A new theory that aims to unite Einstein’s equations and quantum theory suggests we should look at weight as a key to unification. CC-licensed photo by Janet Ramsden on Flickr.

You can sign up to receive each day’s Start Up post by email. You’ll need to click a confirmation link, so no spam.

---

There’s another post coming this week at the Social Warming Substack on Friday at 0845 UK time. Free signup.

---

A selection of 10 links for you. Does it scale? I’m @charlesarthur on Twitter. On Threads: charles_arthur. On Mastodon: https://newsie.social/@charlesarthur. Observations and links welcome.

---

Sellafield nuclear site hacked by groups linked to Russia and China • The Guardian

Anna Isaac and Alex Lawson:

»

The UK’s most hazardous nuclear site, Sellafield, has been hacked into by cyber groups closely linked to Russia and China, the Guardian can reveal.

The astonishing disclosure and its potential effects have been consistently covered up by senior staff at the vast nuclear waste and decommissioning site, the investigation has found.

The Guardian has discovered that the authorities do not know exactly when the IT systems were first compromised. But sources said breaches were first detected as far back as 2015, when experts realised sleeper malware – software that can lurk and be used to spy or attack systems – had been embedded in Sellafield’s computer networks.

It is still not known if the malware has been eradicated. It may mean some of Sellafield’s most sensitive activities, such as moving radioactive waste, monitoring for leaks of dangerous material and checking for fires, have been compromised.

Sources suggest it is likely foreign hackers have accessed the highest echelons of confidential material at the site, which sprawls across 6 sq km (2 sq miles) on the Cumbrian coast and is one of the most hazardous in the world.

The full extent of any data loss and any ongoing risks to systems was made harder to quantify by Sellafield’s failure to alert nuclear regulators for several years, sources said. The revelations have emerged in Nuclear Leaks, a year-long Guardian investigation into cyber hacking, radioactive contamination and toxic workplace culture at Sellafield.

The site has the largest store of plutonium on the planet and is a sprawling rubbish dump for nuclear waste from weapons programmes and decades of atomic power generation.

Guarded by armed police, it also holds emergency planning documents to be used should the UK come under foreign attack or face disaster. Built more than 70 years ago and formerly known as Windscale, it made plutonium for nuclear weapons during the cold war and has taken in radioactive waste from other countries, including Italy and Sweden.

The Guardian can also disclose that Sellafield, which has more than 11,000 staff, was last year placed into a form of “special measures” for consistent failings on cybersecurity, according to sources at the Office for Nuclear Regulation (ONR) and the security services.

«

Well that would be fun if the hackers gained any control of the systems. At a guess: the poor security is the result of ancient computer systems which are almost impossible to lock down, and there’s too little money allocated to computer security. (Storage is, of course, the potential downside of nuclear power.)
unique link to this extract

---

Federal government investigating multiple hacks of US water utilities • POLITICO

Maggie Miller and John Sakellariadis:

»

The [US] federal government is investigating multiple hacks suspected to have been launched by an Iranian government-linked cyber group against US water facilities that were using Israeli-made technology, according to two individuals familiar with the probes.

One of the breaches made headlines Saturday after the Tehran-linked Cyber Av3ngers group claimed responsibility for hitting a water authority in Pennsylvania. In total, the government is aware of and examining a “single digit” number of facilities that have been affected across the country, according to the two people who were granted anonymity to discuss details that had not yet been made public.

None of the hacks caused significant disruption, according to the individuals, while cyber experts familiar with the Pennsylvania incident say the activity appears designed to stoke fears about using Israeli devices.
Washington has been bracing for increased cyber breaches from Iran since the latest conflict broke out between Israel and the militant group Hamas, which Tehran has long supported. It also comes amid a spate of recent drone and rocket attacks on American troops in the Middle East, conducted by Iranian proxy groups.

Water facilities in general are a particularly vulnerable part of U.S. infrastructure, often due to a lack of funding and personnel for the issue at smaller utilities. The Biden administration has sought to address this problem, including through expanding partnerships with private organizations involved in the water sector.

«

This happened near the end of last week. (On Friday the US put out a formal alert about it: use better passwords!) Lucky that the attacks were of the script kiddie defacement level, rather than actively manipulating controls at water plants.
unique link to this extract

---

New theory claims to unite Einstein’s gravity with quantum mechanics • Phys.org

»

A radical theory that consistently unifies gravity and quantum mechanics while preserving Einstein’s classical concept of spacetime has been announced in two papers published simultaneously by UCL (University College London) physicists.

Modern physics is founded upon two pillars: quantum theory on the one hand, which governs the smallest particles in the universe, and Einstein’s theory of general relativity on the other, which explains gravity through the bending of spacetime. But these two theories are in contradiction with each other and a reconciliation has remained elusive for over a century.

The prevailing assumption has been that Einstein’s theory of gravity must be modified, or “quantized,” in order to fit within quantum theory. This is the approach of two leading candidates for a quantum theory of gravity, string theory and loop quantum gravity.

But a new theory, developed by Professor Jonathan Oppenheim (UCL Physics & Astronomy) and laid out in a paper in Physical Review X, challenges that consensus and takes an alternative approach by suggesting that spacetime may be classical—that is, not governed by quantum theory at all.

Instead of modifying spacetime, the theory—dubbed a “postquantum theory of classical gravity”—modifies quantum theory and predicts an intrinsic breakdown in predictability that is mediated by spacetime itself. This results in random and violent fluctuations in spacetime that are larger than envisaged under quantum theory, rendering the apparent weight of objects unpredictable if measured precisely enough.

A second paper, published simultaneously in Nature Communications and led by Professor Oppenheim’s former Ph.D. students, looks at some of the consequences of the theory, and proposes an experiment to test it: to measure a mass very precisely to see if its weight appears to fluctuate over time.

«

This comes under the heading of “big if true”. (Also: hard to really understand.)
unique link to this extract

---

Spotify to lay off 17% of workforce, its third round of job cuts this year • WSJ

Anne Steele:

»

Despite efforts to reduce costs, [founder and CEO Daniel] Ek said Spotify is still spending too much money. The audio streaming company has been squeezed by slower economic growth as well as interest-rate increases that have made it more expensive to borrow, he said.

“The Spotify of tomorrow must be defined by being relentlessly resourceful in the ways we operate, innovate, and tackle problems,” he said in a 1,000-word letter to staff. “Being lean is not just an option but a necessity.”

…Spotify, like other technology companies, grew in size and scope during the pandemic, with its head count nearly doubling over the past three years to more than 8,000 workers, as a result of hiring and acquisitions. As investors have become more focused on profitability than growth, many streaming-focused companies have aggressively cut costs. 

At Spotify that meant scaling back a $1bn bet on podcasting, including through layoffs earlier this year. It continues to back top podcasters Joe Rogan, Alex Cooper and Emma Chamberlain, and stopped making a number of other shows such as Meghan Markle’s “Archetypes.” 

Spotify, which reported a €462m loss in the first nine months of the year, is trying to balance investments in emerging areas such as its growing ad business with the need to become consistently profitable. The company also is focused on its audiobooks offering, which rolled out to subscribers in the US last month. 

Last year, during its first investor day since going public, Ek said he wants Spotify to be the world’s largest audio company and announced ambitious growth targets, such as generating $100bn in revenue by 2030. He said the company plans to reach profitability by 2024.

«

The memo is classic management blurb, but its key points are simply: capital used to be cheap, so we took on lots of people, now it isn’t, goodbye then.
unique link to this extract

---

Gmail’s AI-powered spam detection is its biggest security upgrade in years • Ars Technica

Ron Amadeo:

»

The latest post on the Google Security blog details a new upgrade to Gmail’s spam filters that Google is calling “one of the largest defense upgrades in recent years.” The upgrade comes in the form of a new text classification system called RETVec (Resilient & Efficient Text Vectorizer). Google says this can help understand “adversarial text manipulations”—these are emails full of special characters, emojis, typos, and other junk characters that previously were legible by humans but not easily understandable by machines. Previously, spam emails full of special characters made it through Gmail’s defenses easily.

…Emails like this have been so difficult to classify becuase, while any spam filter could probably swat down an email that says, “Congratulations! A balance of $1,000 is available for your jackpot account,” that’s not what this email actually says. A big portion of the letters here are “homoglyphs”—by diving into the endless depths of the Unicode standard, you can find obscure characters that look like they’re part of the normal Latin alphabet but actually aren’t.

For instance, the subject “𝐂𝐡𝐞𝐜𝐤_𝐘𝐨𝐮𝐫_𝐀𝐜𝐜𝐨𝐮𝐧𝐭” is weirdly bolded not because it has bolded styling but because it uses Unicode glyphs like the “Mathematical Bold Capital C.” It’s a math symbol that happens to look like the letter “C” to people, but the robot doing spam filtering accurately views it as a math symbol and doesn’t understand the intended English meaning. The closer you look at an email like this, the worse it gets: “C0NGRATULATIONS” has a zero replacing one of the “O” characters, the underlined letters in “Jᴀ̲ᴄ̲ᴋ̲pot” are so strange they don’t even come up in Unicode searches, and a lot of spaces are swapped out for periods or underscores. The result is that a spam filter looks at this hot mess of an email and basically gives up. (I don’t understand why illegible emails default to “inbox” instead of “spam,” but I’m not in charge.)

Google says RETVec is here to save the day: “RETVec is trained to be resilient against character-level manipulations including insertion, deletion, typos, homoglyphs, LEET substitution, and more. The RETVec model is trained on top of a novel character encoder which can encode all UTF-8 characters and words efficiently. Thus, RETVec works out-of-the-box on over 100 languages w

«

unique link to this extract

---

Federal judge vows to investigate Google for intentionally destroying chats • The Verge

Sean Hollister:

»

Judge James Donato is overseeing Epic v. Google, a case that could determine the future of the Android app store — but testimony in this case may have more repercussions for Google too.

On Friday, Judge Donato vowed to investigate Google for intentionally and systematically suppressing evidence, calling the company’s conduct “a frontal assault on the fair administration of justice.” We were there in the courtroom for his explanation.

“I am going to get to the bottom of who is responsible,” he said, adding he would pursue these issues “on my own, outside of this trial.”

Testimony in the Epic v. Google trial — and in a parallel DOJ antitrust suit against Google in Washington, DC — revealed that Google automatically deleted chat messages between employees, and that employees all the way up to CEO Sundar Pichai intentionally used that to make certain conversations disappear. Pichai, and many other employees, also testified they did not change the auto-delete setting even after they were made aware of their legal obligation to preserve evidence.

And Pichai, among other employees, admitted that they marked documents as legally privileged just to keep them out of other people’s hands.

On November 14th, Pichai told the court that he relied on his legal and compliance teams to instruct him properly, particularly Alphabet chief legal officer Kent Walker — and so Judge Donato hauled Walker into court two days later.

But the judge was not satisfied with Walker’s testimony, either, accusing him of “tap-dancing around.”

«

Google has so many court cases going on that you’d think everything would automatically get filed as potentially liable for discovery.
unique link to this extract

---

Don’t be fooled: “carbon capture and storage” is no solution to oil and gas emissions • Climate Change News

Laurence Tubiana and Emmanuel Guérin:

»

At the Cop28 climate conference taking place in Dubai, oil and gas producers are counting on carbon capture and storage (CCS) for a social license to keep drilling as usual. Don’t fall for it.

While it can be helpful at the margins, CCS cannot possibly deliver reductions in greenhouse gas emissions on the scale needed to avert climate disaster. This can only happen if the main sources of emissions – fossil fuels – are phased out.

CCS is expected to deliver less than a tenth of the cumulative carbon dioxide emission reductions, over the 2023-2050 period, needed to hold global warming to 1.5C.

In the International Energy Agency net zero emission (NZE) scenario, CCS captures approximately 1.5 billion tons (GT) of CO2 in 2030, and 6 GT by 2050. But very little of that is applied to emissions from fossil fuel production and combustion. It is primarily used to capture CO2 from sectors where emissions are harder and more expensive to reduce, such as cement production or chemicals.

Is the IEA NZE scenario the only way to achieve net-zero emission and limit the temperature increase to 1.5ºC? Certainly not. …scenarios coming out of models are not to be confused with reality. The fossil fuel industry claims it can achieve the same objectives as in the IEA NZE scenario, while producing more oil and gas, by relying more heavily on CCS. Is this true?

…Another IEA scenario, the stated policies scenario, gives the answer. Reaching net-zero carbon emissions in this way would require the capture of 32 GT of CO2 emissions by 2050, including 23 GT through direct air capture (DAC).

At this scale, DAC alone would require 26,000 TWh of electricity to operate, which is more than the total global electricity demand today.

«

A while back I considered writing a book about carbon capture – the climate saviours! Then I looked into it and realised it was all Not Going To Happen.
unique link to this extract

---

Meet the first Spanish AI model earning up to €10,000 per month • Euronews

Laura Llach:

»

Last summer, Rubén Cruz, her designer and founder of the agency The Clueless, was going through a rough patch because he didn’t have many clients.

“We started analysing how we were working and realised that many projects were being put on hold or cancelled due to problems beyond our control. Often it was the fault of the influencer or model and not due to design issues,” Cruz told Euronews.

So they decided to create their own influencer to use as a model for the brands that approached them.

They created Aitana, an exuberant 25-year-old pink-haired woman from Barcelona whose physical appearance is close to perfection. The virtual model can earn up to €10,000 a month, according to her creator, but the average is around €3,000.

“We did it so that we could make a better living and not be dependent on other people who have egos, who have manias, or who just want to make a lot of money by posing,” said Cruz.

Aitana’s income is quite scattered. She earns just over €1,000 per advert, and has recently become the face of Big, a sports supplement company, and as if that weren’t enough, she uploads photos of herself in lingerie to Fanvue, a platform similar to OnlyFans.

In just a few months, she has managed to gain more than 121,000 followers on Instagram and her photos get thousands of views and reactions. She even receives private messages from celebrities who are unaware that she is not an actual person.

“One day, a well-known Latin American actor texted to ask her out. This actor has about five million followers and some of our team watched his TV series when they were kids,” said Cruz. “He had no idea Aitana didn’t exist.”

«

Plus also they don’t get stroppy. Which turns out to be a big plus.
unique link to this extract

---

Elon Musk’s xAI will launch ‘Grok’ chatbot this week: what to expect • VentureBeat

Shubham Sharma:

»

The company has already opened signups for the program, but the caveat is that it will be only available to those who have taken the most expensive paid plan of the social networking platform. Those on other plans or using X for free will not get access just yet.

…While many details remain under wraps, the X posts shared by Musk and his team at xAI indicate that Grok will be a ChatGPT competitor, which will be able to engage in back-and-forth conversations when prompted. It is expected to handle all sorts of queries from users, right from mathematical problems to code challenges. 

However, unlike other players in the AI race, Grok will differentiate with exclusive access to X and its realtime, user-generated posts and information. The model behind the assistant has been trained on billions of posts (formerly called tweets) on X and will have access to the most recent data posted on X, enabling it to provide up-to-date information when asked about a current issue. 

«

It’s trained on tweets? This thing is going to make previous racist chatbots look like amateurs.
unique link to this extract

---

Vendor lock-in is a good thing? HP’s CFO thinks so • The Register

Paul Kunert:

»

Tech vendors – software, hardware, and cloud services – generally avoid terms that suggest they’re perhaps in some way pinning down customers in a strategic sales hold.

But as Marie Myers, chief financial officer at HP, was this week talking to the UBS Global Technology conference, in front of investors, the thrust of the message was geared toward the audience.

“We absolutely see when you move a customer from that pure transactional model … whether it’s Instant Ink, plus adding on that paper, we sort of see a 20% uplift on the value of that customer because you’re locking that person, committing to a longer-term relationship.”

Instant Ink is a subscription in which ink or toner cartridges are dispatched when needed, with customers paying for plans that start at $0.99 and run to $25.99 per month. As of May last year, HP had more than 11 million subscribers to the service. Since then it has banked double-digit percentage figures on the revenues front.

By pre-pandemic 2019, HP had grown weary of third-party cartridge makers stealing its supplies business. It pledged to charge more upfront for certain printer hardware (“rebalance the system profitability, capturing more profit upfront”).

HP also set in motion new subscriptions, and launched Smart Tank hardware filled with a pre-defined amount of ink/toner. These now account for 60% of total shipments.

Myers told the UBS Conference she was “really proud” that HP could “raise the range on our print margins” based on “bold moves and shifting models.”

«

As El Reg points out, it’s not often that CxOs say the quiet part out loud, but they will in front of an investor conference.
unique link to this extract

---

• Why do social networks drive us a little mad? • Why does angry content seem to dominate what we see? • How much of a role do algorithms play in affecting what we see and do online? • What can we do about it? • Did Facebook have any inkling of what was coming in Myanmar in 2016? Read Social Warming, my latest book, and find answers – and more.

---

Errata, corrigenda and ai no corrida: none notified