Thursday, December 24, 2020

Orion Cyberbreach: It's Hard to Overstate How Bad It Is

Recent news articles have all been talking about the massive Russian cyber-attack against the United States, but that’s wrong on two accounts. It wasn’t a cyber-attack in international relations terms, it was espionage. And the victim wasn’t just the US, it was the entire world. But it was massive, and it is dangerous.

Espionage is internationally allowed in peacetime. The problem is that both espionage and cyber-attacks require the same computer and network intrusions, and the difference is only a few keystrokes. And since this Russian operation isn’t at all targeted, the entire world is at risk – and not just from Russia. Many countries carry out these sorts of operations, none more extensively than the US. The solution is to prioritize security and defense over espionage and attack.

Here’s what we know: Orion is a network management product from a company named SolarWinds, with over 300,000 customers worldwide. Sometime before March, hackers working for the Russian SVR – previously known as the KGB – hacked into SolarWinds and slipped a backdoor into an Orion software update. (We don’t know how, but last year the company’s update server was protected by the password “solarwinds123” – something that speaks to a lack of security culture.) Users who downloaded and installed that corrupted update between March and June unwittingly gave SVR hackers access to their networks.

This is called a supply-chain attack, because it targets a supplier to an organization rather than an organization itself – and can affect all of a supplier’s customers. It’s an increasingly common way to attack networks. Other examples of this sort of attack include fake apps in the Google Play store, and hacked replacement screens for your smartphone.

SolarWinds has removed its customers list from its website, but the Internet Archive saved it: all five branches of the US military, the state department, the White House, the NSA, 425 of the Fortune 500 companies, all five of the top five accounting firms, and hundreds of universities and colleges. In an SEC filing, SolarWinds said that it believes “fewer than 18,000” of those customers installed this malicious update, another way of saying that more than 17,000 did.

That’s a lot of vulnerable networks, and it’s inconceivable that the SVR penetrated them all. Instead, it chose carefully from its cornucopia of targets. Microsoft’s analysis identified 40 customers who were infiltrated using this vulnerability. The great majority of those were in the US, but networks in Canada, Mexico, Belgium, Spain, the UK, Israel and the UAE were also targeted. This list includes governments, government contractors, IT companies, thinktanks, and NGOs … and it will certainly grow.

Once inside a network, SVR hackers followed a standard playbook: establish persistent access that will remain even if the initial vulnerability is fixed; move laterally around the network by compromising additional systems and accounts; and then exfiltrate data. Not being a SolarWinds customer is no guarantee of security; this SVR operation used other initial infection vectors and techniques as well. These are sophisticated and patient hackers, and we’re only just learning some of the techniques involved here.

Recovering from this attack isn’t easy. Because any SVR hackers would establish persistent access, the only way to ensure that your network isn’t compromised is to burn it to the ground and rebuild it, similar to reinstalling your computer’s operating system to recover from a bad hack. This is how a lot of sysadmins are going to spend their Christmas holiday, and even then they can’t be sure. There are many ways to establish persistent access that survive rebuilding individual computers and networks. We know, for example, of an NSA exploit that remains on a hard drive even after it is reformatted. Code for that exploit was part of the Equation Group tools that the Shadow Brokers – again believed to be Russia – stole from the NSA and published in 2016. The SVR probably has the same kinds of tools.

Even without that caveat, many network administrators won’t go through the long, painful, and potentially expensive rebuilding process. They’ll just hope for the best.

It’s hard to overstate how bad this is. We are still learning about US government organizations breached: the state department, the treasury department, homeland security, the Los Alamos and Sandia National Laboratories (where nuclear weapons are developed), the National Nuclear Security Administration, the National Institutes of Health, and many more. At this point, there’s no indication that any classified networks were penetrated, although that could change easily. It will take years to learn which networks the SVR has penetrated, and where it still has access. Much of that will probably be classified, which means that we, the public, will never know.

And now that the Orion vulnerability is public, other governments and cybercriminals will use it to penetrate vulnerable networks. I can guarantee you that the NSA is using the SVR’s hack to infiltrate other networks; why would they not? (Do any Russian organizations use Orion? Probably.)

by Bruce Schneier, The Guardian | Read more:
Image: Patrick Semansky/AP

Jimmie Spheeris


Jimmie Spheeris, Isle of View (full album)
[ed. See also: here and here]

Wednesday, December 23, 2020

Sister Insider

Nancy Pelosi, the first and so far only female speaker of the House and the most powerful woman in U.S. politics ever, reminds me of that quip about Ginger Rogers, who did everything Fred Astaire did, only backwards and in high heels. In Pelosi’s case, four-inch heels. Pelosi possesses to a high degree the qualities we associate, not always correctly, with mighty politicians, most of whom have been men: endless energy, a ferocious work ethic, deep institutional knowledge, a sixth sense for strategy, a thick skin, charisma. But she is also conventionally feminine, in an old-fashioned mode: beautifully dressed, impeccably groomed, a little formal, soft-spoken, tending to her personal and political relationships with a shower of little notes and phone calls.

The Ginger Rogers paradox is that without ego and ambition Pelosi would not be a Democratic Party powerhouse, but female ego and ambition quickly earn a woman the dreaded label of “unlikeable.” Throughout her long career, Pelosi has had to achieve like a man while behaving like a woman, down to her daily hair appointment. As Hillary Clinton discovered, that’s not so easy. Love her or loathe her—and she is loathed by both right (San Francisco liberal!) and left (corporate sellout!)—that Pelosi has managed to perform this dance for 33 years in Congress and counting is quite a feat.

Molly Ball’s Pelosi gives us an informative, readable, and detailed—maybe a little too detailed—account of Pelosi’s career and her rise up the ranks from first woman minority whip to first woman minority leader to—finally—twice speaker of the House. It’s full of telling anecdotes that show how far Pelosi’s come and how much America has changed. Who would have dreamed that the high school debater whose team drew the topic “Do women think?” would be running Congress one day? But Ball, a national political correspondent for Time magazine and a veteran political reporter, also shows how Pelosi’s political outlook was set early on:
Like so many American Catholics, she worshipped then-Senator John F. Kennedy… Kennedy’s appeal was lofty and ideological, rooted in patriotism and faith. It would become the model for Nancy’s evolving political orientation—Catholic social justice with a hint of noblesse oblige.
Ball offers a guide to the ins and outs of some important battles, from Pelosi’s opposition to the Iraq War and her crucial role in passing the Affordable Care Act to the clever way she psychologically maneuvered Donald Trump into taking full responsibility for the 2018-19 government shutdown. Now that a revived left accuses Pelosi of cowardice and centrism, it’s useful to be reminded of her strong record as a liberal, and also that that her job as leader was only in part to rack up virtuous wins. It was also to work behind the scenes to marshal votes and count them accurately, to find and exploit legislative loopholes, and to structure deals that would let House Democrats from more conservative districts win their next election. Sometimes, she had to compromise when she could see no alternative. A fierce defender of women’s reproductive rights, she had tears in her eyes when she had to tell her pro-choice women colleagues that abortion would not be covered in the Affordable Care Act. (Barack Obama does not come off well in Ball’s account, by the way, preferring to court Republicans rather than turn to liberal Democrats. Yet Pelosi is reviled by people who adore Obama…I wonder why.) (...)

Like many women of her generation and later, Pelosi noted the ways in which her mother was constrained and at some level must have decided not to let that happen to her. Still, in the pre-feminist era, it took a while for Pelosi to find her way. Growing up she was the family’s petted and protected Italian Catholic princess. Her parents even thought she might become a nun. Instead, at 23, she married her college boyfriend, Paul Pelosi, and had five children in six years. Take that, Amy Coney Barrett! Interestingly, she followed the pattern recommended by some conservative women: early marriage and motherhood, and then career. This can work if you’re lucky, financially secure, and well-connected, and don’t have your heart set on, say, medical school. But she also followed the recommendation of many feminists, and chose a husband who, unlike her father, was able to let his wife stand in the limelight and shine. It didn’t hurt that Paul made a fortune in real estate, venture capital, and other businesses. Today the Pelosis are worth around $97 million, according to Politifact. Amazingly enough, that makes her only the 24th richest House member.

by Katha Pollitt, Democracy Journal |  Read more:
Image: uncredited

The Year of the Cardboard Sports Fan

If I had to pick a single moment when the world as I knew it went on indefinite hiatus, I would choose shortly after eight p.m., on March 11th, when Donnie Strack, the Oklahoma City Thunder’s vice-president of human and player performance, sprinted onto the court where his team was about to play and stopped the officials from beginning their game against the Utah Jazz. Strack was delivering the news that the Jazz center Rudy Gobert had tested positive for the novel coronavirus. Players were pulled off the court. A half an hour later, fans were told that the game had been postponed, and that they had to leave the arena. They have yet to come back. The N.B.A. season was suspended an hour later, and then much of modern life was, too. (...)

When sports resumed in the United States, during the summer, some leagues and teams sold tickets, much to epidemiologists’ chagrin. Others covered the empty seats, or left them empty. Still other teams embraced the surreal quality of our recent existence and sold tickets to cardboard likenesses. As the year closes, I’ve been thinking about the cutouts I’ll remember, and of the efforts that people made to simulate communion when the usual community provided by sports wasn’t safely attainable. There was something hopeful in them—a mix of silliness, and humility, and the sense of making-do.

A Young Tom Hanks

In early May, Dave Kaval, the president of the Oakland Athletics, received a tweet from an A’s fan, showing a shot of a Borussia Mönchengladbach game. “I wrote back almost immediately saying what a cool idea,” Kaval told me recently. Faced with the prospect of a Major League Baseball season beginning with an empty stadium, Kaval put together a group to start sourcing and sizing cutouts.

Prices for “tickets” started at forty-nine dollars, with prices going up to a hundred and twenty-nine dollars for a spot in the Foul Ball Zone. (If a foul hit a cutout, the fan received the ball in the mail.) “I was thinking maybe a thousand” people would buy one, Kaval said. More than ten thousand fans did. A portion of the proceeds went to local charities.

Matt Olsen, the team’s first basemen, had more than twenty family members down the first baseline. There was a visitors’ section. Perhaps the most unexpected cutout was of Tom Hanks—as a peanut vendor, a job he’d held in Oakland as a teen-ager. Hanks got in touch with Kaval and ultimately sent him an iPhone shot of an old yearbook photo. He even recorded a clip of himself hawking hot dogs, which aired over the loudspeakers during the game.

The Field of Dreams

Hanks is hardly the only celebrity with his own cutout. The Phillies stuck Ben Franklin, a Philadelphia native, into a blue plastic seat in Citizens Bank Park. Walt Whitman was there, too. In Australia, a prankster submitted a cutout of a dead serial killer for a rugby match. Being alive, after all, was not a prerequisite for attending a sporting event this year.

Some fans took advantage of this unusual fact to memorialize those they’d lost. The images of dozens of deceased fans were scattered across football and baseball stadiums. Grieving parents could see cutouts of children who’d loved the game. Grandparents sat next to kids they’d never had a chance to meet. A father was reunited at Oracle Park with a son who had died at the age of twenty-two—and who had loved the game so much that his ashes had been spread in the bay beyond the right field wall.

by Louisa Thomas, New Yorker | Read more:
Image: Twitter

Monday, December 21, 2020


Ulrike Bolenz. Kleine Libelle, 2011.
via:

Toda Luna, Todo Año

Automatically, Eloise Gore began to translate the poem in her head. Each moon, each year. No. Every moon, every year gets the fricative sound. Camina? Walks. Shame that doesn’t work in English. Clocks walk in Spanish, don’t run. Goes along, and passes away.

She snapped the book shut. You don’t read at a resort. She sipped her margarita, made herself take in the view from the restaurant terrace. The dappled coral clouds had turned a fluorescent pewter, crests of waves shattered silver on the gray-white beach below. All down the beach, from the town of Zihuatanejo, was a faint dazzle and dance of tiny green light. Fireflies, neon lime-green. Village girls placed them in their hair when they walked at dusk, strolling in groups of twos or threes. Some of the girls scattered the insects through their hair, others arranged them into emerald tiaras.

This was her first night here and she was alone in the dining room. Waiters in white coats stood near the steps to the pool and bar where most of the guests still danced and drank. Mambo! Que rico el Mambo! Ice cubes and maracas. Busboys lit flickering candles. There was no moon; it seemed the stars gave the metallic sheen to the sea.

Sunburned wildly dressed people began to come into the dining room. Texans or Californians she thought, looser, breezier than anyone from Colorado. They called across the tables to each other: “Go for it, Willy!” “Far fuckin’ out!”

What am I doing here? This was her first trip anywhere since her husband’s death three years before. Both Spanish teachers, they had traveled every summer in Mexico and Latin America. After he died she had not wanted to go anywhere without him, had signed up each June to teach summer school. This year she had been too tired to teach. In the travel office they had asked her when she needed to return. She had paused, chilled. She didn’t need to return, didn’t need to teach at all anymore. There was no place she had to be, no one to account to.

She ate her ceviche now, feeling painfully conspicuous. Her gray seersucker suit, appropriate in class, in Mexico City … it was dowdy, ludicrously the wrong thing. Stockings were tacky, and hot. There would probably even be a wet spot when she stood up.

She forced herself to relax, to enjoy langostinos broiled in garlic. Mariachis were strolling from table to table, passed hers by when they saw her frozen expression. Sabor a tĂ­. The taste of you. Imagine an American song about how somebody tasted? Everything in Mexico tasted. Vivid garlic, cilantro, lime. The smells were vivid. Not the flowers, they didn’t smell at all. But the sea, the pleasant smell of decaying jungle. Rancid odor of the pigskin chairs, kerosene-waxed tiles, candles.

It was dark on the beach and fireflies played in the misty green swirls, on their own now. Out in the bay were red flares for luring fish. (...)

Eloise wished she had a mystery book. She got up and went to the bathroom, cockroaches and land crabs clattering out of her way. She showered with coconut soap, dried with damp towels. She wiped the mirror so she could look at herself. Mediocre and grim, she thought. Not mediocre, her face, with wide gray eyes, fine nose and smile, but it was grim. A good body, but so long disregarded it seemed grim too.

The band stopped playing at two thirty. Footsteps and whispers, a glass shattering. Say you dig it, baby, say it! A moan. Snores.

Eloise woke at six, as usual. She opened the shutters, watched the sky turn from milky silver to lavender gray. Palm branches slipped in the breeze like shuffled cards. She put on her bathing suit and her new rose dress. No one was up, not even in the kitchen. Roosters crowed and zopilotes flapped around the garbage. Four pigs. In the back of the garden Indian busboys and gardeners slept, uncovered, curled on the bricks.

She stayed on the jungle path away from the beach. Dark dripping silence. Orchids. A flock of green parrots. An iguana arched on a rock, waiting for her to pass. Branches slapped sticky warm into her face.

The sun had risen when she climbed a hill, down then to a rise above a white beach. From where she stood she could see onto the calm cove of Las Gatas. Underwater was a stone wall built by Terascans to protect the cove from sharks. A school of sardines swirled through the transparent water, disappeared like a tornado out to sea. Clusters of palapa huts stretched down the beach. Smoke drifted from the farthest one but there was no one to be seen. A sign said BERNARDO’S SCUBA DIVING.

She dropped her dress and bag on the sand, swam with a sure crawl far out to the stone wall. Back then, floating and swimming. She treaded water and laughed out loud, finally lay in the water near the shore rocking in the waves and silence, her eyes open to the startling blue sky.

She walked past Bernardo’s, down the beach toward the smoke. An open thatch-roofed room with a raked sand floor. A large wooden table, benches. Beyond that room was a long row of bamboo alcoves, each with a hammock and mosquito netting. In the primitive kitchen a child washed dishes at the pila; an old woman fanned the fire. Chickens darted around them, pecking in the sand.

“Good morning,” Eloise said. “Is it always so quiet here?”

“The divers are out. You want breakfast?”

“Please.” Eloise reached out her hand. “My name is Eloise Gore.” But the old woman just nodded. “SiĂ©ntese.”

Eloise ate beans, fish, tortillas, gazing across the water to the misted hills. Her hotel looked blowsy and jaded to her, askew on the hillside. Bougainvillea spilled over its walls like a drunken woman’s shawls.

“Could I stay here?” she asked the woman.

“We’re not a hotel. Fishermen live here.”

But when she came back with hot coffee she said, “There is one room. Foreign divers stay here sometimes.”

It was an open hut behind the clearing. A bed and a table with a candle on it. A mildewed mattress, clean sheets, a mosquito netting. “No scorpions,” the woman said. The price she asked for room and board was absurdly low. Breakfast and dinner at four when the divers got back.

It was hot as Eloise went back through the jungle but she found herself skipping along, like a child, talking to Mel in her head. She tried to remember when she had last felt happy. Once, soon after he died, she had watched the Marx Brothers on television. A Night at the Opera. She had had to turn it off, could not bear to laugh alone.

The hotel manager was amused that she was going to Las Gatas. “Muy tĂ­pico.” Local color: a euphemism for primitive or dirty. He arranged for a canoe to take her and her things across the bay that afternoon.

She was dismayed when they neared her peaceful beach. A large wooden boat, La Ida, was anchored in front of the palapa. Multicolored canoes and motored pangas from town slipped in and out, loading from it. Lobsters, fish, eels, octopus, bags of clams. A dozen men were on the shore or taking air tanks and regulators off the boat, laughing and shouting. A young boy tied a mammoth green turtle to the anchor line.

Eloise put her things in her room, wanted to lie down but there was no privacy at all. From her bed she could see out into the kitchen, through it to the divers at the table, out to the blue green sea.

“Time to eat,” the woman called to her. She and the child were taking dishes to the table.

“May I help you?” Eloise asked.

SiĂ©ntese.”

Eloise hesitated at the table. One of the men stood and shook her hand. Squat, massive, like an Olmec statue. He was a deep brown color, with heavy-lidded eyes and a sensuous mouth.

Soy CĂ©sar. El maestro.”

He made a place for her to sit, introduced her to the other divers, who nodded to her and continued to eat. Three very old men. Flaco, RamĂłn, and RaĂşl. CĂ©sar’s sons, Luis and Cheyo. Madaleno, the boatboy. Beto, “a new diver — the best.” Beto’s wife, Carmen, sat back from the table nursing their child.

Steaming bowls of clams. The men were talking about El Peine. Old Flaco had finally seen it, after diving all his life. The comb? Later, with a dictionary, she found out that they were talking about a giant sawfish.

Gigante. Big as a whale. Bigger!”

Mentira! You were hallucinating. High on air.”

“Just wait. When the Italians come with their cameras, I’ll take them, not any of you.”

“Bet you can’t remember where he was.”

Flaco laughed. “Pues … not exactly.”

Lobster, grilled red snapper, octopus. Rice and beans and tortillas. The child put a dish of honey on a far table to distract the flies. A long loud meal. When it was over everyone except CĂ©sar and Eloise went to hammocks to sleep. Beto and Carmen’s room had a curtain, the others were open.

AcĂ©rcate a mĂ­,” CĂ©sar said to Eloise. She moved closer to him. The woman brought them papaya and coffee. She was CĂ©sar’s sister, Isabel; Flora was her daughter. They had come two years before when CĂ©sar’s wife had died. Yes, Eloise was widowed too. Three years.

“What do you want from Las Gatas?” he asked.

She didn’t know. “Quiet,” she said. He laughed.

“But you’re always quiet, no? You can dive with us, there’s no noise down there. Go rest now.”

It was dusk when she awoke. A lantern glowed in the dining room. César and the three old men were playing dominos. The old men were his mother and father, César told her. His own parents had died when he was five and they had taken him in, taken him underwater his first day. The three men had been the only divers then, free divers for oysters and clams, years before tanks or spearguns.

At the far end of the palapa Beto and Carmen talked, her tiny foot pushing their hammock. Cheyo and Juan sharpened speargun points. Away from the others Luis listened to a transistor radio. Rock and roll. You can teach me English! He invited Eloise to sit by him. The words to songs weren’t what he had imagined at all. Can’t get no satisfaction.

Beto’s baby lay naked on the table, his head cradled in CĂ©sar’s free hand. The baby peed and CĂ©sar swept the urine off the table, dried his hand in his hair.

by Lucia Berlin, A Manual for Cleaning Women: Selected Stories
Image: uncredited


Greg LaRock, Highway Color
via:

Mutant Coronavirus in the United Kingdom Sets Off Alarms

On 8 December, during a regular Tuesday meeting about the spread of the pandemic coronavirus in the United Kingdom, scientists and public health experts saw a diagram that made them sit up straight. Kent, in the southeast of England, was experiencing a surge in cases, and a phylogenetic tree showing viral sequences from the county looked very strange, says Nick Loman, a microbial genomicist at the University of Birmingham. Not only were half the cases caused by one specific variant of SARS-CoV-2, but that variant was sitting on a branch of the tree that literally stuck out from the rest of the data. “I've not seen a part of the tree that looks like this before,” Loman says.

Less than 2 weeks later, that variant is causing mayhem in the United Kingdom and elsewhere in Europe. Yesterday, U.K. Prime Minister Boris Johnson announced stricter lockdown measures, saying the strain, which goes by the name B.1.1.7, appears to be better at spreading between people. The news led many Londoners to leave the city today, before the new rules take effect, causing overcrowded railway stations. The Netherlands, Belgium, and Italy announced they were temporarily halting passenger flights from the United Kingdom. The Eurostar train between Brussels and London will stop running tonight at midnight, for at least 24 hours.

Scientists, meanwhile, are hard at work trying to figure out whether B.1.1.7 is really more adept at human-to-human transmission—not everyone is convinced yet—and if so, why. They’re also wondering how it evolved so fast. B.1.1.7 has acquired 17 mutations all at once, a feat never seen before. “There's now a frantic push to try and characterize some of these mutations in the lab,” says Andrew Rambaut, a molecular evolutionary biologist at the University of Edinburgh.

Too many unknowns

Researchers have watched SARS-CoV-2 evolve in real time more closely than any other virus in history. So far, it has accumulated mutations at a rate of about one to two changes per month. That means many of the genomes sequenced today differ at about 20 points from the earliest genomes sequenced in China in January, but many variants with fewer changes are also circulating. “Because we have very dense surveillance of genomes, you can almost see every step,” Loman says.

But scientists have never seen the virus acquire more than a dozen mutations seemingly at once. They think it happened during a long infection of a single patient that allowed SARS-CoV-2 to go through an extended period of fast evolution, with multiple variants competing for advantage.

One reason to be concerned, Rambaut says, is that among the 17 mutations are eight in the gene that encodes the spike protein on the viral surface, two of which are particularly worrisome. One, called N501Y, has previously been shown to increase how tightly the protein binds to the angiotensin-converting enzyme 2 receptor, its entry point into human cells. The other, named 69-70del, leads to the loss of two amino acids in the spike protein and has been found in viruses that eluded the immune response in some immunocompromised patients. (...)

In a press conference on Saturday, chief science adviser Patrick Vallance said that B.1.1.7, which first appeared in a virus isolated on 20 September, accounted for about 26% of cases in mid-November. “By the week commencing the ninth of December, these figures were much higher,” he said. “So, in London, over 60% of all the cases were the new variant.” Johnson added that the slew of mutations may have increased the virus’s transmissibility by 70%.

by Kai Kupferschmidt, Science | Read more:
Image: Stefan Rousseau/PA via AP Images

Congress to Ban Surprise Medical Billing

After years of being stymied by well-funded interests, Congress has agreed to ban one of the most costly and exasperating practices in medicine: surprise medical bills.

Surprise bills happen when an out-of-network provider is unexpectedly involved in a patient’s care. Patients go to a hospital that accepts their insurance, for example, but get treated there by an emergency room physician who doesn’t. Such doctors often bill those patients for large fees, far higher than what health plans typically pay.

Language included in the $900 billion spending deal reached Sunday night and headed for final passage on Monday will make those bills illegal. Instead of charging patients, health providers will now have to work with insurers to settle on a fair price. The new changes will take effect in 2022, and will apply to doctors, hospitals and air ambulances, though not ground ambulances.

Academic researchers have found that millions of Americans receive these types of surprise bills each year, with as many as one in five emergency room visits resulting in such a charge. The bills most commonly come from health providers that patients are not able to select, such as emergency room physicians, anesthesiologists and ambulances. The average surprise charge for an emergency room visit is just above $600, but patients have received bills larger than $100,000 from out-of-network providers they did not select.

Some private-equity firms have turned this kind of billing into a robust business model, buying emergency room doctor groups and moving the providers out of network so they could bill larger fees. (...)

A survey published Friday by the Kaiser Family Foundation found that 80 percent of adults want the practice banned. More than a dozen states, including Texas and California, have passed bans of their own on surprise billing.

Even so, the issue struggled to move through Congress as each policy proposal faced an outcry from some faction of the health care industry.

“There were a lot of things working in the legislation’s favor — it’s a relatively targeted problem, it resonates very well with voters, and it’s not a hyperpartisan issue among voters or Congress — and it was still tough,” said Benedic Ippolito, a resident scholar at the American Enterprise Institute, who helped explain the issue to lawmakers early in the process. “It has almost everything going for it, and yet it was still this complete slog.”

Hospitals and doctors, who tend to benefit from the current system, fought to defeat solutions that would lower their pay. Insurance companies and large employer groups, on the other hand, have wanted a stronger ability to negotiate lower payments to the types of medical providers who can currently send patients surprise bills.

Legislation nearly passed last December, but was scuttled at the 11th hour after health providers lobbied aggressively against the deal. Private-equity firms, which own many of the medical providers that deliver surprise bills, poured tens of millions into advertisements opposing the plan. Committee chairs squabbled over jurisdictional issues and postponed the issue.

This year, many of the same legislators behind last year’s failed effort tried again, softening several provisions that had been most objectionable to influential doctor and hospital lobbies. The current version will probably not do as much to lower health care spending as the previous version, but will still protect patients.

After years of defeats, consumer advocacy groups cheered the new legislation.

by Sarah Kliff and Margot Sanger-Katz, NY Times | Read more:
Image: Anna Moneymaker
[ed. Give it a couple years, we'll see. See also: Why Ambulances Are Exempt From the Surprise-Billing Ban (NYT).]

Shark Bite Forensics

10 days ago, surfer Robin Warren was bitten by a shark in Honolua Bay. The 56-year-old died of his injuries the next day.

“I feel like when you lose somebody like that, you generally want to know as much information about the situation as you can,” Derek Kraft, of the Hawaii Institute of Marine Biology. “So, this at least lets us give them the fullest picture to our ability.”

Researchers with the Hawaii Institute of Marine Biology were able to extract DNA from mucus that the shark left behind on Warren’s surfboard. They entered it into a database to pinpoint the species.

“It tells you the percentage match to the reference samples, and we got 100% match on several, several hits,” Kraft said. “So it’s a tiger shark. If it was another species, that’s what the database would have shown.”

“These are powerful tools and they can take a very, very small amount of DNA and them amplify that so that we can get a result,” added Dr. Carl Meyers, who works at the same facility.

A second test measured the size of the bite mark. From that, researchers determined the creature was a whopping 14.3 feet.

“One of the witnesses said that the tail was four feet long, and in my mind was like, ‘Wow, that’s a big tail,’” said Adam Wong, a DAR Education Specialist. “And I asked Carl if it’s possible for a 14-foot shark to have a four foot tail, you know?”

The team can confirm the exact species & size, but it would take a more complicated test called DNA fingerprinting to possibly find the exact shark involved in the attack.

“They have used this technology with bears actually, up in Alaska,” Kraft said. “When there’s bear attacks on people. So the technology exists. We just haven’t applied it to sharks yet.”

by Mark Carpenter, Hawaii News Now |  Read more:
Image: HNN

Saturday, December 19, 2020

Why mRNA Vaccines Could Revolutionise Medicine

Almost 60 years ago, in February 1961, two teams of scientists stumbled on a discovery at the same time. Sydney Brenner in Cambridge and Jim Watson at Harvard independently spotted that genes send short-lived RNA copies of themselves to little machines called ribosomes where they are translated into proteins. ‘Sydney got most of the credit, but I don’t mind,’ Watson sighed last week when I asked him about it. They had solved a puzzle that had held up genetics for almost a decade. The short-lived copies came to be called messenger RNAs — mRNAs – and suddenly they now promise a spectacular revolution in medicine.

The first Covid-19 vaccine given to British people this month is not just a welcome breakthrough against a grim little enemy that has defied every other weapon we have tried, from handwashing to remdesivir and lockdowns. It is also the harbinger of a new approach to medicine altogether. Synthetic messengers that reprogram our cells to mount an immune response to almost any invader, including perhaps cancer, can now be rapidly and cheaply made.

Katalin KarikĂł — the Hungarian-born scientist who doggedly pursued the idea behind this kind of medication for decades at the University of Pennsylvania before joining BioNTech — and her collaborator Drew Weissman may be the Watson and Brenner of this story. They figured out 15 years ago how to send a message in a bubble into a cell and have it read. For years they had tried putting in normal RNA and found it did not work; the body spotted it was an alien and destroyed it.

But by subtly modifying one of the four letters in the message (replacing uridine with pseudouridine, a chemical found in some RNAs in the body anyway), they made a version that escaped the attention of the cell’s MI5 agents. Further refinements five years ago produced a recipe that worked reliably when delivered to cells inside a tiny oily bubble. The pandemic is the first time the technique has been tried in anger, and it worked: the first two Covid vaccines, BioNTech’s and Moderna’s, rely on these messengers.

The message tells the cell to make part of one of the virus’s proteins which then alerts the body’s immune system. Once invented, the thing is like a general-purpose vaccine. You simply rewrite the message between the same opening and closing sequences, put it in the same kind of bubble, and fire it off — almost as easy for genetic engineers these days as writing a text is for teenagers. It is faster, cheaper, safer and simpler than the old ways of making vaccines.

More conventional vaccine designs may still make a vital contribution to defeating the pandemic, Oxford’s included. And the messenger method has its drawbacks, such as the need for extreme cold storage. But in the long run, messengers probably represent the future of vaccines. Now the principle has been approved by regulators, there may be no need to go through the same laborious and expensive three-phase clinical trials every time. Faced with a truly lethal pandemic — with a 10 per cent mortality rate, say — the vanishingly small likelihood that a new messenger vaccine would be unsafe pales into insignificance. You could deploy it in weeks or days.

What is more, at the cost of a few billion dollars, the world may now be able to build a library of messenger vaccines for every plausible coronavirus and influenza virus with pandemic potential we can find, test them in animals and store the recipes on a hard disk, ready to go at a moment’s notice. Moderna’s vaccine was first synthesised in mid-January, before we even knew the coronavirus was coming out of China.

by Matt Ridley, The Spectator |  Read more:
Image: iStock
[ed. See also: Politics, Science and the Remarkable Race for a Coronavirus Vaccine (NYT).]

Barry Lopez on the Wolf Biologist Who Changed His Life as an Environmentalist

In the fall of 1975 I read a scientific report that made me sit up straight in my chair. It was entitled “The Eskimo Hunter’s View of Wolf Ecology and Behavior” and appeared in a peer-reviewed volume of technical papers called The Wild Canids, edited by Michael Fox. At the time I was in the middle of researching a book about wolves, so I read carefully every paper in Fox’s book. The one I regarded as a watershed statement was co-authored by Bob Stephenson and a Nunamiut Eskimo hunter from the central Brooks Range named Bob Ahgook.

In the early 1970s, the notion that indigenous peoples had anything of substance to offer Western science about wild animals, any important contribution to make to the overall study of wildlife, was either scoffed at by professionals in wildlife science or gently dismissed because the indigenous information, purportedly, “lacked rigor.” The report by Stephenson and Ahgook flew directly in the face of this idea. In my mind, their observations on wolf behavior were far and away the most interesting in Fox’s volume, though few recognized the revolutionary nature of this piece back then.

From the beginning of the colonization of the New World, Western science has had an ingrained, cultural prejudice against the validity of what indigenous people know about wild animals, about what they have learned during their centuries of living with them in the same environment. Their observations on social dynamics, cooperative hunting, ecology, neo-natal behavior, and diet were considered “contaminated” by folk belief or to have been based too often on anecdotal evidence alone.

Immediately after reading the Stephenson/Ahgook paper I wrote to Stephenson, a wolf biologist with the Alaska Department of Fish and Game (ADF&G), and asked if I could fly up to Fairbanks to speak with him. I’d not yet come across his perspective in the literature on wolves but very much wanted to listen to what he had to say, both about wolves and about his interactions with the Nunamiut. I arrived in Fairbanks in March 1976, which was late winter in interior Alaska. Bob picked me up at the airport and offered me a bed at his cabin outside the city, in Goldstream Valley. Three days later I was sitting next to him in the back seat of a Bell 206 JetRanger, a four-passenger helicopter, flying across Nelchina Basin, in the drainage of the Susitna River south of the Alaska Range. We were looking for wolves to radio collar. (...)

In June of 1979, Bob and I journeyed up to Anaktuvuk Pass—a village of just 110 people back then—where I finally met Bob Ahgook, Justus Mekiana, and some of the other hunters Bob had worked with in the early seventies. The afternoon our plane landed there, nearly every woman in the village rushed down to the airstrip to greet Bob. Some years before this, after Bob started living sporadically at Anaktuvuk in a sod house he purchased from Justus, a flu swept through the settlement. Bob nursed dozens of people through this epidemic, emptying honey buckets, changing and washing bed linen, and cooking meals. The senior women in particular never forgot his courtesy and allegiance.

I listened in on his conversations with the hunters during our time in Anaktuvuk as they caught up with each other’s lives. The regard in which they held Bob was obvious. Relations between ADF&G personnel and indigenous hunters in many of the villages back then were less than friendly. Bob, however, had not originally come to the village to lecture people about adhering to state hunting regulations; he’d come to hear what the local hunters had to say. He was eager to get their insights into the nature of amaguk, the wolf, especially about the parts of its life that had not yet made it into the professional journals. No wonder, when he initially approached them about it, they had welcomed him to travel with them as they set out in early summer to look for wolf dens.

Beyond his own empathetic personality, his obvious lack of racial prejudice, and his respect for people with backgrounds very different from his own, Bob had a sharp sense of humor. One day when we were all sitting around telling stories, especially about wolverines as I remember, Bob told a story about an arrogant man and his humiliating comeuppance. The Nunamiut men roared at the well-delivered punchline. One leaned so far sideways on his stool he fell over. Another man nearly spit his dentures.

Bob helped pioneer something new and unprecedented in Western wildlife science— the inclusion of traditional indigenous knowledge (TIK) in peer-reviewed wildlife publications. (There were a few others in the Fairbanks office of ADF&G at the time who sought out indigenous knowledge and gave it equal standing with Western-based knowledge. I think immediately of two marine mammalogists, John Burns and Bud Fay, and of Kathy Frost and Lloyd Lowry, both of whom I worked with later when I was researching another book, Arctic Dreams; but the road to advancing mutual cultural respect in Alaska was to be long and hard.)

On that first trip with Bob, to radio collar wolves in Nelchina Basin, I saw first-hand an exhibition of the knowledge Bob had acquired by choosing to turn first to the Nunamiut instead of investing his allotted ADF&G funds in flying aerial surveys. (He had been charged by ADF&G with learning how the Alyeska pipeline might be affecting the lives of wolves. He believed he’d learn much more by traveling with Nunamiut hunters first, questioning them about wolf behavior in general, before setting off to study wolves along the pipeline corridor.) One day we spotted a wolf trail in Nelchina Basin—seven wolves walking single-file across a frozen, snow-covered lake. They were more than a mile ahead of us when we sighted them nearing the edge of the taiga; when they heard the helicopter approaching, they bolted. We caught up with a group of three. Bob was able to dart two, one of whom entered a dense copse of trees before going down. As we got out of the helicopter in knee-deep snow, Bob said, “Female. Maybe six or seven.” In my naive way I jokingly said, “Oh, come on. You can’t sex and age that animal at this distance.”

“Well,” he answered. “That’s what those guys taught me to do, anyway.”

by Barry Lopez, LitHub |  Read more:
Image: uncredited
[ed. See also: Barry Lopez on the Life of a True Naturalist (Richard Nelson) in Raven’s Witness: The Alaska Life of Richard K. Nelson by Hank Lentfer. At the time I started at ADF&G Jack Lentfer was one of the world's leading polar bear experts (I don't know if this is his son). I just missed meeting Nelson a few times out in the villages.]


Wuhan, China
People play with toy guns outside a bar at night, almost a year after the global outbreak of the coronavirus disease. Nightlife in Wuhan is back in full swing almost seven months after the city lifted its stringent lockdown and the city’s young partygoers are embracing the catharsis. In scenes unimaginable in many cities around the world reeling under a resurgence of the pandemic, young Wuhan residents during a recent night out crowd-surfed, ate street food and packed the city’s nightclubs as they looked to make up for lost time.
via:
Image: Aly Song/Reuters
[ed. See also: here and here (NPR).]

Friday, December 18, 2020

Fandango


[ed. An all time favorite. Music: Pat Metheny Group (with Lyle Mays). See also: It's for You. and this.]

Can We Do Twice as Many Vaccinations as We Thought?

It’s been a very good month for Covid-19 vaccines. Last week, the Food and Drug Administration provided an emergency authorization for a vaccine produced by Pfizer-BioNTech. On Thursday, an advisory committee recommended authorizing a vaccine by Moderna, and the F.D.A. is expected to authorize it soon.

These vaccines are a triumph. In large-scale trials with tens of thousands of participants, both demonstrated a stunning 95 percent efficacy in preventing Covid-19 — a number exceeding our best hopes.

Both vaccines are supposed to be administered in two doses, a prime and a booster, 21 days apart for Pfizer and 28 days for Moderna. However, in data provided to the F.D.A., there are clues for a tantalizing possibility: that even a single dose may provide significant levels of protection against the disease.

If that’s shown to be the case, this would be a game changer, allowing us to vaccinate up to twice the number of people and greatly alleviating the suffering not just in the United States, but also in countries where vaccine shortages may take years to resolve.

But to get there — to test this possibility — we must act fast and must quickly acquire more data.

For both vaccines, the sharp drop in disease in the vaccinated group started about 10 to 14 days after the first dose, before receiving the second. Moderna reported the initial dose to be 92.1 percent efficacious in preventing Covid-19 starting two weeks after the initial shot, when the immune system effects from the vaccine kick in, before the second injection on the 28th day

That raises the question of whether we should already be administrating only a single dose. But while the data is suggestive, it is also limited; important questions remain, and approval would require high standards and more trials.

First, the science. While the vaccine trials were designed to evaluate a two-dose regimen, some immunity might be acquired before a second dose is administered. We know, for instance, that a Covid-19 infection appears to yield protection for at least six months. While infections are not vaccinations, and while we need more data on this, it’s plausible that the immunity gained from a vaccination may turn out to be even stronger than what comes from an infection. The reason we do a second — booster — vaccination is that these later doses help to solidify immune memory, in part by giving extra training to the cells that produce antibodies, a process called affinity maturation. But this process begins with the single dose, and the evidence collected between the time of the first and second doses in tens of thousands of people in the Phase 3 trials suggests that the level of affinity maturation may provide enough protection to meet the standards we have set for vaccine approval during this pandemic even without the second dose.

While we know that the single dose can protect against disease, we don’t yet know how long this immune protection will last, and at what level. However, there is no rule that says that vaccines must be boosted within weeks of each other. For measles, the booster dose is given years after the first dose. If the booster dose could be given six months or a year after the first dose, while maintaining high efficacy before the second dose, that would allow twice as many people to get vaccinated between now and later next year, accelerating herd immunity — greatly helping end the crisis phase of the pandemic in the United States.

by Zeynep Tufekci and Michael Mina, NY Times | Read more:
Image: Michael A. McCoy for The New York Times

Tiger Woods, Playing Partner and Parent


Tiger Woods, Playing Partner and Parent (NY Times)
Image: Phelan M. Ebenhack/Associated Press
[ed. Check out the swing video with Charlie and his dad. Like mirror images.]

Thursday, December 17, 2020

Up to 3 Million Devices Infected by Malware-Laced Chrome and Edge Add-Ons

As many as 3 million people have been infected by Chrome and Edge browser extensions that steal personal data and redirect users to ad or phishing sites, a security firm said on Wednesday.

In all, researchers from Prague-based Avast said they found 28 extensions for the Google Chrome and Microsoft Edge browsers that contained malware. The add-ons billed themselves as a way to download pictures, videos, or other content from sites including Facebook, Instagram, Vimeo, and Spotify. At the time this post went live, some, but not all, of the malicious extensions remained available for download from Google and Microsoft.

Avast researchers found malicious code in the JavaScript-based extensions that allows them to download malware onto an infected computer. In a post, the researchers wrote:
Users have also reported that these extensions are manipulating their internet experience and redirecting them to other websites. Anytime a user clicks on a link, the extensions send information about the click to the attacker’s control server, which can optionally send a command to redirect the victim from the real link target to a new hijacked URL before later redirecting them to the actual website they wanted to visit. User’s privacy is compromised by this procedure since a log of all clicks is being sent to these third party intermediary websites. The actors also exfiltrate and collect the user’s birth dates, email addresses, and device information, including first sign in time, last login time, name of the device, operating system, used browser and its version, even IP addresses (which could be used to find the approximate geographical location history of the user).
The researchers don’t yet know if the extensions came with the malicious code preinstalled or if the developers waited for the extensions to gain a critical mass of users and only then pushed a malicious update. It’s also possible that legitimate developers created the add-ons and then unknowingly sold them to someone who intended to use them maliciously.

[ed. Keep reading for full list:] (...)

The list Avast provides in its blog post includes links to download locations for both Chrome and Edge. Anyone who has downloaded one of these add-ons should remove it immediately and run a virus scan.

by Dan Goodin, ArsTechnica |  Read more:
Image: Getty
[ed. See also (on a national scale): U.S. Cyber Agency: Computer Hack Poses 'Grave Risk' (NPR).]

Wednesday, December 16, 2020


Katherine Bernhardt, Untitled 2020
via:
[ed. It's been that kind of year.]