Enlarge (credit: Benj Edwards | Getty Images )

On Friday, the US Department of Homeland Security announced the formation of an Artificial Intelligence Safety and Security Board that consists of 22 members pulled from the tech industry, government, academia, and civil rights organizations. But given the nebulous nature of the term "AI," which can apply to a broad spectrum of computer technology, it's unclear if this group will even be able to agree on what exactly they are safeguarding us from.

President Biden directed DHS Secretary Alejandro Mayorkas to establish the board, which will meet for the first time in early May and subsequently on a quarterly basis.

The fundamental assumption posed by the board's existence, and reflected in Biden's AI executive order from October , is that AI is an inherently risky technology and that American citizens and businesses need to be protected from its misuse. Along those lines, the goal of the group is to help guard against foreign adversaries using AI to disrupt US infrastructure; develop recommendations to ensure the safe adoption of AI tech into transportation, energy, and Internet services; foster cross-sector collaboration between government and businesses; and create a forum where AI leaders to share information on AI security risks with the DHS.

Enlarge (credit: Getty Images | SOPA Images )

The Federal Communications Commission today said it fined T-Mobile, AT&T, and Verizon $196 million "for illegally sharing access to customers' location information without consent and without taking reasonable measures to protect that information against unauthorized disclosure."

The fines relate to sharing of real-time location data that was revealed in 2018 . The FCC proposed the fines in 2020, when the commission had a Republican majority, and finalized them today.

All three major carriers vowed to appeal the fines after they were announced today. The three carriers also said they discontinued the data-sharing programs that the fines relate to.

Enlarge / A group of Black Friday online shopping purchases photographed in delivery boxes filled with polystyrene packing pellets, taken on September 13, 2019. (Photo by Neil Godwin/Future Publishing via Getty Images) (credit: Getty Images)

If you build a gadget that connects to the Internet and sell it in the United Kingdom, you can no longer make the default password "password." In fact, you're not supposed to have default passwords at all.

A new version of the 2022 Product Security and Telecommunications Infrastructure Act (PTSI) is now in effect, covering just about everything that a consumer can buy that connects to the web. Under the guidelines , even the tiniest Wi-Fi board must either have a randomized password or else generate a password upon initialization (through a smartphone app or other means). This password can't be incremental ("password1," "password54"), and it can't be "related in an obvious way to public information," such as MAC addresses or Wi-Fi network names. A device should be sufficiently strong against brute-force access attacks, including credential stuffing , and should have a "simple mechanism" for changing the password.

There's more, and it's just as head-noddingly obvious. Software components, where reasonable, "should be securely updateable," should actually check for updates, and should update either automatically or in a way  "simple for the user to apply." Perhaps most importantly, device owners can report security issues and expect to hear back about how that report is being handled.

Enlarge / Elon Musk speaks at the Satellite Conference and Exhibition on March 9, 2020 in Washington, DC. (credit: Getty Images | Win McNamee )

The US Supreme Court today rejected Elon Musk's attempt to terminate his settlement with the Securities and Exchange Commission.

Musk appealed to the Supreme Court in December 2023, claiming the settlement he agreed to in 2018 forced him to "waive his First Amendment rights to speak on matters ranging far beyond the charged violations." The SEC settlement requires Musk to get pre-approval from a Tesla securities lawyer for tweets or other social media posts that may contain information material to the company or its shareholders.

The Supreme Court decided not to hear the case, leaving an appeals court ruling against Musk intact. The top court denied Musk's petition without comment Monday morning in a list of orders .

Enlarge (credit: FT)

Brussels is set to open a probe into Meta’s Facebook and Instagram as soon as Monday over concerns the social media giant is failing to do enough to counter disinformation from Russia and other countries.

Regulators suspect that Meta’s moderation does not go far enough to stop the widespread dissemination of political advertising that risks undermining the electoral process, the European Commission is expected to say on Monday, two people with knowledge of the matter said.

EU officials are particularly worried about the way Meta’s platforms are handling Russia’s efforts to undermine upcoming European elections. The commission, however, is not expected to single out Russia in its statement and will only make reference to the manipulation of information by foreign actors.

Enlarge (credit: Getty Images | Creativeye99)

A federal appeals court today reversed a ruling that prevented New York from enforcing a law requiring Internet service providers to sell $15 broadband plans to low-income consumers. The ruling is a loss for six trade groups that represent ISPs, although it isn't clear right now whether the law will be enforced.

New York's Affordable Broadband Act (ABA) was blocked in June 2021 by a US District Court judge who ruled that the state law is rate regulation and preempted by federal law. Today, the US Court of Appeals for the 2nd Circuit reversed the ruling and vacated the permanent injunction that barred enforcement of the state law.

For consumers who qualify for means-tested government benefits, the state law requires ISPs to offer "broadband at no more than $15 per month for service of 25Mbps, or $20 per month for high-speed service of 200Mbps," the ruling noted. The law allows for price increases every few years and makes exemptions available to ISPs with fewer than 20,000 customers.

Enlarge (credit: Discord)

Spy Pet, a service that sold access to a rich database of allegedly more than 3 billion Discord messages and details on more than 600 million users, has seemingly been shut down.

404 Media, which broke the story of Spy Pet's offerings, reports that Spy Pet seems mostly shut down . Spy Pet's website was unavailable as of this writing. A Discord spokesperson told Ars that the company's safety team had been "diligently investigating" Spy Pet and that it had banned accounts affiliated with it.

"Scraping our services and self-botting are violations of our Terms of Service and Community Guidelines," the spokesperson wrote. "In addition to banning the affiliated accounts, we are considering appropriate legal action." The spokesperson noted that Discord server administrators can adjust server permissions to prevent future such monitoring on otherwise public servers.

Enlarge (credit: Getty Images | NurPhoto)

TikTok owner ByteDance is preparing to sue the US government now that President Biden has signed into law a bill that will ban TikTok in the US if its Chinese owner doesn't sell the company within 270 days. While it's impossible to predict the outcome with certainty, law professors speaking to Ars believe that ByteDance will have a strong First Amendment case in its lawsuit against the US.

One reason for this belief is that just a few months ago, a US District Court judge blocked a Montana state law that attempted to ban TikTok. In October 2020, another federal judge in Pennsylvania blocked a Trump administration order that would have banned TikTok from operating inside the US. TikTok also won a preliminary injunction against Trump in US District Court for the District of Columbia in September 2020.

"Courts have said that a TikTok ban is a First Amendment problem," Santa Clara University law professor Eric Goldman, who writes frequent analysis of legal cases involving technology, told Ars this week. "And Congress didn't really try to navigate away from that. They just went ahead and disregarded the court rulings to date."

Enlarge / Federal Communication Commission Chairwoman Jessica Rosenworcel, then a commissioner, rallies against repeal of net neutrality rules in December 2017. (credit: Getty Images | Chip Somodevilla)

The Federal Communications Commission voted 3–2 to impose net neutrality rules today, restoring the common-carrier regulatory framework enforced during the Obama era and then abandoned while Trump was president.

The rules prohibit Internet service providers from blocking and throttling lawful content and ban paid prioritization. Cable and telecom companies plan to fight the rules in court, but they lost a similar battle during the Obama era when judges upheld the FCC's ability to regulate ISPs as common carriers under Title II of the Communications Act.

"Consumers have made clear to us they do not want their broadband provider cutting sweetheart deals, with fast lanes for some services and slow lanes for others," FCC Chairwoman Jessica Rosenworcel said at today's meeting. "They do not want their providers engaging in blocking, throttling, and paid prioritization. And if they have problems, they expect the nation's expert authority on communications to be able to respond. Because we put national net neutrality rules back on the books, we fix that today."