacted X and SpaceX today and will update this article if they provide any comment.

EU considers calculating X fines by including revenue from Musk’s other firms Read More »

x’s-depressing-ad-revenue-helps-musk-avoid-eu’s-strictest-antitrust-law

X’s depressing ad revenue helps Musk avoid EU’s strictest antitrust law

Following an investigation, Elon Musk’s X has won its fight to avoid gatekeeper status under the European Union’s strict competition law, the Digital Markets Act (DMA).

On Wednesday, the European Commission (EC) announced that “X does indeed not qualify as a gatekeeper in relation to its online social networking service, given that the investigation revealed that X is not an important gateway for business users to reach end users.”

Since March, X had strongly opposed the gatekeeper designation by arguing that although X connects advertisers to more than 45 million monthly users, it does not have a “significant impact” on the EU’s internal market, a case filing showed.

A gatekeeper “is presumed to have a significant impact on the internal market where it achieves an annual Union turnover equal to or above EUR 7.5 billion in each of the last three financial years,” the case filing said. But X submitted evidence showing that its Union turnover was less than that in 2022, the same year that Musk took over Twitter and began alienating advertisers by posting their ads next to extremists’ tweets.

Throughout Musk’s reign at Twitter/X, the social networking company told the EC, both advertising revenue and users have steadily declined in the EU. In particular, “X Ads has a too small and decreasing scale in terms of share of advertising spend in the Union to constitute an important gateway in the market for online advertising,” X argued, further noting that X had a “lack of platform power” to change that anytime soon.

“In the last 15 months, X Ads has faced a decline in number of advertising business users, as well as a decline in pricing,” X argued.

X’s depressing ad revenue helps Musk avoid EU’s strictest antitrust law Read More »

ftc-“click-to-cancel”-rule-seeks-to-end-free-trial-traps,-sneaky-auto-enrollments

FTC “click to cancel” rule seeks to end free trial traps, sneaky auto-enrollments


No more jumping through endless hoops to cancel subscriptions, FTC rule says.

It will soon be easy to “click to cancel” subscriptions after the US Federal Trade Commission (FTC) adopted a final rule on Wednesday that makes it challenging for businesses to opt out of easy cancellation methods.

“Too often, businesses make people jump through endless hoops just to cancel a subscription,” FTC chair Lina Khan said in a press release. “The FTC’s rule will end these tricks and traps, saving Americans time and money. Nobody should be stuck paying for a service they no longer want.”

The heart of the new rule requires businesses to provide simple ways to cancel subscriptions. Under the rule, any subscription that can be signed up for online must be able to be canceled online. And cancellation paths for in-person sign-ups must be just as easy, offered either by phone or online.

In guidance released Wednesday, the FTC recommended that businesses keep “three guardrails in mind” to ensure cancellation methods comply with the law. First, customers cannot be required to talk to a live agent or chatbot to cancel if that wasn’t required for sign-up. Next, any phone cancellation methods cannot include charges and must be offered during normal business hours. And finally, canceling services in person must always be optional.

To comply with the rule, businesses offering “negative option marketing” such as subscriptions, automatic renewals, and free trial offers—to both consumers and other businesses—are prohibited from misleading customers. They must clearly disclose all terms of the deal prior to accepting payment, including explaining how much and how often customers will be charged, when free trials or promotions end, any deadlines to avoid charges, and, importantly, how to cancel.

“All this information should be clear, conspicuous, and available to your customers before they enroll. And certain key information related to charges and cancellation must appear right when and where the customer agrees to the negative option, every time,” the FTC said.

Under the “click to cancel” rule, businesses must also get consumers’ informed consent before issuing charges and maintain records of consent for a minimum of three years. Those records could be in the form of a ticked checkbox or a signature, the FTC said, noting the agency offers “some flexibility on what that proof looks like.”

“Don’t try to distract people with other information,” the FTC said. “Get proof of consent and maintain it for at least three years.”

That provision is designed to end unfair and deceptive practices that the FTC found, such as inadequate disclosures about free trials or sneaky auto-enrollments. Those “practices have been a persistent source of consumer harm for decades,” the FTC’s notice on the final rule said, “saddling shoppers with recurring payments for products and services they never intended to purchase nor wanted to continue buying.”

The FTC confirmed that some provisions of the final rule will go into effect within 60 days, but most will take effect after 180 days. Violators risk civil penalties and other forms of consumer redress that weren’t previously available under the FTC act, the notice in the federal register said.

Some frustrated individual commenters asked for stiff penalties, the FTC’s notice said.

“There needs to be a substantial penalty when a service is requested to be cancelled, but the charges continue,” one commenter urged the FTC. “I dropped my TV service from Comcast three months ago and they continue to charge me. Every time I need to re-contact them, I waste an hour.”

FTC made few concessions to critics

More than 16,000 comments were submitted during proposed rulemaking, including concerns raised by cable firms who worried that the FTC’s rule might make it so easy to cancel a subscription that customers miss out on benefits, including deals often offered to retain their business.

At that time, Michael Powell, CEO of The Internet & Television Association (NCTA), defended using live agents to process cancellation requests. He warned that “a consumer may easily misunderstand the consequences of canceling,” incurring unexpected costs in situations like “canceling part of a discounted bundle” that “may increase the price for remaining services.”

Powell further argued that the rule could raise costs for customers, alleging that the FTC had significantly underestimated compliance costs that “could easily exceed $100 million for initial implementation by” the cable industry alone.

But the FTC strongly disagreed with some estimates of compliance costs. For example, in the notice in the federal register, the FTC noted that “because NCTA members who enroll consumers online already, clearly, have websites, the Commission rejects the notion that adding ‘click to cancel’ functionality to websites that already include an order path for enrolling, and likely also include functionality for registering a payment mechanism for automated billing, would cost $12–$25 million.”

Ultimately, the FTC disputed the NCTA’s data and rejected the notion that the rule would “require building online cancellation systems virtually from the ground up and expensive ongoing recordkeeping requirements across all services,” pointing any concerned commenters to “the detailed cost-benefit analysis” of the rule provided in the federal register notice.

There were only a few major changes to the final rule following the public commenting period. Notably, the FTC dropped a provision that would have required businesses to send annual reminders about recurring charges, as well as another prohibiting promotions or deals offered during the cancellation process in efforts to retain customers without customers opting in to seeing those offers.

The FTC said that it’s only dropped these provisions for now, noting that the Commission plans to keep the record “open on these issues” and may seek additional comments.

Exemptions available but seem unlikely

Perhaps of greatest interest to businesses, the FTC also added “a provision allowing requests for exemptions.” But those will likely be reserved for businesses already complying with the rule, the FTC said, while explaining that each request for exemptions will be weighed individually.

“Because such decisions are highly fact dependent, the Commission must consider exemptions, even of larger groups, on an individualized basis pursuant to the FTC’s Rules of Practice,” the FTC’s notice said.

Some businesses may qualify for recordkeeping exemptions, the FTC said, but only if “it is technologically feasible to make it impossible for customers to enroll without providing unambiguously affirmative consent.”

“Sellers must either maintain records of each consumer’s unambiguously affirmative consent or demonstrate they satisfy the technological exemption provision,” the FTC’s notice said.

The Commission specifically confirmed that it will not be granting “blanket exemptions to sellers who contract with third parties while offering subscription services.” While some businesses claimed this leaves them on the hook for cancellations they cannot process, the FTC found that “an exemption for all sellers who contract with third parties to manage aspects of their negative option programs would effectively nullify the Rule by incentivizing less than legitimate sellers to contract with actors engaged in deceptive practices to maximize negative option enrollments and frustrate cancellation with impunity.”

“A seller cannot evade its responsibility to deal honestly with consumers by contracting with a third party who does not,” the FTC’s notice said.

Official: FTC rule “may not survive legal challenge”

The final rule narrowly passed by a vote of 3–2, with commissioner Melissa Holyoak providing a dissenting statement accusing the agency of rushing the rule to score political points for the Biden administration ahead of the presidential election.

Vice President Kamala Harris will likely continue Biden’s war on “junk fees” if elected, Reuters reported, and Holyoak claimed that Khan pushed for the rule’s adoption to help follow “through on a campaign pledge made by the Chair’s favored presidential candidate.”

According to Holyoak, the final rule is deeply flawed, “improperly generalizing” unfair and deceptive practices “from narrow industry-specific complaints and evidence to the entire American economy.” She argued that the FTC only based the rule on 35 cases, which is allegedly not enough to establish that harmful practices are “prevalent.”

“Whatever the merits of the past cases, the Majority does not remotely come close to explaining how the evidence in those limited cases are similar to the myriad contexts an economy-wide rule would inevitably apply to,” Holyoak suggested.

She also claimed that “if similarity among complaints and cases only at the highest level of generality constitutes the ‘prevalence’ sufficient to ground an economy-wide rulemaking, then a ‘prevalence’ determination is in fact no meaningful guardrail on the Commission’s conduct at all.”

In the press release, the FTC discussed the wide reach of harms, noting that it “receives thousands of complaints about negative option and recurring subscription practices each year,” with the number “steadily increasing over the past five years.”

But Holyoak insisted that the final rule is such an overreach that it “may not survive legal challenge.”

“The Chair has put political expediency over getting things right,” Holyoak said, raising “the possibility that foreordained outcomes and political goals curtailed considering the rulemaking record with an open mind and without prejudgment, as law requires.”

A key legal flaw, Holyoak claimed, is that the rule prohibits any misrepresentations of a negative option, not just those relating to “deceptive terms.” That means businesses risk civil penalties for any material fact deemed misleading, which she alleged “fails to meet” the level of “specificity” required for FTC rulemaking. That seeming textual oversight “will no doubt invite serious legal challenge on this basis,” Holyoak predicted.

Should any portion of the rule be struck down through a legal challenge, the FTC included a provision on severability, allowing the remainder of the rule to remain in force.

Too soon to guess impact on subscription prices

According to Holyoak, the broad final rule “tilts the playing field in ways that are likely to pervert business incentives,” perhaps leading businesses to stop offering negative option billing models, “even when businesses and consumers could derive significant value from them.”

“Even honest businesses will have reason to reconsider the use of negative option billing now that it means subjecting themselves to potential civil penalties for misreading Commission tea leaves,” Holyoak said.

Further, she alleged that consumers could be harmed if the rule preempts state laws or potentially increases transaction costs for businesses that potentially stop offering cheaper negative option billing. Businesses could also pass on to customers the costs of legal fees incurred in efforts to obtain an exemption, Holyoak suggested.

“Raising the transaction costs will reduce a business’ sales and the utility consumers derive from these services. In other words, in our good intentions, we may harm the consumers and competition we are supposed to protect,” Holyoak warned.

But while Holyoak seems sure that consumers could be harmed by the rule potentially limiting negative option billing and spiking subscription costs, the FTC argued that “consumers cannot realize these benefits when sellers make material misrepresentations to induce consumers to enroll in such programs, fail to provide important information, bill consumers without their consent, or make cancellation difficult or impossible.”

At least one individual customer the FTC notice cited insisted that the rule was necessary to end a wide range of abusive charges draining the wallets of many Americans.

“Implementing this consumer-protection rule has the potential to save American consumers millions of dollars and prevent unscrupulous companies from using byzantine cancellation procedures to squeeze unwarranted funds out of their customers,” the commenter said.

Photo of Ashley Belanger

Ashley is a senior policy reporter for Ars Technica, dedicated to tracking social impacts of emerging policies and new technologies. She is a Chicago-based journalist with 20 years of experience.

FTC “click to cancel” rule seeks to end free trial traps, sneaky auto-enrollments Read More »