Laptop ban led to 20-percent drop in flights for one Mideast airline

Found on Ars Technica on Wednesday, 05 July 2017
Browse Various

The US Homeland Security chief said last week his department will insist on "enhanced security measures" for US-bound flights around the world, although it gave very little detail about the new measures, which will be "both seen and unseen."

Citing an unnamed source at Qatar Airways, the Times reports that TSA wants all US-bound passengers be subject to explosive trace detection screening, whether their bags go in the main cabin or in the hold.

If only someone would finally admit that the TSA is a huge failure and needs to be replaced with a sane checking method.

Amazon and eBay images broken by Photobucket's 'ransom demand'

Found on BBC News on Tuesday, 04 July 2017
Browse Internet

Denver-based Photobucket is now seeking a $399 (£309) annual fee from those who wish to continue using it for "third-party hosting" and is facing a social media backlash as a consequence.

"People who have used Photobucket for hosting these images successfully for over 10 years are finding that they will have to literally start again with what for some, amounts to a lifetime's work."

Welcome to the cloud. It's not some magical service where everything will be available forever; if the owner decides to shut down its service, your data is gone. If you want to have your images hosted for free, at least keep backups; and if you run a forum, provide the option to store uploaded data on your servers, or you will end up crippled some day. Photobucket has pretty much committed suicide: for that price you can easily host tons of images on your own server, including backups while being in full control of your data.

German e-gov protocol carries ancient vulns

Found on The Register on Monday, 03 July 2017
Browse Various

According to SEC Consult, the library's bugs allow attackers to decrypt messages, modify signed messages, and attack hosts implementing the protocol.

CVE-2017-10669 is a signature wrapping attack that allows the miscreant to change the contents of a message without invalidating the signature; and finally there's a deserialisation bug that, like CVE-2017-10670, allows an external entity injection.

So much for the promised security. One would assume that the government hires developers who know what they are doing.

Chinese rocket launch fails after liftoff

Found on CNN News on Sunday, 02 July 2017
Browse Astronomy

The second launch of China's new-generation Long March-5 carrier rocket failed Sunday -- dealing a blow to the country's ambitious space aspirations.

Dubbed "Chubby 5" for its huge size -- 5 meters in diameter and 57 meters tall -- the LM-5 rocket is designed to carry up to 25 tons of payload into low orbit, more than doubling the country's previous lift capability.

Hard to believe that decades after successfully bringing men to the moon and back there is no more reliable method of travelling into space than rockets.

A million bottles a minute: world's plastic binge 'as dangerous as climate change'

Found on The Guardian on Saturday, 01 July 2017
Browse Nature

The demand, equivalent to about 20,000 bottles being bought every second, is driven by an apparently insatiable desire for bottled water and the spread of a western, urbanised “on the go” culture to China and the Asia Pacific region.

Most plastic bottles used for soft drinks and water are made from polyethylene terephthalate (Pet), which is highly recyclable. But as their use soars across the globe, efforts to collect and recycle the bottles to keep them from polluting the oceans, are failing to keep up.

Major drinks brands produce the greatest numbers of plastic bottles. Coca-Cola produces more than 100bn throwaway plastic bottles every year – or 3,400 a second, according to analysis carried out by Greenpeace after the company refused to publicly disclose its global plastic usage.

Introduce extra taxes for plastic bottles (and bags), so that they will become more expensive than glass bottles. Or drastically raise bottle deposits to increase the recycling. However, as long as it "hurts the industry", this won't happen. As long as he economy is more important than the ecosystem, humanity will continue its path to self-eradication.

Germany could fine social media companies millions for hate speech

Found on CNet News on Friday, 30 June 2017
Browse Censorship

The act also requires companies to maintain "an effective and transparent procedure for dealing with complaints, which is readily recognizable, directly accessible and constantly available to users," according to a Bundestag statement.

Heiko Maas, Germany's federal minister of justice and consumer protection, said the law is meant to "prevent a climate of fear and intimidation."

Unlike what Maas is saying, this creates a climate of fear and intimidation. If the comments are illegal, courts will take care of that and can order companies to remove them. Right now, there will be no control over takedown procedures.

Windows 10 will hide your important files from ransomware soon

Found on The Verge on Thursday, 29 June 2017
Browse Software

Windows 10 testers can now access a preview of the changes that include a new controlled folder access feature. It’s designed to only allow specific apps to access and read / write to a folder. If enabled, the default list prevents apps from accessing the desktop, pictures, movies, and documents folders.

The new controlled folder feature is designed to protect against viruses and ransomware from locking machines out of certain folders.

Instead of trying to protect the files and leaving it up to the user to define all that, Microsoft could try to stop random binaries from being executed in the first place.

CVE-2017-9445: systemd Hit By New Security Vulnerability

Found on Phoronix on Wednesday, 28 June 2017
Browse Software

This "high" level security notice is regarding an out-of-bounds write in systemd-resolved that could allow a remote attacker to crash the daemon or execute arbitrary code via a DNS response. This bug has been present since systemd 223 and was still present in systemd as of yesterday.

Why on earth should an init system contain its own DNS resolver? A buggy one with many more issues than this one even. Probably the same reason why there is network functionality in it, its own http server and QR code generator: because they can. Hopefully this piece of junk will sooner than later be replaced by a real init system which follows a UNIX tradition: do one thing, but do it good and right.

Walmart sued after teen steals machete and kills her Uber driver

Found on Ars Technica on Tuesday, 27 June 2017
Browse Legal-Issues

The family of an Uber driver murdered on the job in Illinois is taking Walmart to court. In a Cook County lawsuit, (PDF) the family of driver Grant T. Nelson alleges that the retail giant was negligent when it allowed the murder suspect to steal a machete and a knife before walking past security personnel without being stopped.

The girl has been charged with murder as an adult in connection to Nelson's death, and she remains jailed without bail.

Now you can get into legal trouble for not noticing a thief? It's in Walmart's interest to catch them all, but still enough slip through the monitoring. With a similar argumentation, you could sue police for not stopping her.

We desperately need a way to defend against online propaganda

Found on Ars Technica on Monday, 26 June 2017
Browse Various

Humans are more vulnerable than ever to propaganda, and we have no clue what to do about it.

The problem is that most people weren't raised to expect that their social spaces would be full of bots, blabbing the results of simple algorithms and infecting human conversations with misdirection. Rarely do audiences on Twitter and Facebook pause to wonder where their information is coming from.

The intelligence of a group is inversely proportional to the number of its members. Propagandists of all times knew this and is has not changed; the Internet just makes the groups bigger.