Mozilla Is Working on a Chrome-Like "Site Isolation" Feature for Firefox

Found on Bleeping Computer on Sunday, 29 July 2018
Browse Software

The Mozilla Foundation, the organization behind the Firefox browser, is working on adding a new feature to its browser that is similar to the Site Isolation feature that Google rolled out to Chrome users this year.

But Chrome won't be the only browser with Site Isolation. Work on a similar feature also began at Mozilla headquarters back in April, in a plan dubbed Project Fission.

CloneFox does it again. Instead of constantly implementing what Chrome comes up with, Mozilla should come up with new ideas.

364 Idaho Inmates Hacked Their Prison Tablets for Free Credits

Found on Bleeping Computer on Saturday, 28 July 2018
Browse Various

Idaho prison officials announced yesterday in a press release that they've identified 364 inmates who have exploited a vulnerability in their prison-issued tablets and have used it to assign nearly $225,000 worth of digital credits to their tablet accounts.

Spokespersons for both companies said the vulnerability inmates exploited was identified and fixed. Officials from the Idaho Department of Correction (IDC) said there was no loss of state funds as a result of the hack, as inmates transferred only JPay-managed (fictitious) digital credits to their accounts.

Somwhow, prisons are not what they used to be. They sound more like hotels now.

Facebook Facebook Forced to Block 20,000 Posts About Snack Food Conspiracy After PepsiCo Sues: Report

Found on Gizmodo on Friday, 27 July 2018
Browse Censorship

PepsiCo really doesn’t want anyone talking shit about its corn puffs online. There is a rumor that Kurkure, a corn puff product developed by the company in India, is made of plastic.

In response, PepsiCo obtained an interim order from the Delhi High Court to block all references to this conspiracy theory online in the country, MediaNama reports.

According to MediaNama, PepsiCo petitioned for 3412 Facebook links, 20244 Facebook posts, 242 YouTube videos, six Instagram links, and 562 tweets to be removed, a request the court has granted.

PepsiCo, meet Barbra Streisand. Barbra Streisand, meet PepsiCo.

Facebook stock dives nearly 20% on warning of slow revenue growth

Found on Ars Technica on Thursday, 26 July 2018
Browse Various

Facebook has shown that it cannot sail forever forward while facing various storms, including Cambridge Analytica and the Russian government's use of the social media platform to sow divisions amongst Americans during the 2016 presidential campaign.

Wall Street didn’t take too kindly to that: Facebook’s stock price dropped nearly 20 percent in after-hours trading.

It's about time.

Enterprise Windows 10 users, Microsoft has some 'quality' patches coming your way

Found on The Register on Wednesday, 25 July 2018
Browse Software

While flinging these patches at expectant Windows 10 machines would be a good idea, admins do need to exercise caution and should perform some testing first. All three packages suffer from a known issue where installing the July 2018 .NET Framework Security Updates could bork some COM components with a System.UnauthorizedAccessException error triggered when an affected application tries to load them.

An OS installation where "apps" like Groove Music and Xbox are default and cannot be removed during installation should never be called "Enterprise". Such an OS needs to come with only the most lightweight and cruft-free configuration. Adding any additional bloatware by default counts as a failure.

In encryption push, Chrome flags HTTP sites as "not secure"

Found on ZD Net on Tuesday, 24 July 2018
Browse Internet

Any site that doesn't load with green padlock or a "secure" message in the browser's address bar will be flagged -- and shamed -- as insecure.

That green padlock means any data sent from your computer or device to that website and vice versa is transmitted securely and can't be intercepted by an attacker.

Just overnight, several HTTP-only sites made the switch to HTTPS to escape being named and shamed by the browser.

HTTPS isn't a magic pill that suddenly makes the world a better place. In many cases, it's not really needed; but Google abuses it's share of the browser market. Website owners can protect their visitors more by not using Google or Facebook services which allow them to track you, no matter if you are on an encrypted connection or not. Not to forget that many will use Cloudflare as a HTTPS Proxy what means they give them their SSL private keys while at the same time the traffic between CF and the servers can continue to run over HTTP just fine. So much snakeoil.

Recycled packaging 'may end up in landfill', warns watchdog

Found on BBC News on Monday, 23 July 2018
Browse Nature

The National Audit Office (NAO) says over half of the packaging reported as recycled is actually being sent abroad to be processed.

The NAO's report found only 25% of the firms most likely to misbehave over re-processing or exporting waste are inspected, while just 40% of planned compliance visits were actually carried out.

The problem is that too much waste is producted, and the industry and marketing are only making it worse. If you buy eg. 25g Nutella jars which contain just enough for one slice of bread, you are the biggest part of the entire problem and directly support the destruction of the nature and the world as it is.

This Bot Tweets Photos and Names of People Who Bought 'Drugs' on Venmo

Found on Motherboard on Sunday, 22 July 2018
Browse Software

A new bot called “Who’s buying drugs on Venmo” tweets the usernames and photos of Venmo users who have marked their transaction with a particular drug keyword or emoji.

The bot also potentially exposes people in ways they didn’t originally anticipate, touching on issues of consent and privacy.

Venmo, owned by PayPal, is a social-network-mobile-payment-service crossover, allowing users to easily and quickly send money to each other. Users can make all their transactions and activity private, but by default, Venmo publicly presents the username, name, photo, and message sent with the money within the service’s app for others to see.

You have to ask why a service would, by default, make your transaction details possible; but hey, it's Paypal and that's pretty much the kind of crap you can expect from this company. They should get a big lawsuit for violating basic privacy rules.

Microsoft: The Kremlin's hackers are already sniffing, probing around America's 2018 elections

Found on The Register on Saturday, 21 July 2018
Browse Various

Speaking at an event in Aspen, Colorado, earlier this week, Microsoft vice president of security and trust Tom Burt revealed that the FancyBear hacking group has already begun setting up the infrastructure to perform targeted phishing attacks on multiple candidates.

The report notes that the government has created a task force, including multiple agencies and states attorney generals, that will focus on detecting and prosecuting attempts to affect the outcome of the mid-term vote.

It's not like the US is all innocent and would never ever try anything similar. Pretty much every country plays dirty; some just care less if others know about it.

The 5,000% price hike that made Martin Shkreli infamous is no longer paying off

Found on Ars Technica on Friday, 20 July 2018
Browse Various

As founder and CEO of Turing, Shkreli bought the rights to the cheap, off-patent drug and—without any generic competitors—abruptly raised its price from $13.50 a pill to $750 a pill in the fall of 2015.

Turing, meanwhile changed its name and tried to distance itself from Shkreli—without lowering Daraprim’s price. In light of the dwindling profits, the company is reportedly considering changing its name once again, this time to “Phoenixus.”

There should be a law that should make such price changes flat out illegal and invalid the patent so everybody can freely produce the drug for a fair price.