New worker safety regulations meant to log how many hours truckers are on the road may have inadvertently exposed millions of U.S. 18-wheelers to hackers who could take control of entire fleets of vehicles, according to a new Colorado State University paper.

Jake Jepson, co-author and graduate research assistant at Colorado State University, said it's important to create guard rails as the nation's transportation networks, power grids, water systems and other critical infrastructure move online.

"Each year those systems that never used to be connected to the internet or have any wireless connections are becoming more and more connected," he said. "And that can introduce vulnerabilities."

C.S.U. researchers found the cybersecurity gaps in electronic logging devices, which track a host of data required for inspections. The devices are connected to the vehicle's control systems, and are not currently required to carry cybersecurity precautions. In one example, the paper shows how hackers can manipulate trucks wirelessly and force them to pull over.

Jeremy Daily, C.S.U. associate professor, said students were able to locate the gaps by reverse-engineering one of the devices, which are produced by third-party vendors, and that adding new electronics to trucks that don't go through a typical manufacturer's design process can introduce new vulnerabilities.

"When regulators are introducing new requirements, they have to be aware of the cyber security implications," he explained.

Daily estimates that more than 14 million medium-and heavy-duty trucks that form the core of the U.S. shipping sector may have been exposed. He says the paper's findings can help device vendors fix the problem.

"The happy ending of this story is that we have worked with the vendor, and they have come up with a patch to the problem," he continued. "And so, it's important for the truckers and the people that have these devices to pay attention to those software update recommendations when they come out."

The regularity of news stories with individuals being misled or even radicalized by social media brought two Colorado State University researchers to compare social media algorithms to villains in classic tragedies such as Shakespeare's "Othello."

In a paper published last fall, researchers examine how algorithms can transform a person's view of reality in ways leading to detrimental actions. Platforms track user engagement with content and then feed users more of what they like.

Hamed Qahri-Saremi, assistant professor of computer information systems at Colorado State University and co-author of the paper, said even if you are following a news website such as CNN or Fox, you will not see every post by the outlets, only what the feeding algorithm thinks will maximize your engagement.

"It's not about the source, even," Qahri-Saremi explained. "It's about what these feeding algorithms are showing to you. So if you just go onto social media to get your news, most likely you're going to be very polarized. You see the world differently, because a big part of the picture, the true picture of the world, is going to be eliminated, is going to be masked from you because that's the job of the feeding algorithms."

The authors compare algorithms to the Shakespearean character Iago, who uses lies and manipulation to mislead Othello into murdering his wife.

The paper illustrated how platforms learn about users directly by observing their behavior, including which posts they spend time with and like, and learn about users indirectly by identifying and verifying the most similar platform users. The authors refer to it as a "matching mechanism" and users can see its effects with platform suggestions of who users should follow or connect with.

When offering content to users, platforms use social signaling to drive engagement by showing them which friends liked or commented on a post. Qahri-Saremi noted when misinformation is presented, social signals increase the likelihood users will engage.

"The person who sees that misinformation on social media is not just any random person, it's a person that the algorithm has selected and probably have added some social signals to it," Qahri-Saremi pointed out. "This significantly increases the power of this misinformation content."

Platform algorithms have the ability to select from the many millions of pieces of content floating around on social media, and choose the ones driving individual user engagement the most. With social media platforms primarily in the business of selling advertising, Qahri-Saremi emphasized the kind of granular data algorithms can learn about users makes them some of the most profitable companies around.

"These are some of the best algorithms," Qahri-Saremi stressed. "That's why social media companies are so wealthy. They can sell ads like nobody else; they can customize ads like nobody else. So now the same machine is being used to disseminate misinformation."

The paper suggested methods to combat misinformation, among them using an "endorsing accuracy" prompt such as "I think this news is accurate" and connecting it to the sharing function.

In just six years, the U.S. has pivoted from a complete ban on sports betting to a place where it is legal in most states, and young men could be paying a heavy price.

Joshua B. Grubbs, associate professor of psychology at the University of New Mexico, found in his research risky types of drinking -- both heavy and binge drinking -- often go hand in hand with sports wagering.

Grubbs analyzed data from more than 4,000 adults across the country who shared their drinking and betting habits. He said excessive drinking can lead to problematic betting behaviors.

"With sports gambling in particular, it tends to appeal to young men -- and we already know from past research that watching sporting events is associated with drinking more -- it's the common American hobby of, you watch the game, toss back a few beers with your friends," Grubbs noted.

In 2018, the U.S. Supreme Court cleared the way for states to adopt sports betting, although it is still illegal in 12 states, including the two most populous, California and Texas. New Mexico does not allow online betting, but does allow "in person" betting at a handful of tribal casinos.

Grubbs pointed out on average, gamblers report more frequent binge drinking episodes than the general public but episodes among sports gamblers are considerably higher than either group. Because people drawn to such activities are typically younger, they are also more impulsive, which he said makes it important to set a "loss limit," a firm amount of money they are willing to lose.

"If you go into gambling saying, 'I'm going tonight with my friends to the casino, I have a $100 I can lose and I'm willing to lose $100 to have fun with my friends.' If that mentality is something you stick to, you're very unlikely to have a problem," Grubbs contended.

Grubbs added while there are designated federal research funds for drug use or alcohol misuse, they have not been used for treating gambling addiction, despite clear links between gambling and substance use problems. The research, funded by the International Center for Responsible Gaming, was published on the JAMA Network Open.

As solar eclipse spectators are gathering in the path of totality, teams of students from Maryland and around the nation are preparing to launch instruments to study the phenomenon.

This afternoon, dozens of teams participating in the NASA supported Nationwide Eclipse Ballooning Project will launch high altitude weather balloons hauling instruments into the sky to study the eclipse's effect on the atmosphere. A team from the University of Maryland will launch two balloons from a location near Fort Wayne, Indiana.

Mary Bowden, senior lecturer of aerospace engineering at the University of Maryland, said there are numerous engineering lessons.

"All of the learning about how to design payloads that will work at altitude, and in the low temperature and low-pressure environment up there at altitude, and then putting them together and inflating a balloon and tracking a balloon and all that, there's a lot of engineering there," Bowden outlined. "That is really a wonderful educational experience."

The Maryland team is part of the University of Maryland Nearspace program, which has been conducting multiple balloon launches each semester for nearly 20 years. Even if skies are overcast, the balloons will fly well above the clouds, livestreaming video to YouTube.

Balloon teams have the opportunity to investigate several different scientific questions including how heat moves through the atmosphere. The Maryland team has been conducting practice launches in the months leading up to today's eclipse. Bowden pointed out in addition to monitoring forecasts of wind speed at higher altitudes, trying to study the eclipse has the team focused on timing.

"One of the trickiest parts of this is that we need to launch the balloon such that it is at altitude at totality," Bowden explained. "You have to figure out how much helium to put in the balloon to get a certain ascent rate to make sure it's going up just at the right speed, so that it is at altitude. And for us, we're shooting for about 70,000 to 80,000 feet."

The team tracks the payload during the flight and after with multiple technologies including using Iridium satellites, as well as ham radio frequencies. After the eclipse, the team will activate a remote device to cut the payload loose and allow it to parachute back to the ground. Balloon teams select the recovery location and choose open fields or farmland rather than forests or cities.

Bowden noted sometimes, recovery is the hardest part.

"We can usually locate exactly where they've landed, even to the point of walking up to somebody's house and saying, 'We just landed our payloads in your backyard. Would you allow us to go get them?'" Bowden recounted. "That is the last step of the flight. And sometimes the most stressful is basically recovering the payload."


get more stories like this via email