Hot tub hack reveals washed-up security protection

Found on BBC News on Tuesday, 25 December 2018
Browse Technology

Thousands of hot tubs can be hacked and controlled remotely because of a hole in their online security, BBC Click has revealed.

Balboa Water Group (BWG), which runs the affected system, has now pledged to introduce a more robust security system for owners and said the problem would be fixed by the end of February.

It said it was working with more than 1,000 owners in the UK and others globally to set up a system of individual usernames and passwords to secure the online controls.

It said it had previously opted not to do so because it had wanted to "allow for simple and easy use and activation" by homeowners.

You can't say BWG made an empty promise. Access to it sure is "simple and easy". It won't take too long before being an offline device will be a feature helping sales.

Domain Registrar Can be Held Liable for Pirate Site, Court Rules

Found on Torrentfreak on Monday, 24 December 2018
Browse Legal-Issues

The Higher Regional Court of Saarbrücken has confirmed that domain registrars can be held liable for the infringements of pirate sites. Even a single link can require a registrar to take a domain offline.

Lawyer Mirko Brüß notes that, in this case, the court clarified that registrars not only have to take a domain offline, they should also prevent it from being transferred to another company.

Please, everybody, post links to copyrighted material at Facebook.

Kansas trying to unload $10 million in computer equipment

Found on AP News on Sunday, 23 December 2018
Browse Hardware

The state still owes $2 million on the equipment, which it bought in 2016 as part of a failed plan to develop a centralized storage system, call Kansas GovCloud, for computer information. That idea was canceled by state IT officials who said it was too expensive. Instead, the state contracts with an outside company to store data on remote servers.

“We keep changing our IT philosophy as a state. Knee-jerk reactions. We need an overall picture to understand the direction the state needs to go,” she said.

What a fine example of wasted taxpayer money, mixed with incompetence. To make it worse, in the end they just shoved it onto "the cloud" (read: someone else's server which they do not have any control over).

FCC fines Swarm $900,000 for unauthorized satellite launch

Found on Reuters on Saturday, 22 December 2018
Browse Astronomy

Swarm Technologies Inc will pay a $900,000 fine for launching and operating four small experimental communications satellites that risked “satellite collisions” and threatened “critical commercial and government satellite operations,” the Federal Communications Commission said on Thursday.

FCC Commissioner Mike O’Rielly said the size of the penalty “is probably not significant enough to deter future behavior, but the negative press coverage is likely to prevent this company and others from attempting to do this again.”

Maybe there should be more bad press about who caused all the existing junk floating around in space. Whereever humans go, the junk gets there first.

Debian's Anti-Harassment Team Is Removing A Package Over Its Name

Found on Phoronix on Friday, 21 December 2018
Browse Software

When digging further, the package raised to the Debian Anti-Harassment Team was "Weboob." Weboob is short for "Web Outside of Browsers" as it's an open-source collection of software to script and automate the parsing/scraping/gathering-via-API of web data so that it can be consumed by different modules/applications.

A few months back though the issue was raised over the name/project having sexual references and that goes against the Debian Diversity Statement and values.

The Debian Anti-Harassment Team ruled that Weboob is against the Debian Code of Conduct in needing to be respectful.

This stupid crap of these first world problems is getting so ridiculous. What's next? Are "man pages" sexist? Will the word "packages" be removed from everywhere? No more unzipping? With idiotic acts that look like nothing more than an embarrassing attempt to justify their existance, that team is just stepping closer to be considered useless. It makes you wonder who really is childish here.

Apple yanks iPhone from sale in Germany – and maybe China soon, too – amid Qualcomm spat

Found on The Register on Thursday, 20 December 2018
Browse Legal-Issues

The iGiant acknowledged that its flagship product had been taken off the shelves in all its stores in Germany, although it will still be available through third parties.

Qualcomm claims that as soon as it posts bonds "which will be completed within a few days" the injunction in Germany will be effective and "immediately enforceable."

Sometimes, lawsuits can be pretty good.

Facebook Allowed Netflix, Spotify, And A Bank To Read And Delete Users’ Private Messages

Found on Buzzfeed News on Wednesday, 19 December 2018
Browse Internet

Facebook gave more than 150 companies, including Microsoft, Netflix, Spotify, Amazon, and Yahoo, unprecedented access to users’ personal data, according to a New York Times report published Tuesday.

Facebook allowed Microsoft’s search engine Bing to see the names of nearly all users’ friends without their consent, and allowed Spotify, Netflix, and the Royal Bank of Canada to read, write, and delete users’ private messages, and see participants on a thread.

It also allowed Amazon to get users’ names and contact information through their friends, let Apple access users’ Facebook contacts and calendars even if users had disabled data sharing, and let Yahoo view streams of friends’ posts “as recently as this summer,” despite publicly claiming it had stopped sharing such information a year ago, the report said.

Once again, Zucky will put on a sad face and say sorry; and change nothing, because the sheep are still sheep who do nothing.

Google opens document editing to users without Google accounts

Found on ZD Net on Tuesday, 18 December 2018
Browse Internet

Google has listened to user feedback and is currently testing a feature that will let G Suite users invite non-Google account holders to view, comment, suggest edits, and even directly edit Google Docs, Sheets, and Slides files.

Once enabled, G Suite admins can restrict this feature per company departments or domains, or restrict sharing of internal docs only with whitelisted domains (such as business partners' email domains), according to the feature's help page.

Storing personal and maybe even confidental data on Google servers? Or Internet servers at all? What are they smoking?

Google isn’t the company that we should have handed the Web over to

Found on Ars Technica on Monday, 17 December 2018
Browse Internet

When Microsoft's transition is complete, we're looking at a world where Chrome and Chrome-derivatives take about 80 percent of the market, with only Firefox, at 9 percent, actively maintained and available cross-platform.

By owning both the most popular browser, Chrome, and some of the most-visited sites on the Web (in particular the namesake search engine, YouTube, and Gmail), Google has on a number of occasions used its might to deploy proprietary tech and put the rest of the industry in the position of having to catch up.

It's not just the browser. People love convenience. The same problem exists in other fields, with Facebook and Amazon, to only name two.

PewDiePie printer hackers strike again

Found on BBC News on Sunday, 16 December 2018
Browse Various

It is the latest in a series of such attacks, but this time they say they have the power to destroy the machines.

Over recent months, the Indian music label and movie studio T-Series has come close to overtaking his lead, which has led some PewDiePie fans to mount stunts to attract new subscribers.

Intentions may be good, but it should be embarrassing for the kid to mix this with a PR stunt for some ridiculous YT moneymaker.