Microsoft sinks data centre off Orkney

Microsoft has sunk a data centre in the sea off Orkney to investigate whether it can boost energy efficiency.

The data centre, a white cylinder containing computers, could sit on the sea floor for up to five years.

An undersea cable brings the data centre power and takes its data to the shore and the wider internet - but if the computers onboard break, they cannot be repaired.

Orkney was chosen because it is a major centre for renewable energy research.

Project Natick seeks to understand the benefits and difficulties in deploying subsea datacenters worldwide. Phase two extends the research we accomplished in phase one by deploying a full-scale datacenter module in the North Sea, powered by renewable energy.

www.bbc.co.uk

Tiny data centre used to heat public swimming pool

The heat generated by a washing-machine-sized data centre is being used to heat a Devon public swimming pool. The computers inside the white box are surrounded by oil to capture the heat - enough to heat the pool to about 30C 60% of the time, saving Exmouth Leisure Centre thousands of pounds. The data centre is provided to the council-run centre free of charge.

Start-up Deep Green charges clients to use its computing power for artificial intelligence and machine learning. Founder Mark Bjornsgaard said the company would also refund the leisure centre's electricity costs for running the "digital boiler" - and seven other England pools had signed up to the scheme.

The concept, developed over five years, is relatively straight forward - the hot oil is pumped into a heat exchanger to warm the water in the pool.

www.bbc.co.uk

AI data centres can warm surrounding areas by up to 9.1°C

Data centres built to power Artificial Intelligence produce so much heat that they can raise the surface temperature of the land around them by several degrees – creating so-called data centre heat islands that may already be affecting up to 340 million people.

The number of data centres built around the world is forecast to rise enormously. JLL, a real estate company, estimates that data centre capacity will double between 2025 and 2030 – with AI expected to account for half that demand.

Andrea Marinoni at the University of Cambridge, UK, and his colleagues saw that the amount of energy needed to run a data centre had been steadily increasing of late and was likely to “explode” in the coming years, so wanted to quantify the impact.

Meanwhile, in other news: we're all being told to travel less, eat less meat, turn down our heating / air conditioning, etc... We do our bit, while big tech just burns the planet! Grrrr!

www.newscientist.com

As electric bills rise, evidence mounts that data centres share blame.

Amid rising electric bills, states are under pressure to insulate regular household and business ratepayers from the costs of feeding Big Tech’s energy-hungry data centres.

It’s not clear that any state has a solution and the actual effect of data centres on electricity bills is difficult to pin down. Some critics question whether states have the spine to take a hard line against tech behemoths like Microsoft, Google, Amazon and Meta.

But more than a dozen states have begun taking steps as data centres drive a rapid build-out of power plants and transmission lines.

That has meant pressuring the nation’s biggest power grid operator to clamp down on price increases, studying the effect of data centres on electricity bills or pushing data centre owners to pay a larger share of local transmission costs.

Rising power bills are “something legislators have been hearing a lot about. It’s something we’ve been hearing a lot about. More people are speaking out at the public utility commission in the past year than I’ve ever seen before,” said Charlotte Shuff of the Oregon Citizens’ Utility Board, a consumer advocacy group. “There’s a massive outcry.”

Not the typical electric customer: Some data centres could require more electricity than cities the size of Pittsburgh, Cleveland or New Orleans, and make huge factories look tiny by comparison. That’s pushing policymakers to rethink a system that, historically, has spread transmission costs among classes of consumers that are proportional to electricity use.

Meanwhile in other news: UK government suggests deleting files to save water. ...the proliferation of data centres is raising concerns about how much water it takes to power servers and keep them cool.

www.apnews.com

Now is a good opportunity to check what Apps can access your Facebook data - a really good idea!

Article one: It's a sensational story containing allegations of sleaze, psychological manipulation and data misuse that has provoked an internationally furious response.

Tech giant Facebook and data analytics firm Cambridge Analytica are at the centre of a dispute over the harvesting and use of personal data - and whether it was used to influence the outcome of the US 2016 presidential election or the UK Brexit referendum.

Article two: Did you know, you’ve probably given numerous third-party applications access to all your personal data through Facebook, without even realising? If you’ve ever logged in to almost anything via Facebook, eg, booking sites or streaming services, used public Wi-Fi, played Candy Crush or answered any fun quizzes at any point, you’ll be affected.

If you quickly ticked a box to agree to the terms and conditions before signing in, playing a game etc, you’ve allowed access to your personal data. Unless you’ve actively opted out, these often long-forgotten apps will continue to have access to almost all of your personal information from your Facebook profile, even if you no longer interact with them.

To check & amend / delete apps with access to your data:

1) Login to Facebook.

2) Top blue bar, right hand side: click on the drop down arrow. 

3) Choose SETTINGS. 

4) Left hand menu bar: click on Apps.

You will now see a collection of apps which can access your Facebook data, by clicking on each app - you can see what data is available to each app. Click on the "x" to delete / remove the app.

If stuck, seek advice: contact Donline for help.

'Circular' AI mega-deals by tech giants are raising eyebrows

The incredibly vast sums of cash that Bay Area executives are now willing to throw into artificial intelligence tech have created an eyebrow-raising trend: the “circular” mega-deal.

Take San Francisco’s OpenAI, which is staking its claim at the centre of the nascent AI industry with a flurry of recent deals. Over the past month, it has roped in chipmaking juggernauts like Santa Clara’s Nvidia and Advanced Micro Devices, as well as data centre giant Oracle and upstart CoreWeave. 

The deals are so vast that they defy comprehension — the Financial Times put the company’s recent commitments at north of $1 trillion – and they’re making public companies’ stock prices jump. Stock analysts dub some of these agreements “circular,” because investment money is flowing between companies that also buy from or sell to one another. The worry then is that such deals might prop up or overhype a bad business.

Here’s one indicatively tangled pathway through the morass of companies. Nvidia is investing billions in and selling chips to OpenAI, which is also buying chips from and earning stock in AMD. AMD sells processors to Oracle, which is building data centers with OpenAI — which also gets data center work from CoreWeave. And that company is partially owned by, yes, Nvidia. Taken together, it’s a doozy. There are other collaborations and rivalries and many other factors at play, but OpenAI is the many-tentacled octopus in the middle, spinning its achievement of ChatGPT into a blitz of speculative investments.

UPDATE 191125: Anthropic is at the heart of the latest billion-dollar circular AI investment bonanza - What do you get when you combine Anthropic, Microsoft, and Nvidia? A bubble that blows itself!

www.sfgate.com

A data center drained 30M gallons of water unnoticed - until residents complained about low water pressure

The neighbors of a data center in Georgia are steaming after they discovered the data centre facility had sucked up nearly 30 million gallons of water — without initially paying for it.

Outrage started bubbling up last year when residents of an affluent subdivision named Annelise Park in Fayetteville, Georgia, noticed their water pressure was unusually low.

When the county utility investigated, officials discovered two industrial-scale water hookups feeding a data center campus located 20 miles south of downtown Atlanta. One water connection had been installed without the utility’s knowledge, and the other was not linked to the company’s account and therefore wasn’t being billed.

All told, the developer, Quality Technology Services, owed nearly $150,000 for using more than 29 million gallons of unaccounted-for water. That is equivalent to 44 Olympic-size swimming pools and far exceeds the peak limit agreed to during the data center planning process.

www.politico.com

Password manager OneLogin hit by data breach

Encrypted information has been accessed during a data breach at the password management service, OneLogin.

It affects "all customers served by our US data centre" and perpetrators had "the ability to decrypt encrypted data", according to The Register.

Those affected have been advised to visit a registration-only support page, outlining the steps they need to take.

Security experts said the breach was "embarrassing" and showed every company was open to attack.

OneLogin is a single sign-on service, allowing users to access multiple apps and sites with just one password.

In 2013, the company had 700 business customers and passed 12 million licensed users.

www.bbc.co.uk

Google’s Greenhouse Gas Emissions Increased by 48% Since 2019, Thanks to AI Pursuits

 

Google’s latest annual environmental report reveals the true impact its recent forays into artificial intelligence has had on its greenhouse gas emissions.

The expansion of its data centres to support AI developments contributed to the company producing 14.3 million tonnes of carbon dioxide equivalents in 2023. This represents a 48% increase over the equivalent figure for 2019 and a 13% increase since 2022.

“This result was primarily due to increases in data centre energy consumption and supply chain emissions,” the report’s authors wrote.

“As we further integrate AI into our products, reducing emissions may be challenging due to increasing energy demands from the greater intensity of AI compute, and the emissions associated with the expected increases in our technical infrastructure investment.”

www.techrepublic.com

Australian Cyber Security Centre says: don't pay the crooks to unlock files encrypted during a RansomWare attack!

Paying a ransom does not guarantee decryption of data. Open source reporting indicates several instances where an entity paid the ransom but the keys to decrypt the data were not provided. The ACSC has also seen cases where the ransom was paid, the decryption keys were provided, but the adversary came back a few months later and deployed ransomware again. The likelihood that an Australian organisations will be retargeted increases with every successful ransom payment.

It is generally much easier and safer to restore data from a backup than attempting to decrypt ransomware affected data.

www.theregister.com

Chinese electric vehicles ‘could be weaponised’ in Britain

Chinese electric vehicles being driven in Britain could be “weaponised” and should be banned from government use, a report has warned.

Modules within Chinese-made electric vehicles - could transmit sensitive data back to the country or even be remotely controlled, the China Strategic Risks Institute (CSRI) warned.

The think tank called for an end to Chinese carmakers being able to win government contracts. Last year it emerged that the Ministry of Defence used electric cars made by Chinese-owned MG.

Whitehall departments are buying up electric cars in an attempt to decarbonise their fleets. The report said the vehicles present a potentially greater security risk than petrol-powered vehicles because they are more likely to be equipped with internet-connected modules capable of collecting data and controlling the car’s functions.

“The UK public remains largely unaware of the dependency, disruption, and data security risks Chinese EVs pose via Chinese manufactured Cellular Internet of Things Modules (CIMs) within them,” it said.

Meanwhile in other news: Lord Mandelson (honorary president of the Great Britain–China Centre) has promised warmer UK relations with China...

www.telegraph.co.uk

How Kroll Ontrack Recovered Data From The Columbia Space Shuttle Disaster

1st Feb 2003, and after 17 days in space the Columbia space shuttle is scheduled to land at the Kennedy Space Centre at 9:16am, marking the end of the STS-107 mission. 

At approximately 9:00am disaster occurs; footage of the shuttle disintegrating above the state of Texas is broadcasting live on CNN. The origin of the disaster was later found to be a piece of thermal insulation foam that came off the shuttle, 80 seconds after take-off from Earth.

Six months after the crash, a charred and battered hard drive from the shuttle was found amongst other debris in a dried up lake bed. NASA entrusted this hard drive to Kroll Ontrack to recover as much data as possible...

Read more here: www.krollontrack.co.uk

If you have suffered data loss: Kroll Ontrack can help! 

Massive hack attack? More like an act of war - apparently!

June 2017 saw one of the world’s most costly malware outbreaks ever. The NotPetya ransomware, initially spread via a malicious automatic update to a popular Ukrainian accounting software tool, hit companies around the world including advertising giant WPP, household goods manufacturer Reckitt Benckiser, FedEx subsidiary TNT Express, and international shipping logistics company Maersk.

Shipping conglomerate Maersk later estimated that the NotPetya ransomware cost them as much as $300 million in lost revenue. Reckitt Benckiser, the firm behind such brands as Nurofen and Durex, blamed the malware attack for a $100 million loss in revenue.

One of those organisations hit by NotPetya was multinational law firm DLA Piper. The business, with a presence in over 40 countries, reportedly had a “flat network structure globally”, allowing every data centre and Windows-based server on its network to be impacted by NotPetya.

Wiping its systems and starting again must have been costly, even before you start counting the 15,000 hours of extra overtime it reportedly paid its IT staff. So, it’s no surprise to hear that DLA Piper is interested in claiming back some of that expense from its insurers, Hiscox.

As The Times reports today, DLA Piper has started proceedings against Hiscox, saying that the insurance firm has failed to pay out for the damages and costs associated with the NotPetya attack - a claim which may amount to several million pounds.

From the sound of things, Hiscox is refusing to pay up because of the “act of war” exclusion clause commonly found in insurance policies. The UK government, you may recall, has officially stated that the Russian military was “almost certainly” behind the NotPetya attack.

www.grahamcluley.com

Equifax: hackers actually stole records of 15.2 million Brits. Not 400,000 as first reported

Equifax has confirmed that a recent data breach exposed a file containing 15.2 million UK personal information records.

On 10 October 2017, the National Cyber Security Centre (NCSC) confirmed the Equifax data breach disclosed in September 2017 actually compromised 15.2 million UK records.

That's considerably more than 400,000, the number of consumers living in the United Kingdom which Equifax originally thought had been affected by the security incident.

Have you EVER used Equifax? 

Be aware of this data breach & how it might affect you.

www.grahamcluley.com

Great advice from the National Cyber Security Centre - on protecting against Cyber threats

Cyber security is the means by which individuals and organisations reduce the risk of being affected by cyber crime.

Cyber security's core function is to protect the devices we all use (smartphones, laptops, tablets and computers), and the services we access online - both at home and work - from theft or damage. It's also about preventing unauthorised access to the vast amounts of personal information we store on these devices, and online.

Cyber security is important because smartphones, computers and the internet are now such a fundamental part of modern life, that it's difficult to imagine how we'd function without them. From online banking and shopping, to email and social media, it's more important than ever to take steps that can prevent cyber criminals getting hold of our accounts, data, and devices. 

Click HERE to find out more about staying safe from Cyber threats - using great advice from the NCSC.

www.ncsc.gov.uk

Have a QNAP NAS? Make sure the firmware is up-to-date to safeguard against Qsnatch malware!

The number of QNAP network-attached storage (NAS) boxes infected with the data-stealing QSnatch malware has reached 62,000, the US and UK governments warned today.

A joint statement from America's Cybersecurity and Infrastructure Security Agency (CISA) and Britain's National Cyber Security Centre (NCSC) said the software nasty, first spotted in October, has increased its infection count from 7,000 devices that month to tens of thousands by mid-June, 2020, with "a particularly high number of infections in North America and Europe." It is estimated 7,600 hijacked QNAP boxes were in America, and 3,900 in the UK.

The situation is particularly messy because Taiwan-based QNAP has not, to the best of our knowledge, disclosed exactly how the malware breaks into vulnerable boxes, advising simply that owners should ensure the latest firmware is installed to prevent future infection. Judging from conversations people have had with the manufacturer's support desk, it appears there was a remotely exploitable hole in the firmware, perhaps down to the operating system level, which was fixed in November.

www.theregister.com

Online fraud – how to protect yourself

Latest research shows that around nine in ten people have seen content online they suspected was a scam or a fraud. So, it’s important to think about how to protect yourself from potential risks.

Online fraud takes many forms, but there are some basic tips that could help to protect you from a range of methods.

Wait - is it too good to be true? - When it comes to online fraud, the phrase ‘too good to be true’ is often accurate. Often, fraudsters will tempt you in with goods or offers that seem better than anything you’ll find elsewhere. It’s this temptation of a bargain or a great deal that could lure a potential victim. If you’re offered a deal that sounds too good to be true, that’s your signal to be extra vigilant and double-check that it’s legitimate.

Double-check their identity - Confirm the identity of the person or organisation you’re dealing with – especially if they’ve contacted you out of the blue. Impersonation fraud is when criminals claim to be from legitimate organisations, with the aim of gaining your trust. Take time to find out more about who you’re in contact with – can you confirm whether they represent a certain company or organisation, for example? You can search for information on the Financial Conduct Authority website.

Don’t give out personal information - In some cases, online fraudsters don’t want you to hand over money straight away – they might not be asking you to buy something in an online transaction, for example. Instead, they want you to provide your personal or financial information. If they have access to these details, they’ll be able to use your identity fraudulently, or can use your financial information to get access to your money via your bank or building society account  . Also be careful about what personal information you share in your profiles and posts on social media, as this can also be seen and misused by others.

Don’t trust unknown attachments or links - Sometimes fraudsters can get hold of your personal or financial information even without your knowledge. They can do this by sending you attachments or links via email or text message. These can contain malware, which is malicious software that can allow them to get access to your device. Once they’ve done this, they can also access information and data that can enable them to steal your identity or get to your finances. Don’t click on any attachments or links that you can’t verify – especially if you haven’t been able to confirm the sender’s identity. Also check whether you h  ave anti-virus software installed on your device, as this can protect against some types of malicious software – and if you do, make sure it’s up to date with any updates installed.

Use a protected payment method - If you’re paying for something, use a payment method that offers protection for customers. Don’t transfer money direct to anybody – use a verified money transfer or online payment service, or make a transaction using your bank or building society account, which will require the person you're paying to provide their details. Most major credit card providers protect online purchases, and are obliged to refund you in certain circumstances. If you’re unsure whether a payment or transfer service offers this sort of protection, contact them to find out before you go any further. Action Fraud offers more information on this.

Report it immediately - If you think you’ve fallen victim to some sort of online fraud – or even if you’ve spotted a fraud but not been caught out by it - report it straight away. Tell your bank or building society   (or online payment or transfer service if you’ve used one of those), as they might be able to stop a payment being made if you report it quickly enough. Or, they might be able to recoup some or all of the money that you’ve lost. You can also report it to Action Fraud, which is the UK’s national reporting centre for fraud and cyber-crime. Also, if you see content online that you think relates to a fraud, report it to the platform so they can investigate and remove it.

www.ofcom.org.uk

Millions of people STILL using 123456 as password, security study finds!

The UK's National Cyber Security Centre (NCSC) has today published analysis of the 100,000 most commonly re-occurring passwords that have been accessed by third parties in global cyber breaches. The results show a huge number of regularly used passwords breached to access sensitive information.

The NCSC hope to reduce the risk of further breaches by building awareness of how attackers use easy to guess passwords, or those obtained from breaches and help guide developers and System Administrators to protect their users.

The compromised passwords were obtained from global breaches that are already in the public domain having been sold or shared by hackers.

The list was created after breached usernames and passwords were collected and published on Have I Been Pwned by international web security expert Troy Hunt. The website allows people to check if they have an account that has been compromised in a data breach.

www.ncsc.gov.uk