Monday, July 04, 2022

IT'S "THAT GODDAMN PARTICLE"
10 years after the discovery of the Higgs boson, physicists still can't get enough of the 'God particle'


By Keith Cooper published about 16 hours ago

"Particle physics has changed more in the past 10 years than in the previous 30 years."

An artist's depiction of a Higgs boson. (Image credit: Tobias Roetsch/Future Publishing via Getty Images)

Ten years ago, jubilant physicists working on the world's most powerful science experiment, the Large Hadron Collider (LHC) at CERN, announced the discovery of the Higgs boson — a particle that scientists had been searching for since 1964, when its existence was first predicted.

"For particle physicists, the Higgs boson was the missing piece of the Standard Model," Victoria Martin, a professor of particle physics at the University of Edinburgh in the U.K., told Space.com.

Although the Large Hadron Collider's remit is wide-ranging, searching for the Higgs boson was its top priority when it came online in 2010. The LHC's two key experiments — ATLAS (A Toroidal LHC Apparatus) and CMS (Compact Muon Solenoid) — detected the Higgs boson within just two years of beginning operations.

"We were not expecting to see the Higgs boson so quickly," CERN's Director-General, Fabiola Gianotti, said during a preview press conference held on Thursday (June 30). It was the LHC's superior computing infrastructure applied to experiments that performed better than their design specifications — testament to the many years of hard work put into building the LHC — that accelerated the Higgs boson's discovery, she said.


Related: 10 cosmic mysteries the Large Hadron Collider could unravel

The mystery of mass

The Higgs boson changed the world of particle physics, opening doors that had been slammed shut until its discovery.

"Particle physics has changed more in the past 10 years than in the previous 30 years," Gian Giudice, head of CERN's theoretical physics department, said during the event.

The Higgs boson is important because it carries the force of an energy field known as the Higgs field, in much the same way that a photon carries the force of the electromagnetic field.

"The field is more fundamental than the particles," Martin said. "It permeates all the way across space and time." It's the interaction between certain particles and the Higgs boson, which represents the Higgs field, that gives those particles their mass.

"Particle physics has changed more in the past 10 years than in the previous 30 years."— Gian Giudice

One analogy is to think of the Higgs field as a kind of cosmic treacle that slows down some particles more than others. Less massive particles pass through the Higgs field relatively effortlessly, and so they can fly off at the speed of light — think of electrons, which have a tiny mass, or photons, which have no mass at all. For other particles, wading through the cosmic treacle of the Higgs field slows them down, giving them more mass, and therefore these particles are the most massive.

Just like these particles, scientists believe — although they have yet to watch the process happen — that the Higgs boson also gets its mass from interacting with itself. And measurements by the LHC have shown that the Higgs boson has a high mass as well: 125 billion electronvolts, which is about 125 times more massive than one of the positively charged protons at an atom's core. (Thanks to Einstein's special relativity, particle physicists know that mass and energy are interchangeable and so refer to masses in terms of their energy.) Only one fundamental particle known to science is more massive.

Discovering the Higgs boson and measuring its mass was only the beginning. "We've spent the last 10 years testing the Higgs boson, because discovering it was one thing, but the Standard Model also tells us lots of things about the way the Higgs boson should behave," Martin said.



The ATLAS instrument at the Large Hadron Collider.
 (Image credit: CERN/Claudia Marcelloni/Max Brice)


An existential question



For one thing, the Higgs boson's quantum spin — or lack thereof — could provide an insight into why our universe even exists.

Every known particle has a quantum spin, except for the Higgs boson. The Standard Model of particle physics predicted this oddity, so it isn't a surprise, but scientists including Martin and her research team have continued trying to measure the spin of the Higgs boson as a way to test the Standard Model. So far, they've found no evidence that it has any spin.

The reason why the Higgs boson has no spin when every other known particle does is because of the nature of the Higgs field. Unlike the gravitational and electromagnetic fields, which have obvious sources such as an object's mass or an electric current passing through magnetic fields, the Higgs field has no source. It's just there, a non-localized part of the cosmos pervading everything. As such it is coupled to the 'vacuum,' the very fabric of space-time, and therefore the field shares the vacuum's properties. The vacuum has no quantum spin, and therefore neither does the Higgs boson.

However, the vacuum isn't inert. Particles fizz in and out of existence thanks to quantum fluctuations, raising the energy level of the vacuum above its lowest possible state. The thing about energy levels is that an object — be it a person in a gravitational field, an electron orbiting an atomic nucleus, or the vacuum — always prefers to be at its lowest possible energy level. Yet our universe is not. What keeps the universe from succumbing to the inevitable urge to drop energy levels is the shape of what scientists characterize as the energy potential of the Higgs field.

A graph of this energy potential would look like a 'mountain' in the middle, and two 'valleys' flanked by 'hills' on either side. The energy level of the vacuum would lie in one of those valleys, but physicists strongly suspect that on either side of those hills are even deeper 'valleys' representing even lower energy states. And the measurement of the mass of the Higgs boson supports this idea; the particle is so large that it suggests that there's room for the Higgs field to potentially decay to a lower energy level one day.

"The Higgs boson is a very precise microscope to study nature at the smallest scales, and at the same time it is a formidable telescope to access physics at very high energy scales."— Fabiola Gianotti

For this reason, physicists call our vacuum a 'false' vacuum, because it 'wants' to decay to a lower energy — a 'truer' vacuum. The valleys and hills of the Higgs field's energy potential are holding our universe in this false vacuum, long enough for planets, stars and galaxies to form.

However, over eons upon eons of time, the false vacuum is inherently unstable, and eventually it will decay. Maybe quantum energy fluctuations will allow the false vacuum to climb over those 'hills' and roll down the slope on the other side, or maybe the strange phenomenon of quantum tunneling will let it drill through the 'hill' that is the energy barrier.

However it happens, it would be bad for the universe — the decay of the false vacuum would expand outward in a wave moving at the speed of light, destroying everything and replacing it all with a true vacuum. It's only the Higgs field that is holding vacuum decay at bay, so we therefore have the Higgs field to thank for our current universe




















A schematic of one of the proton-proton collisions at the LHC that revealed the Higgs boson decaying into daughter particles.
 (Image credit: CERN/CMS Collaboration/Thomas McCauley/Lucas Taylor)

Another run at understanding the universe


In addition to the Higgs boson's spin, researchers have spent the past decade trying to pin down its life span. The Higgs boson existence is fleeting; the standard model predicts that a Higgs boson survives for a tiny amount of time, just 10^–22 seconds, before breaking apart into more subatomic particles. However, this calculation hasn't been experimentally verified yet. "It happens so quickly," Martin said.

THEY ARE ABOUT TO CHANGE QUANTUM REALITY, AGAIN
Physicists hope that the next operational phase on the LHC, dubbed Run 3 and beginning on Tuesday (July 5), will serve as the much sought-after stopwatch.

"We hope that in an indirect way we might be able to make a measurement of how long the Higgs boson is living for," Martin said. "If we can measure the lifetime it will give us more constraints on what particles the Higgs boson is decaying into."

In turn, understanding how the Higgs boson breaks apart into other particles could reveal hidden subatomic particles new to science, perhaps even including particles of mysterious dark matter.

Because of these implications, Gianotti described the Higgs boson as a crucial tool for probing the deepest mysteries of particle physics. "The Higgs boson is a very precise microscope to study nature at the smallest scales, and at the same time it is a formidable telescope to access physics at very high energy scales," she said.

The discovery of the Higgs boson hasn't just allowed physicists to tick another particle off the list. Its very existence and its behavior raise questions about some of the most profound areas of fundamental physics: the structure of matter in the universe, the fate of the universe, whether the universe is stable, and how elementary particles relate to each other.

RELATED STORIES:
Higgs boson: The 'God Particle' explained
The Large Hadron Collider: Inside CERN's atom smasher
The Higgs boson could have kept our universe from collapsing

However, the Higgs boson continues to play coy with its secrets. "Everything that we've seen so far seems to be just what the Standard Model predicted," Martin said. "While this is interesting, it is also slightly disappointing because we were hoping that the Higgs boson might help us see beyond the Standard Model."

Far from breaking the rules and destroying physics, moving beyond the Standard Model is necessary to explain phenomena that doesn't fit, such as dark matter, or opening doorways into new physics, such as supersymmetry. It's why, fresh off four years of upgrades, the LHC will once again tackle the mysteries of the Higgs boson.


Follow Keith Cooper on Twitter @21stCenturySETI. Follow us on Twitter @Spacedotcom and on Facebook.
Keith Cooper (opens in new tab)
Contributing writer
Keith Cooper is a freelance science journalist and editor in the United Kingdom, and has a degree in physics and astrophysics from the University of Manchester. He's the author of "The Contact Paradox: Challenging Our Assumptions in the Search for Extraterrestrial Intelligence" (Bloomsbury Sigma, 2020) and has written articles on astronomy, space, physics and astrobiology for a multitude of magazines and websites.

Particle physics: A decade of Higgs boson research

Nature

July 4, 2022

Ten years after the first reported observation of the Higgs boson at the CERN Large Hadron Collider, the most up-to-date results of the properties of this elementary particle from the ATLAS and CMS collaborations are presented in two papers published Nature.

In July 2012, the ATLAS and CMS collaborations announced that they had found a particle with properties that matched those expected for the Higgs boson. Since then, more than 30 times as many Higgs bosons have been detected, offering the opportunity to verify if its behaviour matches up with the standard model of elementary particle physics.

The two collaborations present an analysis of data produced within Run 2 of the Large Hadron Collider (between 2015 and 2018) that involve production or decay of Higgs bosons. The key question investigated by the researchers is how the Higgs boson interacts with other elementary particles. According to the theory from the standard model of particle physics, the strength with which any particle interacts with the Higgs boson should be proportional to the particle mass. Ten years of data allow the two collaborations to estimate, within reasonable errors, the Higgs interaction with the heaviest known particles: top and bottom quarks, Z and W bosons and tau lepton. For all these particles the data fall precisely in line, within experimental errors, of the behaviour predicted by the standard model of elementary particle physics.

The progress made over the past decade is predicted to continue over the next one. Some of the key properties of the Higgs boson, such as coupling to itself or to lighter particles, remain to be measured and potentially reveal deviations from theory. However, the current dataset is expected to more than double during the next decade of research, which will help to improve our understanding of Higgs boson physics.

The progress made in the past decade, what remains to be established, and potential future explorations are discussed in a Perspective by Giulia Zanderighi and colleagues.

doi:10.1038/s41586-022-04893-w



HITLER MEETS VON MISES
Libertarian Conference Cancels Notorious White Nationalist

Zachary Petrizzo, Will Sommer
Fri, July 1, 2022 

Stephanie Keith/Getty

“The Most Canceled Man in America” has, in fact, been canceled.

Nearly two weeks ahead of the libertarian conference FreedomFest, a lead conference organizer told The Daily Beast on Thursday night that officials had booted the holocaust-denying, Vladimir Putin-applauding, white supremacist rally-going Nicholas Fuentes from the conference’s lineup.

Fuentes had initially been scheduled to appear on a Freedom Fest panel titled “How to Fight the Information Police.” Fuentes was also supposed to host a screening of his short film, “The Most Canceled Man in America,” according to an agenda obtained by The Daily Beast.

Jan. 6 Committee Subpoenas White Nationalists Nicholas J. Fuentes and Patrick Casey

But all of that was scratched, after the libertarian conference in Las Vegas thought better of associating with the notorious white nationalist.

FreedomFest would have put Fuentes in the same conference as the likes of other scheduled speakers like Fox News host Lisa Kennedy, former congressman Justin Amash (L-MI), and failed presidential and New York City mayoral candidate Andrew Yang. On Thursday, though, FreedomFest executive director Valerie Durham told The Daily Beast that Fuentes had been banned after several unnamed “leaders” complained about his appearance on the schedule.

“FreedomFest strongly believes in the fundamental right to free speech and free expression in our nation’s civil discourse,” Durham said in an email. “However, we also reserve the right not to endorse certain points of view that lead our nation away from such discourse.”

Durham conceded that the conference “did not adequately vet the film.”

“During this time, we were approached by several leaders we respect who gave us further information,” Durham wrote. “Upon learning this information, we took a deeper look into Mr. Fuentes’ ideology. As a result of that further research, we decided to remove Mr. Fuentes as a panelist.”

Fuentes didn’t return The Daily Beast’s request for comment.

“The film festival is about cancel culture, and they cancelled our film lol,” Fuentes said on the social media app Telegram, before urging his fans to complain to the conference organizers.

After his FreedomFest exile, Fuentes now plans to screen his film elsewhere in Las Vegas during the conference.

Jason Miller’s ‘Free Speech’ Social Media Platform Gettr Boots White Nationalist

Another far-right figure allied with Fuentes is having her own fight with FreedomFest. Activist and failed Delaware Senate candidate Lauren Witzke, who has aligned herself with Fuentes’s loyal “groyper army,” complained on Telegram this week that FreedomFest booted her from a panel.

Witzke claimed that one of the sponsors of the event, Epik, a domain registrar known for working with extremist websites, invited her to speak on a panel alongside right-wing radio host Eric Metaxas, conservative operative James O’Keefe, and Epik founder Rob Monster.

“I was kindly invited on the panel by Freedom Fest Platinum Sponsor, Epik - to which I am still extremely grateful for the invitation,” Witzke wrote on Telegram.

According to Durham, though, Witzke never got that far. FreedomFest’s lead organizer said the conference never agreed to let her appear at the conference.

“With regard to Lauren Witzke, she was invited by a sponsor to appear at FreedomFest, but we did not consent to have her speak at FreedomFest,” Durham said.

Despite apparently never securing a spot to speak at the conference, in an email to The Daily Beast, Witzke claimed the conference was committing “egregious discrimination against outspoken Christians.”

“I was initially confirmed and approved by Freedom Fest as a speaker on the panel,” she further claimed. “I wouldn't have just purchased plane tickets to Vegas had this not been absolutely confirmed.”

National-anarchism is a right-wing nationalist ideology which advocates racial separatism, racial nationalism, ethnic nationalism, and racial purity.

National-Anarchists are ethnopluralists, who oppose multiracialism and miscegenation, but they do not seek to impose their racialist views on others because ...

National Anarchism? Translator's Introduction. The Spanish civil war saw a marked increase in nationalist sentiments expressed among prominent anarchist ...
Kicking aside the shallow left and right sidebanks of history, National Anarchism "seeks to transcend the superfluous and obsolete ideologies of `left', `right' ...
 Rating: 3.6 · ‎20 votes
May 29, 2009 — In The Case for National-Anarchist Entryism, leading national anarchist ideologue Troy Southgate, a Briton, called for national anarchists to ...
Jun 24, 2014 — The National-Anarchists, for example, denounce the centralized state, capitalism, and globalization — but in its place they seek to establish a ...

'Óró Sé do Bheatha Bhaile' - Seo Linn

Seo Linn singing their version of traditional Irish song 'Óró Sé do Bheatha Bhaile'.

Recorded for Seachtain na Gaeilge 2016

Seo Linn le leagan den amhrán traidisiúnta: 'Óró Sé do Bheatha Bhaile'. Taifead déanta i gcomhair Seachtain na Gaeilge 2016.

More videos from Seo Linn:
https://www.youtube.com/c/SeoLinn/videos  Liricí 'Sé do bheatha, a bhean ba léanmhar, Do b' é ár gcreach thú bheith i ngéibheann, Do dhúiche bhreá i seilbh méirleach, Is tú díolta leis na Gallaibh. Óró, sé do bheatha 'bhaile, Óró, sé do bheatha 'bhaile, Óró, sé do bheatha 'bhaile Anois ar theacht an tsamhraidh. Tá Gráinne Mhaol ag teacht thar sáile, Óglaigh armtha léi mar gharda, Gaeil iad féin is ní Frainc ná Spáinnigh, Is cuirfidh siad ruaig ar Ghallaibh. Óró, sé do bheatha 'bhaile, (x3) Anois ar theacht an tsamhraidh. A bhuí le Rí na bhFeart go bhfeiceam, Mura mbeam beo ina dhiaidh ach seachtain, Gráinne Mhaol agus míle gaiscíoch, Ag fógairt fáin ar Ghallaibh. Óró, sé do bheatha 'bhaile, (x3) Anois ar theacht an tsamhraidh. Lyrics Welcome oh woman who was so afflicted, It was our ruin that you were in bondage, Our fine land in the possession of thieves... And you sold to the foreigners! Oh-ro You're welcome home, Oh-ro You're welcome home, Oh-ro You're welcome home... Now that summer's coming! Gráinne O'Malley is coming over the sea, Armed warriors along with her as her guard, They're Irish themselves, not French nor Spanish, And they will rout the foreigners! Oh-ro You're welcome home (x3) Now that summer's coming! May it please the King of Miracles that we might see, Although we may live for a week once after, Gráinne Mhaol and a thousand warriors... Dispersing the foreigners! Oh-ro You're welcome home (x3) Now that summer's coming!
Period tracking apps are no longer safe. Delete them

Opinion: The convenience isn't worth the risk.


Written by Charlie Osborne, ZDNET Contributor on June 29, 2022

The battle over abortion and women's rights to healthcare reached a peak in the United States the moment the landmark Roe v. Wade case was overturned by the Supreme Court.

In a number of states, both now and expected in the coming weeks, providing abortion healthcare services will be made illegal, or so restricted they will be almost impossible to obtain.

Concerns have now been raised over period tracking apps' data practices and security, and what their use could mean for those able to get pregnant in the future.

The message is simple: You should stop using them. As warned by Professor Gina Neff, you should "delete every digital trace of any menstrual tracking."

This is why.

What is Roe v. Wade?

For those unfamiliar with the current upheaval in the US, the 1973 Roe v. Wade case, brought forward against state laws restricting abortion, was a landmark ruling that effectively legalized the procedure in the United States.

Different US states still take varied views on abortion and when it is permissible, but those who can become pregnant had a constitutional right to the healthcare service.

In May, reports surfaced of a leaked draft majority opinion showing the US Supreme Court was likely set to overturn Roe v. Wade.

As reported by the Associated Press, Senate Democrats tried to enshrine the 50-year-old ruling into law through new legislation, which, if passed, would have made abortion rights far harder to overturn. However, the proposed bill was blocked by the Republican party.

On June 24, the Supreme Court overturned the ruling and the impact was felt almost instantaneously, with some states enacting so-called 'trigger' laws prepared with the possibility of the case being overturned in mind. Clinics in other states have paused services to assess the changing legal landscape.

Approximately half of US states are expected to tighten abortion rules, whereas others including California, Oregon, and Washington have vowed to protect abortion access.

Amnesty International has called the decision a "grim milestone" in the history of the United States, with individuals "now facing a future where they will not be able to make deeply personal choices that affect their bodies, their future, and the well-being of their families."

There is concern that in the aftermath of Roe v. Wade, other landmark cases may be scrutinized involving issues including the right to contraception and same-sex marriage. Furthermore, there is the worry that other countries may follow suit and reexamine their abortion laws.

Technology in the medical sector

Wearable health tech, hospital robots, and telehealth appointments with healthcare providers all have become commonplace. As we've seen during the pandemic, technology can be of great benefit to overstretched medical professionals, and we can use mobile technology, too, on a personal level -- to track our activities, sleeping patterns, and more.

Millions of people with periods worldwide use menstruation tracking apps to track and monitor their monthly cycles, and the overarching "femtech" market is estimated to be worth roughly $49 billion by 2025.

What do period tracking apps do?

Menstruation apps log user input related to menstrual cycles over several months to predict when their next one is due.

These apps can also be used to record changes in flow, detect cycle irregularities, predict likely fertility windows, log symptoms such as mood swings and cramps, and record sexual activities.

Some apps focus on users attempting to become pregnant. Others offer general health and lifestyle advice. Some can quietly connect users to healthcare providers if they have questions or concerns.

Period tracking apps can be particularly useful for users entering puberty and for those with irregular cycles. However, they should not be used as a form of birth control and, as people with periods know all too well, accurately predicting your next cycle start date is far from an exact science.

Which are the most popular period trackers?

In the Android and iOS mobile ecosystems, some of the most popular menstruation trackers are Flo, Clue, Stardust, Glow, MagicGirl, and Natural Cycles.

What do period tracker apps have to do with the US Supreme Court?

There are several emerging issues connecting the two. Period, fertility, and sexual activity trackers, by design, have to collect personal and intimate information from their users, which is stored and analyzed over time.

Users can then tap into their record for next-cycle estimates, the days they may be most fertile, and to find out if they are likely to be pregnant.

In a post-Roe world, and if a large number of US states choose to clamp down on abortion services, data from these apps could be used in prosecutions.

Online information and digital records can make or break a criminal case. This can include social networking posts, email records, conversations, location (GPS) data, and user data collected by personal health mobile apps.

Keep in mind that such evidence may be flimsy, at best, considering how inaccurate these trackers can be. Should a user, for example, cross state lines to have a procedure done and their location or cycle records are known, investigators would need to prove beyond a reasonable doubt that the individual broke the law.

However, information obtained from reproductive health and monitoring apps could, in theory, be used to build up a case.

Prosecutors could combine data from a period tracker app indicating a potential pregnancy with movement across a state line gathered from GPS and phone signal data, and payment records, for example.

The Electronic Frontier Foundation puts it thus:


"Service providers can expect a raft of subpoenas and warrants seeking user data that could be employed to prosecute abortion seekers, providers, and helpers.

They can also expect pressure to aggressively police the use of their services to provide information that may be classified in many states as facilitating a crime."


The case for criminality

If seeking an abortion becomes a criminal act in some states, then how app providers secure and manage user data has to become a priority -- not just in terms of transparency, but what future legal US mandates may require.

User data that is fed through third-party infrastructure providers, for example, could become subject to warrants or subpoenas in criminal investigations if individuals are suspected of being pregnant or of illegally seeking a termination. In addition, app providers themselves may be subject to user data requests or demands if the information they hold isn't legally protected.

As noted by Slate, the data held by period trackers might not have any intrinsic value to government agencies or investigators, but now Roe v. Wade is dissolved, these records could be used as evidence in a prosecution in the future.

While the state of Louisiana has withdrawn a bill treating abortions as homicides and the current governing body's attempt at implementing a trigger law on abortion has been temporarily blocked, we are yet to see how states, on the whole, manage the new legal landscape and how far criminality will enter the equation for both abortion healthcare providers and their patients in 'unsafe' states.

If this is the future, other data sets gathered by these apps -- such as smoking habits and alcohol intake, as Slate reports -- could also be of interest to prosecutors.

Isn't this being overblown?


Not necessarily.


It wasn't so long ago that whistleblower Edward Snowden landed the US National Security Agency (NSA) in hot water over its mass digital surveillance programs.

Last year, Flo drew the ire of the US Federal Trade Commission (FTC) for allegedly misleading users by "sharing the health information of users with outside data analytics providers." In response, Flo said:

We understand that our users place trust in our technology to keep their sensitive information private and the responsibility we have to provide a safe and secure platform for them to use [...] Our agreement with the FTC is not an admission of any wrongdoing. Rather, it is a settlement to avoid the time and expense of litigation and enables us to decisively put this matter behind us.

In a 2020 study conducted by Privacy International, the civil rights group found that menstruation apps stored a "dizzying" amount of data on their users. For example, after requesting a copy of their information under GDPR, out of five apps surveyed, only two provided records -- and these revealed data concerning menstruation, their sexual lives, diseases, orgasm rates, masturbation habits, medication intake, and how many children they have, and more.

According to Privacy International, some of this information was shared with third parties. (It should be noted that some of the apps have reviewed their data policies since the report went live.)

Published on June 29, a new study conducted by Atlas VPN examines how apps dedicated to women's health, including pregnancy or period trackers, "heavily collect sensitive data and share it with third parties."

After conducting an analysis of Android and iOS apps, Atlas VPN found that many apps contain trackers which send data to third parties, require a large number of permissions, and -- in some cases -- even ask permission from users to access their search histories and contact information.

The issue is that some period tracking apps may have vague data protection policies. These apps may share information -- unaware that it could be used against its users -- or may outright sell information to third parties.

"Americans lack fundamental privacy protections. Post-Roe makes that tragically clear. For many women, post-Roe privacy is more urgent. But privacy is even more important for ALL of us now," Neff says, adding:

Pay attention to your apps. They are an easy target, and they affect many of us. What are their data policies? How are companies protecting their users? What are their data retention policies? What do app companies do with law enforcement subpoenas?.

Data management: The US vs. Europe

How mobile app developers, across every sector, handle data is often questionable and is not necessarily protected under laws such as the EU's GDPR.

The EU's General Data Protection Regulation (GDPR) requires organizations in the bloc to adhere to basic data protection standards, only hold "necessary" user information, and submit to strict rules depending on whether they are processors or controllers.

When it comes to medical information, this is defined as "physical or mental health of an individual, including the provision of health care services, which reveals information about their health status." Some period trackers may be protected under GDPR, and in general, medical data can be exempt from disclosure when a data request is made if being compliant is "likely to cause serious harm to the physical or mental health of any individual."

GDPR-bound apps may offer more protection, but this isn't guaranteed.

Even if an EU-based app does not comply with US data requests, that data is still up for grabs if law enforcement obtains your device.

Furthermore, as Roe v. Wade highlighted, existing laws can change at any time. While a company may not be compelled today to hand over your personal information, this does not mean they won't be in the future.


The US' HIPAA laws, too, do not necessarily apply to the information gathered by period tracker apps as the law only deals with Protected Health Information (PHI). PHI is defined as "individually identifiable health information that is transmitted or maintained in electronic, written, or oral form," but unless an app connects to healthcare providers for medical monitoring, it is unlikely to be HIPAA-compliant.

Many period trackers also deal with lifestyle-based information and as these datasets are not inherently focused on health, these datasets would not be protected as PHI.

The developers of apps under GDPR are required to clearly lay out how information is managed and used in privacy policies, and these should be checked if you choose to use a period tracker.

However, as Privacy International found in a 2019 study, developers can still fall short of GDPR and other data protection standards.

In other words, whether or not an app is said to be HIPAA/GDPR-compliant, in real-world scenarios there is no cast-iron guarantee your data is safe -- unless, for example, it is encrypted and stored locally on your device, and so developers themselves have no access rights.

What can period tracking app vendors do?

As the EFF says: "If you build it, they will come -- so don't build it, don't keep it, dismantle what you can, and keep it secure."

The non-profit has published a list of recommendations for period trackers, women's health, and healthcare service provider app developers to follow:Allow users pseudonymous access, so you don't even know their names
Do not track the behavior of your users, and if this must happen, make it opt-in and clear there may be ramifications
Check data retention policies and ask yourself: do we need to collect all this data, and for so long?
Delete logs regularly
Encrypt data in transit
Enable end-to-end encryption by default
Do not allow your apps to become location broker havens
Do not share user data, but if you must, only with trusted and vetted partners – and make this clear to users
Consider interoperability with third parties if they can provide the security for users that you cannot


Every time Mozilla releases its Privacy Not Included guide, we find that apps providing sensitive services, including health apps, are lax or fail spectacularly at security. It's not just about an app provider's intentions; you also need to assess the vendor's technical expertise and understanding of cybersecurity.

"Privately-owned user data cannot be protected from state-mandated legal action," commented Issy Towell, Wearables Analyst at CCS Insight. "Unless that changes, it is the responsibility of apps to demonstrate a genuine duty of care for users by rethinking the kind of data it collects on them."

There may be some apps out there that are more secure than others, where data is protected due to where it is stored and the legal requirements in that area.

For example, Natural Cycles, while FDA-cleared, stores its data in Europe and is, therefore, subject to GDPR requirements. Furthermore, the app's developers told us that data is encrypted both in transit and at rest, and "we have never -- and never will -- sell user data."

Prior to the ruling, Natural Cycles told ZDNet:

Natural Cycles is not a covered entity by HIPAA, not by choice, but because we do not handle medical electronic records. It is important to note, however, that HIPAA is not the only data safeguard. As potential legislation changes arise, we remain focused on being a company committed to doing the right thing for our users vs. relying on specific laws that are subject to change.

We're closely monitoring the ongoing situation with legal counsel to make sure that no matter the outcome, we will achieve our goal of remaining regulatory compliant as a medical device, while never turning over personal, sensitive data. We will be evolving our privacy policy to make sure our users are protected against unimaginable potential legal situations.

On June 24, the company's chief executive, Elina Berglund Scherwitzl said that an anonymization feature was being developed to mask user identities.

Flo also says it will never sell personal data and is following suit with an upcoming "anonymous mode."

Glow said that "doing anything that violates their [user] trust would go against our core values, we'll always do our very best to get things right and serve our users well," but beyond this boilerplate statement, has not announced any concrete changes to its product.

On June 26, the iOS Stardust menstruation tracking app said it was working "around the clock" to improve user privacy. Stardust says that there is an "encrypted wall" separating user PII and activities and they are working on a no-account and no-PII signup option. However, without a transparent, public, and external audit conducted by a reputable cybersecurity expert, the mention of encryption is not necessarily enough.

Clue is based in Berlin. On June 25, the organization said it would not respond to any subpoena requests made by US authorities and emphasized that it is EU duty-bound not to disclose private health data.

"As a European company, Clue is obliged under European Union law (GDPR) to apply special protections to our users' reproductive health data," the company says. "We will not disclose it. We will stand up for our users [...] We repeat: we would not respond to any disclosure request or attempted subpoena of our users' health data by US authorities. But we would let you and the world know if they tried."

Should I delete my period tracking app?
Yes.

(Author's note: This is my personal recommendation.)


It's an opinion to raise the ire of menstruation app developers, but in the interests of future safety, those with periods in the US should delete these apps from their mobile devices: no exceptions.

Technology is meant to make our lives easier, but the convenience of menstruation tracker apps is now not worth the potential risk to users in light of Roe v. Wade.

You cannot be 100% sure that the period tracker you use is protected legally from data demands and won't be subject to current or future legislative changes that could force the developers to hand over your sensitive data.

It might go against the grain to reject technology in 2022 and go back to pen and paper. If you're not willing to do so, at least go for an open source and auditable option such as drip, a menstrual cycle & fertility tracking app which stores information locally on your device. (This is available on Android but an iOS version is in the works.)

Close off as many channels for law enforcement or government bodies to obtain data on your cycles, fertility, or any signs of pregnancy in the future, especially if you live in a state considered 'unsafe.'

The data you generate to monitor your cycle, activities, sexual activity, and lifestyle habits, in some states, could one day become a weapon against you. If the constitutional right to this procedure has now been dissolved, we can't know just how far some states will go to either prevent those seeking an abortion from succeeding or how prosecutions will come into play.

It is up to period tracker software providers to examine the data they hold, for how long, and how best to protect their users. However, while some are now promising immediate privacy upgrades and future anonymization modes to salvage their user bases, these apps can still leak data -- whether accidentally or when installed on a mobile device in the hands of an investigator -- and you should still consider them unsafe.

Delete them, and do so now.

How else can I track my menstrual cycle?

The most secure option is the old-fashioned way -- pen and paper.

We may eventually see changes in app functionality, too. Issy Towell, Wearables Analyst at CCS Insight told us that some apps with users in regions impacted by Roe v. Wade could "help users avoid stating an intention to avoid pregnancy, [but] this will come at the expense of the overall app functionality and experience."

"At the very least, if brands want to maintain the trust of users they will need to clearly communicate the potential legal implications of using their app to users," Towell added. "Unless reproductive rights are protected at the federal level, females will be forced to sacrifice personalized period prediction algorithms for the family-planning method that women have been using for centuries -- pen, paper, and a calendar."

Ransomware is the biggest global cyber threat. And the attacks are still evolving

Ransomware attacks 'strike hard and fast', warns NCSC chief.


Written by Danny Palmer, Senior Reporter on June 28, 2022



Ransomware is the biggest cybersecurity threat facing the world today, with the potential to significantly affect whole societies and economies – and the attacks are unrelenting, the head of the National Cyber Security Centre (NCSC) has warned.

"Even with a war raging in Ukraine – the biggest global cyber threat we still face is ransomware. That tells you something of the scale of the problem. Ransomware attacks strike hard and fast. They are evolving rapidly, they are all-pervasive, they're increasingly offered by gangs as a service, lowering the bar for entry into cyber crime," said Lindy Cameron, CEO of the NCSC In a speech at Tel Aviv Cyber Week.

She added that the NCSC has dealt with "nationally significant incidents" along with hundreds of general cyber incidents that "affect the UK more widely every year".

SEE: Cybersecurity: Let's get tactical (ZDNet special report)

While she didn't detail any specific instances of responding to ransomware incidents, Cameron warned that "these complex attacks have the potential to affect our societies and economies significantly", and implied that if it weren't for the work of NCSC incident responders, alongside their counterparts in the industry and international counterparts, the attacks could have had a major impact.

Working alongside other law enforcement agencies, Cameron said that the NCSC is working to understand the criminal system that helps drive ransomware attacks – and how the nature of ransomware gangs and the techniques they're using to facilitate ransomware campaigns continue to evolve.

"We want to make ransomware an unprofitable and unattractive business," said Cameron, who argued it's not all doom and gloom when it comes to cybersecurity, going on to detail how the NCSC's Active Cyber Defence Program has helped to disrupt cyberattacks targeting citizens.

This includes a takedown project that has removed millions of malicious URLs, and the suspicious email-reporting service, which has allowed the public to report over 10.5 million suspicious emails, leading to over 76,000 online scams being taken down.

"We want to help create a society that is resilient to cyberattacks, where cybersecurity is second nature to all of us," said Cameron.

According to newly released figures from cybersecurity company WatchGuard, the volume of ransomware has risen significantly with the amount of detected activity in the first quarter of 2022 more than three times what was detected during the same period last year.

The report suggests that the emergence of aggressive ransomware and extortion operations including LAPSUS$ and BlackCat are behind what's described as "an ever-increasing ransomware and cyber-extortion threat landscape."


MORE ON CYBERSECURITY


Dragonbridge influencers targets rare earth miners, encourages protests to disrupt production

Researchers say that China has 'crossed the line' again with the new online campaign.

Cyberattackers are targeting rare earth mining companies in a new campaign designed to keep China in a dominant market position.



Written by Charlie Osborne, Contributor on June 28, 2022

On June 28, Mandiant published new research into Dragonbridge, a misinformation program focused on disrupting rare earth facilities.

The rare earths market is driven by demand for consumer products, including smartphones and PCs, due to their role in the development of electronics, circuit boards, and batteries. The aerospace and military tech industries also rely on rare earth supplies.

China is one of the world's largest exporters of rare earth elements. Despite the country's current dominant position, the Dragonbridge group, known to promote the political interests of the People's Republic of China (PRC), is working to disrupt suppliers and rare earth processors outside of the country.

Dragonbridge is a vast network comprising thousands of accounts on numerous social networks and communication channels. According to Mandiant, the network has been active since 2019, twisting and publishing narratives online that benefit China's ruling party.

However, recently, the researchers have monitored a change in tactics, leading to an expansion into misinformation campaigns targeting mining companies.

Among the firms on the target list are Australian mining company Lynas Rare Earths Ltd.

Now, Dragonbridge is turning its attention to Canada and the United States. This month, the misinformation group was linked to propaganda activities focused on tarnishing the reputations of Canada's Appia Rare Earths and Uranium Corp., as well as USA Rare Earth.

Specifically, the group appears to be promoting material in criticism of new mining and production facilities.


Appia has located a potential site for mining in Northern Saskatchewan, Canada, while USA Rare Earth intends to construct a new facility in Oklahoma later this year.

The misinformation network runs thousands of fake accounts on platforms including Facebook and Twitter. The majority of content is posted by fake concerned US "citizens" in English, with a scattering of posts also written in the Chinese and Malay languages.


A potential reason for this shift in tactics is the US 2022 Defense Production Act (DPA) Title III. The act has been signed by US President Biden to encourage the domestic production of rare earths and other materials, thereby lessening reliance on exports from other countries, including China.

It should also be noted that companies targeted by Dragonbridge are large enough that they could potentially threaten China's dominant position in the future.

"While the activity we detail here does not appear to have been particularly effective and received only limited engagement by seemingly real individuals, the campaign's microtargeting of specific audiences suggests the possibility of using similar means to manipulate public discourse surrounding other US political issues to the PRC's advantage," the researchers said.

Mandiant has contacted the companies at the heart of Dragonbridge's campaigns, alongside the social networks used by the group to promote its narratives.

"An economic decoupling with China will only encourage more victimization of the private sector by Chinese actors," commented John Hultquist, VP of Mandiant Intelligence. "Unfortunately, businesses will be on the front lines of a fight that may not be fair."

Previous and related coverage

The British Army is investigating after its Twitter and YouTube accounts were hijacked

The hijackers used the accounts to promote cryptocurrency and NFTs.


Written by Charlie Osborne, Contributor on July 4, 2022



Image: Getty Images/iStockphoto

The British Army is investigating after its Twitter and YouTube accounts were both breached.

On July 3, as reported by the BBC, Army accounts were taken over and used to promote NFT and cryptocurrency schemes. This included YouTube videos posted with the image of entrepreneur Elon Musk.

The British Army's YouTube account name was changed. Screenshots also appeared to show the Army's Twitter account, its name changed, retweeting promotions for NFT projects, complete with images of a cartoon monkey.


NFTs are digital assets, including image files, that may represent real-world items. Transactions are recorded on the blockchain.

A capture of the British Army's Twitter account also shows the page was changed to promote NFTs.

It is unknown who is behind the intrusion.


The British Army confirmed the security incident and apologized "for the temporary interruption to our feed" on Sunday night.

"The breach of the Army's Twitter and YouTube accounts that occurred earlier today has been resolved and an investigation is underway," the Ministry of Defence said. "The Army takes information security extremely seriously and until their investigation is complete it would be inappropriate to comment further."

The accounts have now been restored.

In July 2020, verified Twitter accounts belonging to high-profile individuals and companies, including Elon Musk, Bill Gates, Joe Biden, Kanye West and Apple, were taken over and used to promote a cryptocurrency scam. While the security incident was contained quickly, it wasn't quick enough in that case to stop hundreds of thousands of dollars from being sent fraudulently to the perpetrator's wallet.

While it is not known how the British Army hack took place, Jake Moore, global cyber security advisor at ESET, said the potential causes were the use of profile sharing among multiple admins, risky outsourcing, and a failure to update passwords regularly.

"It can be extremely damaging for organizations and brands when their social media accounts are hacked, so it is vital that all social media admins are using multi-factor authentication and they change the password when anyone who knows it leaves," Moore said.

Previous and related coverage