Piracy

Apple Pulls iPhone Torrent App From AltStore PAL in Europe (theverge.com) 20

An anonymous reader shares a report: Apple has removed the iPhone torrenting client, iTorrent, from AltStore PAL's alternative iOS marketplace in the EU, showing that it can still exert control over apps that aren't listed on the official App Store. iTorrent developer Daniil Vinogradov told TorrentFreak that Apple has revoked his distribution rights to publish apps in any alternative iOS stores, so the issue isn't tied to AltStore PAL itself.
Security

Silver State Goes Dark as Cyberattack Knocks Nevada Websites Offline (theregister.com) 16

Nevada has been crippled by a cyberattack that began on August 24, taking down state websites, intermittently disabling phone lines, and forcing offices like the DMV to close. The Register reports: The Office of Governor Joseph Lombardo announced the attack via social media on Monday, saying that a "network security incident" took hold in the early hours of August 24. Official state websites remain unavailable, and Lombardo's office warned that phone lines will be intermittently down, although emergency services lines remain operational. State offices are also closed until further notice, including Department of Motor Vehicles (DMV) buildings. The state said any missed appointments will be honored on a walk-in basis.

"The Office of the Governor and Governor's Technology Office (GTO) are working continuously with state, local, tribal, and federal partners to restore services safely," the announcement read. "GTO is using temporary routing and operational workarounds to maintain public access where it is feasible. Additionally, GTO is validating systems before returning them to normal operation and sharing updates as needed." Local media outlets are reporting that, further to the original announcement, state offices will remain closed on Tuesday after officials previously expected them to reopen.
The state's new cybersecurity office says there is currently no evidence to suggest that any Nevadans' personal information was compromised during the attack.
The Courts

4chan and Kiwi Farms Sue the UK Over Its Age Verification Law (404media.co) 88

An anonymous reader quotes a report from 404 Media: 4chan and Kiwi Farms sued the United Kingdom's Office of Communications (Ofcom) over its age verification law in U.S. federal court Wednesday, fulfilling a promise it announced on August 23. In the lawsuit, 4chan and Kiwi Farms claim that threats and fines they have received from Ofcom "constitute foreign judgments that would restrict speech under U.S. law." Both entities say in the lawsuit that they are wholly based in the U.S. and that they do not have any operations in the United Kingdom and are therefore not subject to local laws. Ofcom's attempts to fine and block 4chan and Kiwi Farms, and the lawsuit against Ofcom, highlight the messiness involved with trying to restrict access to specific websites or to force companies to comply with age verification laws.

The lawsuit calls Ofcom an "industry-funded global censorship bureau." "Ofcom's ambitions are to regulate Internet communications for the entire world, regardless of where these websites are based or whether they have any connection to the UK," the lawsuit states. "On its website, Ofcom states that 'over 100,000 online services are likely to be in scope of the Online Safety Act -- from the largest social media platforms to the smallest community forum.'" [...] Ofcom began investigating 4chan over alleged violations of the Online Safety Act in June. On August 13, it announced a provisional decision and stated that 4chan had "contravened its duties" and then began to charge the site a penalty of [roughly $26,000] a day. Kiwi Farms has also been threatened with fines, the lawsuit states.
"American citizens do not surrender our constitutional rights just because Ofcom sends us an e-mail. In the face of these foreign demands, our clients have bravely chosen to assert their constitutional rights," said Preston Byrne, one of the lawyers representing 4chan and Kiwi Farms.

"We are aware of the lawsuit," an Ofcom spokesperson told 404 Media. "Under the Online Safety Act, any service that has links with the UK now has duties to protect UK users, no matter where in the world it is based. The Act does not, however, require them to protect users based anywhere else in the world."
The Courts

Cupertino Must Stop Calling Apple Watches 'Carbon Neutral,' German Court Rules (theregister.com) 58

An anonymous reader quotes a report from The Register: A German court has told Apple to stop advertising its Watches as being carbon-neutral, ruling that this was misleading and could not fly under the country's competition law. Apple has been marketing its newest smartwatches as being carbon-neutral for nearly two years now, with an array of rationales. It claims that clean energy for manufacturing, along with greener materials and shipping, lop around three-quarters off the carbon emissions for each model of the Apple Watch. The remaining emissions are offset by the purchase of carbon credits, according to Apple.

Deutsche Umwelthilfe (well, DUH – that's the acronym), a prominent environmental group, begged to differ on that last point. It applied for an injunction in May and Tuesday's ruling (in German), which will only be published in full later this week, led it to claim victory. The ruling means Apple can't advertise the Watch as a "CO2-neutral product" in Germany. [...] The ruling revolved around the Paraguayan forestry program that Apple claimed was offsetting some of the Watch's production emissions. The project involves commercial eucalyptus plantations on leased land, where the leases for three-quarters of the land will run out in 2029 with no guarantee of renewal.

According to the court, consumers' expectations of carbon compensation schemes are shaped by the prominent 2015 Paris Agreement, which commits countries to achieving carbon neutrality by the second half of this century. It said consumers would therefore "assume" that the carbon-neutrality claims around the Apple Watch would mean neutrality was assured through 2050. That leaves a 21-year gap of uncertainty in this case. The Verified Carbon Standard program, in which Apple is participating, has a "pooled buffer account" scheme to hedge against this sort of uncertainty. However, the German court was not impressed, saying it would only allow Apple to monitor the situation after the leases run out, which is a far cry from definitely being able to keep offsetting those emissions if the plantation gets cleared.

The Courts

Parents Sue OpenAI Over ChatGPT's Role In Son's Suicide (techcrunch.com) 111

An anonymous reader quotes a report from TechCrunch: Before 16-year-old Adam Raine died by suicide, he had spent months consulting ChatGPT about his plans to end his life. Now, his parents are filing the first known wrongful death lawsuit against OpenAI, The New York Times reports. Many consumer-facing AI chatbots are programmed to activate safety features if a user expresses intent to harm themselves or others. But research has shown that these safeguards are far from foolproof.

In Raine's case, while using a paid version of ChatGPT-4o, the AI often encouraged him to seek professional help or contact a help line. However, he was able to bypass these guardrails by telling ChatGPT that he was asking about methods of suicide for a fictional story he was writing. OpenAI has addressed these shortcomings on its blog. "As the world adapts to this new technology, we feel a deep responsibility to help those who need it most," the post reads. "We are continuously improving how our models respond in sensitive interactions." Still, the company acknowledged the limitations of the existing safety training for large models. "Our safeguards work more reliably in common, short exchanges," the post continues. "We have learned over time that these safeguards can sometimes be less reliable in long interactions: as the back-and-forth grows, parts of the model's safety training may degrade."

Piracy

Anthropic Settles Major AI Copyright Suit Brought by Authors (bloomberglaw.com) 24

Anthropic reached a settlement with authors in a high-stakes copyright class action that threatened the AI company with potentially billions of dollars in damages. From a report: In a Tuesday filing in the US Court of Appeals for the Ninth Circuit, both sides asked the court to pause all proceedings while they finalize the deal. The parties signed a binding term sheet on Aug. 25 outlining the core terms of a proposed class settlement to resolve litigation brought by authors.

"This historic settlement will benefit all class members," said the authors' counsel, Justin Nelson of Susman Godfrey LLP. "We look forward to announcing details of the settlement in the coming weeks." The case is one of several copyright actions brought against AI developers in courts around the country. Judge William Alsup of the US District Court for the Northern District of California had allowed the class action to proceed for authors whose books were contained in two pirate databases Anthropic downloaded.

Privacy

Michigan Supreme Court Rules Unrestricted Phone Searches Violate Fourth Amendment (reclaimthenet.org) 27

The Michigan Supreme Court has drawn a firm line around digital privacy, ruling that police cannot use overly broad warrants to comb through every corner of a person's phone. From a report: In People v. Carson, the court found [PDF] that warrants for digital devices must include specific limitations, allowing access only to information directly tied to the suspected crime. Michael Carson became the focus of a theft investigation involving money allegedly taken from a neighbor's safe. Authorities secured a warrant to search his phone, but the document placed no boundaries on what could be examined.

It permitted access to all data on the device, including messages, photos, contacts, and documents, without any restriction based on time period or relevance. Investigators collected over a thousand pages of information, much of it unrelated to the accusation. The court ruled that this kind of expansive warrant violates the Fourth Amendment, which requires particularity in describing what police may search and seize.

Movies

Class Action Lawsuit Targets Movie Ownership (hollywoodreporter.com) 107

Amazon is facing a proposed class action lawsuit alleging it misleads customers by advertising digital movies and TV shows as "purchases," when in reality buyers only receive revocable licenses that can disappear if Amazon loses distribution rights. From the Hollywood Reporter: On Friday, a proposed class action was filed in Washington federal court against Amazon over a "bait and switch" in which the company allegedly misleads consumers into believing they've purchased content when they're only getting a license to watch, which can be revoked at any time. [...] The lawsuit accuses Amazon, which didn't respond to a request for comment, of misrepresenting the nature of movie and TV transactions during the purchase process. On its website and platform, the company tells consumers they can "buy" a movie. But hidden in a footnote on the confirmation page is fine print that says, "You receive a license to the video and you agree to our terms," the complaint says.

The issue is already before a court. In a 2020 lawsuit alleging unfair competition and false advertising over the practice, Amazon maintained that its use of the word "buy" for digital content isn't deceptive because consumers understand their purchases are subject to licenses. Quoting Webster's Dictionary, it said that the term means "rights to the use or services of payment" rather than perpetual ownership and that its disclosures properly warn people that they may lose access. The court ultimately rebuffed Amazon's bid to dismiss the lawsuit outside of a claim alleging a violation of Washington's unjust enrichment law.

Security

Farmers Insurance Data Breach Impacts 1.1 Million People After Salesforce Attack 10

Farmers Insurance disclosed a breach affecting 1.1 million customers after attackers exploited Salesforce in a widespread campaign involving ShinyHunters and allied groups. According to BleepingComputer, the hackers stole personal data such as names, birth dates, driver's license numbers, and partial Social Security numbers. From the report: The company disclosed the data breach in an advisory on its website, saying that its database at a third-party vendor was breached on May 29, 2025. "On May 30, 2025, one of Farmers' third-party vendors alerted Farmers to suspicious activity involving an unauthorized actor accessing one of the vendor's databases containing Farmers customer information (the "Incident")," reads the data breach notification (PDF) on its website. "The third-party vendor had monitoring tools in place, which allowed the vendor to quickly detect the activity and take appropriate containment measures, including blocking the unauthorized actor. After learning of the activity, Farmers immediately launched a comprehensive investigation to determine the nature and scope of the Incident and notified appropriate law enforcement authorities."

The company says that its investigation determined that customers' names, addresses, dates of birth, driver's license numbers, and/or last four digits of Social Security numbers were stolen during the breach. Farmers began sending data breach notifications to impacted individuals on August 22, with a sample notification [1, 2] shared with the Maine Attorney General's Office, stating that a combined total of 1,111,386 customers were impacted. While Farmers did not disclose the name of the third-party vendor, BleepingComputer has learned that the data was stolen in the widespread Salesforce data theft attacks that have impacted numerous organizations this year.
Further reading: Google Suffers Data Breach in Ongoing Salesforce Data Theft Attacks
The Courts

Apple Accuses Former Apple Watch Staffer of Conspiring to Steal Trade Secrets for Oppo (theverge.com) 22

Apple has filed a lawsuit against former Apple Watch staffer Dr. Chen Shi, alleging that he "conspired to steal Apple's trade secrets relating to Apple Watch and to disclose them to his new employers (Oppo)." The company alleges he downloaded 63 sensitive documents, attended technical meetings, and coordinated with Oppo to transfer proprietary information, though Oppo denies wrongdoing. The Verge reports: Ahead of starting his new job at Oppo, the employee, Dr. Chen Shi, attended "dozens" of meetings with technical members on the Apple Watch team to learn about their work and downloaded 63 documents "from a protected Box folder" that he loaded onto a USB drive, according to the lawsuit. Shi allegedly sent a message to Oppo saying that he was working to "collect as much information as possible" before starting his job. And he searched the internet for terms like "how to wipe out macbook" and "Can somebody see if I've opened a file on a shared drive?" from his Apple-issued MacBook before leaving the company.

Shi was formerly a sensor system architect at Apple, and the company says he had "a front row seat to Apple's development of its cutting-edge health sensor technology, including highly confidential roadmaps, design and development documents, and specifications for ECG sensor technology." He now heads up a team working on sensing technology at Oppo -- which Apple says it learned because of "messages he left on his Apple-issued work iPhone." In his resignation letter to Apple, Shi said he was leaving "due to personal and family reasons." Via that iPhone, Apple also says it found messages from Oppo demonstrating that it "encouraged, approved, and agreed to Dr. Shi's plan to collect Apple's proprietary information before leaving Apple."

Social Networks

Bluesky Blocks Mississippi Over Age Verification Law (techcrunch.com) 71

People in Mississippi no longer have access to Bluesky. "If you access Bluesky from a Mississippi IP address, you'll see a message explaining why the app isn't available," announced a Bluesky blog post Friday.

The reason is a new Mississippi law that "requires all users to verify their ages before using common social media sites ranging from Facebook to Nextdoor," noted NPR. Bluesky wrote that their block "will remain in place while the courts decide whether the law will stand." [U]nder the law, we would need to verify every user's age and obtain parental consent for anyone under 18. The potential penalties for non-compliance are substantial — up to $10,000 per user. Building the required verification systems, parental consent workflows, and compliance infrastructure would require significant resources that our small team is currently unable to spare.
Bluesky also notes that the law "requires collecting and storing sensitive personal information from all users...not just those accessing age-restricted content" — and that this information would include "detailed tracking of minors."

TechCrunch notes that even blocking Mississippi has created some problems: Some Bluesky users outside Mississippi subsequently reported issues accessing the service due to their cell providers routing traffic through servers in the state, with CTO Paul Frazee responding Saturday that the company was "working deploy an update to our location detection that we hope will solve some inaccuracies." The company's blog post notes that its decision only applies to the Bluesky app built on the AT Protocol. Other apps may approach the decision differently.
Interestingly, the law had been immediately challenged by NetChoice (a trade association of major tech companies). But while a District Court agreed, blocking the law from going into effect (until court challenges finished), an Appeals Court then lifted that block. A final appeal to America's Supreme Court was unsuccessful — although the ruling by Justice Kavanaugh suggests the law could be overturned later: "To be clear, NetChoice has, in my view, demonstrated that it is likely to succeed on the merits — namely, that enforcement of the Mississippi law would likely violate its members' First Amendment rights under this Court's precedents... [U]nder this Court's case law as it currently stands, the Mississippi law is likely unconstitutional. Nonetheless, because NetChoice has not sufficiently demonstrated that the balance of harms and equities favors it at this time, I concur in the Court's denial of the application for interim relief."
Intel

Intel's New Funding Came From Already-Awarded Grants. So What Happens Next? (techcrunch.com) 92

The U.S. government's 10% stake in Intel "is a mistake," writes the Washington Post's editorial board, calling Intel "an aging also-ran in critical markets" that "has spent recent years stumbling on execution and missing one strategic opportunity after another."

But TechCrunch points out that the U.S. government "does not appear to be committing new funds. Instead, it's simply making good on what Intel described as 'grants previously awarded, but not yet paid, to Intel.'" Specifically, the $8.9 billion is supposed to come from $5.7 billion awarded-but-not-paid to Intel under the Biden administration's CHIPS Act, as well as $3.2 billion also awarded by the Biden administration through the Secure Enclave program. In a post on his social network Truth Social, Trump wrote, "The United States paid nothing for these shares..." Trump has been critical of the CHIPS Act, calling it a "horrible, horrible thing" and calling on House Speaker Mike Johnson to "get rid" of it...

According to The New York Times, some bankers and lawyers believe the CHIPS Act may not allow the government to convert its grants to equity, opening this deal to potential legal challenges.

Reuters writes that the money "will not be enough for its contract-chipmaking business to flourish, analysts said. Intel still needs external customers for its cutting-edge 14A manufacturing process to go to production, says Summit Insights analyst Kinngai Chan, "to make its foundry arm economically viable." "We don't think any government investment will change the fate of its foundry arm if they cannot secure enough customers..."

Reuters has reported that Intel's current 18A process — less advanced than 14A — is facing problems with yield, the measure of how many chips printed are good enough to make available to customers. Large chip factories including TSMC swallow the cost of poor yields during the first iterations of the process when working with customers like Apple. For Intel, which reported net losses for six straight quarters, that's hard to do and still turn a profit. "If the yield is bad then new customers won't use Intel Foundry, so it really won't fix the technical aspect of the company," said Ryuta Makino, analyst at Gabelli Funds, which holds Intel stock.

Makino, who believes that Intel can ultimately produce chips at optimal yields, views the deal as a net negative for Intel compared with just receiving the funding under the CHIPS Act as originally promised under the Biden Administration. "This isn't free money," he said. The federal government will not take a seat on Intel's board and has agreed to vote with the company's board on matters that need shareholder approval, Intel said. But this voting agreement comes with "limited exceptions" and the government is getting Intel's shares at a 17.5% discount to their closing price on Friday. The stake will make the U.S. government Intel's biggest shareholder, though neither Trump nor Intel disclosed when the transaction would happen...

Some analysts say Intel could benefit from the government's support, including in building out factories. Intel has said it is investing more than $100 billion to expand its U.S. factories and expects to begin high-volume chip production later this year at its Arizona plant. "To have access to capital and a new partial owner that wants to see you succeed are both important," said Peter Tuz, president of Chase Investment Counsel.

Security

Amid Service Disruption, Colt Confirms 'Criminal Group' Accessed Their Data, As Ransomware Gang Threatens to Sell It (bleepingcomputer.com) 7

British telecommunications service provider Colt Telecom "has offices in over 30 countries across North America, Europe, and Asia, reports CPO magazine. "It manages nearly 1,000 data centers and roughly 75,000 km of fiber infrastructure."

But now "a cyber attack has caused widespread multi-day service disruption..." On August 14, 2025, the telecom giant said it had detected a cyber attack that began two days earlier, on August 12. Upon learning of the cyber intrusion, the telecommunications service provider responded by proactively taking some systems offline to contain the cyber attack. Although Colt Telecom's cyber incident response team was working around the clock to mitigate the impacts of the cyber attack, service disruption has persisted for days. However, the service disruption did not affect the company's core network infrastructure, suggesting that Colt customers could still access its network services... The company also did not provide a clear timeline for resolving the service disruption. A week after the apparent ransomware attack, Colt Online and the Voice API platform remained unavailable.
And now Colt Technology Services "confirms that customer documentation was stolen," reports the tech news site BleepingComputer: "A criminal group has accessed certain files from our systems that may contain information related to our customers and posted the document titles on the dark web," reads an updated security incident advisory on Colt's site.

"We understand that this is concerning for you."

"Customers are able to request a list of filenames posted on the dark web from the dedicated call centre."

As first spotted by cybersecurity expert Kevin Beaumont, Colt added the no-index HTML meta tag to the web page, making it so it won't be indexed by search engines.

This statement comes after the Warlock Group began selling on the Ramp cybercrime forum what they claim is 1 million documents stolen from Colt. The documents are being sold for $200,000 and allegedly contain financial information, network architecture data, and customer information... The Warlock Group (aka Storm-2603) is a ransomware gang attributed to Chinese threat actors who utilize the leaked LockBit Windows and Babuk VMware ESXi encryptors in attacks... Last month, Microsoft reported that the threat actors were exploiting a SharePoint vulnerability to breach corporate networks and deploy ransomware.

"Colt is not the only telecom firm that has been named by WarLock on its leak website in recent days," SecurityWeek points out. "The cybercriminals claim to have also stolen data from France-based Orange."

Thanks to long-time Slashdot reader Z00L00K for sharing the news.
Crime

Dev Gets 4 Years For Creating Kill Switch On Ex-Employer's Systems (bleepingcomputer.com) 113

Davis Lu, a former Eaton Corporation developer, has been sentenced to four years in prison for sabotaging his ex-employer's Windows network with malware and a custom kill switch that locked out thousands of employees once his account was disabled. The attack caused significant operational disruption and financial losses, with Lu also attempting to cover his tracks by deleting data and researching privilege escalation techniques. BleepingComputer reports: After a corporate restructuring and subsequent demotion in 2018, the DOJ says that Lu retaliated by embedding malicious code throughout the company's Windows production environment. The malicious code included an infinite Java thread loop designed to overwhelm servers and crash production systems. Lu also created a kill switch named "IsDLEnabledinAD" ("Is Davis Lu enabled in Active Directory") that would automatically lock all users out of their accounts if his account was disabled in Active Directory. When his employment was terminated on September 9, 2019, and his account disabled, the kill switch activated, causing thousands of users to be locked out of their systems.

"The defendant breached his employer's trust by using his access and technical knowledge to sabotage company networks, wreaking havoc and causing hundreds of thousands of dollars in losses for a U.S. company," said Acting Assistant Attorney General Matthew R. Galeotti. When he was instructed to return his laptop, Lu reportedly deleted encrypted data from his device. Investigators later discovered search queries on the device researching how to elevate privileges, hide processes, and quickly delete files. Lu was found guilty earlier this year of intentionally causing damage to protected computers. After his four-year sentence, Lu will also serve three years of supervised release following his prison term.

Software

Russia Orders State-Backed WhatsApp Rival Pre-Installed On Phones and Tablets (reuters.com) 29

Starting September 1st, Russia will require all smartphones and tablets sold in the country to come with MAX, a state-backed messaging app seen as a rival to WhatsApp and Telegram. Critics say the app could be used to track users. Reuters reports: The Russian government said in a statement that MAX, which will be integrated with government services, would be on a list of mandatory pre-installed apps on all "gadgets," including mobile phones and tablets, sold in Russia from September 1. State media says accusations from Kremlin critics that MAX is a spying app are false and that it has fewer permissions to access user data than rivals WhatsApp and Telegram. It will also be mandatory that from September 1, Russia's domestic app store, RuStore, which is pre-installed on all Android devices, will be pre-installed on Apple devices.

A Russian-language TV app called LIME HD TV, which allows people to watch state TV channels for free, will be pre-installed on all smart TVs sold in Russia from January 1, the government added. [...] MAX said this week that 18 million users had downloaded its app, parts of which are still in a testing phase. Russia's interior ministry said on Wednesday that MAX was safer than foreign rivals, but that it had arrested a suspect in the first fraud case using the new messenger.

Slashdot Top Deals