Adobe to kill off Flash plug-in by 2020

Found on BBC News on Tuesday, 25 July 2017
Browse Software

Adobe's vice president of product development, Govind Balakrishnan, said the firm had chosen to end Flash because other technologies, such as HTML5, had "matured enough and are capable enough to provide viable alternatives to the Flash player."

In 2014 it was used each day by 80% of desktop users, according to Google. The current figure is just 17%.

"Matured enough"? Flash has a long history of serious bugs and security problems, and was the cause for countless infections with malware.

systemd'oh! DNS lib underscore bug bites everyone's favorite init tool, blanks Netflix

Found on The Register on Monday, 24 July 2017
Browse Internet

The issue emerged July 22, when Gentoo user Dennis Schridde submitted this bug report to the Systemd project. Essentially, he described a failure within systemd-resolve (sic), a Systemd component that turns human-readable domain names into IP addresses for software, like web browsers, to connect to.

The library was stripping underscores from some domain names – such as Netflix's ipv6_1-cxl0-c088 node – and that caused everything relying on the resolver to fail, Schridde reported.

Why on earth would a piece of software that was started as an init system contain its own resolver? It would not be too surprising if it just gets a "notabug wontfix" reply from Poettering; after all, it looks like systemd-resolved has lots of problems.

Pokémon Go Fest attendees to get refunds as technical issues break the event

Found on Techcrunch on Sunday, 23 July 2017
Browse Various

Within minutes of the first attendees filing into Grant Park, the cell networks got shaky. Within 20 minutes of the doors officially opening, every network was down.

Tapping a monster to catch it would result in nothing but an error screen — a particular punch in the gut to many a player who traveled far in hopes of completing their Pokedex, as the Park was set to spawn some of the game’s rarest monsters.

You would think that a company who expects such a large number of fans would, let's say, asks one or two big phone companies how to cope with such a surge in network activity.

For 4 Seattle women called Alexa, it’s funny, frustrating to share name with Amazon device

Found on Seattle Times on Saturday, 22 July 2017
Browse Various

Since Amazon introduced the Alexa-enabled Echo device in 2014, the jokes have become so omnipresent that Alexa Philbeck, 29, briefly considered changing, or at least obscuring, her name.

“If I introduced myself, people assumed my name was Melissa or Alyssa,” she says, “Now when I introduce myself … I’ll say, ‘My name’s Alexa,’ and then sometimes I’ll say, ‘Like the Amazon Echo.’ ”

In a few years nobody will care about that gadget anymore; no need to change the name you grew up with.

Russian bill is copy-and-paste of Germany’s hate speech law

Found on Reporters Without Borders on Friday, 21 July 2017
Browse Censorship

“Our worst fears have been realized,” said Christian Mihr, RSF Germany’s executive director. “The German law on online hate speech is now serving as a model for non-democratic states to limit Internet debate.”

A UK parliamentary report in April cited the German example when it recommended making social networks pay large fines for failing to remove hate speech quickly enough.

Now, an Advocatus Diaboli could argue that governments want to limit freedom of speech to that speech that is in favor of them; and they are very well aware that social networks will delete way more than they would need to, just to avoid the fines.

FBI Warns About Security Risks From IoT-Connected Toys in Your Home

Found on eWEEK on Thursday, 20 July 2017
Browse Technology

The lack of security on those internet connected toys is so pervasive that the FBI provided detailed advice for taking steps that might help with security, such as using strong passwords. The most important piece of advice from the FBI, however, is to make sure the devices are turned off when they’re not actually being used, and when they are being used, to keep an eye on what’s happening through the app associated with the device.

Unfortunately, there’s little or no indication that there’s any serious effort on the part of device makers to secure their products.

Took them long enough. IoT botnets are already a daily occurrence now.

The Myth of Drug Expiration Dates

Found on ProPublica on Wednesday, 19 July 2017
Browse Various

ProPublica has been researching why the U.S. health care system is the most expensive in the world. One answer, broadly, is waste — some of it buried in practices that the medical establishment and the rest of us take for granted.

In his lab, Gerona ran tests on the decades-old drugs, including some now defunct brands such as the diet pills Obocell (once pitched to doctors with a portly figurine called “Mr. Obocell”) and Bamadex.

The findings surprised both researchers: A dozen of the 14 compounds were still as potent as they were when they were manufactured, some at almost 100 percent of their labeled concentrations.

Longer expiration times equal less profit. It's as simple as that.

Home deliveries of knives bought online to be banned in UK

Found on The Guardian on Tuesday, 18 July 2017
Browse Various

The delivery of knives bought online to private addresses is to be banned under a package of measures to tackle knife crime to be announced by the home secretary, Amber Rudd.

The home secretary, announcing the proposed new offences, said: “Knife crime has devastating consequences. I am determined to tackle this and do all I can to break the deadly cycle and protect our children, families and communities.

The terrorists have won. Next thing to be banned will be sticks and stones.

It’s Trivially Easy to Hack into Anybody’s Myspace Account

Found on Motherboard on Monday, 17 July 2017
Browse Internet

A security researcher has discovered that it's relatively easy to abuse this mechanism to hack into anyone's account. All a wannabe hacker needs is the target's full name, username, and date of birth.

Scott Helme, a security researcher who acted as one of the guinea pigs to test the flaw, said that Myspace's account recovery feature is "insane."

What's even more insane is that people use their real name and DOB on a website.

Death to C, ++

Found on Techcrunch on Sunday, 16 July 2017
Browse Software

C has become a monster. It gives its users far too much artillery with which to shoot their feet off. Copious experience has taught us all, the hard way, that it is very difficult, verging on “basically impossible,” to write extensive amounts of C code that is not riddled with security holes.

If you’re a developer you already know where I’m going, of course: to tout the virtues of Rust, which is, in fact, a viable C/C++ replacement. Two years ago I suggested that people start writing new low-level coding projects in Rust instead of C.

Rust: 2010. C: 1972. Rust, a language powered by Mozilla, who somehow ended up turning a once fast Firefox Browser back into a bloated Netscape clone. A company who drops projects when they do not suit their business model (like Thunderbird) is not the perfect choice for creating a programming language that should replace practically most of the software. No language is secure by default; maybe the programmers just got worse? If there is no shiney new framework, many developers are out of luck.