Jim Hall writes "Security blogger Krebs reports that Target's data breach started with a stolen HVAC account. Last week, Target said the initial intrusion into its systems was traced back to network credentials that were stolen from a third party vendor. Sources now claim that the vendor in question was a refrigeration, heating and air conditioning subcontractor that has worked at a number of locations at Target and other top retailers. Attackers stole network credentials from Fazio Mechanical Services, then used that to gain access to Target's network. It's not immediately clear why Target would have given an HVAC company external network access, or why that access would not be cordoned off from Target's payment system network."

First time accepted submitter MAE Keller writes "Two U.S. companies are joining a military research program to develop sensitive electronic components able to self-destruct on command to keep them out of the hands of potential adversaries who would attempt to counterfeit them for their own use. From the article: 'Last Friday DARPA awarded a $2.1 million contract to PARC, and a $3.5 million contract to IBM for the VAPR program, which seeks to develop transient electronics that can physically disappear in a controlled, triggerable manner.'"

Esther Schindler writes "We all know how important tech standards are. But the making of them is sometimes a particularly ugly process. Years, millions of dollars, and endless arguments are spent arguing about standards. The reason for our fights aren't any different from those that drove Edison and Westinghouse: It's all about who benefits – and profits – from a standard. As just one example, Steven Vaughan-Nichols details the steps it took to approve a networking standard that everyone, everyone knew was needed: 'Take, for example, the long hard road for the now-universal IEEE 802.11n Wi-Fi standard. There was nothing new about the multiple-in, multiple-out (MIMO) and channel-bonding techniques when companies start moving from 802.11g to 802.11n in 2003. Yet it wasn't until 2009 that the standard became official.'"

KentuckyFC writes "Black holes form when a large star runs out of fuel and collapses under its own weight. Since there is no known force that can stop this collapse, astrophysicists have always assumed that it forms a singularity, a region of space that is infinitely dense. Now cosmologists think quantum gravity might prevent this complete collapse after all. They say that the same force that stops an electron spiraling into a nucleus might also cause the collapsing star to 'bounce' at scales of around 10^-14cm. They're calling this new state a 'Planck star' and say its lifetime would match that of the black hole itself as it evaporates. That raises the possibility that the shrinking event horizon would eventually meet the expanding Planck star, which emerges with a sudden blast of gamma rays. That radiation would allow any information trapped in the black hole to escape, solving the infamous information paradox. If they're right, these gamma rays may already have been detected by space-based telescopes meaning that the evidence is already there for any enterprising astronomer to tease apart."

edxwelch writes "An analyst at Bernstein Research has found that Intel is selling their tablet Bay Trail chips to OEMs below cost, concluding that after end rebates, Intel's tablet revenues are likely to be "close to zero," while profits will be negative. Intel has responded that the 'special costs' Intel is incurring are not pushing down gross margin. Intel needs to offer the subsidies to OEMs building $199-$299 devices to bring the bill of materials down and make them competive with cheaper chips from the likes of MediaTek and Rockchip."

1sockchuck writes "Bitcoin hardware vendor KnC Miner has begun construction on a a 10 megawatt data center in Sweden that it will fill with high-powered computers mining for cryptocurrency. KnC has emerged as a leading vendor in the volatile market for ASIC mining rigs, focusing on underpromising and overdelivering. One goal of its move into cloud mining is to cushion any fallout from delivery delays on new hardware, which have been a sore point for miners in the fast-moving Bitcoin market. "Over the next few months we are bringing online enough hashing power to make sure that any delay in the Neptune timeline will be compensated with a completely free hosted hashing packages to all fully paid customers," KnC says in its newsletter."

Nerval's Lobster writes "A more prominent role in video-game development could prove the latest territory on Amazon's 'attempt to conquer' list. Yes, there's already Amazon Game Studios, which produces smaller games such as Air Patriots (a tower-defense title), but that evidently wasn't enough — Amazon has acquired Double Helix, most notably the developer behind Killer Instinct and other big-action games for PCs and consoles. Amazon confirmed the deal to multiple media outlets, suggesting that it would use Double Helix's developers and intellectual property 'as part of our ongoing commitment to build innovative games for customers.' Why would Amazon want to bulk out its game-creation abilities? Rumors have floated for the past couple weeks (hat tip to Gamespot) that the company is hard at work on an Android-based gaming console that will retail for below $300. Over the past year, it's also hired gaming luminaries such as Halo author Eric Nylund, which it probably wouldn't have done without something big — or at least interesting — in the works. Amazon would doubtlessly position such a device (if it actually becomes a reality) as the low-cost alternative to Microsoft's Xbox One and Sony's PlayStation 4. But even the cheapest console won't sell without some killer games to attract customers — and that's where Double Helix might come in. ... With Nintendo flagging, there's potentially an opening for a third console ecosystem to take hold."

Nerval's Lobster writes "Google, Yahoo, and other tech firms are offering some updated statistics about government requests for data. There's just one problem: under revised guidelines issued by the federal government, those companies can still only report a range, rather than a definitive number, for those requests. If that wasn't fuzzy enough, the range can only be reported after a six-month lag. Between January and June 2013, Google received between 0-999 FISA 'non-content' requests on 0-999 user accounts; it also fielded between 0-999 'content' requests for between 9000 and 9999 user accounts.Yahoo actually received a larger number of FISA queries than Google: for the first six months of 2013, the federal government made between 0-999 requests on between 30,000 and 30,999 user accounts hosted by the company. ... These companies have little choice but to advocate this new information release as a huge step forward for transparency. Unfortunately, restricting government data requests to a broad range isn't very helpful: for example, a range (rather than a single numerical value) makes it difficult to determine trends, such as whether government requests are gradually increasing over the long term."

AmiMoJo writes "Google has agreed to display competing site's results along side those from its own products in search results. The agreement comes as part of an EU investigation into Google's domination of the search market and its promotion of Google products at the top of each page. The EU has published screenshots (scroll down) showing how the changes will look once rolled out." Part of the deal includes Google avoiding any fines. The appearance changes to search results are minor; Google services in the results are more strongly highlighted as such, and links to alternative services are provided (e.g. Yelp for Google Local results). Less visible are the major changes: third parties will be able to opt-out of having their data used for specialized Google searches, and "Google proposes no longer to include in its agreements with publishers any written or unwritten obligations that would require them to source online search advertisements exclusively from Google ... [or] to impose obligations that would prevent advertisers from porting or managing search advertising campaigns across competing advertising platforms."

Slashdot's biggest redesign effort ever is now in beta and you're invited to help guide it. This redesign has been shaped by feedback from community members over the past few months (a big thanks to those of you who participated in our alpha testing phase!), and we'd like your thoughts on it, too. This new design is meant to be richer but also simpler to use, while maintaining the spirit of what Slashdot is all about: News for Nerds. Stuff that matters. Read on for the details of what's included, or read this blog post. Update: 10/02 19:16 GMT by T : Since this post went live, we've been reading through the comments below as well as your (hundreds!) of emails. These are all valuable, as we continue to implement our current features into the Beta. Keep 'em coming; we love the feedback. Please keep in mind that this is called Beta for a reason; we've still folding in lots of improvements. One important thing to bear in mind is that the images are optional: check out the Classic mode by clicking on the view selection widget (just above the stories) on the Beta page.

The Superman reboot Man of Steel broke the record for the biggest June opening weekend ever with a whopping $125.1 million. Reviews have been mixed so far, ranging from: "DC and Warner Brothers have opted to produce a movie that foregoes a character-driven story. Instead, we're left with a trite blockbuster that holds beautiful special effects, an inspiring music score, a story that panders to the movie-goer who refrains from looking deep into the story, and neglects to define Superman as character, leaving him only as a hollow symbol and stock character, which ultimately leaves the movie about the events that transpire rather than the characters involved in them," to " What this version of the iconic DC Comics superhero does is emote convincingly. Thanks to director Zack Snyder and a serious-minded script by David S. Goyer (who shares story credit with his The Dark Knight collaborator, Christopher Nolan), Man of Steel gives the last son of Krypton an action-packed origin story with a minimum of camp and an intense emotional authenticity. Not bad for somebody who spends half the movie wearing blue tights." Personally, I found it to be the best 2-hour action sequence with 30 minutes of stock romance involving Superman that I am likely to see this summer. What did you think?

After many months of effort, today we've brought the new mobile site out of beta. Featuring an interface optimized for touch devices, we think it's a huge improvement over the old mobile interface. You'll find comments easier to navigate, the most popular stories highlighted at the top of the page, and a surprisingly pleasant interface for navigating old polls. We've also spiffed up user profiles, resurrecting and improving the friend/foe system in the process. And that's not all: we're pleased to announce that you can login to Slashdot in general using various social media accounts, so if you use Facebook or Google+ there's no excuse not to enjoy the benefits of being a registered user, without the hassle of creating yet another account. Our weblog has a few more details. As always, if you encounter any issues let us know by mailing feedback@slashdot.org.

New submitter UtucXul points out that Richard Stallman has penned a lengthy response to NPR intern Emily White for her post on the organization's site about how she failed to pay for a significant amount of recorded music, acquiring it instead through Kazaa, friends, and CDs owned by the radio station at which she was employed. (We previously discussed musician David Lowery's response; quite different from RMS's, as you might expect.) Stallman wrote, "Copying and sharing recordings was not a mistake, let alone wrong, because sharing is good. It's good to share musical recordings with friends and family; it's good for a radio station to share recordings with the staff, and it's good when strangers share through peer-to-peer networks. The wrong is in the repressive laws that try to block or punish sharing. Sharing ought to be legalized; in the mean time, please do not act ashamed of having shared — that would validate those repressive laws that claim that it is wrong. You did make a mistake when you chose Kazaa as the method of sharing. Kazaa mistreated you (and all its users) by requiring you to run a non-free program on your computer. ... However, that was in the past. It's more important to consider what you're doing now, which includes other mistakes. You're not alone — many others make them too, and that adds up to a big problem for society. The root mistake is treating a marketing buzzword, 'the cloud,' as if it meant something concrete. That term refers to so many things (different ways of using the Internet) that it really has no meaning at all. Marketing uses that term to lead people's attention away from the important questions about any given use of the network, such as, 'What companies would I depend on if I did this, and how? What trouble could they cause me, if they wanted to shaft me, or simply thought that a change in policies would gain them more money?'"

We've been busy at Slashdot. As you have probably noticed, we've added a couple of new Slashboxes recently:

• Most Discussed: Highlighting recent stories with the most active discussions
• This Day on Slashdot: Featuring the biggest Slashdot stories of the day all the way back to the beginning.

We also pushed through a number of fixes to the user experience and upgrades to the site infrastructure in recent months including:

• Upgrading Slashdot to modern hardware and new versions of MySQL and Apache
• Cleaning up the topics pages
• Improving methods for sharing submissions
• Thumbnails for articles with videos
• Flag-a-comment abuse reporting
• Removal of old and unused Slashboxes
• A much overdue overhauling of the FAQ
• Fixes to user preferences
• The launch of the Slashdot Hall of Fame (that little badge icon next to the logo)
• Fixes to the D2 comment system. Highlights include bug fixes to the comment score slider, a better abbreviated view (if you quote the parent, that's removed so people can see your first sentence instead), and general reliability improvements to the AJAX magic
• And many more...

In addition, we're working on modules to highlight top submissions and we've launched Slashdot TV at http://tv.slashdot.org/ . We plan on launching more in the weeks to come. Some of these new sections will feature original content that isn't normally run on the front page. We're also planning a new mobile experience and we'll need your feedback to help us with the look and usability. Our goal through all these changes is to make your Slashdot experience a good one. We are listening to your complaints and concerns and promise to keep giving you News for Nerds and Stuff that Matters.

So, readers, what do you want to see in the coming months?