Deutsche Telekom fault affects 900,000 customers

Found on BBC News on Monday, 28 November 2016
Browse Internet

"Based on the error pattern, we cannot exclude the possibility that the routers have been targeted by external parties with the result that they can no longer register on the network."

The company, which has 20 million customers in Germany, has issued a software update and is asking affected customers to disconnect their routers.

According to other security news, the reason behind it is a simple exploit attempt against some router models. Basically, port 7547 was available, and the implemented TR-069 protocol allowed code execution. Guessing from the payload, the router not only evaluated backticked code in an NTP-server soap value, but ran it with privileges high enough to cause problems. If all that turns out to be true, it leaves the Telecom red faced, because with even the most basic input validation this would have been a non-issue. Not to mention that TR-069 is a security issue in itself already.

Sugar-free products stop us getting slimmer

Found on DW on Sunday, 27 November 2016
Browse Science

Many people believe that synthetic sweeteners will help them lose weight. But it turns out that one common substitute for sugar actually blocks the function of an enzyme that is essential for preventing obesity.

Why does aspartame not aid weight loss? "We found that aspartame blocks a gut enzyme called intestinal alkaline phosphatase (IAP)," explains Professor Hodin, who teaches at Harvard Medical School.

Just drink plain water. It really is that simple.

Delete yourself from the internet by pressing this button

Found on The Next Web on Saturday, 26 November 2016
Browse Internet

When logging into the website with a Google account it scans for apps and services you’ve created an account for, and creates a list of them with easy delete links.

Every account it finds gets paired with an easy delete link pointing to the unsubscribe page for that service. Within in a few clicks you’re freed from it, and depending on how long you need to work through the entire list, you can be account-less within the hour.

So, to sum it up, it will only find those accounts you signed up with using your Google email address. Furthermore, it gives all this information to a basically unknown third party. Considering that's it's quite a habit to sign up using throw-away addresss, or special email accounts which will receive all the follow-up spams, this service is, mildly put, quite pointless.

These phone apps have got your number

Found on BBC News on Friday, 25 November 2016
Browse Technology

The apps, which include Truecaller, Sync.me and CM Security, ask users to upload their phone's contact lists when they install them. That means they end up with huge databases - one app claims to have two billion numbers while another claims more than a billion.

The security blogger Graham Cluley, whose mobile number is stored by one of the apps, says everyone needs to be more careful about what they share: "If you upload your address book, you're not just putting your own privacy at risk - but the privacy of everybody else in that address book.

Even a single braincell should figure out that you don't need the contact lists in order to block spam calls; people are getting dumb and dumber.

Snowden can be asked to testify in person in German NSA probe

Found on Ars Technica on Thursday, 24 November 2016
Browse Politics

Germany's government has been told that it should make suitable arrangements for that to happen. It has been refusing to invite Snowden to give evidence personally since it would need to guarantee that he would not be handed over to the US—a promise the German authorities say would risk damaging the political relations between the two countries.

The committee of inquiry is examining to what extent German citizens and politicians were spied on by the NSA and its so-called Five Eyes partners—notably GCHQ—and whether German politicians and intelligence agencies knew about this activity.

It's embarrassing enough that you need a court that decision.

The EU And Canada Seem Determined To Ram Through CETA Deal Without Proper Scrutiny

Found on Techdirt on Wednesday, 23 November 2016
Browse Politics

CETA is a smaller-scale agreement between the EU and Canada, but it's more important than it looks. It allows US companies with subsidiaries in Canada to use the agreement's corporate sovereignty provisions to sue the EU -- and there are 42,000 such companies according to one analysis.

As in the EU, then, the Canadian public is expected to sit back and meekly allow their government to sign up to a deal with open-ended risks, thanks to corporate sovereignty, but without any proper scrutiny of the costs and alleged benefits.

Nothing, absolutely nothing has been learned. The EU still does just the same what greatly annoys the people. It ignores concerns, blocks requests and denies more detailed research. That is exactly why people are getting fed up with all of that and rally behind parties which promise a change.

Oracle Just Bought Dyn, the Company That Brought Down the Internet

Found on Wired on Tuesday, 22 November 2016
Browse Internet

Oracle is also in the midst of a reinvention: it wants to become a cloud computing company that can compete with the likes of Amazon and Google. In that case, the acquisition of Dyn just might give Oracle a much-needed asset.

Amazon and Google already offer their own DNS services. So in a sense, Dyn just makes Oracle’s cloud offering more complete.

If Dyn would be open source, we could expect LibreDyn soon. After all, everything that Oracle touches end up as a dirtied wreck that nobody wants to use. Just look at what happened to Solaris and Open Office.

Apple Chip Choices May Leave Some IPhone Users in Slow Lane

Found on Bloomberg on Monday, 21 November 2016
Browse Technology

The latest Apple Inc. smartphones that run on Verizon Communications Inc.’s network are technically capable of downloading data faster than those from AT&T Inc. Yet in testing, the two phones perform about the same, according to researchers at Twin Prime Inc. and Cellular Insights.

Sacrificing performance in return for cheaper components may not go down well with Apple users.

Fanbois will understand: the profit margin on Apple products is so tiny that it just has to pick the cheaper parts.

Second Chinese Firm in a Week Found Hiding Backdoor in Firmware of Android Devices

Found on Bleeping Computer on Sunday, 20 November 2016
Browse Technology

Security researchers have discovered that third-party firmware included with over 2.8 million low-end Android smartphones allows attackers to compromise Over-the-Air (OTA) update operations and execute commands on the target's phone with root privileges.

The binary responsible for the firmware OTA update operations also includes code to hide its presence from the Android OS, along with two other binaries and their processes. A developer looking at active Android processes won't be able to tell when there's an update coming to his phone.

That's why core components, like firmware, has to be open source and needs to be distributed via an independant managed network where a group from various nations release the binaries and source.

RAISR: Is Google’s AI-driven image resizing algorithm ‘dishonest’?

Found on The Stack on Saturday, 19 November 2016
Browse Various

Google has released the fruits of new research into upscaling low-resolution images using machine learning to ‘fill in’ the missing details. Compared to the hoary standards Photoshop users have been used to for over twenty years, the results are quite impressive.

RAISR (Rapid and Accurate Image Super Resolution) uses machine learning to develop ‘routes’ from low to higher resolution versions of an originally small image, based on sampling the differences between smaller and (genuinely) higher-resolution versions of data training images in a set.

If that catches on, there soon will be CSI style investigations everywhere.