Source: NYT > U.S.
In the United States, people are hoarding toilet paper and clogging sewer systems with wipes of all kinds. A little water could solve their problems.
Source: NYT > U.S.
In the United States, people are hoarding toilet paper and clogging sewer systems with wipes of all kinds. A little water could solve their problems.
Source: OSNews
Honda has done what no other car maker is doing, and returned to analogue controls for some functions on the new Honda Jazz.
While most manufacturers are moving to touchscreen controls, identifying smartphone use as their inspiration – most recently seen in Audi’s latest A3 – Honda has decided to reintroduce heating and air conditioning controls via a dial rather than touchscreen, as in the previous-generation Jazz.
Unlike what the introduction states, Honda joins fellow Japanese car maker Mazda in not just blindly using touchscreens for everything inside cars. This is a good move, and definitely takes some guts, since I’ve seen countless car reviewers – including my standout favourite, Doug DeMuro – kind of blindly assuming that any car without 100% touchscreen control is outdated, without questioning the safety consequences.
Good on Honda.
Source: Ars Technica
For almost three years, OpenWRT—the open source operating system that powers home routers and other types of embedded systems—has been vulnerable to remote code-execution attacks because updates were delivered over an unencrypted channel and digital signature verifications are easy to bypass, a researcher said.
OpenWRT has a loyal base of users who use the freely available package as an alternative to the firmware that comes installed on their devices. Besides routers, OpenWRT runs on smartphones, pocket computers and even laptops and desktop PCs. Users generally find OpenWRT to be a more secure choice because it offers advanced functions and its source code is easy to audit.
Security researcher Guido Vranken, however, recently found that updates and installation files were delivered over unencrypted HTTPs connections, which are open to attacks that allow adversaries to completely replace legitimate updates with malicious ones. The researcher also found that it was trivial for attackers with moderate experience to bypass digital-signature checks that verify a downloaded update as the legitimate one offered by OpenWTR maintainers. The combination of those two lapses makes it possible to send a malicious update that vulnerable devices will automatically install.
Source: Ars Technica

Enlarge / Zoom's San Jose, Calif., headquarters looks like a lovely place to be socially distanced from. (credit: Smith Collection | Gado | Getty Images)
We have several more weeks, if not several more months, to go in this sudden era of Everything from Home. Work from home, school from home, funerals from home, church from home, happy hour from home—you name it, and we as a society are trying as best as we can to pull it off remotely. Tech use as a result is up all over, but arguably the biggest winner to date of the "Oh, crap, where's my webcam" age is videoconferencing platform Zoom.
Zoom's ease of use, feature base, and free service tier have made it a go-to resource not only for all those office meetings that used to happen in conference rooms but also for teachers, religious services, and even governments. The widespread use, in turn, is shining a bright spotlight on Zoom's privacy and data-collection practices, which apparently leave much to be desired.
The challenge is particularly pronounced in the health care and education sectors: Zoom does offer specific enterprise-level packages—Zoom for Education and Zoom for Healthcare—that have compliance with privacy law (FERPA and HIPAA, respectively) baked in. Many users in those fields, however, may be on the free tier or using individual or other types of enterprise licenses that don't take these particular needs into consideration.
Source: Ars Technica

Enlarge / A virtual classroom setup. (credit: Chris Lee)
"Remote teaching sucks. It's yucky, and it is not the future of education."
Thus spake my wife, a high school English teacher with many years of experience. And she's right. I teach at a university, and we have also moved to virtual lessons in the face of COVID-19. Even before the current crisis, I already made extensive use of digital tools in the classroom. However, virtual lessons are a poor substitute for actual in-person instruction. Let me take you on a tour of a future that we all should be trying to avoid. (It isn't all doom and gloom, though; we've discovered some hidden treasures as well.)
The problem is that teaching is an intimate activity: students give up a certain degree of control to the teacher and trust that person to help them master some new topic. It doesn't matter how big the class, that intimacy is unchanged for the teacher. Teaching is personal. Yes, from the student's perspective, a one-on-one lesson is more personal than a lecture delivered to 500 students. But the anonymity and safety in large classes does not mean that teachers are not seeing and modifying their approach via instantaneous feedback from their classes.
Source: Kentucky.com -- State
Kentuckians would be able to get alcoholic beverages shipped to their front door under a bill the Senate approved Thursday and sent to Gov. Andy Beshear for his consideration. “Let … Click to Continue »
Source: Hacker News
Source: Hacker News
Source: Ars Technica

Enlarge / Proprietary filesystem vendor Paragon Software seems to feel threatened by the pending inclusion of a Microsoft-sanctioned exFAT in the Linux 5.7 kernel. (credit: MTV / Geffen / Paramount Pictures)
When software and operating system giant Microsoft announced its support for inclusion of the exFAT filesystem directly into the Linux kernel back in August, it didn't get a ton of press coverage. But filesystem vendor Paragon Software clearly noticed this month's merge of the Microsoft-approved, largely Samsung-authored version of exFAT into the VFS for-next repository, which will in turn merge into Linux 5.7—and Paragon doesn't seem happy about it.
Yesterday, Paragon issued a press release about European gateway-modem vendor Sagemcom adopting its version of exFAT into an upcoming series of Linux-based routers. Unfortunately, it chose to preface the announcement with a stream of FUD (Fear, Uncertainty, and Doubt) that wouldn't have looked out of place on Steve Ballmer's letterhead in the 1990s.
Paragon described its arguments against open source software—which appeared directly in my inbox—as an "article (available for publication in any form) explaining why the open source model didn't work in 3 cases."
Source: The Week: Most Recent Home Page Posts

They always do it. Whenever these leeching, sneaking, pompous, presumptuous, supercilious, weaselly would-be despots we call our government spy a chance to grasp some power that is rightly out of any and every person's reach, they lunge for it.
The chance, this time, is the legitimately unprecedented situation occasioned by the pandemic spread of the novel coronavirus. And the power is the functional abrogation of half our Bill of Rights — Amendments Four through Eight — in the form of indefinite detention without trial during emergencies.
This is utterly unjustified by the COVID-19 outbreak. It is not a misguided good-faith effort to protect public health. It is a transparent charge toward authoritarianism, and it must be crushed.
The Trump administration's plan came to light Saturday afternoon with Politico's report on a Justice Department request to Congress. In the documents, the administration reportedly asks lawmakers to give the attorney general authority to direct chief judges of district courts to suspend court proceedings "whenever the district court is fully or partially closed by virtue of any natural disaster, civil disobedience, or other emergency situation." The suspension would override "any statutes or rules of procedure otherwise affecting pre-arrest, post-arrest, pre-trial, trial, and post-trial procedures in criminal and juvenile proceedings and all civil process and proceedings." It would lift the statute of limitations on criminal and civil proceedings throughout the emergency and for one year after it concluded.
This proposes an expansive grant of power to gut some of our most basic rights. It would effectively nullify habeas corpus, our guarantee of a court hearing in which the state must justify our detention or be compelled to release us. This ancient right, secured in our Sixth Amendment and the Magna Carta before it, is foundational to our justice system. Locking people away without due process is the province of tyrants.
The specification of "civil disobedience" as a reason to shut down our courts is as insulting as it is galling. They didn't even bother to say "violent rioting and looting" or "armed rebellion." No, civil disobedience — by definition, a peaceful protest — is here deemed cause enough to demolish due process rights on the president's whim.
Also deeply worrisome is the inclusion of "pre-arrest" procedures among laws that can be suspended. That could mean no Miranda warning, no lawyer, no phone call, just straight to jail for who knows how long. "I find it absolutely terrifying," Norman L. Reimer, executive director of the National Association of Criminal Defense Lawyers, told Politico. "Especially in a time of emergency, we should be very careful about granting new powers to the government."
That is particularly so because times of emergency — in the legal sense — are oft-immortal creatures of the government's own making. Pursuant to the National Emergencies Act of 1976, the president can declare a national emergency whenever he likes and thereby activate a host of new powers for himself. Predictably, presidents do this fairly often, motivated more by a desire to bypass Congress than by whether the circumstances at hand fit any reasonable definition of a national emergency. (Recall President Trump's national emergency declaration after Congress refused to fund his border wall folly.) Thus there are dozens of ongoing national emergencies declared by Trump and his predecessors for situations including trade with Sudan, Albanian insurgents in Macedonia, and alleged election fraud in Belarus in 2006.
The COVID-19 outbreak is clearly far more of a national emergency for the United States, in the ordinary sense of the words, than 14-year-old Belarusian election irregularities. But they share the same legal classification, a classification the president can apply at will. If permitted, the seizure of authority proposed in these Justice Department papers will be abused in concert with all manner of national emergency declarations.
And it will not be undone. The novel coronavirus eventually will be contained, but the state's iron grasp of this power, once allowed, will not loosen. "History demonstrates again and again that governments use a crisis to expand power and violate vital constitutional principles," Scott Bullock, president of the Institute for Justice, told Reason of the DOJ proposal. "And when the supposed emergency is over, the expanded powers often become permanent."
The recent history of indefinite detention itself illustrates this well. Civil libertarians warned that its use by the George W. Bush administration in the war on terror was a dangerous encroachment on constitutional rights, but our alarm was brushed aside with insistence that only terrorists had any reason to worry. Then the Obama administration expanded the practice. Now the Trump administration seeks to expand it further, jettisoning the terrorism justification entirely. It's predictable — and despicable.
Democrats' majority in the House of Representatives, bolstered by enough GOP senators to tip the balance against the DOJ request in the upper chamber, will almost certainly keep the Trump administration from getting what it wants here. That's reassuring, but we cannot let it lull us into false security.
The last three administrations have all inched in this direction. Washington is licking its chops over our due process rights. In this and every crisis, it must be firmly muzzled.
Want more essential commentary and analysis like this delivered straight to your inbox? Sign up for The Week's "Today's best articles" newsletter here.