Softbank's 'Pepper' robot is a security joke

Found on The Register on Wednesday, 30 May 2018
Browse Various

The 'bot allows unauthenticated root-level access, runs a Meltdown/Spectre-vulnerable processor, can be administered over unencrypted HTTP and has a default root password.

Their research found that “it is a breeze to remotely turn it into a 'cyber and physical weapon', exposing malicious behaviours”.

Softbank's engineers haven't provided any protections against an attacker hammering Pepper with unlimited password attempts: “no countermeasures to brute-force attacks have been deployed with Pepper, which is once again an intolerable and disappointing finding”.

Such obvious and massive failures call for hefty fines; otherwise manufacturers won't improve product quality.

GDPR 'risks making it harder to catch hackers'

Found on BBC News on Tuesday, 29 May 2018
Browse Internet

Whois, which is used by the police and journalists to check the legitimacy of websites, no longer displays the name, email address or phone number of some websites.

In a letter to the Wall Street Journal entitled, The EU's gift to Cybercriminals, lawyers Brian Finch and Steven Farmer claim: "Police will be robbed of ready access to vital data drastically impeding their efforts to identify and shut down illicit activity."

Research sure does not seem to be one of the strong points of Finch and Farmer, otherwise they would know that police still can get the information; it's just hidden for hobby investigators. They would also know that, for years, you could pay for privacy services so that your whois information was hidden; now that's just the default for everybody and actually a good result because SEO spammers won't harvest contacts anymore. Not to mention that stalkers and others have a much harder time to threaten the owners of fully legal websites. Sorry, but the "that supports terrorists" argument to remove privacy does not apply here.

YouTube stars' fury over algorithm tests

Found on BBC News on Monday, 28 May 2018
Browse Internet

Some of YouTube's most popular stars have criticised the website for "experimenting" with how their videos are delivered to their fans.

Technology vlogger Marques Brownlee - who has more than six million subscribers - said prioritising videos "they think we want to see" was a "business move". But he added: "It's a subscription box. Users chose to subscribe. They want to see it all. If they don't, they'll unsubscribe."

99.9999% of the video material on there could be deleted and it would not be a loss at all. Youtube has turned into a landfill where users now upload videos of text typed on notepad to "help" others instead of using, you know, a text blog. Plus, if vloggers with millions of viewers are furious about a "business move", then there isn't anything to add, except that they are vlogging for business reasons too. It's not like they don't make their living with it.

Busking goes cashless with 'a world first' for London

Found on BBC News on Sunday, 27 May 2018
Browse Various

London has introduced a contactless payment scheme for buskers in what the organisers claim is a world first.

In addition to tossing loose change into a box, passers-by can use card readers to make contactless payments.

"Now, more Londoners will be able to show their support to the capital's brilliant, talented street performers," said London mayor Sadiq Khan.

No cash means no privacy. Plus, spending a cent cashless feels not different from spending thousands of cents cashless. People will lose the feeling for money and spend it more easily. On the other hand, that's just what an economy based on infinite growth wants.

Doctor slammed by med board for selling $5 homeopathic sound waves for Ebola

Found on Ars Technica on Saturday, 26 May 2018
Browse Legal-Issues

The California medical board is threatening to revoke the license of Dr. William Edwin Gray III for selling homeopathic sound files over the Internet that he claims—without evidence or reason—can cure a variety of ailments, including life-threatening infections such as Ebola, SARS, swine flu, malaria, typhoid, and cholera.

Gray claims that sound waves can carry “the energetic signal in homeopathic remedies” to treat patients. He claims to be able to collect that energy by placing vials of homeopathic remedies (like water) in electrified wire coils and recording any emitted sounds. With this method, he produced 263 “eRemedies,” which are 13-second recordings (conveniently available as either .wav or .MP3 files) said to sound like hissing.

That makes you wonder how he got his license in the first place. He does not appear to know much about medicine, or technology for that matter; otherwise he would know that encoding to MP3 actually makes subtle changes to the sound. Not that it would work with WAV anyway. It also makes you wonder what type of people fall for such an obvious scam.

Amazon banned this shopper. Then he outsmarted them

Found on CNet News on Friday, 25 May 2018
Browse Internet

A few years back, Mark started making electronics repairs for his fellow college students and ordered parts from Amazon. He'd return items that were the wrong parts or defective, but sometimes would send back stuff he'd ordered extra of and didn't need anymore.

A few months later, he got another email from the same address with some sharper wording: "While we expect occasional problems with orders, such large numbers of returns can suggest that customers are unaware of our return policies.

He set up an account with a different name, email and shipping address, and added a VPN to his computer to hide his IP address. He was back up and running on the site.

Mark isn't really smart, but a leech. Too many abuse the system because it is oh so comfortable to get orders via mail and return whatever you don't like. The same people would pick products way more carefully if they actually would have to get out and return the products to the local dealers and explain to them why they return it. Leeches like Mark don't only make it more expensive for sellers and Amazon, but create more harm on the environment too. So hopefully he will get caught and banned again.

Woman says her Amazon device recorded private conversation, sent it out to random contact

Found on Kiro7 on Thursday, 24 May 2018
Browse Various

Every room in her family home was wired with the Amazon devices to control her home's heat, lights and security system.

"They said 'our engineers went through your logs, and they saw exactly what you told us, they saw exactly what you said happened, and we're sorry.' He apologized like 15 times in a matter of 30 minutes and he said we really appreciate you bringing this to our attention, this is something we need to fix!"

It's your own fault if you set up such bugs in your home.

Mark Zuckerberg's Facebook apologies aren't enough in the EU

Found on CNet News on Wednesday, 23 May 2018
Browse Internet

"I asked you six 'yes' and 'no' questions, and I got not a single answer," said Guy Verhofstadt, a Parliament member representing Belgium. "Yes," someone in the room echoed in support. Others chimed in.

"I'll make sure we follow up and get you answers to those," Zuckerberg said, deferring to his team to provide more complete responses, just as he did with Congress in April.

Like in a bad joke, Guy Verhofstadt complains about this where? Right, on his Facebook page.

FBI reportedly overestimated inaccessible encrypted phones by thousands

Found on Techcrunch on Tuesday, 22 May 2018
Browse Various

FBI director Christopher Wray estimated in December that it had almost 7,800 phones from 2017 alone that investigators were unable to access. The real number is likely less than a quarter of that, The Washington Post reports.

Supposedly having three databases tracking the phones led to devices being counted multiple times.

The idea that no one thought to check for duplicates before giving a number to the director for testimony in Congress suggests either conspiracy or gross incompetence.

Simple, bigger numbers mean higher pressure. That's why it's tempting to lie make mistakes.

IPv6 growth is slowing and no one knows why

Found on The Register on Monday, 21 May 2018
Browse Internet

In fact, nearly seven years after the eternally optimistic World IPv6 Launch launched, we are still only at just over a quarter availability of the new internet protocol.

As one avid IPv6 watcher – chief scientist of regional internet registry APNIC, Geoff Huston – has identified, the last four months of stats show a significant slowdown of IPv6 adoption.

Maybe because IPv4 is just nicer to work with.