Domain: itworld.com
Stories and comments across the archive that link to itworld.com.
Stories · 2,036
-
Researcher Trying To Teach Computer What Women He's Attracted To
jfruh writes: Harm de Vries, a post-doctoral researcher at the Université de Montréal, is trying to build an algorithm that will sort through pictures on Tinder and OKCupid and pick out women he'll find attractive. "Tinder kept giving me pictures of girls I wasn't attracted to," he said in a phone interview. "So I wondered if I could use deep learning." His program, built using deep learning techniques, has about a 68 percent success rate, which isn't that bad. (A human friend to whom de Vries described his preferences managed 76 percent.) -
Attackers Install Highly Persistent Malware Implants On Cisco Routers
itwbennett writes: Researchers from Mandiant have detected a real-world attack that has installed rogue firmware on Cisco business routers in four countries. The router implant, dubbed SYNful Knock, implements a backdoor password for privileged Telnet and console access and also listens for commands contained in specifically crafted TCP SYN packets — hence the name SYNful Knock. In the cases investigated by Mandiant the SYNful Knock implant was not deployed through a vulnerability, but most likely through default or stolen administrative credentials. -
DARPA Working On Robotic Satellite Repair
jfruh writes: One of the aspects of the space age that sci-fi writers of the '50s couldn't predict was how much of our space activities are conducted by unmanned satellites rather than human beings. Now, DARPA wants to take that one step further, by building a robot satellite to fix other satellites. The initiative is being headed by former Space Shuttle commander Pamela Meloy. “Right now, we don’t build satellites to be serviced, but once we have that capability, then you can start seeing things like modular, serviceable satellites that become routine,” she says. -
Hackers' Latest Targets: Google's Webmaster Tools
jfruh writes: The latest attack vector hackers are taking advantage of: Google's Webmaster tools, which allow domain owners to index new pages for searching and react quickly to Google-detected malware. It's that last capability that hackers are after, tweaking things to keep infected sites under their control longer. From the ITWorld story: "According to the Sucuri researchers, by becoming verified owners for compromised websites, attackers can track how well their BHSEO campaigns perform in Google Search. They can also submit new spam pages to be indexed faster instead of waiting for them to be discovered naturally by Google's search robots, they can receive alerts if Google flags the websites as compromised, and, most importantly, they can remove legitimate owners of the site from the Search Console." -
Plex Is Coming To Apple TV
sfcrazy writes: Apple announced that it is turning Apple TV into a platform, opening it up for third party developers. They have already published the beta of tvOS and tvOS SDK, which developers can play with. Which means Plex is now a possibility on Apple TV. The founder of Plex said, "There is no question we will be able to offer Plex on the platform. There are multiple ways to go about it, based on the tvOS SDK we now have access to. We are now evaluating the best path for Plex and will begin work in earnest once we have evaluated the options. The ability to access great and proven iOS frameworks on the device is great for developers like us — we know the stuff is solid and will perform really well. Our goal is to enable people to enjoy Plex on the hardware platforms of their choice, and there is no doubt this will be a top platform for us." -
US Defense Secretary Mulls Rapid Grants For Tech Companies
itwbennett writes: The push for greater cooperation with tech companies has been a big theme for the DOD in the last year, but many big tech companies so far have been wary of the government's overtures following NSA spying revelations. Now, the government is taking a more 'if you can't join them, build your own' approach. The U.S. Department of Defense is considering offering rapid seed funding to private companies as a way to encourage more work on technology projects with the commercial sector, Secretary of Defense Ashton Carter said Wednesday. 'The DOD has to tap into all the streams of innovation and emerging technology and it has to do so much more quickly,' Carter told DARPA's Wait, What? conference in St. Louis, Missouri. -
Microsoft, Dell Aim To Sell Surfaces To Businesses
jfruh writes: Microsoft became an OS and PC behemoth in part by relentless focus on business sales, and is partnering with old friend Dell to try to recreate that success, trying to woo companies into buying Surface Pros loaded with Windows 10. It may seem topsy-turvey that Dell would be selling someone else's hardware, but Dell is offering ancillary services, including warranties, on the Microsoft hardware. -
Microsoft Killing Off Nokia's Windows Phone Apps
jfruh writes: As Nokia's smartphone division becomes more fully absorbed into Microsoft, the company is cleaning house and ending some apps and services that Nokia had developed specifically for Windows Phone. Lumia Storyteller, Lumia Beamer, Photobeamer, and Lumia Refocus are photo and video apps that integrate with online services, and those services will be shutting down on October 30. Microsoft says its to better commit resources to work on the mobile version of Windows 10, which is coming soon, but not all the features of the canceled services will appear in the new OS. -
Some Uber Ride Data Publicly Accessible Through Google
itwbennett writes: On Thursday, ZDNet reported that Uber ride data had leaked into Google search results. Zach Minors confirms in this article that a "site-specific Google search for trip.uber.com produced dozens of links to Uber rides that have been completed and cancelled, in countries around the world including the U.S., England, Russia, France and Mexico. Each link leads to a Web site with a map showing the ride's route, with the pickup and destination tagged with markers. A card on the page also shows the first name of the rider and driver, along the driver's photo, make and model of the car, and license plate number." However, what appeared to be a privacy red flag was not a "data leak," according to an Uber spokeswoman: "We have found that all these links have been deliberately shared publicly by riders. Protection of user data is critically important to us and we are always looking for ways to make it even more secure." -
Pioneer Looks To Laserdisc Tech For Low-Cost LIDAR
itwbennett writes: Pioneer is developing a 3D LIDAR (light detection and ranging) sensor for use in autonomous vehicles that could be a fraction of the cost of current systems (the company envisions a price point under $83). Key to this is technology related to optical pickups once used in laserdisc players, which Pioneer made for 30 years. From the ITWorld story: "The system would detect objects dozens of meters ahead, measure their distance and width and identify them based on their shape. Pioneer, which makes GPS navigation systems, is working on getting the LIDAR to automatically produce high-precision digital maps while using a minimum of data compared to the amount used for standard maps for car navigation." -
Survey: More Women Are Going Into Programming
itwbennett writes: We've previously discussed the dearth of women in computing. Indeed, according to U.S. Bureau and Labor Statistics estimates, in 2014 four out of five programmers and software developers in the U.S. were men. But according to a survey conducted this spring by the Application Developers Alliance and IDC, that may be changing. The survey of 855 developers worldwide found that women make up 42% of developers with less than 1 year of experience and 30% of those with between 1 and 5 years of experience. Of course, getting women into programming is one thing; keeping them is the next big challenge. -
Survey: More Women Are Going Into Programming
itwbennett writes: We've previously discussed the dearth of women in computing. Indeed, according to U.S. Bureau and Labor Statistics estimates, in 2014 four out of five programmers and software developers in the U.S. were men. But according to a survey conducted this spring by the Application Developers Alliance and IDC, that may be changing. The survey of 855 developers worldwide found that women make up 42% of developers with less than 1 year of experience and 30% of those with between 1 and 5 years of experience. Of course, getting women into programming is one thing; keeping them is the next big challenge. -
FTC: Machinima Took Secret Cash To Shill Xbox One
jfruh writes: The Machinima gaming video network took money from a marketing agency hired by Microsoft to pay "influencers" up to $45,000 to promote the Xbox One. Crucially, the video endorsers did not disclose that they'd been paid, which has caused trouble with the FTC. For its part, Machinima notes that this happened in 2013, when the current management was not in charge. -
Despite Reports of Hacking, Baby Monitors Remain Woefully Insecure
itwbennett writes: Researchers from security firm Rapid7 have found serious vulnerabilities in nine video baby monitors from various manufacturers. Among them: Hidden and hard-coded credentials providing local and remote access over services like SSH or Telnet; unencrypted video streams sent to the user's mobile phone; unencrypted Web and mobile application functions and unprotected API keys and credentials; and other vulnerabilities that could allow attackers to abuse the devices, according to a white paper released Tuesday. Rapid7 reported the issues it found to the affected manufacturers and to US-CERT back in July, but many vulnerabilities remain unpatched. -
Self-Driving Golf Carts May Pave the Way For Autonomous Cars
itwbennett writes: Researchers from MIT and Singaporean universities are experimenting with self-driving golf carts that use less (and relatively cheap) gear than self-driving vehicles while relying on computation-efficient algorithms. In addition to a webcam, each cart is equipped with four single-beam LIDAR (light detection and ranging) sensors from German maker Sick that have a field of view of about 270 degrees. Two of the sensors were mounted in the cart's front and used for determining its position and obstacle detection. The other two were cheaper, shorter-range sensors and were mounted on the back corners of the cart to scan for obstacles behind and on either side of it. The cost of the sensors was still high (on the order of $30,000) but that's less than solutions used in more sophisticated robotic vehicles. (Google has used $80,000 Velodyne LIDARs on its earlier self-driving cars.) A YouTube video shows the carts traveling the winding paths of a public garden in Singapore at a leisurely 24 kilometers per hour — slow enough for the computers to process all the obstacles (mainly pedestrians and animals). The researchers envision the self-driving vehicles being used in a shared transportation system, as rental bicycles are used in many cities. -
The Long Reach of Windows 95
jfruh writes: I'm a Mac guy — have been ever since the '80s. When Windows 95 was released 20 years ago, I was among those who sneered that "Windows 95 is Macintosh 87." But now, as I type these words on a shiny new iMac, I can admit that my UI — and indeed the computing landscape in general — owes a lot to Windows 95, the most influential operating system that ever got no respect. ITWorld reports: "... even though many techies tend to dismiss UI innovation as eye candy, the fact is that the changes made in Windows 95 were incredibly successful in making the the system more accessible to users -- so successful, in fact, that a surprising number of them have endured and even spread to other operating systems. We still live in the world Windows 95 made. When I asked people on Twitter their thoughts about what aspects of Windows 95 have persisted, I think Aaron Webb said it best: 'All of it? Put a 15 year old in front of 3.1 and they would be lost. In front of Windows 95 they would be able to do any task quickly.'" -
Symantec Researchers Find 49 New Modules of Regin Spying Tool
itwbennett writes: Security researchers from Symantec have identified 49 more modules (bringing the total number found so far to 75) of the sophisticated Regin cyberespionage platform that many believe is used by the U.S. National Security Agency and its close allies. Some of the modules implement basic malware functions, while other modules are much more specialized and built with specific targets in mind. 'One module was designed to monitor network traffic to Microsoft Internet Information Services (IIS) web servers, another was observed collecting administration traffic for mobile telephony base station controllers, while another was created specifically for parsing mail from Exchange databases,' the Symantec researchers said in an updated version of their white paper (PDF) published Thursday. -
Tech Nightmares That Keep Turing Award Winners Up At Night
itwbennett writes: At the Heidelberg Laureate Forum in Germany this week, RSA encryption algorithm co-inventor Leonard Adelman, "Father of the Internet" Vint Cerf, and cryptography innovator Manuel Blum were asked "What about the tech world today keeps you up at night?" And apparently they're not getting a whole lot of sleep these days. Cerf is predicting a digital dark age arising from our dependence on software and our lack of "a regime that will allow us to preserve both the content and the software needed to render it over a very long time." Adelman worries about the evolution of computers into "their own species" — and our relation to them. Blum's worries, by contrast, lean more towards the slow pace at which computers are taking over: "'The fact that we have brains hasn't made the world any safer,' he said. 'Will it be safer with computers? I don't know, but I tend to see it as hopeful.'" -
Why Modular Smartphones Are Such a Nightmare To Develop
itwbennett writes: Last week Google postponed tests of its Project Ara until next year. Mikael Ricknäs has written about why developing such devices is particularly difficult. The biggest challenge, writes Ricknäs, 'is the underlying architecture, the structural frame and data backbone of the device, which makes it possible for all the modules to communicate with each other. It has to be so efficient that the overall performance doesn't take a hit and still be cheap and frugal with power consumption.' For more on Project Ara and its challenges, watch this Slashdot interview with the project's firmware lead Marti Bolivar. -
Why Modular Smartphones Are Such a Nightmare To Develop
itwbennett writes: Last week Google postponed tests of its Project Ara until next year. Mikael Ricknäs has written about why developing such devices is particularly difficult. The biggest challenge, writes Ricknäs, 'is the underlying architecture, the structural frame and data backbone of the device, which makes it possible for all the modules to communicate with each other. It has to be so efficient that the overall performance doesn't take a hit and still be cheap and frugal with power consumption.' For more on Project Ara and its challenges, watch this Slashdot interview with the project's firmware lead Marti Bolivar. -
Court: FTC Can Punish Companies With Sloppy Cybersecurity
jfruh writes: The Congressional act that created the Federal Trade Commission gave that agency broad powers to punish companies engaged in "unfair and deceptive practices." Today, a U.S. appeals court affirmed that sloppy cybersecurity falls under that umbrella. The case involves data breaches at Wyndham Worldwide, which stored customer payment card information in clear, readable text, and used easily guessed passwords to access its important systems. -
Skylake Has a Voice DSP and Listens To Your Commands
itwbennett writes: Intel's new Skylake processor (like the Core M processor released last year) comes with a built-in digital signal processor (DSP) that will allow you to turn on and control your PC with your voice. Although the feature is not new, what is new is the availability of a voice controlled app to use it: Enter Windows 10 and Cortana. If this sounds familiar, it should, writes Andy Patrizio: 'A few years back when the Xbox One was still in development, word came that Kinect, its motion and audio sensor controller, would be required to use the console and Kinect would always be listening for voice commands to start the console. This caused something of a freak-out among gamers, who feared Microsoft would be listening.' -
Skylake Has a Voice DSP and Listens To Your Commands
itwbennett writes: Intel's new Skylake processor (like the Core M processor released last year) comes with a built-in digital signal processor (DSP) that will allow you to turn on and control your PC with your voice. Although the feature is not new, what is new is the availability of a voice controlled app to use it: Enter Windows 10 and Cortana. If this sounds familiar, it should, writes Andy Patrizio: 'A few years back when the Xbox One was still in development, word came that Kinect, its motion and audio sensor controller, would be required to use the console and Kinect would always be listening for voice commands to start the console. This caused something of a freak-out among gamers, who feared Microsoft would be listening.' -
Google Targets Low-Cost Android One Phone At African Markets
jfruh writes: In order to meet its goal of bringing Android to five billion users, Google needs to get smartphones into the hands of people in the developing world. The company's Android One program aims to do just that. Already active in India, the program is now bringing an $88 smartphone to West Africa. “The software on Android One devices automatically updates to the latest version of Android and will get the Android M release after release. The goal is to provide a consistent and uncompromising smartphone experience, for everyone,” Google VP of product management, Caesar Sengupta, said. -
SAP Paid Bribes To Panamanian Officials
jfruh writes: A former SAP exec has pled guilty to bribing Panamanian officials in a successful attempt to sell SAP licenses to the Panamanian government. Vicente Eduardo Garcia, SAP's former vice president of global and strategic accounts for Latin America, says he wasn't the only SAP employee who knew about the scheme. From the Dept. of Justice press release, "According to Garcia’s admissions, the conspirators used sham contracts and false invoices to disguise the true nature of the bribes. Garcia further admitted that he believed paying such bribes was necessary to secure both the initial contract and additional Panamanian government contracts." -
Oracle: Google Has "Destroyed" the Market For Java
itwbennett writes: Oracle made a request late last month to broaden its case against Android. Now, claiming that 'Android has now irreversibly destroyed Java's fundamental value proposition as a potential mobile device operating system,' Oracle on Wednesday filed a supplemental complaint in San Francisco district court that encompasses the six Android versions that have come out since Oracle originally filed its case back in 2010: Gingerbread, Honeycomb, Ice Cream Sandwich, Jelly Bean, Kit Kat and Lollipop. -
Oracle: Google Has "Destroyed" the Market For Java
itwbennett writes: Oracle made a request late last month to broaden its case against Android. Now, claiming that 'Android has now irreversibly destroyed Java's fundamental value proposition as a potential mobile device operating system,' Oracle on Wednesday filed a supplemental complaint in San Francisco district court that encompasses the six Android versions that have come out since Oracle originally filed its case back in 2010: Gingerbread, Honeycomb, Ice Cream Sandwich, Jelly Bean, Kit Kat and Lollipop. -
Fossil CEO: Wearables Smothering Swiss Watch Business
itwbennett writes: I think technology and the whole idea of wearables ... has taken some of the oxygen out of the Swiss business,' Fossil CEO Kosta Kartsotis told analysts on a call to discuss the watch maker's second quarter results. These new competitors, along with other factors like a strong U.S. dollar, contributed to Fossil's quarterly revenue decline, Kartsotis said. Last week, a report from market research firm NPD Group claimed the Apple Watch was partially behind the largest slump in U.S. watch sales since 2008. -
Fitbit Wants To Help Corporations Track Employee Health
jfruh writes: Fitbit is pitching its iconic fitness trackers to businesses as a tool to save money on health care costs. Many companies have wellness programs to encourage workers to exercise more, and Fitbit will help employers quantify (and monitor) employee progress. “We think virtually every company will incorporate fitness trackers into their corporate wellness programs,” Fitbit CFO Bill Zerella said -
'Privacy Visor' Can Fool Face-Recognition Cameras
itwbennett writes: Dark shades aren't enough to go incognito in the age of face recognition camera systems. For that you need the Privacy Visor developed at Japan's National Institute of Informatics. The visor consists of a lightweight, wraparound, semitransparent plastic sheet fitted over eyewear frames. It works by reflecting overhead light into the camera lens, causing the area around the eyes to appear much brighter than normal. -
BlackBerry Denies QNX Was To Blame In Jeep Cherokee Hack
itwbennett writes: Last month, security researchers demonstrated how to circumnavigate the in-vehicle entertainment system of the Jeep Cherokee to take over the car itself, including control of the dashboard, steering mechanism, transmission, locks, and brakes. The more than 1.4 million vehicles being recalled all run the QNX Neutrino OS, which was supplied by BlackBerry subsidiary QNX Software Systems. But the flaw being exploited was not within the OS itself, BlackBerry said Monday in its blog. -
Chinese Tech Companies Building Factories In India
jfruh writes: Over the past two decades, China's relatively high skill, low cost workforce made the country a powerhouse of tech and electronics manufacturing. But in a sign that things might be changing, several large Chinese companies, including Foxconn and Huawei, are investing billions to start manufacturing in India. Xiaomi is expected to announce its first India-made phone today, as well. The article says that Foxconn's planned factory in Maharashtra "would create employment for at least 50,000 people, state chief minister Devendra Fadnavis said after the signing of the agreement at which Foxconn CEO Terry Gou was present." -
How To Make Money As an Independent Developer
itwbennett writes: A new survey of 13,000 developers in 149 countries by U.K.-based research company VisionMobile compared, among other things, the most popular versus the most lucrative revenue models for four groups of developers: those focusing on mobile apps, cloud services, the Internet of Things, and desktop apps. Among their findings for mobile developers: While advertising is by far the most popular revenue model, only 17% of developers who rely primarily on advertising make more than $10,000 per month from their apps. By comparison, 37% of those who make their money by e-commerce (selling real-world goods and services) make $10k per month or more. -
Researcher Exploits 18-Year-Old Design Flaw To Compromise X86 Chips
jfruh writes: Security researcher Christopher Domas has demonstrated a method of installing a rootkit in a PC's firmware that exploits a feature built into every x86 chip manufactured since 1997. The rootkit infects the processor's System Management Mode, and could be used to wipe the UEFI or even to re-infect the OS after a clean install. Protection features like Secure Boot wouldnt help, because they too rely on the SMM to be secure. -
U.K. Government Seeking To End Reliance On Oracle
jfruh writes: The U.K. Cabinet Office has reportedly asked government departments and agencies to try to find ways to end their reliance on Oracle software, a move motivated by the truly shocking number of Oracle licenses currently being paid for by the British taxpayer. The Department for Environment, Food and Rural Affairs alone has paid £1.3 million (US$2 million) per year for some 2 million Oracle licenses, or about 200 licenses per staff member. -
China To Plant Internet Police In Top Online Firms
itwbennett writes: Websites based in China already have to abide by strict provisions for online censorship, and will often delete any content deemed offensive by government censors. But under a new plan announced Tuesday by the Ministry of Public Security security forces will be placed at the offices of the country's major websites, so that they can quickly respond to suspected online crimes. No specific companies were mentioned in the statement put out by the Ministry, but the country's biggest Internet firms include Alibaba Group, Baidu and Tencent. -
Cleaning Up Botnets Takes Years, May Never Be Completed
Once a botnet has taken root in a large pool of computers, truly expunging it from them may be a forlorn hope. That, writes itwbennett, is: the finding of researchers in the Netherlands who analyzed the efforts of the Conficker Working Group to stop the botnet and find its creators. Seven years later, there are still about 1 million computers around the world infected with the Conficker malware despite the years-long cleanup effort. 'These people that remain infected — they might remain infected forever,' said Hadi Asghari, assistant professor at Delft University of Technology in the Netherlands. The research paper will be presented next week at the 24th USENIX Security Symposium in Washington, D.C. (And "Post-Mortem of a Zombie" is an exciting way to title a paper.) -
Counterterrorism Expert: It's Time To Give Companies Offensive Cybercapabilities
itwbennett writes: Juan Zarate, the former deputy national security advisor for counterterrorism during President George W. Bush's administration says the U.S. government should should consider allowing businesses to develop 'tailored hack-back capabilities,' deputizing them to strike back against cyberattackers. The government could issue cyberwarrants, giving a private company license 'to protect its system, to go and destroy data that's been stolen or maybe even something more aggressive,' Zarate said Monday at a forum on economic and cyberespionage hosted by think tank the Hudson Institute. -
Oracle To Debut Low-Cost SPARC Chip Next Month
jfruh writes: Of the many things Oracle acquired when it absorbed Sun, the SPARC processors have not exactly been making headlines. But that may change next month when the company debuts a new, lower-cost chip that will compete with Intel's Xeon. "Debut," in this case, means only an introduction, though -- not a marketplace debut. From the article: [T]he Sparc M7 will have technologies for encryption acceleration and memory protection built into the chip. It will also include coprocessors to accelerate database performance. "The idea of Sonoma is to take exactly those same technologies and bring them down to very low cost points, so that people can use them in cloud computing and for smaller applications, and even for smaller companies who need a lower entry point," [Oracle head of systems John] Fowler said. ... [Fowler] didn’t talk about prices or say how much cheaper the new Sparc systems will be, and it could potentially be years before Sonoma comes to market—Oracle isn’t yet saying. Its engineers are due to discuss Sonoma at the Hot Chips conference in Silicon Valley at the end of the month, so we might learn more then. -
US Navy Tests 3D Printing Custom Drones On Its Ships
itwbennett writes: Researchers at the Naval Postgraduate School are testing the use of 3D printers on ships to produce custom drones outfitted for specialized missions. The idea, said Alan Jaeger, a faculty research associate at the school, is that ships could set sail with kits of the core electronics parts, since they are common to most drones, but have the bodies designed according to specific requirements for each mission. A prototype drone was designed by engineers on shore based on requirements of the sailors at sea, and the 3D design file was emailed to the USS Essex over a satellite link. Flight tests revealed some of the potential problems, most of which were associated with operating the drone rather than the printing itself, Jaeger said. 'Even with a small amount of wind, something this small will get buffeted around,' he said. They also had to figure out the logistics of launching a drone from a ship, getting it back, how it integrated with other flight operations, and interference from other radio sources like radar. -
US Navy Tests 3D Printing Custom Drones On Its Ships
itwbennett writes: Researchers at the Naval Postgraduate School are testing the use of 3D printers on ships to produce custom drones outfitted for specialized missions. The idea, said Alan Jaeger, a faculty research associate at the school, is that ships could set sail with kits of the core electronics parts, since they are common to most drones, but have the bodies designed according to specific requirements for each mission. A prototype drone was designed by engineers on shore based on requirements of the sailors at sea, and the 3D design file was emailed to the USS Essex over a satellite link. Flight tests revealed some of the potential problems, most of which were associated with operating the drone rather than the printing itself, Jaeger said. 'Even with a small amount of wind, something this small will get buffeted around,' he said. They also had to figure out the logistics of launching a drone from a ship, getting it back, how it integrated with other flight operations, and interference from other radio sources like radar. -
Symantec: Hacking Group Black Vine Behind Anthem Breach
itwbennett writes: Symantec said in a report that the hacking group Black Vine, which has been active since 2012 and has gone after other businesses that deal with sensitive and critical data, including organizations in the aerospace, technology and finance industries, is behind the hack against Anthem. The Black Vine malware Mivast was used in the Anthem breach, according to Symantec. -
Tools Coming To Def Con For Hacking RFID Access Doors
jfruh writes: Next month's Def Con security conference will feature, among other things, new tools that will help you hack into the RFID readers that secure doors in most office buildings. RFID cards have been built with more safeguards against cloning; these new tools will bypass that protection by simply hacking the readers themselves. ITWorld reports that Francis Brown, a partner at the computer security firm Bishop Fox, says: "...his aim is to make it easier for penetration testers to show how easy it is to clone employee badges, break into buildings and plant network backdoors—without needing an electrical engineering degree to decode the vagaries of near-field communication (NFC) and RFID systems." -
Maliciously Crafted MKV Video Files Can Be Used To Crash Android Phones
itwbennett writes: Just days after publication of a flaw in Android's Stagefright, which could allow attackers to compromise devices with a simple MMS message, researchers have found another Android media processing flaw. The latest vulnerability is located in Android's mediaserver component, more specifically in how the service handles files that use the Matroska video container (MKV), Trend Micro researchers said. "When the process opens a malformed MKV file, the service may crash (and with it, the rest of the operating system). The vulnerability is caused by an integer overflow when the mediaserver service parses an MKV file. It reads memory out of buffer or writes data to NULL address when parsing audio data." -
Veteran IT Journalist Worries That Online Privacy May Not Exist (Video)
Tom Henderson is a long-time observer of the IT scene, complete with scowl and grey goatee. And cynicism. Tom is a world-class cynic, no doubt about it. Why? Cover enterprise IT security and other computing topics long enough for big-time industry publications like ITWorld and its IDG brethren, and you too may start to think that no matter what you do, your systems will always have (virtual) welcome mats in front of them, inviting crackers to come in and have a high old time with your data.
Note: Alert readers have probably noticed that we talked with Tom about cloud security back in March. Another good interview, worth seeing (or reading). -
Trillion-Dollar World Trade Deal Aims To Make IT Products Cheaper
itwbennett writes: A new (tentative) global trade agreement, struck on Friday at a World Trade Organization meeting in Geneva, eliminates tariffs on more than 200 kinds of IT products, ranging from smartphones, routers, and ink cartridges to video game consoles and telecommunications satellites. A full list of products covered was published by the Office of the U.S. Trade Representative, which called the ITA expansion 'great news for the American workers and businesses that design, manufacture, and export state-of-the-art technology and information products, ranging from MRI machines to semiconductors to video game consoles.' The deal covers $1.3 trillion worth of global trade, about 7 percent of total trade today. The deal has approval from 49 countries, and is waiting on just a handful more before it becomes official, -
KDE Community Announces Fully Open Source Plasma Mobile
sfcrazy writes: Today, during the Akademy event, the KDE Community announced Plasma Mobile project. It's a Free (as in Freedom and beer), user-friendly, privacy-enabling and customizable platform for mobile devices. Plasma Mobile claims to be developed in an open process, and considering the community behind it, I don't doubt it. A great line: "Plasma Mobile is designed as an ‘inclusive’ platform and will support all kinds of apps. In addition to native apps written in Qt, it also supports GTK apps, Android apps, Ubuntu apps, and many others." And if you have a Nexus 5, you can download and play with a prototype now. -
Researchers: Mobile Users Will Trade Data For Fun and Profit
itwbennett writes: Even as mobile users become more security and privacy conscious, researchers and other mobile data collectors still to collect user data in order to build products and services. The question: How to get users to give up that data? Researchers at the New Jersey Institute of Technology tested two incentives: gamification and micropayments. The test involved building a campus Wi-Fi coverage map using user data collected from student participants who either played a first-person shooter game or who were paid to complete certain tasks (e.g., taking photos). The game turned out to be a quick and efficient way to build the Wi-Fi coverage map. But data from the micropayments group was found to be "sometimes unreliable, and individuals were trying to trick the system into thinking they had accomplished tasks." -
Study: Push Notifications As Distracting As Taking a Call
itwbennett writes: Researchers at Florida State University have found that simply being aware of a missed call or text can have the same damaging effect on task performance as actually using a mobile phone. 'Although these notifications are short in duration, they can prompt task-irrelevant thoughts, or mind-wandering,' the researchers wrote in their paper. In further bad news for chronic multitaskers, a new study by researchers at the University of Connecticut finds that 'students who multitasked while doing homework had to study longer, and those who frequently multitasked in class had lower grades on average than their peers who multitasked less often.' -
US Court: 'Pocket-Dialed' Calls Are Not Private
itwbennett writes: In a case of a pocket-dialed call, a conscientious secretary, and sensitive personnel issues, a federal appeals court in Ohio has ruled pocket-dialers shouldn't have any expectation of privacy. 'Under the plain-view doctrine, if a homeowner neglects to cover a window with drapes, he would lose his reasonable expectation of privacy with respect to a viewer looking into the window from outside of his property,' the court said. The same applies to pocket-dialed calls, according to the court. If a person doesn't take reasonable steps to keep their call private, their communications are not protected by the Wiretap Act.