Does US have right to data on overseas servers? We’re about to find out

Found on Ars Technica on Sunday, 25 June 2017
Browse Legal-Issues

The Justice Department on Friday petitioned the US Supreme Court to step into an international legal thicket, one that asks whether US search warrants extend to data stored on foreign servers. The US government says it has the legal right, with a valid court warrant, to reach into the world's servers with the assistance of the tech sector, no matter where the data is stored.

In a nutshell, the US government claims it should not matter where the data is stored. What matters is whether the company can access that data in the US.

As long as the servers are within US borders, the government can have access. Outside the borders, it can not (unless they are maybe on embassy grounds). The US does no own the world.

Microsoft says 'no known ransomware' runs on Windows 10 S - so we tried to hack it

Found on ZDNet on Saturday, 24 June 2017
Browse Software

Microsoft claims "no known ransomware" runs on Windows 10 S, its newest, security-focused operating system.

It took him a little over three hours to bust the operating system's various layers of security, but he got there.

In the end, Microsoft said that "no known ransomware" works on the operating system, but by gaining "system"-level access, we showed that it's entirely possible to take control of the machine to install ransomware.

If someone promises 100% security, they are lying.

Chinese media told to 'shut down' talk that makes country look bad

Found on CNet News on Friday, 23 June 2017
Browse Censorship

Chinese broadcasters, including social media platform Weibo, streamer Acfun and media company Ifeng were told to shut down all audio and visual content that cast the country or its government in bad light, China's State Administration of Press, Publication, Radio, Film and Television posted on its website on Thursday, saying they violate local regulations.

The country ranks 176th out of 180 countries on the 2017 World Press Freedom Index, and its president Xi Jinping is listed as a "press freedom predator" and an "enemy of the Internet" by Reporters without Borders.

Rank 176 is still not bad enough for the western world to happily make business with China, igorning not only the censorship, but also the working conditions.

Microsoft briefly disables anti-virus software for Windows 10

Found on BBC News on Thursday, 22 June 2017
Browse Software

For the applications that were not compatible, Microsoft built a feature that lets users update their PCs and then reinstall a new version of the anti-virus software.

"To do this, we first temporarily disabled some parts of the AV software when the update began. We did this work in partnership with the AV partner to specify which versions of their software are compatible and where to direct customers after updating," Mr Lefferts writes.

Not really newsworthy in the first place. In general, most programs are better closed when updating them to avoid messing with open and locked files.

Germany Raids Homes of 36 People Accused of Hateful Postings Over Social Media

Found on New York Times on Wednesday, 21 June 2017
Browse Censorship

“The still high incidence of punishable hate posting shows a need for police action,” Holger Münch, president of the Federal Criminal Police Office, said in a statement. “Our free society must not allow a climate of fear, threat, criminal violence and violence either on the street or on the internet.”

The raids come as Germans are debating the draft of a new social media law aimed at cracking down on hate speech, a measure that an array of experts said was unconstitutional at a parliamentary hearing on Monday.

It's not much of a "free society" when companies delete posts without court order. Unqualified personal police postings and remove what they consider illegal, even though it would be legal. That's what happens when politicians enter virgin territory.

PayPal will let you cash out instantly for 25 cents

Found on CNet News on Tuesday, 20 June 2017
Browse Various

Need cash fast? Got some in your PayPal account? Previously, you might have had to wait a day or two to liquidate that money -- but starting today, you can pay a single quarter to instantly cash out.

PayPal says it previously took one business day on average to release funds, though a calculator on the company's support page shows that withdrawal requests made after 7 p.m. Eastern could take as much as two days to process.

Now you can pay to get your money from a company who randomly holds funds back for fictitious reasons.

Gunshots are the third leading killer of children in the US

Found on Ars Technica on Monday, 19 June 2017
Browse Various

In all, about 19 children die or are wounded each day from firearms, either by homicide, suicide, or unintentional shootings. Firearm-related deaths are now the third leading cause of death among US children and the second leading cause of injury-related deaths, behind car crashes.

Information was scraped from death certificates, hospital reports, medical examiner reports, and law enforcement reports. The researchers also collected demographic data, such as sex, race/ethnicity, and age.

Freedom comes with a price.

The Right to Repair Movement Is Forcing Apple to Change

Found on Motherboard on Sunday, 18 June 2017
Browse Hardware

For the better part of the last decade, every design decision Apple has made has seemingly been in the pursuit of making its products thinner and more beautiful at the expense of upgradability and repairability.

Apple's authorized repair program leaves a lot to be desired—companies must pay a fee to join the program, and those who join aren't allowed to do many types of repair (such as a charge port replacement, which is trivially easy for any repair professional).

If consumers buy a product, they own it completely. If they want to take it apart to repair it, it's their right. If Apple wants to change that, it should rent hardware to the fanbois; but that would cause another load of problems for the company because customers would return defective hardware and demand a free replacement. On the other hand, that could result in better and more reliable hardware and reduce interest in planned obsolescence.

You Can Hack Some Mazda Cars with a USB Flash Drive

Found on Bleeping Computers on Saturday, 17 June 2017
Browse Technology

"No need for a user interaction, you just need to insert the USB flash drive in the USB port of your car," the researcher told Bleeping Computer. "Imagine an autoplay feature on Windows which executes a script directly."

Furthermore, Turla says one of his work managers believes these flaws could be abused to install RATs (Remote Access Trojans) on Mazda cars.

Other researchers who looked at the MZD Connect firmware shared this opinion. "That CMU [Car Multimedia Unit] is full of remote exec bugs," wrote security researcher Aris Adamantiadis‏ on Twitter. "If you connect it to WiFi you can have a [read only] access to the CAN bus through network DBUS," he added.

Sweet, now there will be botnets that can drive around.

Revealed: Facebook exposed identities of moderators to suspected terrorists

Found on The Guardian on Friday, 16 June 2017
Browse Internet

Of the 1,000 affected workers, around 40 worked in a counter-terrorism unit based at Facebook’s European headquarters in Dublin, Ireland. Six of those were assessed to be “high priority” victims of the mistake after Facebook concluded their personal profiles were likely viewed by potential terrorists.

The moderator said that others within the high-risk six had their personal profiles viewed by accounts with ties to Isis, Hezbollah and the Kurdistan Workers Party. Facebook complies with the US state department’s designation of terrorist groups.

The real security lapse is not the bug itself, but that moderators who patrol terrorist content are doing so with their own accounts that makes it possible to identify them.